last executing test programs: 21m15.33568261s ago: executing program 32 (id=740): r0 = memfd_secret(0x80000) readahead(r0, 0x4, 0x6) preadv2(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/97, 0x61}, {&(0x7f0000000080)=""/111, 0x6f}, {&(0x7f0000000100)=""/234, 0xea}, {&(0x7f0000000200)=""/121, 0x79}, {&(0x7f0000000280)=""/187, 0xbb}], 0x5, 0x4, 0xffff, 0x14) preadv2(r0, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000400)=""/103, 0x67}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/240, 0xf0}], 0x4, 0xe, 0xe, 0x2) (async) preadv2(r0, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/41, 0x29}, {&(0x7f0000000400)=""/103, 0x67}, {&(0x7f0000000480)=""/34, 0x22}, {&(0x7f00000004c0)=""/240, 0xf0}], 0x4, 0xe, 0xe, 0x2) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000600)=0x20) r1 = fsmount(r0, 0x0, 0x1) recvmsg$can_raw(r0, &(0x7f0000000880)={&(0x7f0000000640)=@xdp, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/81, 0x51}], 0x1, &(0x7f0000000780)=""/211, 0xd3}, 0x0) (async) recvmsg$can_raw(r0, &(0x7f0000000880)={&(0x7f0000000640)=@xdp, 0x80, &(0x7f0000000740)=[{&(0x7f00000006c0)=""/81, 0x51}], 0x1, &(0x7f0000000780)=""/211, 0xd3}, 0x0) preadv2(r0, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/43, 0x2b}, {&(0x7f0000000900)=""/134, 0x86}], 0x2, 0x2, 0x5, 0x5) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000a00)=0xa02, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000a00)=0xa02, 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a40)={{{@in6=@ipv4={""/10, ""/2, @broadcast}}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000b40)=0xe8) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a40)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000000b40)=0xe8) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, r3, &(0x7f0000000b80)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c00)={{{@in6=@local, @in=@multicast1}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000000d00)=0xe8) r4 = memfd_create(&(0x7f0000000d40)='$)!\x00', 0x5) write$tun(r0, &(0x7f0000000d80)={@val={0x0, 0x9000}, @void, @x25={0x0, 0x6, 0x1, "a78bcefa38cbe255c77efbc1151263cafe4ea6ce5837912f1127b7f61d163c3444e95acc4b94775ad933c8538552f3b1f23e41b226f0332f9e49aac8d0de033d4449284a03fb705fc989b3823ffb8f1583b1341961f3a1b18787bc5b8f53d6860f6d2117adbf675dfc63f8eef7b047e4012be88579e8cc7a9714a9f9651088d7e1e850502939dc4ab12c79ca536322db89b8e0f2292c7e631451402542bed34d12aaf51de4c96b14d817ec305e879cec17fd54089ce3255a024e86b87085f28596295623de0bf29207b1ad6b17"}}, 0xd4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000e80)={{{@in=@local, @in=@multicast2}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000f80)=0xe8) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000fc0), 0x40401, 0x0) (async) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000fc0), 0x40401, 0x0) read$sequencer(r5, &(0x7f0000001000)=""/119, 0x77) write$tcp_mem(r1, &(0x7f0000001080)={0x6, 0x20, 0x6, 0x20, 0x2}, 0x48) (async) write$tcp_mem(r1, &(0x7f0000001080)={0x6, 0x20, 0x6, 0x20, 0x2}, 0x48) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r6, 0xc004aea7, &(0x7f0000001100)=0x8) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000001140)) process_madvise(r0, &(0x7f0000001680)=[{&(0x7f0000001180)="cf000787e800953163aa9e3a405978281d11a297f9b624bef1f0b4a30a070daef37910ce8219359c708b79ebd5975338690f4b1419261b8c1f92f3de1c499dcd148bd63b23bcbb9aec55c39232587b79c7820fafba0c0de0f632a9a86cda9aa5dcf5244230b58a3c7bd3cd7da13246258b9ab66edc0f99e881675b6d4a8f34c8254caabec82f79e03355ba98420cb93b8519cf95a2aeb12cee36989e42e94c2bc1656a1e82d175189823fc45183d0df21be4c77ab9a9c35d7f6c06da43", 0xbd}, {&(0x7f0000001240)="6e5c2d9f18bb57bfb563df32e9a013195e6bc3bdd24d3d63f2dc76fc001dcebee13912113f458393df501a993275f7d6efff3a0cdf8d616857701622e5bca0511158dc215c6a7926e3ef554933a2bf20ab20c99393dc68533937a58a2a0d0004f617496d794e7da3b9b205c606d5055b54c1d2485fb22a5c5467a8902709db3d92365adf8c74ff4e55721745d2cd3cdc0ec7b2c76f525b0444b426a295709dc5a2", 0xa1}, {&(0x7f0000001300)="201ad597937971a43882", 0xa}, {&(0x7f0000001340)="f65618e4e23c11f9d76221542841b446a34775d63a0cfde16f5f0bb52e9160b1abc5938b43c68e8a2cbacb211aeda18bd6420971ec5fdda6b989fcc11e72050cb48e979de5e5c759bd65bb186550b8e738c890e6ce81da4aafcb8e77308e3cf676f910c572bea5456ed465246e373c6f824aceb06555ee105df301c59c86eeee816b145b2389cca5862132a0aabfd1ca92aa1ba17fd7cb8c560258b2b3de32212cef590cdfcd8c965a50db97acadebbcea8d0eb0bd494c25089010bb3f93489433155ee37225f52c08f620d681e8d3fc86c2cafd18154a58d9a4", 0xda}, {&(0x7f0000001440)="bad8e12e7a18f6892bc981bc0bfa0cec8b0cdc164e9b", 0x16}, {&(0x7f0000001480)="beafe3ee66fb0e98bbd644a97fc044d9c687471c7cac463051c6eac4d932197fad9d72c337b8a860abc391b7619cf2c62b8fd44e7c5552fca6eb88e6e84f46ddb2e34dbeed249c93b5249a85fd157fcc56104f62f6d65cc44ffa31f7bf4c2721619a273b06ed5f8adc529da7a5a080b60242a51d151eabf9b488a035c23f3f53f2fb0006", 0x84}, {&(0x7f0000001540)="a9bc553f17ec7c61924325a9fc36eb12c7485359a0ede6d03c21efa2cb396fae9cdab5910c64c565dc5738933146cff1554d8f4ecc0815649e83f0768d397caac50c5780a8605cee203c299b04912e8afe7581a64455a36606044646a12895ce57d7d33693a2585f806cbb6efc89b61867cb31bd4fd78370b00eb9d6063f9dcc0c362ca6a9e1772f58bdf6556d1873fc138fd220b123ce3ee793798d0e2351b2a185139933248b5c76d3144603ea4194e5f3e11e7144d69b401c9ea71a2149912f0a6d9e4f553aaa4a22660af0545dc16236c8aaa5a517eb1660cf82f4", 0xdd}, {&(0x7f0000001640)="a99e465149dca189391b39fc48902f2f13d17f9a137ddfac7e9872a2b1d244af0baa5f4d33c00606cedd1eb6cb28315f7f359398", 0x34}], 0x8, 0x16, 0x0) close(r0) ioctl$PIO_FONT(r1, 0x4b61, &(0x7f0000001700)="e49fc06684137e22f332464026060321a8765e2d4bc3895f927bd309e4f1c4dbb1a8b3e7358ea24e59c6b1dc30991d9dc92db479edf7ecbba0782c33ac8a677841d3559f22697e523421302a0dc2bec7af3d944b89f821165bb650fc4768") ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000001780)={0x7ff, 0xbe, 0x8, 0xffff, 0x10}) (async) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000001780)={0x7ff, 0xbe, 0x8, 0xffff, 0x10}) bind$xdp(r1, &(0x7f00000017c0)={0x2c, 0x16, r2, 0x25, r1}, 0x10) (async) bind$xdp(r1, &(0x7f00000017c0)={0x2c, 0x16, r2, 0x25, r1}, 0x10) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000001800)={0x1, [0xfff9]}, 0x6) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000001840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000, 0xf84}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000001840)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000, 0xf84}}, './file0\x00'}) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f00000018c0)={0x0, {{0xa, 0x4e24, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}}, 0x88) 19m48.481676425s ago: executing program 33 (id=1262): r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x30200, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r1, &(0x7f0000006480)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="1c0000005e007f029ea69801d76ab0a272a2a7b689cdbf4dda741a25", 0x1c}], 0x1}, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x20323159}}) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000180), 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r3) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {0x0, r6}}, 0x18) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)={0x2c, r4, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x100040c1) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x30200, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) recvmsg$kcm(r1, &(0x7f0000006480)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="1c0000005e007f029ea69801d76ab0a272a2a7b689cdbf4dda741a25", 0x1c}], 0x1}, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x20323159}}) (async) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000180), 0x2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r3) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r3) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x111}}, 0x20) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r5, &(0x7f0000000380)={0xb, 0x10, 0xfa00, {0x0, r6}}, 0x18) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)={0x2c, r4, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x100040c1) (async) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) (async) 17m53.98645416s ago: executing program 34 (id=2005): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r4], 0x4}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000024c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000000000000a3, 0x10002, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x80000, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0x14, 0x3, 0x0, 0x0, @ipv6=@loopback}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b504681000000000000009ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc358"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x20000004}, 0x140000c4) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000c4b20710200e01015a000000000109021b0001000000000904"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x400c0) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/202, 0xca}, {&(0x7f0000000180)=""/170, 0xaa}, {&(0x7f0000000d80)=""/4070, 0xfe6}, {&(0x7f0000000800)=""/196, 0xc4}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000380)=""/67, 0x43}, {&(0x7f0000000100)=""/27, 0x1b}], 0x7}}], 0x2, 0x40, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0xc04c5349, &(0x7f0000000340)) sendmsg$key(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000900)={0x2, 0x6, 0x4, 0x5, 0xf, 0x0, 0x70bd2b, 0x25dfdbfd, [@sadb_x_filter={0x5, 0x1a, @in=@broadcast, @in6=@remote, 0x3, 0x18}, @sadb_x_filter={0x5, 0x1a, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @in=@remote, 0x2b, 0x4}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e20}, @sadb_ident={0x2, 0xb, 0x800, 0x0, 0x100000000}]}, 0x78}}, 0x5ad38447e92b8820) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r8 = epoll_create(0x931) mmap(&(0x7f0000030000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r8, 0x45809000) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x3e48d7d8bc56bb73, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3314188c}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9868a09}]}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x54de5b86}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0x8) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f00000009c0), r2) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000ac0)={0x74, r9, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x51}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb7e8211a5ff57790, 0x4}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x74}}, 0x4000094) recvmmsg(r0, &(0x7f0000007b00)=[{{0x0, 0x0, 0x0}, 0x73c}], 0x1, 0x20882ecd3203f66c, 0x0) 12m18.238987588s ago: executing program 6 (id=4059): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001740)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0xa02, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041817aaaaaaaaaa10ca2242c83bf4531f3a0200000000000000"], 0x1a) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) syz_clone(0x34a02080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) listen(r3, 0x50) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="1d0303000000dfa201"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x23, 0x2, {0x2, 0x21}}, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x8000) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r4, &(0x7f00000017c0)={0x2020}, 0x2020) write$FUSE_INIT(r4, 0x0, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000400)=0x4, 0x4) 12m17.649273916s ago: executing program 6 (id=4066): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x6) 12m17.550905079s ago: executing program 6 (id=4067): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8000000) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000009002"]) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x3}, 0xe) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f00000000c0)=0x1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 12m17.387395689s ago: executing program 6 (id=4068): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f0000000040)=0x80000000, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0xfffffd43) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x8000, '\x00', @p_u16=&(0x7f00000000c0)=0xfffe}}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x80002, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x6, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1a}}, 0x91e1516366f54ac2) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001400000000d0500020000040000080006400000000208000440000000170900010073797a30000000000900020073797a32"], 0x94}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00000001c0)={@multicast1, @multicast1, @multicast2}, 0xc) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000100)={0x3, 0x0, 0xa1, 0x3, 0x1000}) r7 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r7, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000084"], 0x18}}], 0x2, 0x844) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="300000003e0007012dbd7000fcdbdf25047c0000040000001800018006"], 0x30}}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x50, 0x20}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r10, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x7ffffffe}, 0xffffffff}, 0x1c) r11 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_buf(r11, 0x0, 0x3a, &(0x7f00000004c0)="34b6d924e06f34006faad73555861c1ddb81cd29c9e69d5f2fdb89d724582c04d6a9d5f2141f17c41f6abcdd37fba61ac0838330cf44e652cd66f9c2ed9859e0a2f3204fd35b100cbcbc654604004eada1b773483cab1bdc40821bda52be09e9e11c879ac2d2af46cbc99d110b161ddc0b7485e9a16207dfae580299d5142767b4397ff3e664c3d99e4d068e121a06c6e0d5c0813839a53bf6c413149807244134372d31eed8945fbd462a3d1c5dae9734a5610996c40b1d204d52b86a6898ca32f24950b72edb9560a588c62183a46f03da40715365ee0dee7b76a6df46b0656774657ab6023a7b41f992ed2abd61abd1689e77421909410744b4bc323072536bb9fc522d0162851e1438e89ed22754d56e3a6b8bd66ddab11e2fe98dca", 0x11e) ioctl$TUNSETLINK(r6, 0x400454cd, 0x337) write$bt_hci(r1, &(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x6) 12m16.456228411s ago: executing program 6 (id=4073): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1614c2, 0x0) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0x40046f41, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) 12m16.123535221s ago: executing program 6 (id=4077): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) close_range(r0, r0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYBLOB="b0b0e80323f15e"], 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r1, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlink(&(0x7f0000000180)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x40) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xe0a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r5, 0x2000) 11m59.750697183s ago: executing program 35 (id=4077): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) close_range(r0, r0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYBLOB="b0b0e80323f15e"], 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r1, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) unlink(&(0x7f0000000180)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x40) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xe0a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r5, 0x2000) 11m46.067698825s ago: executing program 3 (id=4273): r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000001080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, 0x0) 11m46.016145129s ago: executing program 3 (id=4274): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xb48) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 11m45.201228924s ago: executing program 3 (id=4275): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170900000000000000000100000005000700000000000800090000000000060002000000000008000a000000000008001800ac1414aa08001900ffffffff14001b00fe"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r2, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0x2d}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x5, 0x8000]}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_FRAME={0x6a, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xff}, @broadcast, @device_b, @random="551d614d099f", {0x9, 0x8}}, 0x2584, 0x4, @device_b, {0x0, 0x6, @default_ibss_ssid}, @void, @void, [{0xdd, 0x3a, "686ba6693d93045c3bad0673439235c9cf4f28d0831b2f9d59f64d9981876353ab4cb37dd8315c4d354e38004279fd54844711788bdbcbf9f93a"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0xa0}}, 0x4000001) 11m44.893036398s ago: executing program 3 (id=4279): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001740)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="041817aaaaaaaaaa10ca2242c83bf4531f3a0200000000000000"], 0x1a) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) r1 = syz_clone(0x34a02080, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) r4 = socket$inet6(0xa, 0x5, 0x0) listen(r4, 0x50) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000480)=ANY=[@ANYBLOB="1d0303000000dfa201"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000001c0)={0x14, &(0x7f0000000100)={0x0, 0x23, 0x2, {0x2, 0x21}}, 0x0}, 0x0) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x8000) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) read$FUSE(r5, &(0x7f00000017c0)={0x2020}, 0x2020) write$FUSE_INIT(r5, 0x0, 0x0) syz_fuse_handle_req(r5, 0x0, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x80800) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x4, 0x4) 11m44.215860709s ago: executing program 3 (id=4284): r0 = syz_open_dev$media(&(0x7f00000000c0), 0xbe, 0x44601) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000f80)={0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, &(0x7f00000006c0), 0x5, 0x0, &(0x7f0000000980)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000a40)=[{}, {}, {}]}) r1 = socket(0x2, 0x2, 0x1) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'pcl726\x00', [0xffffffff, 0x80008000, 0x1, 0xa, 0x0, 0x0, 0x1, 0xf, 0x1000, 0x1, 0xb687, 0x1, 0x6, 0x4, 0xffff, 0x6, 0xffffffa7, 0x9, 0x6, 0x5, 0x3ff, 0x10000, 0x7ff, 0xe2df, 0x9, 0x1, 0x4, 0x3, 0x7, 0xb, 0x5]}) bind$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000040), 0x4) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001100)={r4, 0x0, {0x0, 0x0, 0x0, 0x1000001, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d0374029bacaac594b1b305000000c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r6, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x9, 0xc, 0x3, 0x1000405, 0x1, 0x4, 0x1000, 0x7fffffff, 0x51, 0x8, 0x800, 0x5, 0x3ff, 0x4, 0x7, 0x10001, 0x7ff, 0x0, 0x4, 0x6, 0x400, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x0, 0xa, 0x8, 0x2, 0x9, 0x804d81, 0x2, 0x8c00, 0x8, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0x6, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x1, 0x5, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x80, 0xb, 0x1, 0x3c, 0xa1, 0x100004, 0xffffffff, 0x5, 0x10004, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xb, 0xffff3f15, 0xa, 0x2, 0x9, 0x7, 0x5, 0x5, 0x7, 0x804, 0x5, 0xc5, 0x3, 0x1000001, 0xb, 0x8, 0x3, 0xfffffff7, 0x2, 0x24c, 0x800001ff, 0x9, 0x5, 0x6, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffa, 0x8, 0x6, 0x1, 0x8000, 0x7, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x7, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10003, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x4, 0xff, 0x5, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x8007c12, 0x5, 0x6, 0x40, 0x8000, 0x8e, 0xf3, 0x80004, 0x8, 0x1, 0xfffdff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0x10, 0x1, 0x1, 0xc3, 0x4, 0x7a3], [0x9, 0x3a8d, 0xffff9a7f, 0x6f68, 0x6, 0x2, 0x1, 0xfffffff3, 0xd077, 0x1, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0x1000, 0x2, 0x66608000, 0x5, 0x7fb, 0x6, 0x3, 0xa476, 0x5, 0x29, 0x3, 0xd, 0x0, 0x1, 0x1, 0x8, 0x61, 0x200010, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x2, 0x8, 0x8, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r7 = semget(0x1, 0x0, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000001c0)=0x0) recvfrom(r6, &(0x7f0000001000)=""/120, 0x78, 0x101c2, &(0x7f0000001080)=@nfc={0x27, r8, 0x1, 0x5}, 0x80) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000ac0), r9) socket$caif_stream(0x25, 0x1, 0x4) semctl$GETPID(r7, 0x0, 0xb, &(0x7f0000000240)=""/225) write$bt_hci(r6, &(0x7f0000000080)=ANY=[@ANYRESOCT=r1, @ANYRES16=r5, @ANYRES32=r5, @ANYRESHEX=r1, @ANYRES8=r1], 0x1) 11m44.005670064s ago: executing program 3 (id=4285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x7, 0x11, r1, 0xffffe000) (async) r2 = socket$unix(0x1, 0x5, 0x0) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000180)={0x2, 'vlan1\x00', {0x7fffffff}, 0x9}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r3 = dup(r0) (async, rerun: 32) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (rerun: 32) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000003240)=""/4102, 0xfffffccc}], 0x1, 0xf6f, 0x7) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1407, 0x400, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}]}, 0x18}, 0x1, 0x0, 0x0, 0x50000000}, 0xed45d2e6699c7218) (async) syz_io_uring_setup(0x100022a6, &(0x7f0000001c40)={0x0, 0x0, 0x2}, 0x0, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 11m27.715723512s ago: executing program 36 (id=4285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x7, 0x11, r1, 0xffffe000) (async) r2 = socket$unix(0x1, 0x5, 0x0) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000180)={0x2, 'vlan1\x00', {0x7fffffff}, 0x9}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r3 = dup(r0) (async, rerun: 32) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) (rerun: 32) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000003240)=""/4102, 0xfffffccc}], 0x1, 0xf6f, 0x7) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1407, 0x400, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r4}]}, 0x18}, 0x1, 0x0, 0x0, 0x50000000}, 0xed45d2e6699c7218) (async) syz_io_uring_setup(0x100022a6, &(0x7f0000001c40)={0x0, 0x0, 0x2}, 0x0, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 9m18.714125681s ago: executing program 4 (id=5168): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x0, 0x8}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = inotify_init1(0x80000) r4 = dup3(r2, r3, 0x80000) sendmsg$kcm(r4, &(0x7f0000000780)={&(0x7f0000000040)=@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[{0x10, 0x1, 0xd71f}], 0x10}, 0x4000000) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) 9m18.623549891s ago: executing program 4 (id=5169): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000000000000100100000b0001001400000000000077788da11599"], 0x20}, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) r1 = socket$kcm(0x11, 0x3, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000001740)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000004280)=@newtaction={0x614, 0x30, 0x800, 0x70bd25, 0x25dfdbfb, {}, [{0x600, 0x1, [@m_ipt={0x5fc, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x5d1, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x614}}, 0x4000000) read$alg(r5, &(0x7f0000000a00)=""/4087, 0xff7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) (async) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xad4, 0x0, 0x203}]}) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) (async) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 9m18.585570153s ago: executing program 4 (id=5171): creat(&(0x7f0000001380)='./file0\x00', 0x12c) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200004010203010902120008000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000380)={0x44, &(0x7f0000000140)={0x20, 0xf, 0x6, "80e107ba8b23"}, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x85, 0x4, 0x4}, &(0x7f00000002c0)={0x20, 0x83, 0x2}, 0x0, &(0x7f0000000340)={0x20, 0x89, 0x2}}) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x20, 0x39, 0x18, {0x18, 0xb, "e9e39c616204675e8049222d8de537688c6fb5c39b75"}}, &(0x7f0000000080)={0x0, 0x3, 0x15, @string={0x15, 0x3, "b56b932cf5e0aec50469dbbb322d136125c138"}}, &(0x7f00000000c0)={0x0, 0xf, 0x52, {0x5, 0xf, 0x52, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x18, 0x4, 0x7, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "2cbb7abdfbca0e0a7682173df7e4c13d"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x2, 0x9, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "5d9dd73fe0cf0ca19232ec6c86830343"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "232bd093d0e0a2719261e8cf3029657f"}]}}, &(0x7f0000000140)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x80, 0xfd, 0x40, "42bd00", "e89ea046"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x4, 0xe1, 0x8, 0x1, 0x0, 0xd}}}, &(0x7f00000006c0)={0x84, &(0x7f0000000200)={0x20, 0x30, 0xe0, "99f8a9d77f6036e08ae7487df3f676f6792aeac75295b40bf54349163b2c80bbcb9e652072d8dcae8b8df6b5f77986788176f5f0bf56fcd767ec163191c1cede3b89e5c8d1e9d698e9a5d4d27e1eb8f98fd54049774cb6f544cc6bc59977a38de034be1dca7d074a7dfb7d5cc8728e264882d0a49dcec4e17c949312f21bd992f55002b920f85a4b4c662ff50241babac706f02f9d87c20b0203a1613ae8d07c82183d38d780cf20f4c8cec7e4398e6d9499716eaa0bea5691d2596a14d77ffdc6e138f5b0545e6f7367576fe7ad781b5b96ae76b6532462f6fc660a06786289"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x1}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x20, 0x60, [0xf]}}, &(0x7f0000000780)={0x40, 0x7, 0x2, 0xa}, &(0x7f0000000440)={0x40, 0x9, 0x1}, &(0x7f0000000480)={0x40, 0xb, 0x2, "bdfe"}, &(0x7f00000004c0)={0x40, 0xf, 0x2, 0x96}, &(0x7f0000000500)={0x40, 0x13, 0x6, @random="aa18e5044bae"}, &(0x7f0000000540)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "9101"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0xd}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000680)={0x40, 0x21, 0x1}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 9m15.308693134s ago: executing program 4 (id=5191): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000400)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat(r1, &(0x7f0000004280)='.\x00', 0x800, 0x0) getdents(r2, &(0x7f0000000000)=""/73, 0x49) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='tracefs\x00', 0x40, 0x0) (async) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='tracefs\x00', 0x40, 0x0) chdir(&(0x7f00000000c0)='./cgroup\x00') (async) chdir(&(0x7f00000000c0)='./cgroup\x00') 9m15.163114417s ago: executing program 4 (id=5193): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) (async, rerun: 32) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) (async, rerun: 32) r2 = fsopen(&(0x7f00000001c0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000200)='cpu.stat\x00', 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='romfs\x00', &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000100)={0x0, &(0x7f00000003c0)=""/216}) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r5, 0x0, 0x4}}, 0x20) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) (async, rerun: 64) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x214, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x832, 0x34}}}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_IE={0xc5, 0x2a, [@prep={0x83, 0x1f, {{}, 0x10, 0x6, @broadcast, 0x0, @void, 0x5, 0x8, @device_a, 0xa7d8}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0x2, 0x6}}, @random={0x0, 0x6b, "45019809e978acded929be31eb6ef9790f5ebcc1e0240fcd8346fcc746692f4b5fedede8ec8c8f7056f6806ef95717bf2cbf078d29ebbafc15206fc5140ceec16207fe3ee4d37c7faf4e0dfd05d58c626ad6c2ed0240b1b09903abf66e48af37de2c173762c5edb37fad8b"}, @peer_mgmt={0x75, 0x18, {0x1, 0xfff, @val=0x1ff, @val=0x3f, @val="5e2074bf6c8660e8687e8924f234a229"}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @channel_switch={0x25, 0x3, {0x0, 0x28, 0x9c}}]}, @NL80211_ATTR_IE={0x111, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x6c, 0x3}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @channel_switch={0x25, 0x3, {0x0, 0x64, 0x6}}, @channel_switch={0x25, 0x3, {0x0, 0xb5, 0x91}}, @mic={0x8c, 0x10, {0x823, "bdea40ada051", @short="f2a036b231b60f30"}}, @random={0x7, 0xe7, "38443718d9bbda59ffb02dc1223b01d14f3be67312c8784d09a6288135a3664cc2f35e45789d9b0bfc612c38820cccaf71c4d5a21cbf0a73381b568a86ecbc43f8ea007f8d979772b672db2cf8d8c2b50e2ccc245b83715a4725e0e983c7785beb507904060b557f704f192eefbe1f12f47d9a7299a182ba93ac91c8a9d2d4ef084557eea0c4db029b0dbb52690269025867f307c583ca4cd84a809e72af8af3ce696e2e673ef8c136bd0136bdf91334f568521509b67ca27fe64771eee8b8b3c521270750ed3b32f2d0c384fcf4edc4d2be905e9d0767cc1bb104ca2622aa03f517c3c5ddee43"}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x200040c5}, 0x0) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 9m14.67413063s ago: executing program 4 (id=5194): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = dup2(r1, r0) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c00080001"], 0x4e) keyctl$set_reqkey_keyring(0xe, 0x3) r3 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c00) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000080)={0x0, 0xfff, 0x9}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) 9m14.035244695s ago: executing program 37 (id=5194): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = dup2(r1, r0) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="1c00080001"], 0x4e) keyctl$set_reqkey_keyring(0xe, 0x3) r3 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c00) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000080)={0x0, 0xfff, 0x9}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) 6m42.799493113s ago: executing program 8 (id=6257): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup/syz1\x00', 0x1ff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='environ\x00') ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000000000000160b000000000000040000000000000098090000000000000f000000000000005806000000001a000400000000000000"]) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) write(r5, &(0x7f0000000440)="08085a36241e86171aaf68d6096e32f0813e290a50e8b083e26146649651ad965c6de623cef9457a3ce34b", 0x2b) clock_adjtime(0x3, &(0x7f0000000100)={0xfffffffffffffffc, 0x6, 0xe1, 0x4, 0xc, 0x3, 0x4, 0xffffffff00000001, 0x400, 0x2, 0x9, 0x9, 0x3ff, 0xffffffff, 0x3, 0x1fa, 0x9, 0x8d, 0x1, 0x42e6, 0x1ff, 0x1ff, 0x0, 0x4, 0x6, 0x736}) sendto$packet(r5, &(0x7f0000000180)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r7}, 0x14) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r4, 0x4068aea3, &(0x7f0000000280)={0xbc, 0x0, 0x4}) r8 = syz_open_dev$video(&(0x7f0000000200), 0x7ff, 0x0) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000240)=0x6) io_submit(0x0, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f00000000c0)=' ', 0x1}]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x1, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, 0x0) r9 = mq_open(&(0x7f0000000100)='/{+#+\xb3+\x00', 0x40, 0xa0, &(0x7f0000000300)={0xd9, 0xc00, 0x8, 0x431}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x70, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x15}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1a}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x1800) mq_timedreceive(r9, &(0x7f0000000340)=""/20, 0x14, 0x3, &(0x7f0000000380)={0x77359400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4048010) 6m42.49558591s ago: executing program 8 (id=6261): sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c"], 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf256c00000008000300", @ANYRES32=0x0, @ANYBLOB="0100000012cc62"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) socket$inet_sctp(0x2, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x802, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x203, 0x4) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) 6m42.347586065s ago: executing program 8 (id=6263): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x31a5098, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) fadvise64(r1, 0x65f, 0x2, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45819000) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000006600), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) splice(r1, &(0x7f0000000000)=0x8000000000000000, r3, &(0x7f0000000040)=0xa3d, 0x9, 0x2) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x31a5098, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) (async) fadvise64(r1, 0x65f, 0x2, 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45819000) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000006600), 0x0, 0x0) (async) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) (async) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) splice(r1, &(0x7f0000000000)=0x8000000000000000, r3, &(0x7f0000000040)=0xa3d, 0x9, 0x2) (async) 6m42.267103645s ago: executing program 8 (id=6264): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0/../file0\x00', &(0x7f0000000300)={0x410102, 0x0, 0x10}, 0x18) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x1, 0x8) syz_open_procfs(r0, &(0x7f0000000340)='comm\x00') recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x40) fcntl$notify(r2, 0x402, 0x8000003d) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000400)={{&(0x7f00009fb000/0x1000)=nil, 0x1000}, 0x1}) recvmmsg(r3, &(0x7f00000009c0)=[{{&(0x7f0000000000)=@ax25={{0x3, @netrom}, [@netrom, @remote, @bcast, @rose, @rose, @bcast, @netrom, @null]}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/214, 0xd6}, {&(0x7f0000000180)=""/34, 0x22}], 0x2, &(0x7f0000000200)=""/237, 0xed}, 0x5}, {{&(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000a80)=""/116, 0x74}, {&(0x7f0000000480)=""/177, 0xb1}, {&(0x7f0000000540)=""/165, 0xa5}, {&(0x7f0000000600)=""/107, 0x6b}, {&(0x7f0000000680)}], 0x5, &(0x7f0000000740)=""/226, 0xe2}, 0x101}, {{&(0x7f0000000840)=@ethernet, 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/180, 0xb4}], 0x1}, 0x80000001}], 0x3, 0x40002162, 0x0) 6m42.143958325s ago: executing program 8 (id=6265): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) getsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x840}], 0x1, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r1) r2 = socket$inet6(0xa, 0x2, 0x59) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={r3, 0x5, 0x10, 0x6, 0x2}, &(0x7f00000001c0)=0x18) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 6m41.927084766s ago: executing program 8 (id=6266): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000080)="e4", 0x1}], 0x2, 0x3, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x0, 0x0) 6m41.628290611s ago: executing program 38 (id=6266): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000080)="e4", 0x1}], 0x2, 0x3, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x0, 0x0) 2m54.923591266s ago: executing program 2 (id=7382): mmap$IORING_OFF_SQ_RING(&(0x7f0000605000/0x4000)=nil, 0x4000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}}, 0x0) bind$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r5 = socket$inet(0x2, 0x801, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r5, 0x1) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030008000000000000000000ffffffff0000000000000000010005"], 0x50}}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x6, 0xfffc}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={r7, @in={{0x2, 0x4e22, @empty}}, 0x1}, &(0x7f0000000240)=0x90) recvfrom(r2, &(0x7f0000000740)=""/4096, 0x1000, 0x23, &(0x7f0000000280)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x7, 0x2}, {0x3}}}}, 0xf) 2m54.742090854s ago: executing program 2 (id=7385): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141e42, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000c70da2080000000000000500000026f3b49e"]) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x1e}, @l2cap_cid_le_signaling={{0x1a}, @l2cap_ecred_conn_req={{0x17, 0x4, 0x16}, {0x0, 0x8, 0x9, 0x11b, [0x7e, 0x6, 0x3, 0x81, 0x81, 0x7, 0x2]}}}}, 0x23) 2m54.632307823s ago: executing program 2 (id=7387): setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x3d3c00, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$KVM_GET_CPUID2(0xffffffffffffffff, 0xc008ae91, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r4, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001440)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_CANCEL(r5, 0x6407) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x141000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r6, 0x7aa, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f00000016c0), 0x4) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0x8, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r9, @ANYBLOB="000428bd7000ffdbdf250f00000034000180140002006261746164765f736c6176655f310000140002006e657464657673696d3000000000000008000100", @ANYRES32=r4, @ANYBLOB="3000018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="14000200626f6e645f736c6176655f30000000004000018008000300070000001400020077673100000000000000000000000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800c0e2dff16f03000200000008000100600a6cb91ef2398c5aa603cd37ec3378126203d4689b726a3d251a3daee2271d9d3aed90fc9aa33240141ac0cf117480b7ff71d7ec5bd7a3eac470af4ccc0cafe82398c608ff8d6dce9ca25b825a207af845ca33e496141224fc7baf10138ea312bbb8c2d1c3af59936ce8472711fe83a1ec6153fe110f462f3edacec2fa04ab6087b60be46a75c8c9faf6c97211303ac10ddc0cb7608d09", @ANYRES32=r4, @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4841}, 0x1) 2m54.40104696s ago: executing program 2 (id=7388): creat(&(0x7f0000001380)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000001700), 0x2, 0x0) preadv(r0, &(0x7f0000003c80)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1, 0xa08, 0x3) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@empty, {0x5, 0x1}, {0x0, 0x4, 0x3}, {0x0, 0x3}, 0x201, 0x4, 0xa}, 0x5, 0x9}, [@tfcpad={0x8, 0x24, 0x6}]}, 0x100}}, 0x4000080) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id']) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000000)={0xbc00000000000000, 0x0, 0x0, 0x8}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 2m54.151531532s ago: executing program 2 (id=7391): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000200)=[{0x80, 0x0, 0x0, 0x8}, {0x6, 0x0, 0x0, 0x7ffffcb9}]}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000580)={0x8, 0x0, [{0x1c000000b, 0x7, 0x2, 0x7fff, 0x1, 0x3, 0x101}, {0x80000001, 0x101, 0x4, 0xfffffff7, 0xc0, 0x401, 0x401}, {0x80000007, 0xfd3, 0x3, 0x56c, 0x1ff, 0x40, 0xbf}, {0xc0000001, 0x0, 0x1, 0x2, 0xffff, 0x6, 0x7}, {0x40000000, 0x8000, 0x2, 0x6, 0x9, 0x4, 0x7}, {0x0, 0x41, 0x0, 0x2, 0x3a0, 0x0, 0x5ac6}, {0x40000000, 0x2, 0x0, 0x8, 0x4, 0x1f, 0x4}, {0x4, 0x1, 0x4, 0x5, 0x1, 0x9, 0x7}]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x64) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)={0x18, 0x55, 0x1, 0x70bd2b, 0x0, {0x2}, [@typed={0x4, 0x120}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) r2 = socket(0x10, 0x3, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x40, 0xa, 0x6, "6ef1989edd08"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="20131d00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, &(0x7f00000009c0)={0x14, &(0x7f0000000900)={0x0, 0x9, 0x3f, {0x3f, 0x23, "ae6cdd25521537710bc854a806bac4fceb3baf117a963e9d8ac4ca11b83d65f7ca5245b7c05b512e89e628ae7a52b5a8cd3c5cc059195975ada9dd494b"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x812}}}, &(0x7f0000000c40)={0x34, &(0x7f0000000a00)={0x40, 0x15, 0xa5, "3b2c3c2b540a6684d3409dd8ccecad8487a6411433589b317062241a64a2d6b9d511f0046ccabaaf4fcecb2bdc768d0a9fd2a407a0200d444380cba009dff120ad8ab1035d63a5b19b7cb3fa681c21cd4a835e8b2b0eeb42d9aa41dca52d80e5922e068d8d662523776a82617fa6707e68c6b8b665b0c5a8f1ae010c62c11274c37be06657e07b00612be867de2eb870ad58d544ee796e69cfd0463dbe1baf4b4b940f1df5"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0xa0}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000b40)={0x20, 0x0, 0xb4, {0xb2, "a2042dbcae179ef2a96bcb938110d99b743320e887800de27c930ed5dab447f47f009c8f8be8221d9ceab8670761edc7a2c11b23f4e5cb67c9824e5c0d625867e3670cd58e48bbfcdc2ef093bae7b026369307428836f024cbe7663a9da848173000d35ab126207eac65bcc8232ffa7c54fd5fb774d52ed42db724ff42bf60620cbc9ddb6f3324f787dbcfdbafbe7c724dc2359a504e550da9a95a490f1d5fe585959f80b55ac90e6140bb7f57b4b9a0ee5d"}}, &(0x7f0000000c00)={0x20, 0x1, 0x1, 0xb}, 0xfffffffffffffffc}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x20, 0x7, 0x4, "c767dd46"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x68}, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, &(0x7f0000000f00)={0x2c, &(0x7f0000000c80)={0x20, 0x6, 0x85, {0x85, 0xc, "47f89fad5b4ea8bcf8ea8d0efcc520aa26e2dbbf1e3873b599e4f0f502659555adfa8ec5ca358575d6cb62eb9f32e78f3e6aa8160d4fd68fefd58bfbd8f961ddc88e1bef48193a0faedfb2cfe5357bc314b61cd2e862ea5b43b9da5ff4526086572ae461dc6adc59520057121cf45d680fa08ae240f4670a11a824f728da018006cb2c"}}, &(0x7f0000000d40)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "c10684212bd3dd62fd793b330de141b911bfa8f072c36425171a52b9e0a50378b16c1da26b31ee103d59b76c094056083db9fead8df1b9b5f7b8309bb6e4d1174842ce8a8249d4fe64af93f09f825d628c2d3ae270507573131b88241bc509c1331e58ed20cdca62738b9e864cc32fbbdaece51bb78d4580f1f63d5c70389b816b9f65a3548a56e128eda93b290f4911d81ab7d8925b504cb91124b46a601418e21aca832409f223bcd31d05304d97051b4649cab157e84d3f031299c5"}}, &(0x7f0000000e40)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000e80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x40, 0x1, 0x0, 0x0, "ba796a3c", "a32e9fa8"}}, &(0x7f0000000ec0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xea, 0x0, 0x7f, 0x12, 0x3, 0x8, 0xffff}}}, &(0x7f0000001480)={0x84, &(0x7f0000000f40)={0x40, 0x3, 0xcb, "bfe2b23cb1c02fb20d7ed144f9e2c58d5c7bcc2d79081a5ba1c1276c9737856bed804b1ea0b21e4f714c2c968675fb89bbe14c70de6956d14aeb13a07f32f35569b00f9b0df8ab219f55b713b34eb88fd60c3e97431505791924c036084d2c1bd7f1caa433eb019209600a2b0e10dda3935d2030af73b0aa326e36d1baf5734cfee59ff0454c8fc1bfafcac633e4c53ad217cfa46dcac4a3c7f15cb6fa29a74919b2c311f35115090eb1f7df972b32089128d24558f380943d9b0a7e46cc23a1fb7da7b15df1e9cbc3ed79"}, &(0x7f0000001040)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000001080)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000010c0)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001100)={0x20, 0x0, 0x4, {0x80, 0x10}}, &(0x7f00000011c0)={0x40, 0x7, 0x2, 0x800}, &(0x7f0000001200)={0x40, 0x9, 0x1, 0xfb}, &(0x7f0000001240)={0x40, 0xb, 0x2, "221d"}, &(0x7f0000001280)={0x40, 0xf, 0x2, 0x2}, &(0x7f00000012c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000001300)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001340)={0x40, 0x19, 0x2, "919c"}, &(0x7f0000001380)={0x40, 0x1a, 0x2, 0x6}, &(0x7f00000013c0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000001400)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001440)={0x40, 0x21, 0x1, 0x6}}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000340)={0x14, &(0x7f0000000140)={0x0, 0x1, 0xb1, {0xb1, 0x5, "0ab2ca3d0ec540f3cfef10342db35400811e221da0370b11cb5cfbffed6e2ffaa12a696bcc4081c649e691585fc45f1e0857f53cd27dd2aabd26d29772b047069b9819daf275799316befb45f19cb448fff136bd2f8b43a8dd6e62c5f762e0c0d3a5585995be322348a68fbb2a0e489ee2935cbf3681e43a73f925be7ab4f0d75e4be49b3a9c1032571a58a533fad5f5a5b3bdeed1b093bd97ede8092bd30e9d6f2d0a416afa466f64ecfb1ea945b1"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x44, &(0x7f0000000380)={0x0, 0x18, 0x2a, "f42ba5cd5e15b24f6bf8ea8df733c6a24361d058d48d74e1fd5bd5746ad619183393682ac509c98aa1e2"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x7, 0x400, 0xdf, 0x1, 0x1, 0x1, 0x5, 0x5, 0x2, 0x8, 0x4, 0x7}}, &(0x7f00000004c0)={0x20, 0x85, 0x4, 0x6}, &(0x7f00000007c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000800)={0x20, 0x87, 0x2, 0x7f}, &(0x7f0000000840)={0x20, 0x89, 0x2}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m53.343960129s ago: executing program 2 (id=7401): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000120c06836b738e9ed60009040020fd03000100092103000301220700090581000000000000007b409c370000000000"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x20000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x2}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) sync() syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0x5, "33ee480f"}, @global=@item_012={0x2, 0x1, 0x7, "f5f6"}]}}, 0x0}, 0x0) socket$inet6(0xa, 0x3, 0xff) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, &(0x7f00000000c0)) r5 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat(r5, &(0x7f0000000100)='./file1\x00', 0x80800, 0x5) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r7, {0x3}}, './file1\x00'}) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) read$FUSE(r8, 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r8, 0x8004500f, &(0x7f00000001c0)) syz_open_dev$vcsu(&(0x7f0000000080), 0x4, 0x400) r9 = syz_genetlink_get_family_id$ethtool(0xfffffffffffffffd, r7) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r9, 0x1, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x49}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}]}, 0x3c}}, 0x0) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001780)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) lseek(r10, 0xfffffffe, 0x3) 2m37.327852319s ago: executing program 39 (id=7401): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000120c06836b738e9ed60009040020fd03000100092103000301220700090581000000000000007b409c370000000000"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, 0x0, 0x20000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x2}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) sync() syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@local=@item_4={0x3, 0x2, 0x5, "33ee480f"}, @global=@item_012={0x2, 0x1, 0x7, "f5f6"}]}}, 0x0}, 0x0) socket$inet6(0xa, 0x3, 0xff) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, &(0x7f00000000c0)) r5 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat(r5, &(0x7f0000000100)='./file1\x00', 0x80800, 0x5) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r7, {0x3}}, './file1\x00'}) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) read$FUSE(r8, 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r8, 0x8004500f, &(0x7f00000001c0)) syz_open_dev$vcsu(&(0x7f0000000080), 0x4, 0x400) r9 = syz_genetlink_get_family_id$ethtool(0xfffffffffffffffd, r7) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r9, 0x1, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x49}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}]}, 0x3c}}, 0x0) r10 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001780)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) lseek(r10, 0xfffffffe, 0x3) 49.379408519s ago: executing program 1 (id=8112): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x4, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) ioctl$SIOCSIFMTU(r1, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_MM(0x41555856, 0xd029a7ba63fc7742, &(0x7f0000ffe000/0x1000)=nil) socket$alg(0x26, 0x5, 0x0) r2 = socket(0x2, 0x3, 0x5) setsockopt(r2, 0xff, 0xfffffffe, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x401, 0x359100) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000200)={0x0, 0x0, 0x1b9, 0x1fd}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x0, 0x0, 0x47524247}}) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="57840000030000000b0a12"]) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000100)={0x60, 0x18, 0x7, 0x9f51, 0x31, 0x702e, &(0x7f00000000c0)="42f5e52ed3eaa04663a9a224df0f6f7f80a24f2027dab760655d91b708730495401e7e6d1f7192526e59a2928dc9b993de"}) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='befs\x00', 0x214003, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000829bd7000fbdbdf250100000050000380050008000900000014000600200100000000040000000000000000021400f0ff75657468315f746f5f62726964676500060007004e23000014000600fc010000000000000000080000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x400) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) 48.968776531s ago: executing program 1 (id=8114): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0x8e59, 0x0, 0x3}) close_range(r4, 0xffffffffffffffff, 0x20000000) 48.533088415s ago: executing program 1 (id=8116): mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)={0x13, 0x65, 0xffff, 0x4, 0x6, '9P2000'}, 0x13) 48.287627096s ago: executing program 1 (id=8118): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000001380), 0x800000000005, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r2, 0x29, 0x7, 0x0, &(0x7f0000000dc0)) 48.254793224s ago: executing program 1 (id=8121): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0xc6, 0x1e, 0x40, 0x7c9, 0x12, 0xc2f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcb, 0x8e, 0x2f}}]}}]}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000280)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000245000/0x2000)=nil, &(0x7f00004c7000/0x1000)=nil, 0x0, &(0x7f0000000180)=[{}], 0x1, 0x1bb, 0x0, 0x0, 0x0, 0x55}) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) fsmount(r0, 0x0, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x2, 0x8000, 0x2, 0x3, 0x10}}) 46.86808039s ago: executing program 1 (id=8129): creat(&(0x7f0000000080)='./file0\x00', 0x2) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 30.514325368s ago: executing program 40 (id=8129): creat(&(0x7f0000000080)='./file0\x00', 0x2) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 3.094704053s ago: executing program 0 (id=8346): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000640)=0x20) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x3, 0xa}}, './file0\x00'}) 2.94362307s ago: executing program 9 (id=8348): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x1c, 0x140f, 0x1, 0x1, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040011}, 0x10) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103381, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xb, 0x3, 0x16, @SEQ_NOTEON=@special, 0x0, 0x1, 0x1}) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) 2.870427771s ago: executing program 0 (id=8349): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7, 0x40, 0x3, 0x7, 0x0, 0x0, 0x5, 0x400, 0x74, 0x9, 0x5d, 0x2a, '\x00', 0x1c, 0xffffff0000000000}) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x2000, &(0x7f0000000100)) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000100)={0x0, 0x81}, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r3, &(0x7f00000000c0), 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) read(r3, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x2}, 0x4) r4 = socket$kcm(0x2, 0x0, 0x106) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c0", 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x894b, 0x0) getsockopt$inet6_int(r1, 0x29, 0x7, 0x0, &(0x7f0000000dc0)) close_range(r1, r3, 0x0) 2.755684947s ago: executing program 9 (id=8351): mount(&(0x7f0000000080)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x23202a, 0x0) 2.754293962s ago: executing program 7 (id=8352): r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r3 = epoll_create1(0x0) r4 = epoll_create1(0x80000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x2e, &(0x7f00000001c0)=0xb1e0, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0xa0000010}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, &(0x7f0000000100)) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0xe, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x34, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x7, 0x5, 0x4, 0x1, 0x40], [0x10, 0x9, 0x8000012d, 0x8004, 0x8000005, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0x10, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2af, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x0, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x7, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0xffffff6a, 0x3, 0x1, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120001, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0xf41, 0x0, 0xb9, 0xce7, 0x1ff, 0xffffffff, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0xd4cf, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x0, 0x8, 0x6, 0x226, 0x5, 0x4005, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb0e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x158, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2e}}}]}, 0x158}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="011b26b67000fddbdf2507"], 0x58}, 0x1, 0x0, 0x0, 0x5}, 0x404c044) syz_genetlink_get_family_id$nfc(&(0x7f0000000c00), r6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) r11 = epoll_create1(0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$FS_IOC_SETFLAGS(r11, 0x40088a01, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000580)={0x40000008}) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x0) 2.667497458s ago: executing program 9 (id=8353): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) listen(r1, 0x0) (async) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) close(r1) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000680)="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"/405, 0x195, 0x20000000, 0x0, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) lseek(0xffffffffffffffff, 0xd48a, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[], 0xec}, 0x1, 0x0, 0x0, 0x4000801}, 0x2000c0d1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) (async) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000300)={[0xe6, 0x55e, 0xffffffff, 0x4, 0xfffffffffffffffd, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0xa, 0x40, 0xc976, 0x6], 0x2, 0x20200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b000000080003"], 0x44}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) (async) ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="ffffff51ae00"}) (async, rerun: 64) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) (rerun: 64) 2.095576414s ago: executing program 7 (id=8355): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x3}) socket$kcm(0x29, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)={0x18, 0x55, 0x1, 0x70bd2b, 0x0, {0x2}, [@typed={0x4, 0x120}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.71662511s ago: executing program 5 (id=8357): r0 = syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) set_mempolicy(0x0, 0x0, 0x85) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$video(&(0x7f0000000000), 0x80000, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0xfc145000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x4, 0x3, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) r5 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) setsockopt$inet6_buf(r4, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r4, &(0x7f0000000b80)="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", 0x587, 0x0, &(0x7f0000000180)={0xa, 0x5e64, 0x100000, @mcast2, 0x4}, 0x1c) recvfrom(r4, 0x0, 0x0, 0x40, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000340)=[@code={0x1, 0x60, {"66ba420066ed0f01df4f0f7ebf030000000fc7700066baf80cb8b8732f8def66bafc0cb800000000ef41dd48658f0878c280550000005865f3400f09c4439d6dcf29440f20c03506000000440f22c0"}}, @code={0x1, 0x5c, {"430f684e00660f388083090000000f20d835080000000f22d8400f01c9c481ac56a0f25b0000c4e3e55da8b6000000000f2191420fc7b4c228ce00000f20c035000004000f22c0410f78d9"}}, @cpuid={0x2, 0x18, {0xffffffff, 0xffff}}, @cpuid={0x2, 0x18, {0xffffffff, 0x2}}, @cpuid={0x2, 0x18, {0x9, 0x6}}], 0x104}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000640)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="5edf387e1ccdbac369bbfd6f8eeb2b4ce140dd9f9239e6d2af0f34f66066c93ff2454ac925636b1856353c4d53f34e547e5162bfb2510a87409b6ef1cbc8fb9dfcdf79b710e290dac26e0ecc02824b124c9eace3bc34cfe333f3a9734e4429abc5658cd4fef1ac303e9a8a63cc157679e0d39aeed89355e0bb537e0e38bb9ff07a", @ANYRES8=0x0, @ANYRES16=r0, @ANYRES16=r2, @ANYRES8=r2, @ANYRESHEX=r0]) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0xd, @vbi}) 1.704606455s ago: executing program 0 (id=8358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x20}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(r2, 0x3, &(0x7f0000000000)={0x200000000, 0x80000000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendfile(r1, r1, 0x0, 0x7ffff000) 1.435409179s ago: executing program 9 (id=8359): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) fadvise64(r0, 0x1000, 0x1, 0x2) r1 = gettid() r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x5422, 0x0) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3ec, 0x100, 0x70bd2b, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4001}, 0xc000000) close(r5) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x6ce16000) 1.251970908s ago: executing program 5 (id=8360): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x121001) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000040)={{0x7, 0xd}, {0x5, 0x8}, 0x7, 0x3, 0x81}) (async, rerun: 32) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xe}}, '\x00'}) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xa2000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000140)={{0x1, 0x2}, {0xfc}, 0x8, 0x2, 0x6}) (async, rerun: 32) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x400000) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r4, 0x402c5342, &(0x7f0000000200)={0x0, 0x6, 0x80000000, {0x5, 0x81}, 0x1, 0x2}) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000280)={{r0}, "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"}) (async) tkill(0xffffffffffffffff, 0x19) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000001280)=0x0, &(0x7f00000012c0)=0x4) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000001300)={0x0, 0x9, 0x1, 'queue0\x00', 0x5}) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001400), 0x26200) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r7, 0x402c5342, &(0x7f0000001440)={0x8000, 0xfffffff7, 0x3, {0x3ff, 0x5}, 0xd, 0x5}) r8 = syz_usb_connect$cdc_ecm(0x0, 0x8f, &(0x7f00000014c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x1, 0x1, 0xc, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0xb6, 0x3, 0x2, 0x6, 0x0, 0x3, {{0x6, 0x24, 0x6, 0x0, 0x0, "8c"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xfff7, 0x3, 0x7}, [@obex={0x5, 0x24, 0x15, 0x401}, @ncm={0x6, 0x24, 0x1a, 0x4, 0x1a}, @obex={0x5, 0x24, 0x15, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x7, 0xf8, 0xfc}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x293, 0x0, 0x2, 0xe, 0x4}, @mdlm={0x15, 0x24, 0x12, 0xe71}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x2, 0x40}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x4, 0x9, 0xf9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8, 0xfe, 0xe}}}}}]}}]}}, &(0x7f0000001900)={0xa, &(0x7f0000001580)={0xa, 0x6, 0x310, 0xf6, 0x6, 0x72, 0x40, 0x1}, 0x8, &(0x7f00000015c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x8, [{0xb5, &(0x7f0000001600)=@string={0xb5, 0x3, "67dea5a3fad678c542b16afe211b3d2224f7f1da27c33fc77eceabfa31ca007ade8f5f5080f990191aba5a718beb8b74714db2049af3c8ad907d49358c819fddd057d363d5549b475541c40e5206a1e196bcc9a048eed67e75ceabd60dbc938e3ce2f3b96c72328ebbf897f779a40786bc23e2ae7aeb4bfb8c352f1fd248ca5fec5fe591cd6f6125439395f4c994c50dc3917c16a7a5bae5116b24edafa4d790ab89bed56cf83d0268852ac4494c44e8f66f9b"}}, {0x4, &(0x7f00000016c0)=@lang_id={0x4, 0x3, 0x41b}}, {0xba, &(0x7f0000001700)=@string={0xba, 0x3, "d343a369cd0c972b5d05cd88461aad0a9bcf308d5607c4a268ad5d3c2b217c95e8f37db9617496219099fb2c3e43c59cf211545f19e160ac2115909edbaee7ca8595f27ad044c3b1c107cdbd1397e53b7fec6a7bd91fcd60ae2f1605b532dc113a08f23944367dc324efca90b6e880bf563e39ed598cba1377fdc655019086c6e6ce723cfe63372be589a0a19da23565019f5fc2a76fce9bf442b878588a51f7dd46d19c810c5329d354975d5a13e185850b262715b8988a"}}, {0x4, &(0x7f00000017c0)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f0000001800)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x810}}]}) syz_usb_control_io$cdc_ecm(r8, &(0x7f0000001ac0)={0x14, &(0x7f0000001980)={0x0, 0xa, 0xf4, {0xf4, 0xf, "ad6af37cc7d57867bf40c74600b38207ea231efbc6a17dba22888573ec79f869a937c2a44f257f1179ecb3e60355eb404122ab314d710f115935f3ee8f598d58dee36d5de1c9ae3ec4991f045be39f4db61a585923daf0473106d32e4d2d4c57e61e2f9575ec9ebc649d3f9489877678c0731f4cbe23f28aae8d8e25a2dd14018e99f1f1570be6a8a1915fae7eb382527e57eac135c9bf6510ac87fa478a10651e68d271b2795f20df9460bd42b68d8940d203f219eb1856f62b53e8b59c801bc7a14d12c8716c08fa2ac38972121a68f59373e67bed121c152b050d1250868505b675091983faf0fab36b5ad02189b5e452"}}, &(0x7f0000001a80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001bc0)={0x1c, &(0x7f0000001b00)={0x20, 0xb, 0x5, "754e091e2f"}, &(0x7f0000001b40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001b80)={0x0, 0x8, 0x1, 0xae}}) write$sndseq(r4, &(0x7f0000001c00)=[{0x7, 0xcb, 0xf5, 0x0, @tick=0x6, {0x1, 0xb}, {0x80, 0x8}, @note={0xfe, 0x6, 0xe, 0x7}}, {0x8, 0x5, 0x2, 0x9, @tick=0xe429, {0x0, 0xd}, {0x3, 0x7}, @result={0x7, 0x10000}}], 0x38) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000001c40)={0x44f, 0x1, 0xb54, {0x6, 0x5}, 0x4, 0x1}) (async, rerun: 64) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001cc0), 0x81202) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r9, 0x40a85321, &(0x7f0000001d00)={{0x9, 0xa8}, 'port0\x00', 0x91, 0x10000, 0x0, 0x695, 0x5, 0x5, 0x5, 0x0, 0x3, 0x2}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001dc0)={0x0, 0x0}) wait4(r10, &(0x7f0000001e40), 0x1000000, &(0x7f0000001e80)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001f40)={'batadv0\x00', 0x0}) sendmmsg$inet6(r2, &(0x7f0000002280)=[{{&(0x7f0000001f80)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c, &(0x7f0000002180)=[{&(0x7f0000001fc0)="10fa092a1f580ea3df572346530d6c01f2fd59bdb8d44ab0c4b7cbf24ecbec86c4f33f5c07432ebcf3c669d836bfe7560b4c11e64116f6f27682bf5139b0c68eae953d6b31846e9c3c2205b3b951697b79d154d8a6aa6764f8b4b26b7ca39595e5d7c6b9a7a129031cdb8588", 0x6c}, {&(0x7f0000002040)="ab97ee46ffcad0c94f59f8f35074b6a7dbb2032302e0372ae452477ce8ce28d498b83aa25bdef3e3d0bec545d415d6a59fb4f8e5167e7a8618d23e92c420f342bda7c1394c7a35623556fd82c1a9e5e8249c0680243c2f138087b9317703e4e7d756e259beaf0c20a7d5905c98ab59666589062a5b8d26bc2de49824bb603c2b363aa4", 0x83}, {&(0x7f0000002100)="73cbd1c0b5", 0x5}, {&(0x7f0000002140)="464b736af0a5d8", 0x7}], 0x4, &(0x7f00000021c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r11}}}, @rthdr={{0x78, 0x29, 0x39, {0x87, 0xc, 0x1, 0x9, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @local, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00']}}}], 0xa0}}], 0x1, 0x40004) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async, rerun: 32) r12 = syz_open_procfs(r10, &(0x7f00000022c0)='personality\x00') ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r12, 0x402c5342, &(0x7f0000002300)={0x5, 0x6, 0x5, {0x1, 0xb}, 0x6}) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000023c0), r4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r12, &(0x7f0000002680)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002640)={&(0x7f00000024c0)={0x164, r13, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8080}, 0xc004) 1.110139612s ago: executing program 0 (id=8361): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1458c0, 0x0) r2 = dup(r0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x4) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x0, 0x8}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) 947.690828ms ago: executing program 9 (id=8362): r0 = fsopen(&(0x7f0000000080)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='gId', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1de\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x13, 0xffffffffffffffff, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async, rerun: 64) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10e) (rerun: 64) close(r0) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000180)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r1, 0x2000) 947.121035ms ago: executing program 7 (id=8363): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c80)=@updpolicy={0x430, 0x19, 0x1, 0xffffffff, 0x25dfdbff, {{@in=@multicast1=0xe0000002, @in=@broadcast, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x5, 0x0, 0x8, 0x0, 0x404, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0xe7}, 0x0, 0x0, 0x0, 0x1}, [@algo_crypt={0xd3, 0x2, {{'cts-cbc-aes-aesni\x00'}, 0x458, "2925592315628d7169b51b100dc5b605913c38969279befc32f3f3d2fe47f43a95af7b9d370b6627cd791ef87dfd16173cc910686687b5f33727913124e9ad30c95e386a267856399b651f95ac70593bfc452f95152bf8f3042985e9f396e251a5e58bbabf6f9f53e2d5b3de10a85237f41a1f9b1c7fd45a4113106400188b4e821e9e75f790d68f322aef"}}, @algo_auth_trunc={0xd9, 0x14, {{'rmd320\x00'}, 0x468, 0x180, "64c24818fcbd366b84a0af1c656cd923fa3a296ef6f9ea8a70b45d6cd41366c667393c4a8217476bd5bf500d2bae7553ba31b1b04e96e1212292536678d96e737d141b9f64ebc8f4a01858f1c2bae278983d8573dcc8f55932197fab16414eb24c13def28855b275f493b5776771c6e214613bfedb2f45f17020c42e0e0b356b79fadfd57e8b7675a0d7ffbf66"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x200}, @sec_ctx={0xf4, 0x8, {0xf0, 0x8, 0x1, 0x0, 0xe8, "c00e1b64b5a5197eb3c3e2e8083232582a411e0555ddc61a4a94c99fde6e739ebc72b941b66d23455ab10b4c6d315514a429e9967232a3e9b2e28a81e67934cb378dfc9d430d891b6af903485f9d9b453ab68ecbd00bfb8db10af7d14d8d69d7ae746c84140dcf81a738d64ee943af0f6a1534e7383e98189af066b7a9466f946b1fced1b62e4d1a56bda759c93cff9f72090e562673a6698f3b75e74072e9a578d292b38b71a664c7a2a65777a89c8c0ec552edf7737d9ca1fdbcb315c3ddef5c1ff25bbe7fa5c5f697256c397782577826f3a37185f1c96ecd8e571ca273654d156b21444d177f"}}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd2d, 0x70bd2a, 0x70bd2d, 0x70bd26, 0x0, [0x1, 0x7]}}, @algo_crypt={0x7f, 0x2, {{'ctr(cast5)\x00'}, 0x1b8, "529e2d5bdc0a907f03203e5ff7561048238fafca37704648aa5bdbed2bc9499f2549e7a270ddd108e21f86eaeef1a9b3f252c3b58b13b5"}}, @address_filter={0x28, 0x1a, {@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xa, 0x3, 0x7}}]}, 0x430}, 0x1, 0x0, 0x0, 0x20044011}, 0x4000090) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0xb8}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400c810}, 0x40001) recvmmsg$unix(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/90, 0x5a}], 0x1}}], 0x1, 0x120, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x45809000) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000740)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r5, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r6, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r6, 0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e22, @broadcast}}, 0x0, 0x0, 0x2f, 0x0, "2aa069e9422966644c8b454b81e31e872a6e78869e9ef1fb915d13f6661c913a8d112a4f393bdc52ddf6ba5df98d0b5b85dc5ee59bb9031fc95d4d70ce71041f4da111a43cdb3c6c3cb3d56c467022e0"}, 0xd8) connect(r7, &(0x7f0000000100)=@hci={0x1f, 0x4, 0x3}, 0x80) 927.359172ms ago: executing program 5 (id=8364): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="180000001400010bd173a200ffdbdf2506"], 0x18}], 0x1, 0x0, 0x0, 0x4000}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000000c0), 0x10) sendto$l2tp(r1, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r1, 0x0, 0xc00, 0x2, 0x0, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 878.256425ms ago: executing program 0 (id=8365): timer_create(0x2, 0x0, &(0x7f0000000180)=0x0) clock_gettime(0x1, &(0x7f0000000480)) timer_settime(r0, 0x0, &(0x7f0000000040), 0x0) timer_gettime(r0, &(0x7f0000000000)) 723.576662ms ago: executing program 5 (id=8366): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200), 0x2) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000240)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x0, 0x2, 0x2, 0x3, 0x3, 0x3, 0x4, 0x2f2, 0x40, 0x313, 0x4, 0xfffa, 0x38, 0x1, 0x4, 0xd8, 0x5}, [{0x5, 0x15, 0x3, 0x101, 0x7fff, 0x10000, 0x3, 0x8001}], "295e8fadcbf2b9502ccf001a2e3beb0b619f649ffcd05f54d209c770d06eaa89fd84b8ceea495c510530dfe7b9726ad5c08cd0639fdc6a76e28ee9431a9c68194af44a75d83e687499788b8cff0991956aa8ce313aadbf8ee307625eab54fe8166b8d8d2dc435552712312ada3e77d7b249839dab0ab53f7358aeacfa9d8b44f09b085c25363c85f43ed0f1f20a1bae35737abb68d4b477eeddcb88695c7e11bce1b697c78ebc0c7886a11ca20625704cd954b7064cb", ['\x00', '\x00']}, 0x32e) 723.272974ms ago: executing program 0 (id=8367): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000040)) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x108}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000200004025e7a1a440000102030109025c0002010000000904000001020d0000052606000105240000000d240f0120000000000000200006241a0000000905810300020000000904010000020d00000904010102020d0000090582020002000000090b0003"], 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 616.491074ms ago: executing program 9 (id=8368): creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@sg0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="40ff9a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d00)={0x84, &(0x7f0000000cc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001500)={0x34, &(0x7f00000001c0)={0x1f, 0xe, 0xad, "5bc226c630fa7c9dada03eca5000d77792d6edde6ea1989ec71451a4d898bc7a998f170e994dcd6a2a194b6bc4161723ca72f08216bf12269fba036f577746c351d960d402b96fa8461a7620e5ed2bcb6d9cc9d080485427811aed1d3643abdf887cd6664c0b4b287c267deb44fbcf6b648d08fd4602efdd2dfb5214cf18cb4d6db6b66693a75cc3145fccd33cf59104f6f950d00103aba8e89134155b7fd99fefa9df0eac817563aafaab325f"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000a40)={0x0, 0x9, 0x1, 'S'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x50) chdir(&(0x7f0000000040)='./file0\x00') 560.57479ms ago: executing program 7 (id=8369): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) fadvise64(r0, 0x65f, 0x2, 0x5) syz_open_dev$video4linux(&(0x7f0000000000), 0x8, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45819000) (async) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 334.570075ms ago: executing program 5 (id=8370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x18, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8010}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) prctl$PR_SET_SECUREBITS(0x1c, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x28202, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000040)}}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x113082, 0x0) 333.556703ms ago: executing program 5 (id=8371): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000080)="97") r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0x8d0, 0x4) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='anon_inodefs\x00', 0x8000, 0x0) 207.499454ms ago: executing program 7 (id=8372): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000011140100000000000000000008004b0013000000080001000006000008004a0000000000080003"], 0x30}}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d0ff080211000000505050b8505000ebffff0201ef322c575362cc39699f33b10934c1f4650000000000000000"], 0x3c}}, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000280)={0x8, @raw_data="24c68d6a23e49bb0d4b5e7813d9d11b799b508b3643d1d213807b8ef1b8984ddba6ffc5f5d1411423f2b3bb545b61201ce62c16137bcf57c565a6287b9671ef47bbe381bcb378921bb13f489dcaf4f5f2edbefb84d75d32c899b3943ea607442bfb00c56ba7048bd50558250130f1e54b4df9f939a1dfa4496e7e1fe0ec0a3e9ae24420e6630625b304c7a8102a1fa8824edf26fbef59238ec895e9d35d234feebdbaebf84720ee47b9357c745e7ac2390a8825cda2e1cba0b75c519cb175a194023d672f843ce0a"}) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000180)=""/212, 0xd4}, {&(0x7f00000000c0)=""/149, 0x95}], 0x2, 0xffeffffb, 0x5) 0s ago: executing program 7 (id=8373): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000140)={0x18}, 0x18) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64, @ANYBLOB="f4b02b86df87851e7be7b383760d80"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB='+wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r5, 0x29, 0xc8, 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000006c0)={0x34, r3, 0xe1d1b68fbaa51e1b, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, r6, {0x5}}, 0x18) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) kernel console output (not intermixed with test programs): ax is 1 [ 1315.994287][ T8874] usb 1-1: config 8 has an invalid interface number: 90 but max is 1 [ 1316.011506][ T8874] usb 1-1: config 8 has no interface number 0 [ 1316.019184][ T8874] usb 1-1: config 8 has no interface number 1 [ 1316.026424][ T8874] usb 1-1: config 8 interface 142 has no altsetting 0 [ 1316.034997][ T8874] usb 1-1: config 8 interface 90 has no altsetting 0 [ 1316.050242][ T8874] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=37.8d [ 1316.060558][ T8874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.073710][ T8874] usb 1-1: Product: syz [ 1316.080103][ T8874] usb 1-1: Manufacturer: syz [ 1316.084845][ T8874] usb 1-1: SerialNumber: syz [ 1316.108957][T19542] netlink: 124 bytes leftover after parsing attributes in process `syz.9.7654'. [ 1316.119899][ T5175] Bluetooth: hci1: link tx timeout [ 1316.126279][ T5175] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1316.444430][ T24] usb 2-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=d1.96 [ 1316.457857][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.469079][T19551] /dev/rnullb0: Can't open blockdev [ 1316.495134][ T24] usb 2-1: config 0 descriptor?? [ 1316.509096][ T24] usb 2-1: can't set config #0, error -71 [ 1316.540601][ T24] usb 2-1: USB disconnect, device number 102 [ 1316.632664][ T30] audit: type=1326 audit(6043515763.595:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19567 comm="syz.9.7660" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f984f38e929 code=0x0 [ 1316.898565][ T24] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1317.059083][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1317.072104][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.084342][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1317.094807][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1317.108453][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1317.117905][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.134281][ T24] usb 2-1: config 0 descriptor?? [ 1317.377663][ T24] HID 045e:07da: Invalid code 65791 type 1 [ 1317.396286][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0035/input/input102 [ 1317.430779][ T24] microsoft 0003:045E:07DA.0035: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1317.460968][ T24] usb 2-1: USB disconnect, device number 103 [ 1317.544548][T19581] fido_id[19581]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1317.653961][ T8874] usb 1-1: USB disconnect, device number 61 [ 1317.761569][T16437] udevd[16437]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.142/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1317.930732][ T5866] Bluetooth: hci1: link tx timeout [ 1317.944069][ T5866] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1318.237734][T19639] 9pnet_fd: Insufficient options for proto=fd [ 1318.268554][T19639] /dev/rnullb0: Can't open blockdev [ 1318.277896][ T5866] Bluetooth: hci1: command 0x0406 tx timeout [ 1318.516623][T19648] ntfs3(loop1): try to read out of volume at offset 0x0 [ 1318.571972][T19651] Device name not specified. [ 1318.571972][T19651] [ 1318.584487][T19651] /dev/rnullb0: Can't open blockdev [ 1318.809984][ T5866] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1318.833968][ T5866] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1318.854229][ T5866] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1318.865704][ T5866] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1318.875857][ T5866] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1319.127719][T19666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7670'. [ 1319.572577][T19658] chnl_net:caif_netlink_parms(): no params data found [ 1319.727345][T22962] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.021232][T22962] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.268434][T22962] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.332272][T19828] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 1320.339877][T19828] UDF-fs: Scanning with blocksize 4096 failed [ 1320.468463][T22962] netdevsim netdevsim9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.554205][T19658] bridge0: port 1(bridge_slave_0) entered blocking state [ 1320.569056][T19658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.579154][T19866] 9pnet_fd: Insufficient options for proto=fd [ 1320.588331][T19866] /dev/rnullb0: Can't open blockdev [ 1320.604850][T19658] bridge_slave_0: entered allmulticast mode [ 1320.657395][T19658] bridge_slave_0: entered promiscuous mode [ 1320.669373][T19868] FAULT_INJECTION: forcing a failure. [ 1320.669373][T19868] name failslab, interval 1, probability 0, space 0, times 0 [ 1320.670767][T19658] bridge0: port 2(bridge_slave_1) entered blocking state [ 1320.706661][T19658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.713969][T19658] bridge_slave_1: entered allmulticast mode [ 1320.724542][T19658] bridge_slave_1: entered promiscuous mode [ 1320.729358][T19868] CPU: 0 UID: 0 PID: 19868 Comm: syz.0.7675 Not tainted 6.16.0-rc5-next-20250709-syzkaller #0 PREEMPT(full) [ 1320.729381][T19868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1320.729391][T19868] Call Trace: [ 1320.729399][T19868] [ 1320.729406][T19868] dump_stack_lvl+0x189/0x250 [ 1320.729434][T19868] ? __pfx____ratelimit+0x10/0x10 [ 1320.729455][T19868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1320.729477][T19868] ? __pfx__printk+0x10/0x10 [ 1320.729505][T19868] ? __pfx___might_resched+0x10/0x10 [ 1320.729531][T19868] should_fail_ex+0x414/0x560 [ 1320.729561][T19868] should_failslab+0xa8/0x100 [ 1320.729580][T19868] __kmalloc_cache_noprof+0x70/0x3d0 [ 1320.729603][T19868] ? crtc_or_fake_commit+0x128/0x330 [ 1320.729630][T19868] crtc_or_fake_commit+0x128/0x330 [ 1320.729655][T19868] drm_atomic_helper_setup_commit+0xed4/0x1370 [ 1320.729685][T19868] ? __pfx___drm_dev_dbg+0x10/0x10 [ 1320.729711][T19868] drm_atomic_helper_commit+0x6a/0xb10 [ 1320.729739][T19868] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 1320.729760][T19868] drm_atomic_commit+0x25f/0x2c0 [ 1320.729779][T19868] ? __asan_memcpy+0x40/0x70 [ 1320.729799][T19868] ? __pfx_drm_atomic_commit+0x10/0x10 [ 1320.729817][T19868] ? __pfx___drm_printfn_info+0x10/0x10 [ 1320.729849][T19868] ? __asan_memset+0x22/0x50 [ 1320.729872][T19868] drm_atomic_helper_disable_plane+0x161/0x200 [ 1320.729898][T19868] drm_mode_cursor_common+0xb7e/0x12d0 [ 1320.729950][T19868] ? __pfx_drm_mode_cursor_common+0x10/0x10 [ 1320.729972][T19868] ? kasan_save_free_info+0x46/0x50 [ 1320.730024][T19868] ? __lock_acquire+0xab9/0xd20 [ 1320.730043][T19868] ? drm_mode_cursor_ioctl+0xa6/0x110 [ 1320.730072][T19868] drm_mode_cursor_ioctl+0xbf/0x110 [ 1320.730099][T19868] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 1320.730127][T19868] ? do_raw_spin_unlock+0x122/0x240 [ 1320.730159][T19868] ? _raw_spin_unlock+0x28/0x50 [ 1320.730175][T19868] ? drm_is_current_master+0x19f/0x200 [ 1320.730198][T19868] drm_ioctl_kernel+0x2cc/0x390 [ 1320.730222][T19868] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 1320.730246][T19868] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1320.730278][T19868] drm_ioctl+0x67f/0xb10 [ 1320.730304][T19868] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 1320.730333][T19868] ? __pfx_drm_ioctl+0x10/0x10 [ 1320.730367][T19868] ? __fget_files+0x2a/0x420 [ 1320.730388][T19868] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1320.730407][T19868] ? __pfx_drm_ioctl+0x10/0x10 [ 1320.730428][T19868] __se_sys_ioctl+0xf9/0x170 [ 1320.730453][T19868] do_syscall_64+0xfa/0x3b0 [ 1320.730472][T19868] ? lockdep_hardirqs_on+0x9c/0x150 [ 1320.730492][T19868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.730509][T19868] ? clear_bhb_loop+0x60/0xb0 [ 1320.730528][T19868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.730543][T19868] RIP: 0033:0x7fb66b38e929 [ 1320.730559][T19868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1320.730573][T19868] RSP: 002b:00007fb66c179038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1320.730591][T19868] RAX: ffffffffffffffda RBX: 00007fb66b5b5fa0 RCX: 00007fb66b38e929 [ 1320.730604][T19868] RDX: 0000200000000140 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 1320.730616][T19868] RBP: 00007fb66c179090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.730626][T19868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.730634][T19868] R13: 0000000000000000 R14: 00007fb66b5b5fa0 R15: 00007fff2dcf7bb8 [ 1320.730664][T19868] [ 1320.769290][ T8874] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1321.105766][ T5175] Bluetooth: hci6: command tx timeout [ 1321.270419][T19658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1321.316030][T19658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1321.463845][ T5904] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1321.535726][T19658] team0: Port device team_slave_0 added [ 1321.582104][ T8874] usb 2-1: Using ep0 maxpacket: 8 [ 1321.604829][T19658] team0: Port device team_slave_1 added [ 1321.632259][ T8874] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1321.650314][ T5904] usb 1-1: config index 0 descriptor too short (expected 292, got 36) [ 1321.657208][ T8874] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1321.672507][ T5904] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1321.678715][ T8874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.704576][ T5904] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1321.730351][ T8874] usb 2-1: config 0 descriptor?? [ 1321.745874][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1321.779106][ T8874] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1321.803903][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1321.826098][ T5904] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1321.852313][T19658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1321.864295][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.872960][T19658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1321.924841][ T5904] usb 1-1: config 0 descriptor?? [ 1321.958824][T19658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1322.018915][T22962] bridge_slave_1: left allmulticast mode [ 1322.031102][T22962] bridge_slave_1: left promiscuous mode [ 1322.037004][T22962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.071228][T22962] bridge_slave_0: left allmulticast mode [ 1322.094121][T22962] bridge_slave_0: left promiscuous mode [ 1322.099987][T22962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.220042][T19977] /dev/rnullb0: Can't open blockdev [ 1322.455152][T19984] /dev/rnullb0: Can't open blockdev [ 1323.055273][T22962] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1323.066516][T22962] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1323.078079][T22962] bond0 (unregistering): Released all slaves [ 1323.094911][T19658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1323.102270][T19658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1323.128188][ C0] vkms_vblank_simulate: vblank timer overrun [ 1323.135453][T19658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1323.187435][ T5904] usb 1-1: USB disconnect, device number 62 [ 1323.324016][ T5175] Bluetooth: hci6: command tx timeout [ 1323.364309][T19658] hsr_slave_0: entered promiscuous mode [ 1323.373224][T19658] hsr_slave_1: entered promiscuous mode [ 1323.382553][T19658] debugfs: 'hsr0' already exists in 'hsr' [ 1323.389638][T19658] Cannot create hsr debugfs directory [ 1323.613164][ T8874] gspca_vc032x: reg_w err -110 [ 1323.618135][ T8874] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 1323.631270][T22962] hsr_slave_0: left promiscuous mode [ 1323.641368][T22962] hsr_slave_1: left promiscuous mode [ 1323.648651][T22962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1323.656218][T22962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1323.666114][T22962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1323.673560][T22962] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1323.682068][T22962] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1323.696095][T22962] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1323.752489][T22962] veth1_vlan: left promiscuous mode [ 1323.760305][T22962] veth0_vlan: left promiscuous mode [ 1323.903032][ T24] usb 2-1: USB disconnect, device number 104 [ 1324.000127][T22962] pimreg3 (unregistering): left allmulticast mode [ 1324.034069][ T5175] Bluetooth: hci2: link tx timeout [ 1324.043646][ T5175] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 1324.056413][ T5175] Bluetooth: hci2: link tx timeout [ 1324.061810][ T5175] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 1324.148659][T20084] /dev/rnullb0: Can't open blockdev [ 1324.278145][T20093] /dev/rnullb0: Can't open blockdev [ 1324.328157][T20097] FAULT_INJECTION: forcing a failure. [ 1324.328157][T20097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1324.380548][T20097] CPU: 0 UID: 0 PID: 20097 Comm: syz.0.7683 Not tainted 6.16.0-rc5-next-20250709-syzkaller #0 PREEMPT(full) [ 1324.380575][T20097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1324.380586][T20097] Call Trace: [ 1324.380594][T20097] [ 1324.380601][T20097] dump_stack_lvl+0x189/0x250 [ 1324.380630][T20097] ? __pfx____ratelimit+0x10/0x10 [ 1324.380652][T20097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1324.380674][T20097] ? __pfx__printk+0x10/0x10 [ 1324.380709][T20097] should_fail_ex+0x414/0x560 [ 1324.380739][T20097] _copy_to_user+0x31/0xb0 [ 1324.380765][T20097] drm_ioctl+0x6a4/0xb10 [ 1324.380801][T20097] ? __pfx_drm_mode_cursor_ioctl+0x10/0x10 [ 1324.380835][T20097] ? __pfx_drm_ioctl+0x10/0x10 [ 1324.380870][T20097] ? __fget_files+0x2a/0x420 [ 1324.380893][T20097] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1324.380915][T20097] ? __pfx_drm_ioctl+0x10/0x10 [ 1324.380938][T20097] __se_sys_ioctl+0xf9/0x170 [ 1324.380964][T20097] do_syscall_64+0xfa/0x3b0 [ 1324.380984][T20097] ? lockdep_hardirqs_on+0x9c/0x150 [ 1324.381003][T20097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.381020][T20097] ? clear_bhb_loop+0x60/0xb0 [ 1324.381041][T20097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.381058][T20097] RIP: 0033:0x7fb66b38e929 [ 1324.381075][T20097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1324.381089][T20097] RSP: 002b:00007fb66c179038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1324.381107][T20097] RAX: ffffffffffffffda RBX: 00007fb66b5b5fa0 RCX: 00007fb66b38e929 [ 1324.381121][T20097] RDX: 0000200000000140 RSI: 00000000c01c64a3 RDI: 0000000000000003 [ 1324.381133][T20097] RBP: 00007fb66c179090 R08: 0000000000000000 R09: 0000000000000000 [ 1324.381144][T20097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1324.381153][T20097] R13: 0000000000000000 R14: 00007fb66b5b5fa0 R15: 00007fff2dcf7bb8 [ 1324.381180][T20097] [ 1324.572814][ C0] vkms_vblank_simulate: vblank timer overrun [ 1325.266497][T22962] team0 (unregistering): Port device team_slave_1 removed [ 1325.388331][T22962] team0 (unregistering): Port device team_slave_0 removed [ 1325.493784][ T24] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 1325.555391][ T5175] Bluetooth: hci6: command tx timeout [ 1325.655883][ T24] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1325.666058][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.696654][ T24] usb 1-1: config 0 descriptor?? [ 1325.710865][ T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1325.983123][ T24] gp8psk: usb in 128 operation failed. [ 1326.233675][ T5175] Bluetooth: hci2: command 0x0406 tx timeout [ 1326.246910][ T24] gp8psk: usb in 146 operation failed. [ 1326.252409][ T24] gp8psk: failed to get FW version [ 1326.536197][T20123] tipc: Enabling of bearer rejected, media not registered [ 1326.593972][ T24] gp8psk: usb in 149 operation failed. [ 1326.635227][ T24] gp8psk: failed to get FPGA version [ 1326.652525][ T24] gp8psk: usb in 138 operation failed. [ 1326.689962][ T24] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1326.734189][ T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1326.773851][ T24] usb 1-1: USB disconnect, device number 63 [ 1326.843439][ T5175] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1326.920149][T20174] Mount JFS Failure: -22 [ 1327.260391][T20195] FAULT_INJECTION: forcing a failure. [ 1327.260391][T20195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1327.300575][T20195] CPU: 0 UID: 0 PID: 20195 Comm: syz.1.7693 Not tainted 6.16.0-rc5-next-20250709-syzkaller #0 PREEMPT(full) [ 1327.300601][T20195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1327.300612][T20195] Call Trace: [ 1327.300620][T20195] [ 1327.300628][T20195] dump_stack_lvl+0x189/0x250 [ 1327.300657][T20195] ? __pfx____ratelimit+0x10/0x10 [ 1327.300679][T20195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1327.300700][T20195] ? __pfx__printk+0x10/0x10 [ 1327.300735][T20195] should_fail_ex+0x414/0x560 [ 1327.300765][T20195] _copy_to_user+0x31/0xb0 [ 1327.300792][T20195] simple_read_from_buffer+0xe1/0x170 [ 1327.300816][T20195] proc_fail_nth_read+0x1df/0x250 [ 1327.300842][T20195] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1327.300867][T20195] ? rw_verify_area+0x258/0x650 [ 1327.300892][T20195] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1327.300916][T20195] vfs_read+0x200/0x980 [ 1327.300938][T20195] ? __pfx___mutex_lock+0x10/0x10 [ 1327.300960][T20195] ? __pfx_vfs_read+0x10/0x10 [ 1327.300979][T20195] ? __fget_files+0x2a/0x420 [ 1327.301003][T20195] ? __fget_files+0x3a0/0x420 [ 1327.301021][T20195] ? __fget_files+0x2a/0x420 [ 1327.301050][T20195] ksys_read+0x145/0x250 [ 1327.301069][T20195] ? __pfx_ksys_read+0x10/0x10 [ 1327.301092][T20195] ? do_syscall_64+0xbe/0x3b0 [ 1327.301117][T20195] do_syscall_64+0xfa/0x3b0 [ 1327.301136][T20195] ? lockdep_hardirqs_on+0x9c/0x150 [ 1327.301156][T20195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.301173][T20195] ? clear_bhb_loop+0x60/0xb0 [ 1327.301195][T20195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.301211][T20195] RIP: 0033:0x7f083ef8d33c [ 1327.301235][T20195] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1327.301250][T20195] RSP: 002b:00007f083fe00030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1327.301269][T20195] RAX: ffffffffffffffda RBX: 00007f083f1b5fa0 RCX: 00007f083ef8d33c [ 1327.301282][T20195] RDX: 000000000000000f RSI: 00007f083fe000a0 RDI: 0000000000000004 [ 1327.301294][T20195] RBP: 00007f083fe00090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.301305][T20195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1327.301315][T20195] R13: 0000000000000000 R14: 00007f083f1b5fa0 R15: 00007ffe34b0b8e8 [ 1327.301345][T20195] [ 1327.535977][ C0] vkms_vblank_simulate: vblank timer overrun [ 1327.759748][T20207] Can't find a SQUASHFS superblock on rnullb0 [ 1327.771821][ T5175] Bluetooth: hci6: command tx timeout [ 1327.937844][T20222] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1327.958816][T20222] VFS: Can't find a romfs filesystem on dev rnullb0. [ 1327.958816][T20222] [ 1328.419558][T19658] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1328.441744][T19658] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1328.456351][ T5175] Bluetooth: hci2: command 0x0406 tx timeout [ 1328.485347][T19658] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1328.552818][T19658] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1328.723147][ T984] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1328.912497][ T984] usb 1-1: config 0 has an invalid interface number: 25 but max is 0 [ 1328.925984][ T984] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1328.948303][ T30] audit: type=1400 audit(6043515775.101:1690): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=20278 comm="syz.7.7704" [ 1328.969528][ C0] vkms_vblank_simulate: vblank timer overrun [ 1328.978973][ T984] usb 1-1: config 0 has no interface number 0 [ 1328.985103][ T984] usb 1-1: config 0 interface 25 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1329.013233][T19658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1329.042154][ T984] usb 1-1: config 0 interface 25 has no altsetting 0 [ 1329.065531][T19658] 8021q: adding VLAN 0 to HW filter on device team0 [ 1329.084150][ T984] usb 1-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=9e.ee [ 1329.105717][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 1329.113002][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1329.118052][ T984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.128266][ T984] usb 1-1: Product: syz [ 1329.135084][ T984] usb 1-1: Manufacturer: syz [ 1329.146093][ T984] usb 1-1: SerialNumber: syz [ 1329.174036][ T984] usb 1-1: config 0 descriptor?? [ 1329.231307][T21899] bridge0: port 2(bridge_slave_1) entered blocking state [ 1329.238500][T21899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1329.400807][ T984] usb 1-1: Found UVC 0.00 device syz (1b3b:2951) [ 1329.425040][ T984] usb 1-1: No valid video chain found. [ 1329.763520][T19658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1329.789678][ T5866] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1329.797550][ T5866] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1330.462509][T19658] veth0_vlan: entered promiscuous mode [ 1330.480313][T19658] veth1_vlan: entered promiscuous mode [ 1330.579786][T19658] veth0_macvtap: entered promiscuous mode [ 1330.600390][T19658] veth1_macvtap: entered promiscuous mode [ 1330.635355][T19658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1330.656427][T19658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1330.674489][ T2966] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.684440][ T2966] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.713844][ T2966] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.725498][ T2966] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.867582][T21894] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.884319][T21894] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.927636][T21894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.943918][T21894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1331.320286][ T984] usb 10-1: new low-speed USB device number 122 using dummy_hcd [ 1331.361683][T20374] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1331.375382][T20374] /dev/rnullb0: Can't open blockdev [ 1331.430940][T20376] 9pnet_fd: Insufficient options for proto=fd [ 1331.443870][T20376] /dev/rnullb0: Can't open blockdev [ 1331.469856][ T984] usb 10-1: device descriptor read/64, error -71 [ 1331.632003][ T5917] usb 1-1: USB disconnect, device number 64 [ 1331.737924][ T984] usb 10-1: new low-speed USB device number 123 using dummy_hcd [ 1331.887779][ T984] usb 10-1: device descriptor read/64, error -71 [ 1332.006307][ T984] usb usb10-port1: attempt power cycle [ 1332.367880][ T984] usb 10-1: new low-speed USB device number 124 using dummy_hcd [ 1332.411272][ T984] usb 10-1: device descriptor read/8, error -71 [ 1332.497625][T20408] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1332.504838][T20408] /dev/rnullb0: Can't open blockdev [ 1332.621228][T20414] 9pnet_fd: Insufficient options for proto=fd [ 1332.639149][T20414] /dev/rnullb0: Can't open blockdev [ 1332.688571][ T984] usb 10-1: new low-speed USB device number 125 using dummy_hcd [ 1332.710739][ T984] usb 10-1: device descriptor read/8, error -71 [ 1332.753448][ T5866] Bluetooth: hci5: link tx timeout [ 1332.759856][ T5866] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1332.828104][ T984] usb usb10-port1: unable to enumerate USB device [ 1333.100161][T20433] /dev/rnullb0: Can't open blockdev [ 1333.141349][T20435] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7732'. [ 1333.150988][ T984] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1333.169050][T20435] /dev/rnullb0: Can't open blockdev [ 1333.201841][ T8874] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1333.266474][T20440] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7734'. [ 1333.340923][ T984] usb 1-1: Using ep0 maxpacket: 8 [ 1333.354577][ T984] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1333.365185][ T984] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1333.375208][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.390171][ T984] usb 1-1: config 0 descriptor?? [ 1333.398298][ T8874] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1333.413897][ T984] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1333.422837][ T8874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1333.444024][ T8874] usb 2-1: Product: syz [ 1333.451087][ T8874] usb 2-1: Manufacturer: syz [ 1333.457221][ T8874] usb 2-1: SerialNumber: syz [ 1333.467288][ T8874] usb 2-1: config 0 descriptor?? [ 1333.694615][T20428] comedi comedi1: Minor 0 could not be opened [ 1333.713876][ T8874] usb 2-1: USB disconnect, device number 105 [ 1334.118125][T20457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1334.136727][T20457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1334.456093][T20472] /dev/rnullb0: Can't open blockdev [ 1334.721717][ T3818] usb 10-1: new high-speed USB device number 126 using dummy_hcd [ 1334.888922][ T5866] Bluetooth: hci5: link tx timeout [ 1334.894286][ T5866] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 1334.906743][ T3818] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1334.930280][ T3818] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1334.940855][ T3818] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1334.950832][ T3818] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1334.960666][ T3818] usb 10-1: Product: syz [ 1334.964930][ T3818] usb 10-1: Manufacturer: syz [ 1334.970187][ T5866] Bluetooth: hci5: command 0x0406 tx timeout [ 1334.979867][ T3818] usb 10-1: SerialNumber: syz [ 1334.987587][ T3818] usb 10-1: config 0 descriptor?? [ 1335.007480][ T3818] usb 10-1: selecting invalid altsetting 0 [ 1335.266027][ T984] gspca_vc032x: reg_w err -110 [ 1335.295920][ T8874] usb 10-1: USB disconnect, device number 126 [ 1335.304821][ T984] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 1335.548165][ T984] usb 1-1: USB disconnect, device number 65 [ 1335.705697][T21899] Bluetooth: hci1: Frame reassembly failed (-84) [ 1336.059941][T20540] /dev/rnullb0: Can't open blockdev [ 1336.688767][ T5959] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1336.885457][ T5959] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1336.911531][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.920519][ T5959] usb 2-1: Product: syz [ 1336.931642][ T5959] usb 2-1: Manufacturer: syz [ 1336.936606][ T5959] usb 2-1: SerialNumber: syz [ 1336.958415][ T5959] usb 2-1: config 0 descriptor?? [ 1337.189636][T20559] comedi comedi1: Minor 0 could not be opened [ 1337.220305][ T5959] usb 2-1: USB disconnect, device number 106 [ 1337.863073][ T5175] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1337.889038][T22961] Bluetooth: hci7: Frame reassembly failed (-84) [ 1337.896311][T20626] /dev/rnullb0: Can't open blockdev [ 1339.504408][T20697] 9pnet_fd: Insufficient options for proto=fd [ 1339.512129][T20697] /dev/rnullb0: Can't open blockdev [ 1339.851697][ T5935] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1339.942306][T20711] /dev/rnullb0: Can't open blockdev [ 1340.087098][ T5175] Bluetooth: hci7: command 0x1003 tx timeout [ 1340.118247][ T5866] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 1340.575744][T20732] netlink: 160 bytes leftover after parsing attributes in process `syz.7.7765'. [ 1340.615776][ T5935] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1340.625004][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1340.633870][ T5935] usb 1-1: Product: syz [ 1340.638050][ T5935] usb 1-1: Manufacturer: syz [ 1340.642748][ T5935] usb 1-1: SerialNumber: syz [ 1340.650087][ T5935] usb 1-1: config 0 descriptor?? [ 1340.655119][T20734] 9pnet_fd: Insufficient options for proto=fd [ 1340.668962][T20734] /dev/rnullb0: Can't open blockdev [ 1340.864543][T20744] /dev/rnullb0: Can't open blockdev [ 1340.910262][T20704] comedi comedi1: Minor 0 could not be opened [ 1340.979566][ T5959] usb 1-1: USB disconnect, device number 67 [ 1341.447636][ T984] usb 2-1: new low-speed USB device number 107 using dummy_hcd [ 1341.497693][ T2153] usb 10-1: new high-speed USB device number 127 using dummy_hcd [ 1341.630123][ T984] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1341.639755][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.652155][ T984] usb 2-1: config 0 descriptor?? [ 1341.661938][ T2153] usb 10-1: device descriptor read/64, error -71 [ 1341.839816][ T3818] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1341.926548][ T2153] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1342.013188][ T3818] usb 1-1: Using ep0 maxpacket: 8 [ 1342.029532][ T3818] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1342.056511][ T3818] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1342.075166][ T2153] usb 10-1: device descriptor read/64, error -71 [ 1342.085934][ T3818] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.114526][ T3818] usb 1-1: config 0 descriptor?? [ 1342.133695][ T3818] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1342.179723][T20798] input: syz1 as /devices/virtual/input/input105 [ 1342.192779][ T2153] usb usb10-port1: attempt power cycle [ 1342.239046][T20798] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1342.258653][T20798] /dev/rnullb0: Can't open blockdev [ 1342.448018][T20828] 9pnet_fd: Insufficient options for proto=fd [ 1342.475995][T20828] /dev/rnullb0: Can't open blockdev [ 1342.556381][ T2153] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1342.591304][ T2153] usb 10-1: device descriptor read/8, error -71 [ 1342.752570][T20758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.779197][T20758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.787702][ T3818] gspca_vc032x: reg_r err -32 [ 1342.794651][ T3818] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 1342.867367][ T2153] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1342.898836][ T2153] usb 10-1: device descriptor read/8, error -71 [ 1343.026723][ T2153] usb usb10-port1: unable to enumerate USB device [ 1343.251733][T20758] NILFS (nullb0): couldn't find nilfs on the device [ 1343.265434][ T984] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1343.278597][ T984] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1343.290633][ T984] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1343.315774][ T984] usb 2-1: USB disconnect, device number 107 [ 1344.095522][ T2153] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 1344.260245][ T2153] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1344.274713][ T2153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.283073][ T2153] usb 2-1: Product: syz [ 1344.287245][ T2153] usb 2-1: Manufacturer: syz [ 1344.292596][ T2153] usb 2-1: SerialNumber: syz [ 1344.301942][ T2153] usb 2-1: config 0 descriptor?? [ 1344.530168][T20871] comedi comedi1: Minor 0 could not be opened [ 1344.562484][ T984] usb 2-1: USB disconnect, device number 108 [ 1344.848838][ T2153] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1345.014881][ T5935] usb 1-1: USB disconnect, device number 68 [ 1345.022631][ T2153] usb 10-1: Using ep0 maxpacket: 32 [ 1345.041573][ T2153] usb 10-1: config 0 has an invalid interface number: 246 but max is 0 [ 1345.056698][ T2153] usb 10-1: config 0 has no interface number 0 [ 1345.075815][ T2153] usb 10-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=1e.94 [ 1345.087696][ T2153] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.096487][ T2153] usb 10-1: Product: syz [ 1345.102201][ T2153] usb 10-1: Manufacturer: syz [ 1345.107028][ T2153] usb 10-1: SerialNumber: syz [ 1345.113948][T20908] 9pnet_fd: Insufficient options for proto=fd [ 1345.122423][ T2153] usb 10-1: config 0 descriptor?? [ 1345.136077][ T2153] as10x_usb: device has been detected [ 1345.142788][ T2153] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e)) [ 1345.152720][T20908] Mount JFS Failure: -22 [ 1345.187411][ T2153] usb 10-1: DVB: registering adapter 2 frontend 0 (PCTV Systems picoStick (74e))... [ 1345.276491][ T2153] as10x_usb: error during firmware upload part1 [ 1345.307017][ T2153] Registered device PCTV Systems picoStick (74e) [ 1345.590716][ T2153] usb 10-1: USB disconnect, device number 5 [ 1345.646511][T30576] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 1345.670241][ T2153] Unregistered device PCTV Systems picoStick (74e) [ 1345.684701][ T2153] as10x_usb: device has been disconnected [ 1345.827509][T30576] usb 2-1: Using ep0 maxpacket: 8 [ 1345.850134][T30576] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1345.860336][T30576] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1345.883898][T30576] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1345.902182][T30576] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.910919][T30576] usb 2-1: Product: syz [ 1345.918840][T30576] usb 2-1: Manufacturer: syz [ 1345.923505][T30576] usb 2-1: SerialNumber: syz [ 1346.471135][T20965] 9pnet_fd: Insufficient options for proto=fd [ 1346.492874][T20965] /dev/rnullb0: Can't open blockdev [ 1346.682570][ T2153] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1346.853721][ T25] block nbd1: Possible stuck request ffff8880253f7000: control (read@0,1024B). Runtime 90 seconds [ 1346.864612][ T25] block nbd1: Possible stuck request ffff8880253f71c0: control (read@1024,1024B). Runtime 90 seconds [ 1346.875605][ T25] block nbd1: Possible stuck request ffff8880253f7380: control (read@2048,1024B). Runtime 90 seconds [ 1346.888026][ T25] block nbd1: Possible stuck request ffff8880253f7540: control (read@3072,1024B). Runtime 90 seconds [ 1346.903068][ T2153] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1346.912211][ T2153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1346.920410][ T2153] usb 1-1: Product: syz [ 1346.924740][ T2153] usb 1-1: Manufacturer: syz [ 1346.929697][ T2153] usb 1-1: SerialNumber: syz [ 1346.950851][ T2153] usb 1-1: config 0 descriptor?? [ 1346.972916][T30576] usb 2-1: skipping empty audio interface (v1) [ 1347.007909][T20972] can: request_module (can-proto-4) failed. [ 1347.079975][T30576] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1347.113723][T30576] usb 2-1: USB disconnect, device number 109 [ 1347.147690][T16433] udevd[16433]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1347.181262][T20958] comedi comedi1: Minor 0 could not be opened [ 1347.218737][ T8874] usb 1-1: USB disconnect, device number 69 [ 1347.250372][T21000] /dev/nullb0: Can't open blockdev [ 1347.570342][ T2153] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1347.732191][ T2153] usb 10-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 1347.743527][ T2153] usb 10-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1347.753623][ T2153] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1347.760327][ T2153] usb 10-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 1347.769736][ T2153] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1347.782810][ T2153] usb 10-1: config 0 descriptor?? [ 1347.837219][ T8874] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 1348.017238][ T8874] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1348.029831][ T8874] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.040127][ T8874] usb 2-1: config 220 has no interface number 2 [ 1348.062073][ T8874] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1348.083124][ T8874] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1348.089950][ T8874] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1348.104376][ T8874] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1348.127815][ T8874] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1348.137680][ T8874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.145702][ T8874] usb 2-1: Product: syz [ 1348.153212][ T8874] usb 2-1: Manufacturer: syz [ 1348.157900][ T8874] usb 2-1: SerialNumber: syz [ 1348.233652][ T2153] pantherlord 0003:0810:0002.0036: item fetching failed at offset 5/7 [ 1348.259226][ T2153] pantherlord 0003:0810:0002.0036: parse failed [ 1348.271164][ T2153] pantherlord 0003:0810:0002.0036: probe with driver pantherlord failed with error -22 [ 1348.327686][T21027] 9pnet_fd: Insufficient options for proto=fd [ 1348.336887][T21027] Mount JFS Failure: -22 [ 1348.389840][ T8874] usb 2-1: selecting invalid altsetting 0 [ 1348.417069][ T8874] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1348.423448][ T8874] usb 2-1: No valid video chain found. [ 1348.444029][ T8874] usb 2-1: selecting invalid altsetting 0 [ 1348.463459][ T8874] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1348.477460][ T8874] usb 2-1: USB disconnect, device number 110 [ 1348.558011][T21044] 9pnet_fd: Insufficient options for proto=fd [ 1348.566600][T21044] Mount JFS Failure: -22 [ 1348.658514][ T30] audit: type=1800 audit(6043515793.537:1691): pid=21046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7807" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1348.774241][ T8874] usb 10-1: USB disconnect, device number 6 [ 1349.022438][T21060] ./cgroup: Can't lookup blockdev [ 1349.323473][ T24] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 1349.362637][T21069] syzkaller1: entered promiscuous mode [ 1349.368524][T21069] syzkaller1: entered allmulticast mode [ 1349.440230][T21076] ./cgroup: Can't lookup blockdev [ 1349.503624][ T24] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1349.516940][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.525362][ T24] usb 2-1: Product: syz [ 1349.531247][ T24] usb 2-1: Manufacturer: syz [ 1349.542759][ T24] usb 2-1: SerialNumber: syz [ 1349.551507][ T24] usb 2-1: config 0 descriptor?? [ 1349.621399][T21084] /dev/rnullb0: Can't open blockdev [ 1349.781785][T21062] comedi comedi1: Minor 0 could not be opened [ 1349.794769][ T24] usb 2-1: USB disconnect, device number 111 [ 1350.713287][ T5935] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1350.884192][ T3818] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 1350.893327][ T5935] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1350.905971][ T5935] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1350.915908][ T5935] usb 10-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1350.925508][ T5935] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.936874][ T5935] usb 10-1: config 0 descriptor?? [ 1351.076622][ T3818] usb 2-1: Using ep0 maxpacket: 32 [ 1351.083942][ T3818] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1351.095210][ T3818] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1351.104995][ T3818] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1351.118468][ T3818] usb 2-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice= 0.00 [ 1351.128432][ T3818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1351.139607][ T3818] usb 2-1: config 0 descriptor?? [ 1351.215454][ T5954] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1351.374735][ T3818] usb 2-1: string descriptor 0 read error: -71 [ 1351.380495][ T5954] usb 1-1: Using ep0 maxpacket: 8 [ 1351.402531][ T5935] greenasia 0003:0E8F:0012.0037: unbalanced collection at end of report description [ 1351.411116][ T5954] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1351.412475][ T3818] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input106 [ 1351.426775][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.432435][ T5935] greenasia 0003:0E8F:0012.0037: parse failed [ 1351.448666][ T5954] usb 1-1: Product: syz [ 1351.453740][ T5954] usb 1-1: Manufacturer: syz [ 1351.454112][ T5935] greenasia 0003:0E8F:0012.0037: probe with driver greenasia failed with error -22 [ 1351.470493][ T5954] usb 1-1: SerialNumber: syz [ 1351.480628][ T5210] bcm5974 2-1:0.0: could not read from device [ 1351.483769][ T5954] usb 1-1: config 0 descriptor?? [ 1351.507612][ T3818] usb 2-1: USB disconnect, device number 112 [ 1351.538901][ T5210] bcm5974 2-1:0.0: could not read from device [ 1351.561722][T16435] bcm5974 2-1:0.0: could not read from device [ 1351.587143][T16435] udevd[16435]: Error opening device "/dev/input/event4": No such file or directory [ 1351.603314][T16435] udevd[16435]: Unable to EVIOCGABS device "/dev/input/event4" [ 1351.621023][T16435] udevd[16435]: Unable to EVIOCGABS device "/dev/input/event4" [ 1351.621208][ T5959] usb 10-1: USB disconnect, device number 7 [ 1351.629580][T16435] udevd[16435]: Unable to EVIOCGABS device "/dev/input/event4" [ 1351.629671][T16435] udevd[16435]: Unable to EVIOCGABS device "/dev/input/event4" [ 1351.721975][ T5954] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1351.737874][ T5954] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1351.754305][ T5954] usb 1-1: USB disconnect, device number 70 [ 1352.252674][ T5954] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 1352.294181][T21202] 9pnet_fd: Insufficient options for proto=fd [ 1352.302498][T21202] /dev/rnullb0: Can't open blockdev [ 1352.391018][T21204] tipc: Started in network mode [ 1352.401063][T21204] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 1352.417361][T21204] tipc: Enabled bearer , priority 10 [ 1352.428225][ T5954] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1352.444225][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.478100][ T5954] usb 2-1: Product: syz [ 1352.482625][ T5954] usb 2-1: Manufacturer: syz [ 1352.487253][ T5954] usb 2-1: SerialNumber: syz [ 1352.511510][ T5954] usb 2-1: config 0 descriptor?? [ 1352.550477][T21213] /dev/rnullb0: Can't open blockdev [ 1352.576216][T21213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1352.710005][T21224] /dev/rnullb0: Can't open blockdev [ 1352.723667][T21224] /dev/nullb0: Can't open blockdev [ 1352.746352][T21193] comedi comedi1: Minor 0 could not be opened [ 1352.753844][T21224] netlink: 92 bytes leftover after parsing attributes in process `syz.9.7841'. [ 1352.810895][T21227] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7841'. [ 1352.829227][T21227] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1352.860814][T21227] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1352.886019][ T3818] usb 2-1: USB disconnect, device number 113 [ 1353.215474][T21249] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1353.239612][T21249] netlink: 'syz.9.7846': attribute type 4 has an invalid length. [ 1353.409334][T21256] 9pnet_fd: Insufficient options for proto=fd [ 1353.417102][T21256] Mount JFS Failure: -22 [ 1353.471182][ T3818] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1353.482093][ T5954] tipc: Node number set to 10136234 [ 1353.654017][ T3818] usb 1-1: Using ep0 maxpacket: 16 [ 1353.661987][ T3818] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 1353.673899][ T3818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 1353.705222][ T3818] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1353.715999][ T3818] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 188 [ 1353.723752][T21266] batadv_slave_1: entered promiscuous mode [ 1353.729546][ T3818] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1353.741150][ T3818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.750419][ T3818] usb 1-1: Product: syz [ 1353.754709][ T3818] usb 1-1: Manufacturer: syz [ 1353.759375][ T3818] usb 1-1: SerialNumber: syz [ 1353.772077][ T3818] usb 1-1: config 0 descriptor?? [ 1353.780727][T21250] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1353.788709][T21250] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1353.794355][T21265] batadv_slave_1: left promiscuous mode [ 1353.853556][ T3818] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 1353.853686][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 1353.853821][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 1353.976058][ T30] audit: type=1800 audit(6043515798.523:1692): pid=21278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.7852" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1354.034305][ T3818] usb 1-1: USB disconnect, device number 71 [ 1354.052329][ T3818] mcba_usb 1-1:0.0 can0: device disconnected [ 1354.094285][T21284] 9pnet_fd: Insufficient options for proto=fd [ 1354.108245][T21284] /dev/rnullb0: Can't open blockdev [ 1354.270272][T21299] @: renamed from vlan0 (while UP) [ 1354.670830][T21315] 9pnet_fd: Insufficient options for proto=fd [ 1354.691921][T21315] /dev/rnullb0: Can't open blockdev [ 1354.774905][T21320] /dev/rnullb0: Can't open blockdev [ 1354.936664][T21334] /dev/rnullb0: Can't open blockdev [ 1355.044823][ T5866] block nbd2: Receive control failed (result -104) [ 1355.417019][ T5954] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1355.585944][ T5954] usb 10-1: Using ep0 maxpacket: 16 [ 1355.594088][ T5954] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1355.606785][ T5954] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1355.616373][ T5954] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.625450][ T5954] usb 10-1: Product: syz [ 1355.629723][ T5954] usb 10-1: Manufacturer: syz [ 1355.636922][ T5954] usb 10-1: SerialNumber: syz [ 1355.645112][ T5954] usb 10-1: config 0 descriptor?? [ 1355.667174][ T5954] dm9601 10-1:0.0: probe with driver dm9601 failed with error -22 [ 1355.681833][ T5954] sr9700 10-1:0.0: probe with driver sr9700 failed with error -22 [ 1355.731599][T21369] /dev/rnullb0: Can't open blockdev [ 1355.782145][T21371] 9pnet_fd: Insufficient options for proto=fd [ 1355.871598][T21345] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1355.879494][T21345] /dev/rnullb0: Can't open blockdev [ 1355.885718][ T3818] usb 10-1: USB disconnect, device number 8 [ 1357.395065][ T5959] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 1357.589826][ T5959] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1357.611216][ T5959] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1357.668826][ T5959] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1357.679080][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1357.699437][ T5959] usb 2-1: config 0 descriptor?? [ 1357.803084][T21419] 9pnet_fd: Insufficient options for proto=fd [ 1357.811223][T21419] Mount JFS Failure: -22 [ 1358.033282][ T5959] usb 2-1: string descriptor 0 read error: -71 [ 1358.049880][ T5959] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1358.081546][ T5959] usb 2-1: USB disconnect, device number 114 [ 1358.248209][T21444] netlink: 'syz.7.7884': attribute type 11 has an invalid length. [ 1358.281598][T21444] /dev/rnullb0: Can't open blockdev [ 1358.483399][T21446] netlink: 'syz.7.7885': attribute type 29 has an invalid length. [ 1358.547956][T21447] netlink: 'syz.7.7885': attribute type 29 has an invalid length. [ 1358.564280][T21447] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7885'. [ 1358.580350][T21446] /dev/rnullb0: Can't open blockdev [ 1358.816697][ T5959] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1358.854246][T21459] 9pnet_fd: Insufficient options for proto=fd [ 1358.869330][T21459] /dev/rnullb0: Can't open blockdev [ 1358.876610][T21456] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7887'. [ 1358.972537][T21461] 9pnet_fd: Insufficient options for proto=fd [ 1358.986462][T21461] /dev/rnullb0: Can't open blockdev [ 1358.999243][ T5959] usb 10-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1359.014417][ T5959] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1359.039121][ T5959] usb 10-1: Product: syz [ 1359.133715][ T5959] usb 10-1: Manufacturer: syz [ 1359.141890][ T5959] usb 10-1: SerialNumber: syz [ 1359.164547][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1359.172016][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1359.180821][ T5959] usb 10-1: config 0 descriptor?? [ 1359.423006][T21450] comedi comedi1: Minor 0 could not be opened [ 1359.445781][ T5959] usb 10-1: USB disconnect, device number 9 [ 1359.537277][T21481] /dev/rnullb0: Can't open blockdev [ 1359.920618][T21497] 9pnet_fd: Insufficient options for proto=fd [ 1359.933643][T21497] Mount JFS Failure: -22 [ 1359.956964][T21499] 9pnet_fd: Insufficient options for proto=fd [ 1359.975055][T21499] Mount JFS Failure: -22 [ 1359.997707][T21499] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7898'. [ 1360.044852][T21499] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7898'. [ 1360.450256][T21513] /dev/rnullb0: Can't open blockdev [ 1360.932018][T21524] 9pnet_fd: Insufficient options for proto=fd [ 1360.962878][T21524] /dev/rnullb0: Can't open blockdev [ 1361.087907][T21530] C: renamed from team_slave_0 (while UP) [ 1361.098623][T21530] netlink: 'syz.7.7909': attribute type 2 has an invalid length. [ 1361.107111][T21530] netlink: 128 bytes leftover after parsing attributes in process `syz.7.7909'. [ 1361.123915][T21530] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1361.159552][T21530] /dev/rnullb0: Can't open blockdev [ 1361.179313][ T5959] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1361.344751][ T5959] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1361.361858][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.382754][ T5959] usb 1-1: Product: syz [ 1361.387020][ T5959] usb 1-1: Manufacturer: syz [ 1361.391615][ T5959] usb 1-1: SerialNumber: syz [ 1361.426923][ T5959] usb 1-1: config 0 descriptor?? [ 1361.660758][T21544] /dev/rnullb0: Can't open blockdev [ 1361.673230][T21525] comedi comedi1: Minor 0 could not be opened [ 1361.693478][ T5959] usb 1-1: USB disconnect, device number 72 [ 1362.724242][T21576] 9pnet_fd: Insufficient options for proto=fd [ 1362.767851][T21576] /dev/rnullb0: Can't open blockdev [ 1363.060751][ T5959] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1363.243182][ T5959] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.279001][ T8874] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1363.287831][ T5959] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.331541][ T5959] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1363.340956][ T5959] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1363.350508][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.365742][ T5959] usb 1-1: config 0 descriptor?? [ 1363.457357][ T8874] usb 2-1: Using ep0 maxpacket: 8 [ 1363.464859][ T8874] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1363.475919][ T8874] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1363.497482][ T8874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.523790][ T8874] usb 2-1: config 0 descriptor?? [ 1363.543252][ T8874] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1363.823720][ T5959] cypress 0003:04B4:07B1.0038: unbalanced collection at end of report description [ 1363.845946][ T5959] cypress 0003:04B4:07B1.0038: parse failed [ 1363.858488][ T5959] cypress 0003:04B4:07B1.0038: probe with driver cypress failed with error -22 [ 1364.057787][ T5959] usb 1-1: USB disconnect, device number 73 [ 1364.189300][ T8874] gspca_vc032x: reg_r err -32 [ 1364.194992][ T8874] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 1364.436007][T21618] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7925'. [ 1364.446798][T21618] /dev/rnullb0: Can't open blockdev [ 1364.813861][ T2153] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 1364.952836][ T2153] usb 10-1: device descriptor read/64, error -71 [ 1364.963779][ T5935] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1365.139059][ T5935] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1365.155551][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.177319][ T5935] usb 1-1: Product: syz [ 1365.181926][ T5935] usb 1-1: Manufacturer: syz [ 1365.186525][ T5935] usb 1-1: SerialNumber: syz [ 1365.211000][ T2153] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 1365.219904][ T5935] usb 1-1: config 0 descriptor?? [ 1365.369940][ T2153] usb 10-1: device descriptor read/64, error -71 [ 1365.445621][T21627] comedi comedi1: Minor 0 could not be opened [ 1365.456308][ T5935] usb 1-1: USB disconnect, device number 74 [ 1365.489827][ T2153] usb usb10-port1: attempt power cycle [ 1365.861540][ T2153] usb 10-1: new low-speed USB device number 12 using dummy_hcd [ 1365.883708][ T2153] usb 10-1: device descriptor read/8, error -71 [ 1366.139518][ T2153] usb 10-1: new low-speed USB device number 13 using dummy_hcd [ 1366.161732][ T2153] usb 10-1: device descriptor read/8, error -71 [ 1366.279375][ T2153] usb usb10-port1: unable to enumerate USB device [ 1366.440551][ T5959] usb 2-1: USB disconnect, device number 115 [ 1366.779063][T21680] program syz.1.7936 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1367.872160][ T8874] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1368.027887][T21703] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7943'. [ 1368.044941][T21703] /dev/rnullb0: Can't open blockdev [ 1368.067575][ T8874] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1368.089995][ T8874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1368.105086][T21707] /dev/rnullb0: Can't open blockdev [ 1368.112925][T21708] /dev/rnullb0: Can't open blockdev [ 1368.117987][ T8874] usb 1-1: Product: syz [ 1368.122321][ T8874] usb 1-1: Manufacturer: syz [ 1368.139837][ T8874] usb 1-1: SerialNumber: syz [ 1368.157545][ T8874] usb 1-1: config 0 descriptor?? [ 1368.409767][T21687] comedi comedi1: Minor 0 could not be opened [ 1368.449928][ T8874] usb 1-1: USB disconnect, device number 75 [ 1368.481093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1368.490710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 1368.500054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1368.511207][T21718] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7945'. [ 1368.976892][T21744] 9pnet_fd: Insufficient options for proto=fd [ 1369.037217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 1369.188032][T21756] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7952'. [ 1369.224491][T21756] binder: 21754:21756 ioctl c0306201 2000000003c0 returned -14 [ 1369.956202][ T2153] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1369.973760][T21811] netlink: 'syz.0.7963': attribute type 1 has an invalid length. [ 1370.131821][ T2153] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1370.174898][ T2153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.215984][ T2153] usb 2-1: Product: syz [ 1370.245233][ T2153] usb 2-1: Manufacturer: syz [ 1370.249866][ T2153] usb 2-1: SerialNumber: syz [ 1370.288168][ T2153] usb 2-1: config 0 descriptor?? [ 1370.518869][T21791] comedi comedi1: Minor 0 could not be opened [ 1370.602444][ T2153] usb 2-1: USB disconnect, device number 116 [ 1370.857042][T21835] gfs2: not a GFS2 filesystem [ 1371.270989][ T5959] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1371.321867][T21847] qnx4: no qnx4 filesystem (no root dir). [ 1371.444055][ T5959] usb 1-1: config 0 has an invalid interface number: 125 but max is 0 [ 1371.452263][ T5959] usb 1-1: config 0 has no interface number 0 [ 1371.484962][ T5959] usb 1-1: config 0 interface 125 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1371.498041][T21849] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1371.505007][T21849] overlayfs: failed to set xattr on upper [ 1371.517559][T21849] overlayfs: ...falling back to redirect_dir=nofollow. [ 1371.534862][ T5959] usb 1-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=1e.98 [ 1371.544149][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1371.557828][T21849] overlayfs: ...falling back to index=off. [ 1371.560018][ T5959] usb 1-1: Product: syz [ 1371.579079][ T5959] usb 1-1: Manufacturer: syz [ 1371.588695][T21849] overlayfs: ...falling back to uuid=null. [ 1371.589644][ T5959] usb 1-1: SerialNumber: syz [ 1371.606375][T21849] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 1371.616865][ T5959] usb 1-1: config 0 descriptor?? [ 1371.633791][T21841] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1371.860690][T21841] Invalid ELF header len 16 [ 1371.867381][T21841] qnx4: no qnx4 filesystem (no root dir). [ 1371.882660][ T5959] usb-storage 1-1:0.125: USB Mass Storage device detected [ 1371.930594][ T5959] usb-storage 1-1:0.125: Quirks match for vid 07cf pid 1001: a [ 1371.956815][T21865] Mount JFS Failure: -22 [ 1371.999231][ T5959] usb 1-1: USB disconnect, device number 76 [ 1372.168994][ T5935] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1372.700007][T21910] FAT-fs (rnullb0): bogus number of reserved sectors [ 1372.734695][T21910] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1372.790016][T21915] dvmrp0: entered allmulticast mode [ 1372.838257][T21915] qnx4: no qnx4 filesystem (no root dir). [ 1373.001284][T21928] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7980'. [ 1373.059212][T21931] FAT-fs (rnullb0): bogus number of reserved sectors [ 1373.085856][T21931] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1373.213768][T21933] Malformed UNC in devname [ 1373.213768][T21933] [ 1373.220782][T21933] CIFS: VFS: Malformed UNC in devname [ 1373.440388][T21947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1373.513234][T21947] Mount JFS Failure: -22 [ 1373.767073][T21955] /dev/rnullb0: Can't open blockdev [ 1374.075344][T21966] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7991'. [ 1374.235884][T21976] /dev/rnullb0: Can't open blockdev [ 1374.855235][T22014] 9pnet_fd: Insufficient options for proto=fd [ 1374.873198][T22014] /dev/rnullb0: Can't open blockdev [ 1375.104664][T22020] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1375.131838][T22020] VFS: Can't find a romfs filesystem on dev rnullb0. [ 1375.131838][T22020] [ 1375.730660][T22040] fuse: Unknown parameter '0x0000000000000004' [ 1377.044293][ T8874] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1377.225738][ T8874] usb 1-1: Using ep0 maxpacket: 8 [ 1377.248846][ T8874] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1377.287146][ T8874] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1377.316582][ T8874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.352979][ T8874] usb 1-1: config 0 descriptor?? [ 1377.381955][ T8874] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1377.391585][T22094] /dev/rnullb0: Can't open blockdev [ 1377.608020][ T8874] gspca_vc032x: reg_r err -32 [ 1377.617033][ T8874] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 1377.790766][T22106] /dev/rnullb0: Can't open blockdev [ 1377.948549][T22119] /dev/rnullb0: Can't open blockdev [ 1377.976735][ T30] audit: type=1326 audit(6043515820.973:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22113 comm="syz.1.8020" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f083ef8e929 code=0x0 [ 1378.047065][T22124] /dev/rnullb0: Can't open blockdev [ 1378.243521][ T5866] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1378.484517][T22150] /dev/rnullb0: Can't open blockdev [ 1378.488498][ T5935] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1378.637817][ T5935] usb 10-1: device descriptor read/64, error -71 [ 1378.848981][ T5866] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 1378.904108][ T5935] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1378.944062][T22175] /dev/rnullb0: Can't open blockdev [ 1379.002369][ T25] block nbd1: Possible stuck request ffff8880253f7000: control (read@0,1024B). Runtime 120 seconds [ 1379.013521][ T25] block nbd1: Possible stuck request ffff8880253f71c0: control (read@1024,1024B). Runtime 120 seconds [ 1379.024967][ T25] block nbd1: Possible stuck request ffff8880253f7380: control (read@2048,1024B). Runtime 120 seconds [ 1379.037244][ T25] block nbd1: Possible stuck request ffff8880253f7540: control (read@3072,1024B). Runtime 120 seconds [ 1379.049091][ T5935] usb 10-1: device descriptor read/64, error -71 [ 1379.059082][T22180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.079861][T22180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.095150][T22188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.104842][T22188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.114024][T22188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.123047][T22188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.131862][T22188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.141228][T22188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.152026][T22188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.160858][T22188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.173242][ T5935] usb usb10-port1: attempt power cycle [ 1379.192156][T22188] /dev/rnullb0: Can't open blockdev [ 1379.246187][ T2153] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 1379.413932][ T2153] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1379.424332][ T2153] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1379.434026][ T2153] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 1379.443565][ T2153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.451915][ T2153] usb 2-1: Product: syz [ 1379.456232][ T2153] usb 2-1: Manufacturer: syz [ 1379.460908][ T2153] usb 2-1: SerialNumber: syz [ 1379.467744][ T2153] usb 2-1: config 0 descriptor?? [ 1379.480567][ T2153] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1379.491801][ T2153] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1379.502316][ T2153] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1379.511311][ T2153] usb 2-1: media controller created [ 1379.536701][ T2153] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1379.556246][ T5935] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1379.589020][ T5935] usb 10-1: device descriptor read/8, error -71 [ 1379.604600][ T2153] DVB: Unable to find symbol tda10046_attach() [ 1379.611318][ T2153] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1379.620052][ T2153] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1379.859395][ T5935] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1379.888422][ T5935] usb 10-1: device descriptor read/8, error -71 [ 1380.005707][ T5935] usb usb10-port1: unable to enumerate USB device [ 1380.698228][ T8874] usb 1-1: USB disconnect, device number 77 [ 1381.077465][T22224] binder: 22221:22224 ioctl c018620c 200000000380 returned -22 [ 1381.678825][T22236] /dev/rnullb0: Can't open blockdev [ 1381.726345][ C1] hrtimer: interrupt took 65630 ns [ 1381.833139][T22242] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1381.840641][T22242] /dev/rnullb0: Can't open blockdev [ 1382.253773][ T2153] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1382.297772][ T2153] usb 2-1: USB disconnect, device number 117 [ 1382.469641][T22272] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 1382.525902][T22275] block nbd9: not configured, cannot reconfigure [ 1382.804289][T22281] netlink: 176 bytes leftover after parsing attributes in process `syz.9.8053'. [ 1382.830022][T22283] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8054'. [ 1382.839883][T22283] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1382.901618][T22283] vxfs: WRONG superblock magic 00000000 at 1 [ 1382.922851][T22283] vxfs: WRONG superblock magic 00000000 at 8 [ 1382.930143][T22283] vxfs: can't find superblock. [ 1384.775171][T22328] 9pnet_fd: Insufficient options for proto=fd [ 1384.797947][T22328] /dev/rnullb0: Can't open blockdev [ 1385.008552][ T24] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1385.019330][ T8874] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1385.106271][ T5954] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 1385.158344][ T8874] usb 10-1: device descriptor read/64, error -71 [ 1385.185595][ T24] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1385.196638][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.204976][ T24] usb 1-1: Product: syz [ 1385.209370][ T24] usb 1-1: Manufacturer: syz [ 1385.215443][ T24] usb 1-1: SerialNumber: syz [ 1385.227404][ T24] usb 1-1: config 0 descriptor?? [ 1385.269003][ T5954] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1385.279315][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1385.290877][ T5954] usb 2-1: Product: syz [ 1385.295173][ T5954] usb 2-1: Manufacturer: syz [ 1385.300559][ T5954] usb 2-1: SerialNumber: syz [ 1385.307152][ T5954] usb 2-1: config 0 descriptor?? [ 1385.336216][ T5866] Bluetooth: hci1: urb ffff8880678b0f00 submission failed (2) [ 1385.414846][ T8874] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1385.455662][T22321] comedi comedi1: Minor 0 could not be opened [ 1385.467644][ T24] usb 1-1: USB disconnect, device number 78 [ 1385.534359][T22334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8066'. [ 1385.546777][T22334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1385.558949][T22334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1385.567520][ T8874] usb 10-1: device descriptor read/64, error -71 [ 1385.605290][ T5954] usb 2-1: USB disconnect, device number 118 [ 1385.694859][ T8874] usb usb10-port1: attempt power cycle [ 1385.934725][ T5866] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1386.067116][ T8874] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1386.120647][ T8874] usb 10-1: device descriptor read/8, error -71 [ 1386.376871][ T8874] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1386.420229][ T8874] usb 10-1: device descriptor read/8, error -71 [ 1386.539606][ T8874] usb usb10-port1: unable to enumerate USB device [ 1386.577155][T22405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1386.595163][T22405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1386.954508][ T8874] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 1387.093478][ T8874] usb 2-1: device descriptor read/64, error -71 [ 1387.159777][ T24] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1387.337779][ T5866] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1387.348450][ T24] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1387.359266][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.361330][ T8874] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 1387.369839][ T24] usb 1-1: Product: syz [ 1387.379736][ T24] usb 1-1: Manufacturer: syz [ 1387.384426][ T24] usb 1-1: SerialNumber: syz [ 1387.393106][ T24] usb 1-1: config 0 descriptor?? [ 1387.531977][ T8874] usb 2-1: device descriptor read/64, error -71 [ 1387.624349][T22414] comedi comedi1: Minor 0 could not be opened [ 1387.641219][ T24] usb 1-1: USB disconnect, device number 79 [ 1387.658699][ T8874] usb usb2-port1: attempt power cycle [ 1387.780815][T22442] /dev/rnullb0: Can't open blockdev [ 1388.048242][ T8874] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 1388.080708][ T8874] usb 2-1: device descriptor read/8, error -71 [ 1388.088847][T22458] trusted_key: encrypted_key: insufficient parameters specified [ 1388.347397][ T8874] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1388.362298][T22473] 9pnet_fd: Insufficient options for proto=fd [ 1388.386519][T22473] /dev/rnullb0: Can't open blockdev [ 1388.409257][ T8874] usb 2-1: device descriptor read/8, error -71 [ 1388.539269][ T8874] usb usb2-port1: unable to enumerate USB device [ 1389.378176][ T30] audit: type=1326 audit(6043515831.627:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22477 comm="syz.9.8095" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff849b8e929 code=0x7fc00000 [ 1389.787256][ T5935] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1389.962357][ T5935] usb 10-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1389.985294][ T5935] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.004223][ T5935] usb 10-1: Product: syz [ 1390.014868][ T5935] usb 10-1: Manufacturer: syz [ 1390.025434][ T5935] usb 10-1: SerialNumber: syz [ 1390.043222][ T5935] usb 10-1: config 0 descriptor?? [ 1390.063365][T22522] 9pnet_fd: Insufficient options for proto=fd [ 1390.089261][T22522] /dev/rnullb0: Can't open blockdev [ 1390.201453][T22532] /dev/rnullb0: Can't open blockdev [ 1390.283657][T22536] tap0: tun_chr_ioctl cmd 1074025677 [ 1390.289255][T22536] tap0: linktype set to 776 [ 1390.297040][T22536] /dev/rnullb0: Can't open blockdev [ 1390.306103][T22503] comedi comedi1: Minor 0 could not be opened [ 1390.330534][ T2153] usb 10-1: USB disconnect, device number 23 [ 1390.385811][ T5935] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1390.578926][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 1390.592075][ T5935] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1390.621350][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.632384][ T5935] usb 1-1: config 0 descriptor?? [ 1390.663614][ T30] audit: type=1326 audit(6043515832.833:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22556 comm="syz.1.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083ef8e929 code=0x7ffc0000 [ 1390.699947][ T30] audit: type=1326 audit(6043515832.843:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22556 comm="syz.1.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083ef8e929 code=0x7ffc0000 [ 1390.709520][T22557] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 1390.734938][ T30] audit: type=1326 audit(6043515832.843:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22556 comm="syz.1.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f083ef8e929 code=0x7ffc0000 [ 1390.767719][ T30] audit: type=1326 audit(6043515832.843:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22556 comm="syz.1.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083ef8e929 code=0x7ffc0000 [ 1390.793425][ T30] audit: type=1326 audit(6043515832.843:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22556 comm="syz.1.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f083ef8e929 code=0x7ffc0000 [ 1390.817586][ T30] audit: type=1326 audit(6043515832.843:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22556 comm="syz.1.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083ef8e929 code=0x7ffc0000 [ 1390.842105][ T30] audit: type=1326 audit(6043515832.871:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22556 comm="syz.1.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083ef8e929 code=0x7ffc0000 [ 1390.868975][ T5935] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1390.870366][T22557] befs: (nullb0): invalid magic header [ 1390.892129][ T30] audit: type=1326 audit(6043515832.871:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22556 comm="syz.1.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f083ef8e929 code=0x7ffc0000 [ 1390.928243][ T5935] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1390.940625][ T5935] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1390.994032][ T5935] usb 1-1: media controller created [ 1390.999477][ T30] audit: type=1326 audit(6043515832.871:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22556 comm="syz.1.8112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083ef8e929 code=0x7ffc0000 [ 1391.079646][T22563] XFS (rnullb0): Invalid superblock magic number [ 1391.111664][ T5935] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1391.327698][ T5935] az6027: usb out operation failed. (-71) [ 1391.345587][ T5935] az6027: usb out operation failed. (-71) [ 1391.357711][ T5935] stb0899_attach: Driver disabled by Kconfig [ 1391.374839][ T5935] az6027: no front-end attached [ 1391.374839][ T5935] [ 1391.384437][ T5935] az6027: usb out operation failed. (-71) [ 1391.390228][ T5935] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1391.423251][T22580] 9pnet_fd: Insufficient options for proto=fd [ 1391.434692][T22580] Mount JFS Failure: -22 [ 1391.439879][ T5935] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input107 [ 1391.487503][ T5935] dvb-usb: schedule remote query interval to 400 msecs. [ 1391.494497][ T5935] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1391.529404][ T5935] usb 1-1: USB disconnect, device number 80 [ 1391.579809][T22587] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 1391.592759][T22587] UDF-fs: Scanning with blocksize 4096 failed [ 1391.667894][ T5935] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1392.085792][ T8874] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1392.293921][ T8874] usb 2-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1392.317065][ T8874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.333850][ T8874] usb 2-1: Product: syz [ 1392.338054][ T8874] usb 2-1: Manufacturer: syz [ 1392.348874][ T8874] usb 2-1: SerialNumber: syz [ 1392.354051][ T5954] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1392.368986][ T8874] usb 2-1: config 0 descriptor?? [ 1392.534708][ T5954] usb 1-1: Using ep0 maxpacket: 16 [ 1392.549695][ T5954] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1392.565289][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1392.575828][ T5954] usb 1-1: Product: syz [ 1392.586554][ T5954] usb 1-1: Manufacturer: syz [ 1392.592083][ T5954] usb 1-1: SerialNumber: syz [ 1392.610662][ T5954] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1392.614499][ T5935] usb 2-1: USB disconnect, device number 123 [ 1392.627664][ T5954] r8152-cfgselector 1-1: config 0 descriptor?? [ 1393.095531][ T5954] r8152-cfgselector 1-1: USB disconnect, device number 81 [ 1393.491179][T22678] hpfs: Bad magic ... probably not HPFS [ 1393.790911][T22689] FAULT_INJECTION: forcing a failure. [ 1393.790911][T22689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1393.804400][T22689] CPU: 1 UID: 0 PID: 22689 Comm: syz.9.8137 Not tainted 6.16.0-rc5-next-20250709-syzkaller #0 PREEMPT(full) [ 1393.804425][T22689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1393.804435][T22689] Call Trace: [ 1393.804443][T22689] [ 1393.804451][T22689] dump_stack_lvl+0x189/0x250 [ 1393.804481][T22689] ? __pfx____ratelimit+0x10/0x10 [ 1393.804503][T22689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1393.804526][T22689] ? __pfx__printk+0x10/0x10 [ 1393.804561][T22689] should_fail_ex+0x414/0x560 [ 1393.804591][T22689] _copy_to_user+0x31/0xb0 [ 1393.804619][T22689] put_itimerspec64+0x168/0x1d0 [ 1393.804642][T22689] ? __pfx_put_itimerspec64+0x10/0x10 [ 1393.804678][T22689] ? _raw_spin_unlock_irq+0x23/0x50 [ 1393.804700][T22689] ? lockdep_hardirqs_on+0x9c/0x150 [ 1393.804725][T22689] __x64_sys_timer_gettime+0x14c/0x1d0 [ 1393.804743][T22689] ? __pfx___x64_sys_timer_gettime+0x10/0x10 [ 1393.804769][T22689] ? do_syscall_64+0xbe/0x3b0 [ 1393.804795][T22689] do_syscall_64+0xfa/0x3b0 [ 1393.804814][T22689] ? lockdep_hardirqs_on+0x9c/0x150 [ 1393.804833][T22689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.804850][T22689] ? clear_bhb_loop+0x60/0xb0 [ 1393.804873][T22689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.804889][T22689] RIP: 0033:0x7ff849b8e929 [ 1393.804907][T22689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1393.804924][T22689] RSP: 002b:00007ff84aa76038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e0 [ 1393.804944][T22689] RAX: ffffffffffffffda RBX: 00007ff849db5fa0 RCX: 00007ff849b8e929 [ 1393.804958][T22689] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000000 [ 1393.804969][T22689] RBP: 00007ff84aa76090 R08: 0000000000000000 R09: 0000000000000000 [ 1393.804981][T22689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1393.804991][T22689] R13: 0000000000000000 R14: 00007ff849db5fa0 R15: 00007ffe4eae6578 [ 1393.805018][T22689] [ 1393.978417][ T5954] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1394.159741][ T5954] usb 1-1: device descriptor read/64, error -71 [ 1394.309587][ T5935] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1394.426859][ T5954] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1394.474952][ T5935] usb 10-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1394.488711][ T5935] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.498223][ T5935] usb 10-1: Product: syz [ 1394.506025][ T5935] usb 10-1: Manufacturer: syz [ 1394.510779][ T5935] usb 10-1: SerialNumber: syz [ 1394.518301][ T5935] usb 10-1: config 0 descriptor?? [ 1394.569923][ T5954] usb 1-1: device descriptor read/64, error -71 [ 1394.697376][ T5954] usb usb1-port1: attempt power cycle [ 1394.755824][ T5935] usb 10-1: USB disconnect, device number 24 [ 1395.079074][ T5954] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1395.101139][ T5954] usb 1-1: device descriptor read/8, error -71 [ 1395.370478][ T5954] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1395.403166][ T5954] usb 1-1: device descriptor read/8, error -71 [ 1395.529723][ T5954] usb usb1-port1: unable to enumerate USB device [ 1395.745916][T22716] /dev/rnullb0: Can't open blockdev [ 1395.797070][T22721] /dev/rnullb0: Can't open blockdev [ 1396.428601][T22734] /dev/rnullb0: Can't open blockdev [ 1396.435337][T22735] /dev/rnullb0: Can't open blockdev [ 1396.746878][ T5954] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1396.929814][ T5954] usb 10-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1396.938965][ T5954] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.952149][ T5954] usb 10-1: Product: syz [ 1396.957969][ T5954] usb 10-1: Manufacturer: syz [ 1396.963509][ T5954] usb 10-1: SerialNumber: syz [ 1396.968675][T22750] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8149'. [ 1396.972548][ T5954] usb 10-1: config 0 descriptor?? [ 1396.995707][T22750] netlink: 372 bytes leftover after parsing attributes in process `syz.0.8149'. [ 1397.224818][ T5954] usb 10-1: USB disconnect, device number 25 [ 1397.343892][T22776] omfs: Invalid superblock (0) [ 1397.655465][ T5935] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1397.826460][ T5935] usb 1-1: Using ep0 maxpacket: 8 [ 1397.833745][ T5935] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.844190][ T5935] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1397.853598][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1397.867216][ T5935] usb 1-1: config 0 descriptor?? [ 1397.878944][ T5935] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1397.957287][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 1397.957304][ T30] audit: type=1800 audit(6043515839.662:1762): pid=22783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.8155" name="bus" dev="overlay" ino=610 res=0 errno=0 [ 1398.132014][T22790] syz.9.8156: attempt to access beyond end of device [ 1398.132014][T22790] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1398.145395][T22790] hpfs: hpfs_map_sector(): read error [ 1398.649695][ T2153] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1398.820727][ T2153] usb 10-1: Using ep0 maxpacket: 8 [ 1398.828082][ T2153] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1398.836396][ T2153] usb 10-1: config 0 has no interface number 0 [ 1398.844887][ T2153] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1398.857009][ T2153] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1398.866288][ T2153] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.879443][ T2153] usb 10-1: config 0 descriptor?? [ 1398.896917][ T2153] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1399.107869][ T2153] usb 10-1: USB disconnect, device number 26 [ 1399.932701][ T5935] gspca_vc032x: reg_w err -110 [ 1399.937578][ T5935] vc032x 1-1:0.0: probe with driver vc032x failed with error -110 [ 1399.956957][ T2153] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1400.126364][ T2153] usb 10-1: Using ep0 maxpacket: 16 [ 1400.140407][ T2153] usb 10-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1400.149092][T22827] /dev/rnullb0: Can't open blockdev [ 1400.165545][ T2153] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.189122][ T2153] usb 10-1: Product: syz [ 1400.194569][ T2153] usb 10-1: Manufacturer: syz [ 1400.197781][ T8874] usb 1-1: USB disconnect, device number 86 [ 1400.207240][ T2153] usb 10-1: SerialNumber: syz [ 1400.240753][ T2153] r8152-cfgselector 10-1: Unknown version 0x0000 [ 1400.247808][ T2153] r8152-cfgselector 10-1: config 0 descriptor?? [ 1400.294446][T22837] /dev/rnullb0: Can't open blockdev [ 1400.350296][T22837] support for cryptoloop has been removed. Use dm-crypt instead. [ 1400.696043][ T8874] r8152-cfgselector 10-1: USB disconnect, device number 27 [ 1400.734364][ T2153] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1400.909894][ T2153] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1400.919626][ T2153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.928289][ T2153] usb 1-1: Product: syz [ 1400.933591][ T2153] usb 1-1: Manufacturer: syz [ 1400.938761][ T2153] usb 1-1: SerialNumber: syz [ 1400.946614][ T2153] usb 1-1: config 0 descriptor?? [ 1401.182775][ T8874] usb 1-1: USB disconnect, device number 87 [ 1401.802361][T22905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1402.413704][T22918] /dev/rnullb0: Can't open blockdev [ 1402.513723][T22923] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8176'. [ 1402.524370][T22923] tmpfs: Bad value for 'mpol' [ 1402.529481][T22923] netlink: 60 bytes leftover after parsing attributes in process `syz.9.8176'. [ 1402.829776][ T5935] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1402.994558][ T5935] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1403.003854][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1403.013548][ T5935] usb 1-1: Product: syz [ 1403.017797][ T5935] usb 1-1: Manufacturer: syz [ 1403.023904][ T5935] usb 1-1: SerialNumber: syz [ 1403.031379][ T5935] usb 1-1: config 0 descriptor?? [ 1403.271131][ T8874] usb 1-1: USB disconnect, device number 88 [ 1403.577196][T22945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1403.594878][T22944] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8181'. [ 1403.606372][T22945] /dev/rnullb0: Can't open blockdev [ 1403.827072][T22960] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8183'. [ 1403.837603][T22960] /dev/rnullb0: Can't open blockdev [ 1403.904420][T22965] /dev/sg0: Can't lookup blockdev [ 1403.970656][T22971] /dev/rnullb0: Can't open blockdev [ 1404.165990][ T5935] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1404.312462][T22988] /dev/rnullb0: Can't open blockdev [ 1404.330802][ T5935] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1404.348202][ T5935] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1404.369871][ T5935] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1404.379637][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1404.400809][ T5935] usb 1-1: SerialNumber: syz [ 1404.476190][T22994] /dev/rnullb0: Can't open blockdev [ 1404.636743][ T5866] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 1404.657084][ T5935] usb 1-1: skipping empty audio interface (v1) [ 1404.684671][ T5935] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1404.696198][ T5935] usb 1-1: USB disconnect, device number 89 [ 1404.711514][ T2153] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1404.735849][T16433] udevd[16433]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1404.882674][ T2153] usb 10-1: Using ep0 maxpacket: 16 [ 1404.889635][ T2153] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1404.904427][ T2153] usb 10-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 1404.913964][ T2153] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.923067][ T2153] usb 10-1: Product: syz [ 1404.927868][ T2153] usb 10-1: Manufacturer: syz [ 1404.932554][ T2153] usb 10-1: SerialNumber: syz [ 1404.941112][ T2153] usb 10-1: config 0 descriptor?? [ 1404.967500][ T2153] peak_usb 10-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1404.975407][ T2153] peak_usb 10-1:0.0: unable to read PCAN-USB serial number (err -22) [ 1405.013652][ T2153] peak_usb 10-1:0.0: probe with driver peak_usb failed with error -22 [ 1405.163696][T22995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.173135][T22995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.186122][T22995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.195916][T22995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.206978][T22995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.217058][T22995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.227609][T22995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.239998][T22995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.252985][T22995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.263940][T22995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.288107][ T5954] usb 10-1: USB disconnect, device number 28 [ 1405.323465][ T2153] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 1405.330890][ T2153] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 1405.350630][ T2153] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 1405.359986][ T2153] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 1405.369854][ T2153] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 1405.387318][ T2153] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1405.450065][T23053] fido_id[23053]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1405.507094][T23058] /dev/rnullb0: Can't open blockdev [ 1405.560578][T23063] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 1405.958318][ T2153] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1406.112191][ T2153] usb 1-1: device descriptor read/64, error -71 [ 1406.379157][ T2153] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1406.518177][ T2153] usb 1-1: device descriptor read/64, error -71 [ 1406.635964][ T2153] usb usb1-port1: attempt power cycle [ 1406.999471][ T2153] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1407.023080][ T2153] usb 1-1: device descriptor read/8, error -71 [ 1407.277066][ T2153] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1407.298917][ T2153] usb 1-1: device descriptor read/8, error -71 [ 1407.421105][ T2153] usb usb1-port1: unable to enumerate USB device [ 1408.151226][ T5866] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 1408.388799][ T5959] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 1408.562539][ T5959] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1408.572537][ T5959] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1408.582801][ T5959] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1408.596099][ T5959] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1408.606507][ T5959] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.618889][ T5959] usbtmc 10-1:16.0: bulk endpoints not found [ 1408.841382][ T5959] usb 10-1: USB disconnect, device number 29 [ 1408.934305][ T5866] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1408.945359][ T5866] Bluetooth: hci5: Injecting HCI hardware error event [ 1408.954975][ T5175] Bluetooth: hci5: hardware error 0x00 [ 1409.089174][T23113] tmpfs: Bad value for 'mpol' [ 1409.094699][T23113] /dev/rnullb0: Can't open blockdev [ 1409.199917][T23117] /dev/rnullb0: Can't open blockdev [ 1410.019659][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1410.035471][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1410.043867][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1410.053918][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1410.066266][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1410.544472][T23121] chnl_net:caif_netlink_parms(): no params data found [ 1410.711224][T23121] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.719037][T23121] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.727455][T23121] bridge_slave_0: entered allmulticast mode [ 1410.742679][T23121] bridge_slave_0: entered promiscuous mode [ 1410.752415][T23121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.759776][T23121] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.767563][T23121] bridge_slave_1: entered allmulticast mode [ 1410.776895][T23121] bridge_slave_1: entered promiscuous mode [ 1410.832565][T23121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.855409][T23121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.970543][T23121] team0: Port device team_slave_0 added [ 1410.990320][T23121] team0: Port device team_slave_1 added [ 1411.096870][T23121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1411.104017][T23121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1411.141298][T23121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.162008][T23121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1411.181173][ T5175] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1411.188416][ T25] block nbd1: Possible stuck request ffff8880253f7000: control (read@0,1024B). Runtime 150 seconds [ 1411.194021][T23121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1411.199312][ T25] block nbd1: Possible stuck request ffff8880253f71c0: control (read@1024,1024B). Runtime 150 seconds [ 1411.237154][ T25] block nbd1: Possible stuck request ffff8880253f7380: control (read@2048,1024B). Runtime 150 seconds [ 1411.248253][ T25] block nbd1: Possible stuck request ffff8880253f7540: control (read@3072,1024B). Runtime 150 seconds [ 1411.273473][T23121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1411.413071][T23121] hsr_slave_0: entered promiscuous mode [ 1411.441528][T23121] hsr_slave_1: entered promiscuous mode [ 1411.458963][T23121] debugfs: 'hsr0' already exists in 'hsr' [ 1411.475272][T23121] Cannot create hsr debugfs directory [ 1411.527928][T23388] netlink: 45 bytes leftover after parsing attributes in process `syz.7.8207'. [ 1411.978639][T23121] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.993446][T23464] /dev/rnullb0: Can't open blockdev [ 1412.050651][T23468] overlayfs: conflicting options: userxattr,metacopy=on [ 1412.065474][T23468] /dev/rnullb0: Can't open blockdev [ 1412.090539][T23121] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.174044][T23121] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.256295][T23121] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.270747][ T5175] Bluetooth: hci1: command tx timeout [ 1412.387150][ T5954] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1412.524151][T23121] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1412.551112][T23121] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1412.559291][ T5954] usb 10-1: Using ep0 maxpacket: 8 [ 1412.566317][ T5954] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.579981][ T5954] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1412.589462][T23121] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1412.601009][ T5954] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1412.611709][T23121] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1412.622396][ T5954] usb 10-1: config 0 descriptor?? [ 1412.639932][ T5954] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1412.770143][T23121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1412.800447][T23121] 8021q: adding VLAN 0 to HW filter on device team0 [ 1412.816200][T21891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.823383][T21891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1412.840391][ T7230] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.847581][ T7230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1413.132513][T23121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1413.147826][ T5959] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1413.332465][ T5959] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1413.354754][ T5959] usb 1-1: config index 0 descriptor too short (expected 3876, got 36) [ 1413.370682][ T5959] usb 1-1: config 63 has too many interfaces: 110, using maximum allowed: 32 [ 1413.390695][ T5959] usb 1-1: config 63 has an invalid descriptor of length 59, skipping remainder of the config [ 1413.408111][ T5959] usb 1-1: config 63 has 0 interfaces, different from the descriptor's value: 110 [ 1413.421683][ T5959] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1413.440684][ T5959] usb 1-1: New USB device strings: Mfr=11, Product=2, SerialNumber=3 [ 1413.443873][T23121] veth0_vlan: entered promiscuous mode [ 1413.455279][ T5959] usb 1-1: Product: syz [ 1413.461102][ T5959] usb 1-1: Manufacturer: syz [ 1413.465798][ T5959] usb 1-1: SerialNumber: syz [ 1413.486203][T23121] veth1_vlan: entered promiscuous mode [ 1413.529108][T23121] veth0_macvtap: entered promiscuous mode [ 1413.540364][T23121] veth1_macvtap: entered promiscuous mode [ 1413.569205][T23121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1413.597229][T23121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1413.613006][ T7230] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.623124][ T7230] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.633604][ T7230] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.651118][ T7230] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.785007][T21891] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.809988][T21891] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1413.855501][ T7230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1413.873594][ T7230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1414.045086][ T5959] usb 1-1: USB disconnect, device number 94 [ 1414.311648][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1414.476623][ T24] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1414.485999][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.496016][ T24] usb 6-1: Product: syz [ 1414.500335][ T24] usb 6-1: Manufacturer: syz [ 1414.505918][ T5175] Bluetooth: hci1: command tx timeout [ 1414.517763][ T24] usb 6-1: SerialNumber: syz [ 1414.527252][ T24] usb 6-1: config 0 descriptor?? [ 1414.764873][ T24] usb 6-1: USB disconnect, device number 34 [ 1414.804809][ T5954] gspca_vc032x: reg_w err -110 [ 1414.809873][ T5954] vc032x 10-1:0.0: probe with driver vc032x failed with error -110 [ 1414.855360][T23561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8218'. [ 1414.967713][T20380] hid-generic 01FF:0004:0400.003A: unknown main item tag 0x0 [ 1414.975545][T20380] hid-generic 01FF:0004:0400.003A: unknown main item tag 0x0 [ 1414.984965][T20380] hid-generic 01FF:0004:0400.003A: unknown main item tag 0x0 [ 1415.005175][T20380] hid-generic 01FF:0004:0400.003A: unknown main item tag 0x0 [ 1415.017188][T20380] hid-generic 01FF:0004:0400.003A: unknown main item tag 0x0 [ 1415.024607][T20380] hid-generic 01FF:0004:0400.003A: unknown main item tag 0x0 [ 1415.050507][T20380] hid-generic 01FF:0004:0400.003A: unknown main item tag 0x0 [ 1415.061239][ T5954] usb 10-1: USB disconnect, device number 30 [ 1415.082944][T20380] hid-generic 01FF:0004:0400.003A: unknown main item tag 0x0 [ 1415.115295][T20380] hid-generic 01FF:0004:0400.003A: unknown main item tag 0x0 [ 1415.129895][T20380] hid-generic 01FF:0004:0400.003A: unknown main item tag 0x0 [ 1415.186939][T20380] hid-generic 01FF:0004:0400.003A: hidraw0: HID v0.05 Device [syz0] on syz1 [ 1415.337200][T23594] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8223'. [ 1415.363922][T23589] fido_id[23589]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1415.404644][T23595] Can't find a SQUASHFS superblock on rnullb0 [ 1415.422039][T23595] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8223'. [ 1415.465241][T23594] hsr_slave_0: left promiscuous mode [ 1415.488087][T23594] hsr_slave_1: left promiscuous mode [ 1415.953342][T23617] binder: 23614:23617 ioctl c0046209 0 returned -22 [ 1416.172486][T23626] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1416.706361][ T5954] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1416.717176][ T5175] Bluetooth: hci1: command tx timeout [ 1416.883344][ T5954] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1416.904772][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.908236][ T2153] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1416.918094][ T5954] usb 6-1: Product: syz [ 1416.927615][ T5954] usb 6-1: Manufacturer: syz [ 1416.940336][ T5954] usb 6-1: SerialNumber: syz [ 1416.942631][T23655] /dev/rnullb0: Can't open blockdev [ 1416.958292][T23655] overlayfs: missing 'lowerdir' [ 1416.963359][ T5954] usb 6-1: config 0 descriptor?? [ 1417.091820][ T2153] usb 1-1: Using ep0 maxpacket: 16 [ 1417.099813][ T2153] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1417.118347][ T2153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.145513][ T2153] usb 1-1: config 0 descriptor?? [ 1417.164950][ T2153] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1417.195641][ T24] usb 6-1: USB disconnect, device number 35 [ 1417.609783][ T2153] gspca_sonixj: reg_r err -71 [ 1417.628197][ T2153] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 1417.668807][ T2153] usb 1-1: USB disconnect, device number 95 [ 1417.793906][T23690] /dev/rnullb0: Can't open blockdev [ 1417.928080][T23695] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8240'. [ 1417.938411][T23694] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8240'. [ 1417.949116][T23695] /dev/rnullb0: Can't open blockdev [ 1418.070208][T23701] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8242'. [ 1418.635064][ T24] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1418.819341][ T24] usb 10-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1418.842087][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.867909][ T24] usb 10-1: Product: syz [ 1418.872194][ T24] usb 10-1: Manufacturer: syz [ 1418.877527][ T24] usb 10-1: SerialNumber: syz [ 1418.898977][ T24] usb 10-1: config 0 descriptor?? [ 1418.942205][ T5175] Bluetooth: hci1: command tx timeout [ 1419.153763][ T24] usb 10-1: USB disconnect, device number 31 [ 1419.591308][T23776] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8251'. [ 1419.956199][T20380] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1420.129263][T20380] usb 1-1: config 0 has an invalid interface number: 179 but max is 0 [ 1420.140044][T20380] usb 1-1: config 0 has no interface number 0 [ 1420.158395][T20380] usb 1-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 1420.172011][T20380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.180109][T20380] usb 1-1: Product: syz [ 1420.189830][T20380] usb 1-1: Manufacturer: syz [ 1420.194844][T20380] usb 1-1: SerialNumber: syz [ 1420.211148][T20380] usb 1-1: config 0 descriptor?? [ 1420.221736][T20380] usb-storage 1-1:0.179: USB Mass Storage device detected [ 1420.245409][T20380] usb-storage 1-1:0.179: device ignored [ 1420.287788][ T24] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1420.337674][T23820] /dev/rnullb0: Can't open blockdev [ 1420.437488][T23779] /dev/rnullb0: Can't open blockdev [ 1420.447994][T30576] usb 1-1: USB disconnect, device number 96 [ 1420.456769][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 1420.471531][ T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.488461][ T24] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1420.499216][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.515518][ T24] usb 10-1: config 0 descriptor?? [ 1420.529553][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1420.574114][T23834] can: request_module (can-proto-0) failed. [ 1420.609928][ C1] Unknown status report in ack skb [ 1421.123169][ T3818] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1421.288887][ T3818] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1421.298995][ T3818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.307170][ T2153] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1421.314848][ T3818] usb 6-1: Product: syz [ 1421.319042][ T3818] usb 6-1: Manufacturer: syz [ 1421.323686][ T3818] usb 6-1: SerialNumber: syz [ 1421.332153][ T3818] usb 6-1: config 0 descriptor?? [ 1421.484976][ T2153] usb 1-1: Using ep0 maxpacket: 16 [ 1421.493752][ T2153] usb 1-1: config 1 interface 0 altsetting 247 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1421.504084][ T2153] usb 1-1: config 1 interface 0 altsetting 247 bulk endpoint 0x82 has invalid maxpacket 32 [ 1421.515080][ T2153] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1421.524891][ T2153] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1421.534251][ T2153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.542386][ T2153] usb 1-1: Product: syz [ 1421.546804][ T2153] usb 1-1: Manufacturer: 耚ϟ䝐ṕ挆◜塲塻࿌϶佋ꇙ㚗蚛ᑾ鷹⦝䡺盫숶鿒ｹ汲ꦠ䶼⠺㩹տꪡ鲘敩윦ꙉ䠅௃䁯觜巨ﭳ맻釼컄ႈ臂첫츶䘇⼰☣⤮쏇鿾鏯캋쿃בּ钵鉈﬏涛ｔ܎ᘬ쩁濚宻런鳄总硢 [ 1421.572422][ T2153] usb 1-1: SerialNumber: syz [ 1421.585095][T23852] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1421.599511][T23852] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1421.614682][T30576] usb 6-1: USB disconnect, device number 36 [ 1422.038725][T23852] program syz.0.8265 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1422.064245][ T2153] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 97 if 0 alt 247 proto 3 vid 0x0525 pid 0xA4A8 [ 1422.082328][ T2153] usb 1-1: USB disconnect, device number 97 [ 1422.096419][ T2153] usblp0: removed [ 1422.479114][ T3818] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1422.575951][ T24] gspca_vc032x: reg_w err -110 [ 1422.580785][ T24] vc032x 10-1:0.0: probe with driver vc032x failed with error -110 [ 1422.618026][ T3818] usb 6-1: device descriptor read/64, error -71 [ 1422.656335][T23888] tipc: Enabling of bearer rejected, failed to enable media [ 1422.809371][ T5954] usb 10-1: USB disconnect, device number 32 [ 1422.875349][ T3818] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1422.992671][T20380] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1423.036381][ T3818] usb 6-1: device descriptor read/64, error -71 [ 1423.167265][T20380] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1423.174216][ T3818] usb usb6-port1: attempt power cycle [ 1423.181823][T20380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1423.190849][T20380] usb 1-1: Product: syz [ 1423.195478][T20380] usb 1-1: Manufacturer: syz [ 1423.200172][T20380] usb 1-1: SerialNumber: syz [ 1423.212341][T20380] usb 1-1: config 0 descriptor?? [ 1423.229827][T20380] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1423.537485][ T3818] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1423.559929][ T3818] usb 6-1: device descriptor read/8, error -71 [ 1423.660665][T23895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.671729][T23895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1423.690023][ T2153] usb 1-1: USB disconnect, device number 98 [ 1423.815783][ T3818] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1423.829661][T23940] /dev/rnullb0: Can't open blockdev [ 1423.838153][ T3818] usb 6-1: device descriptor read/8, error -71 [ 1423.956720][ T3818] usb usb6-port1: unable to enumerate USB device [ 1424.166259][T23957] /dev/rnullb0: Can't open blockdev [ 1424.264388][ T3818] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1424.290103][T23963] syz.0.8277 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1424.429836][ T3818] usb 10-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1424.439347][ T3818] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1424.447555][ T3818] usb 10-1: Product: syz [ 1424.451879][ T3818] usb 10-1: Manufacturer: syz [ 1424.456564][ T3818] usb 10-1: SerialNumber: syz [ 1424.464989][ T3818] usb 10-1: config 0 descriptor?? [ 1424.606478][ T5891] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1424.704026][ T5959] usb 10-1: USB disconnect, device number 33 [ 1424.777775][ T5891] usb 1-1: Using ep0 maxpacket: 8 [ 1424.788899][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1424.800674][ T5891] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1424.811705][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.828106][ T5891] usb 1-1: config 0 descriptor?? [ 1424.837112][ T5891] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1424.856431][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.863531][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.675897][T20380] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1425.849458][T20380] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1425.860725][T20380] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1425.872938][T20380] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1425.882212][T20380] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.894933][T20380] usb 10-1: config 0 descriptor?? [ 1426.337986][T20380] playstation 0003:054C:0DF2.003B: unbalanced delimiter at end of report description [ 1426.353269][T20380] playstation 0003:054C:0DF2.003B: Parse failed [ 1426.366471][T20380] playstation 0003:054C:0DF2.003B: probe with driver playstation failed with error -22 [ 1426.563550][ T30] audit: type=1326 audit(6043515867.409:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23984 comm="syz.9.8281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff849b8e929 code=0x0 [ 1426.598985][ T5891] gspca_vc032x: reg_w err -71 [ 1426.603958][ T5891] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 1426.619033][ T5891] usb 1-1: USB disconnect, device number 99 [ 1427.495863][T24036] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 1427.606649][T20380] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1427.646261][T24043] /dev/rnullb0: Can't open blockdev [ 1427.799859][T20380] usb 6-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1427.809412][T20380] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.818765][T20380] usb 6-1: Product: syz [ 1427.823062][T20380] usb 6-1: Manufacturer: syz [ 1427.827854][T20380] usb 6-1: SerialNumber: syz [ 1427.840323][T20380] usb 6-1: config 0 descriptor?? [ 1428.069369][ T5891] usb 6-1: USB disconnect, device number 41 [ 1428.667117][T24068] netlink: 'syz.5.8295': attribute type 5 has an invalid length. [ 1428.675551][T20380] usb 10-1: USB disconnect, device number 34 [ 1428.761033][T24078] /dev/rnullb0: Can't open blockdev [ 1428.762342][ T5891] usb 1-1: new low-speed USB device number 100 using dummy_hcd [ 1428.791726][T24078] binder: Unknown parameter 'subj_type' [ 1428.937870][ T5891] usb 1-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 1428.959340][T24085] IPVS: Error joining to the multicast group [ 1428.967553][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.978371][T24085] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.985678][T24086] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.991984][ T5891] usb 1-1: config 0 descriptor?? [ 1429.001141][T24091] /dev/rnullb0: Can't open blockdev [ 1429.006522][ T5891] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 1429.026112][T24085] /dev/rnullb0: Can't open blockdev [ 1429.144964][T24096] overlay: ./file0 is not a directory [ 1429.152478][T24096] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1429.159560][T24096] /dev/rnullb0: Can't open blockdev [ 1429.445153][T24062] /dev/rnullb0: Can't open blockdev [ 1429.452084][ T5891] pwc: send_video_command error -71 [ 1429.460550][T30576] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 1429.468294][ T5891] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1429.477884][ T5891] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1429.490830][ T5891] usb 1-1: USB disconnect, device number 100 [ 1429.645525][T30576] usb 10-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1429.655640][T30576] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.664869][T30576] usb 10-1: Product: syz [ 1429.669124][T30576] usb 10-1: Manufacturer: syz [ 1429.674073][T30576] usb 10-1: SerialNumber: syz [ 1429.682970][T30576] usb 10-1: config 0 descriptor?? [ 1429.914738][T30576] usb 10-1: USB disconnect, device number 35 [ 1430.435435][T24137] /dev/rnullb0: Can't open blockdev [ 1430.885992][T24161] netlink: 228 bytes leftover after parsing attributes in process `syz.5.8313'. [ 1431.119358][T24173] /dev/sg0: Can't lookup blockdev [ 1431.406362][ T2153] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1431.416385][ T5891] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 1431.576993][ T2153] usb 6-1: Using ep0 maxpacket: 16 [ 1431.602600][ T2153] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1431.624907][ T5891] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 1431.635236][ T2153] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1431.646448][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.655340][ T5891] usb 1-1: Product: syz [ 1431.659515][ T5891] usb 1-1: Manufacturer: syz [ 1431.666782][ T5891] usb 1-1: SerialNumber: syz [ 1431.672587][ T2153] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1431.685258][ T5891] usb 1-1: config 0 descriptor?? [ 1431.690441][ T2153] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.708859][ T2153] usb 6-1: Product: syz [ 1431.716733][ T2153] usb 6-1: Manufacturer: syz [ 1431.722779][ T2153] usb 6-1: SerialNumber: syz [ 1431.748782][ T2153] usb 6-1: config 0 descriptor?? [ 1431.770635][ T2153] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1431.780502][ T2153] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1431.930248][ T5959] usb 1-1: USB disconnect, device number 101 [ 1432.026316][T30576] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1432.197272][T30576] usb 10-1: Using ep0 maxpacket: 16 [ 1432.204409][T30576] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1432.213164][T30576] usb 10-1: config 0 has an invalid interface number: 201 but max is 0 [ 1432.221591][T30576] usb 10-1: config 0 has no interface number 0 [ 1432.227800][T30576] usb 10-1: config 0 interface 201 has no altsetting 0 [ 1432.237014][T30576] usb 10-1: New USB device found, idVendor=2040, idProduct=1700, bcdDevice=14.96 [ 1432.246228][T30576] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.255365][T30576] usb 10-1: Product: syz [ 1432.259638][T30576] usb 10-1: Manufacturer: syz [ 1432.264372][T30576] usb 10-1: SerialNumber: syz [ 1432.275577][T30576] usb 10-1: config 0 descriptor?? [ 1432.417001][ T2153] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1432.423755][ T2153] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1432.560717][T30576] smsusb:smsusb_probe: board id=5, interface number 201 [ 1432.573157][T30576] usb 10-1: USB disconnect, device number 36 [ 1433.078287][ T2153] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1433.301637][ T2153] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1433.309121][ T2153] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1433.480276][T30576] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1433.531509][ T2153] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1433.539105][ T2153] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1433.546887][ T2153] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1433.562794][ T2153] usb 6-1: USB disconnect, device number 42 [ 1433.661642][T30576] usb 10-1: Using ep0 maxpacket: 8 [ 1433.673139][T30576] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.690998][T30576] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1433.701183][T30576] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.721982][T30576] usb 10-1: config 0 descriptor?? [ 1433.733586][T30576] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1434.107927][T24245] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1434.117078][T24245] /dev/rnullb0: Can't open blockdev [ 1434.190964][T24248] /dev/rnullb0: Can't open blockdev [ 1434.225669][T24250] /dev/rnullb0: Can't open blockdev [ 1434.290658][T24253] /dev/rnullb0: Can't open blockdev [ 1434.405159][T24262] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1434.481479][T24263] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8331'. [ 1434.623772][ T2153] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 1434.805507][ T2153] usb 1-1: Using ep0 maxpacket: 32 [ 1434.818769][ T2153] usb 1-1: config 204 has 1 interface, different from the descriptor's value: 31 [ 1434.847390][ T2153] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1434.870283][ T2153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1434.879977][ T2153] usb 1-1: Product: syz [ 1434.895037][ T2153] usb 1-1: Manufacturer: syz [ 1434.899656][ T2153] usb 1-1: SerialNumber: syz [ 1435.464674][T30576] gspca_vc032x: reg_w err -71 [ 1435.475151][T30576] vc032x 10-1:0.0: probe with driver vc032x failed with error -71 [ 1435.511310][T30576] usb 10-1: USB disconnect, device number 37 [ 1435.717803][ T2153] airspy 1-1:204.0: usb_control_msg() failed -71 request 09 [ 1435.730428][ T2153] airspy 1-1:204.0: Could not detect board [ 1435.742417][ T2153] airspy 1-1:204.0: probe with driver airspy failed with error -71 [ 1435.787461][ T2153] usb 1-1: USB disconnect, device number 102 [ 1436.678251][T24341] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8341'. [ 1436.878662][T24354] ./file0: Can't lookup blockdev [ 1436.898396][T24355] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8344'. [ 1437.061152][T24362] hfs: can't find a HFS filesystem on dev rnullb0 [ 1437.129369][T24370] /dev/rnullb0: Can't open blockdev [ 1437.560676][T24386] /dev/rnullb0: Can't open blockdev [ 1437.561710][T24385] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1437.575422][T24386] /dev/rnullb0: Can't open blockdev [ 1437.581370][T24386] /dev/rnullb0: Can't open blockdev [ 1437.611404][T24386] /dev/rnullb0: Can't open blockdev [ 1437.617645][T24386] /dev/rnullb0: Can't open blockdev [ 1437.632864][T24394] /dev/rnullb0: Can't open blockdev [ 1437.659512][T24386] /dev/rnullb0: Can't open blockdev [ 1437.689864][T24386] /dev/rnullb0: Can't open blockdev [ 1437.712203][T24386] /dev/rnullb0: Can't open blockdev [ 1437.788970][T24386] /dev/rnullb0: Can't open blockdev [ 1437.794932][T24386] /dev/rnullb0: Can't open blockdev [ 1437.821948][T24386] /dev/rnullb0: Can't open blockdev [ 1437.842429][T24386] /dev/rnullb0: Can't open blockdev [ 1437.848905][T24386] /dev/rnullb0: Can't open blockdev [ 1437.874703][T24386] /dev/rnullb0: Can't open blockdev [ 1437.880624][T24386] /dev/rnullb0: Can't open blockdev [ 1437.895963][T24386] /dev/rnullb0: Can't open blockdev [ 1437.906677][T24386] /dev/rnullb0: Can't open blockdev [ 1437.942472][T24386] /dev/rnullb0: Can't open blockdev [ 1437.982677][T24386] /dev/rnullb0: Can't open blockdev [ 1437.998903][T24386] /dev/rnullb0: Can't open blockdev [ 1438.006861][T24386] /dev/rnullb0: Can't open blockdev [ 1438.013755][T24386] /dev/rnullb0: Can't open blockdev [ 1438.026388][T24386] /dev/rnullb0: Can't open blockdev [ 1438.056045][T24386] /dev/rnullb0: Can't open blockdev [ 1438.062057][T24386] /dev/rnullb0: Can't open blockdev [ 1438.069292][T24386] /dev/rnullb0: Can't open blockdev [ 1438.090790][T24386] /dev/rnullb0: Can't open blockdev [ 1438.111682][T24386] /dev/rnullb0: Can't open blockdev [ 1438.134609][T24386] /dev/rnullb0: Can't open blockdev [ 1438.143819][T24386] /dev/rnullb0: Can't open blockdev [ 1438.159200][T24386] /dev/rnullb0: Can't open blockdev [ 1438.178101][T24386] /dev/rnullb0: Can't open blockdev [ 1439.354588][T24450] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8363'. [ 1439.383400][T24455] misc userio: The device must be registered before sending interrupts [ 1439.486595][T24460] /dev/sg0: Can't lookup blockdev [ 1439.755014][ T2153] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1439.926110][ T2153] usb 10-1: Using ep0 maxpacket: 16 [ 1439.934584][ T2153] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1439.957567][ T2153] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1439.983017][ T2153] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1440.000889][ T2153] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.011572][ T24] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1440.028261][ T2153] usb 10-1: Product: syz [ 1440.041241][ T2153] usb 10-1: Manufacturer: syz [ 1440.057151][ T2153] usb 10-1: SerialNumber: syz [ 1440.085933][ T2153] usb 10-1: config 0 descriptor?? [ 1440.108857][ T2153] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1440.131779][ T2153] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1440.182692][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 1440.190552][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1440.203125][ T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1440.223916][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.242242][T24479] 9pnet_fd: Insufficient options for proto=fd [ 1440.254750][ T24] usb 6-1: config 0 descriptor?? [ 1440.369139][T24480] /dev/rnullb0: Can't open blockdev [ 1440.578971][ T31] INFO: task syz.2.7401:17347 blocked for more than 143 seconds. [ 1440.587079][ T31] Not tainted 6.16.0-rc5-next-20250709-syzkaller #0 [ 1440.597169][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1440.619461][ T31] task:syz.2.7401 state:D stack:27744 pid:17347 tgid:17346 ppid:6624 task_flags:0x400040 flags:0x00004004 [ 1440.647596][ T31] Call Trace: [ 1440.655881][ T31] [ 1440.664151][ T31] __schedule+0x16f5/0x4d00 [ 1440.677573][ T31] ? __lock_acquire+0xab9/0xd20 [ 1440.690654][ T31] ? schedule+0x165/0x360 [ 1440.702710][ T31] ? __pfx___schedule+0x10/0x10 [ 1440.704648][T30576] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 1440.753622][ T2153] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1440.766898][ T31] ? schedule+0x91/0x360 [ 1440.772466][ T24] hid_parser_main: 203 callbacks suppressed [ 1440.772487][ T24] mcp2221 0003:04D8:00DD.003C: unknown main item tag 0x0 [ 1440.793191][ T2153] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1440.812919][ T31] schedule+0x165/0x360 [ 1440.818126][ T31] schedule_preempt_disabled+0x13/0x30 [ 1440.832102][ T31] __mutex_lock+0x724/0xe80 [ 1440.837363][ T24] mcp2221 0003:04D8:00DD.003C: unknown main item tag 0x0 [ 1440.863064][ T31] ? __mutex_lock+0x51b/0xe80 [ 1440.872501][ T24] mcp2221 0003:04D8:00DD.003C: unknown main item tag 0x0 [ 1440.882269][ T31] ? sync_bdevs+0x1ac/0x340 [ 1440.895422][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1440.901699][ T24] mcp2221 0003:04D8:00DD.003C: unknown main item tag 0x0 [ 1440.916343][ T31] ? iput+0x398/0x9d0 [ 1440.924396][ T24] mcp2221 0003:04D8:00DD.003C: unknown main item tag 0x0 [ 1440.934919][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1440.958375][ T31] sync_bdevs+0x1ac/0x340 [ 1440.976797][ T24] mcp2221 0003:04D8:00DD.003C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 1441.005946][ T31] ksys_sync+0xb9/0x150 [ 1441.022382][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 1441.040588][ C1] usb 6-1: input irq status -75 received [ 1441.054560][ T31] ? rcu_is_watching+0x15/0xb0 [ 1441.071243][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1441.099392][ T31] __ia32_sys_sync+0xe/0x20 [ 1441.167454][ T31] do_syscall_64+0xfa/0x3b0 [ 1441.218644][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1441.266623][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.313691][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1441.358630][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.389019][ T31] RIP: 0033:0x7f529f98e929 [ 1441.409189][ T31] RSP: 002b:00007f529d7f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1441.457274][ T24] usb 6-1: USB disconnect, device number 43 [ 1441.474002][ T2153] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 1441.488825][ T31] RAX: ffffffffffffffda RBX: 00007f529fbb5fa0 RCX: 00007f529f98e929 [ 1441.515468][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1441.534564][ T31] RBP: 00007f529fbb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1441.560259][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1441.586889][ T31] R13: 0000000000000000 R14: 00007f529fbb5fa0 R15: 00007ffdeb069d68 [ 1441.607858][ T31] [ 1441.617050][ T31] [ 1441.617050][ T31] Showing all locks held in the system: [ 1441.636298][ T31] 6 locks held by kworker/1:0/24: [ 1441.647019][ T31] #0: ffff888144697d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1441.680734][ T31] #1: ffffc900001e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1441.715416][ T31] #2: ffff888028050198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1441.728241][ T2153] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 1441.744516][ T2153] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 1441.753561][ T31] #3: ffff888031fb8198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 1441.835019][ T31] #4: ffff88806277f160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 1441.919592][ T31] #5: ffffffff8e53c420 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 1441.978816][ T31] 1 lock held by khungtaskd/31: [ 1441.987218][ T2153] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 1442.014379][ T2153] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 1442.040835][ T31] #0: ffffffff8e53c420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1442.075947][ T2153] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 1442.097283][ T31] 4 locks held by kworker/1:2/2153: [ 1442.126677][ T2153] usb 10-1: USB disconnect, device number 38 [ 1442.159470][ T31] 1 lock held by udevd/5225: [ 1442.185958][ T31] 2 locks held by getty/5615: [ 1442.232930][ T31] #0: ffff88802f9ec0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1442.300208][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1442.350001][ T31] 2 locks held by kworker/u8:0/21888: [ 1442.368523][ T31] #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1442.414876][ T31] #1: ffffc9000c707bc0 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1442.459134][ T31] 3 locks held by kworker/u8:12/21899: [ 1442.479498][ T31] 5 locks held by kworker/0:0/30576: [ 1442.504717][ T31] #0: ffff888144697d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1442.548099][ T31] #1: ffffc9000ca1fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1442.590772][ T31] #2: ffff8881457f8198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 1442.601193][ T31] #3: ffff8881457fb510 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 1442.612421][ T31] #4: ffff888145378c68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 1442.622191][ T31] 1 lock held by udevd/14463: [ 1442.626871][ T31] #0: ffff8880252b3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1442.637223][ T31] 1 lock held by syz.2.7401/17347: [ 1442.642376][ T31] #0: ffff8880252b3358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 1442.654677][ T31] 1 lock held by syz-executor/17779: [ 1442.659979][ T31] 2 locks held by syz.1.8129/22664: [ 1442.667613][ T31] #0: ffff888022f660e0 (&type->s_umount_key#89/1){+.+.}-{4:4}, at: alloc_super+0x204/0x970 [ 1442.678233][ T31] #1: ffff8880252b3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1442.688276][ T31] 4 locks held by kworker/u8:1/24506: [ 1442.693753][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1442.705888][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 1442.717959][ T31] #2: ffff888042c48768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x460 [ 1442.728681][ T31] #3: ffffffff8e53c420 (rcu_read_lock){....}-{1:3}, at: ieee80211_sta_active_ibss+0xc3/0x330 [ 1442.740045][ T31] [ 1442.742405][ T31] ============================================= [ 1442.742405][ T31] [ 1442.800341][ T31] NMI backtrace for cpu 1 [ 1442.800362][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-next-20250709-syzkaller #0 PREEMPT(full) [ 1442.800383][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1442.800393][ T31] Call Trace: [ 1442.800400][ T31] [ 1442.800408][ T31] dump_stack_lvl+0x189/0x250 [ 1442.800434][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1442.800454][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1442.800477][ T31] ? __pfx__printk+0x10/0x10 [ 1442.800512][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1442.800534][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1442.800549][ T31] ? _printk+0xcf/0x120 [ 1442.800576][ T31] ? __pfx__printk+0x10/0x10 [ 1442.800608][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1442.800629][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1442.800649][ T31] watchdog+0xfee/0x1030 [ 1442.800670][ T31] ? watchdog+0x1de/0x1030 [ 1442.800695][ T31] kthread+0x70e/0x8a0 [ 1442.800723][ T31] ? __pfx_watchdog+0x10/0x10 [ 1442.800739][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.800765][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1442.800784][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1442.800802][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.800827][ T31] ret_from_fork+0x3fc/0x770 [ 1442.800851][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1442.800877][ T31] ? __switch_to_asm+0x39/0x70 [ 1442.800892][ T31] ? __switch_to_asm+0x33/0x70 [ 1442.800906][ T31] ? __pfx_kthread+0x10/0x10 [ 1442.800931][ T31] ret_from_fork_asm+0x1a/0x30 [ 1442.800961][ T31] [ 1442.800967][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1442.960650][ C0] NMI backtrace for cpu 0 [ 1442.960669][ C0] CPU: 0 UID: 0 PID: 21899 Comm: kworker/u8:12 Not tainted 6.16.0-rc5-next-20250709-syzkaller #0 PREEMPT(full) [ 1442.960689][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1442.960701][ C0] Workqueue: bat_events batadv_nc_worker [ 1442.960724][ C0] RIP: 0010:deref_stack_reg+0x58/0x230 [ 1442.960748][ C0] Code: 41 80 3c 34 00 4c 89 04 24 74 16 48 89 df e8 cf 86 b1 00 4c 8b 04 24 48 be 00 00 00 00 00 fc ff df 48 89 5c 24 10 49 8b 5f 08 <4d> 8d 77 10 4d 89 f5 49 c1 ed 03 41 80 7c 35 00 00 74 16 4c 89 f7 [ 1442.960762][ C0] RSP: 0018:ffffc90000007780 EFLAGS: 00000246 [ 1442.960776][ C0] RAX: fffffffffffffff0 RBX: ffffc9000c520000 RCX: 0000000000000000 [ 1442.960788][ C0] RDX: ffffc900000078e8 RSI: dffffc0000000000 RDI: ffffc900000078a8 [ 1442.960801][ C0] RBP: dffffc0000000000 R08: ffffc9000c527c70 R09: 0000000000000000 [ 1442.960813][ C0] R10: ffffc900000078f8 R11: fffff52000000f21 R12: 1ffff92000000f16 [ 1442.960825][ C0] R13: ffffc900000078f8 R14: ffffc900000078a8 R15: ffffc900000078a8 [ 1442.960838][ C0] FS: 0000000000000000(0000) GS:ffff88812579c000(0000) knlGS:0000000000000000 [ 1442.960851][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1442.960863][ C0] CR2: 00007fb66b581ab8 CR3: 000000003397e000 CR4: 00000000003526f0 [ 1442.960878][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001889 [ 1442.960888][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1442.960898][ C0] Call Trace: [ 1442.960905][ C0] [ 1442.960916][ C0] unwind_next_frame+0x17c4/0x2390 [ 1442.960940][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1442.960960][ C0] ? process_scheduled_works+0xae1/0x17b0 [ 1442.960982][ C0] ? rcu_core+0xc34/0x1710 [ 1442.960999][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1442.961023][ C0] arch_stack_walk+0x11c/0x150 [ 1442.961047][ C0] ? worker_thread+0x8a0/0xda0 [ 1442.961068][ C0] stack_trace_save+0x9c/0xe0 [ 1442.961091][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1442.961115][ C0] ? __lock_acquire+0xab9/0xd20 [ 1442.961134][ C0] kasan_save_track+0x3e/0x80 [ 1442.961155][ C0] ? kasan_save_track+0x3e/0x80 [ 1442.961175][ C0] ? kasan_save_free_info+0x46/0x50 [ 1442.961192][ C0] ? __kasan_slab_free+0x62/0x70 [ 1442.961213][ C0] ? slab_free_after_rcu_debug+0x129/0x2a0 [ 1442.961232][ C0] ? rcu_core+0xca5/0x1710 [ 1442.961248][ C0] ? handle_softirqs+0x283/0x870 [ 1442.961268][ C0] ? do_softirq+0xec/0x180 [ 1442.961285][ C0] ? __local_bh_enable_ip+0x17d/0x1c0 [ 1442.961303][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 1442.961326][ C0] ? batadv_nc_worker+0x328/0x610 [ 1442.961341][ C0] ? process_scheduled_works+0xae1/0x17b0 [ 1442.961379][ C0] kasan_save_free_info+0x46/0x50 [ 1442.961401][ C0] __kasan_slab_free+0x62/0x70 [ 1442.961423][ C0] slab_free_after_rcu_debug+0x129/0x2a0 [ 1442.961442][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1442.961461][ C0] ? rcu_core+0xc34/0x1710 [ 1442.961477][ C0] rcu_core+0xca5/0x1710 [ 1442.961503][ C0] ? __pfx_rcu_core+0x10/0x10 [ 1442.961522][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1442.961541][ C0] ? sched_clock_cpu+0x74/0x430 [ 1442.961560][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1442.961579][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1442.961597][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1442.961615][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1442.961641][ C0] handle_softirqs+0x283/0x870 [ 1442.961661][ C0] ? do_softirq+0xec/0x180 [ 1442.961682][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1442.961703][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 1442.961722][ C0] do_softirq+0xec/0x180 [ 1442.961739][ C0] [ 1442.961745][ C0] [ 1442.961752][ C0] ? __pfx_do_softirq+0x10/0x10 [ 1442.961769][ C0] ? __lock_acquire+0xab9/0xd20 [ 1442.961790][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 1442.961808][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 1442.961827][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1442.961849][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1442.961872][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 1442.961889][ C0] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 1442.961910][ C0] batadv_nc_purge_paths+0x318/0x3b0 [ 1442.961933][ C0] batadv_nc_worker+0x328/0x610 [ 1442.961950][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1442.961970][ C0] process_scheduled_works+0xae1/0x17b0 [ 1442.962002][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1442.962029][ C0] worker_thread+0x8a0/0xda0 [ 1442.962058][ C0] kthread+0x70e/0x8a0 [ 1442.962083][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1442.962100][ C0] ? __pfx_kthread+0x10/0x10 [ 1442.962122][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1442.962137][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1442.962154][ C0] ? __pfx_kthread+0x10/0x10 [ 1442.962177][ C0] ret_from_fork+0x3fc/0x770 [ 1442.962197][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1442.962218][ C0] ? __switch_to_asm+0x39/0x70 [ 1442.962233][ C0] ? __switch_to_asm+0x33/0x70 [ 1442.962246][ C0] ? __pfx_kthread+0x10/0x10 [ 1442.962269][ C0] ret_from_fork_asm+0x1a/0x30 [ 1442.962290][ C0] [ 1443.458014][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1443.464888][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-next-20250709-syzkaller #0 PREEMPT(full) [ 1443.476219][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1443.486277][ T31] Call Trace: [ 1443.489587][ T31] [ 1443.492525][ T31] dump_stack_lvl+0x99/0x250 [ 1443.497124][ T31] ? __asan_memcpy+0x40/0x70 [ 1443.501724][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1443.506935][ T31] ? __pfx__printk+0x10/0x10 [ 1443.511551][ T31] panic+0x2e2/0x7b0 [ 1443.515457][ T31] ? __pfx_panic+0x10/0x10 [ 1443.519878][ T31] ? __pfx_delay_tsc+0x10/0x10 [ 1443.524647][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1443.530472][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1443.535856][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1443.542023][ T31] watchdog+0x102d/0x1030 [ 1443.546358][ T31] ? watchdog+0x1de/0x1030 [ 1443.550771][ T31] kthread+0x70e/0x8a0 [ 1443.554835][ T31] ? __pfx_watchdog+0x10/0x10 [ 1443.559504][ T31] ? __pfx_kthread+0x10/0x10 [ 1443.564101][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1443.569302][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1443.574493][ T31] ? __pfx_kthread+0x10/0x10 [ 1443.579097][ T31] ret_from_fork+0x3fc/0x770 [ 1443.583780][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1443.589064][ T31] ? __switch_to_asm+0x39/0x70 [ 1443.593815][ T31] ? __switch_to_asm+0x33/0x70 [ 1443.598570][ T31] ? __pfx_kthread+0x10/0x10 [ 1443.603242][ T31] ret_from_fork_asm+0x1a/0x30 [ 1443.608009][ T31] [ 1443.611284][ T31] Kernel Offset: disabled [ 1443.615595][ T31] Rebooting in 86400 seconds..