last executing test programs: 5m48.189411308s ago: executing program 2 (id=288): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) sendfile(r0, r1, &(0x7f0000000040)=0x1, 0x6) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000080)=0xab90, 0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x400}, {r1, 0x2001}, {r0, 0x400}, {r2, 0x3000}], 0x4, &(0x7f0000000140), &(0x7f0000000180), 0x8) close(r2) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x3, 0x7, 0xe16, 0x1ff, 0x9, 0x401, 0x100}, &(0x7f0000000200)={0x8, 0xee, 0x81, 0x3ff, 0x1c000000000000, 0x9, 0x10, 0x8}, &(0x7f0000000240)={0xa, 0x0, 0xee, 0x1000, 0x0, 0x9, 0x8, 0x5}, &(0x7f0000000280)={0x77359400}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x100]}, 0x8}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, r3, &(0x7f0000000400)={0x6, 0x7, 0x0, 0x6, 0x4, 0x1, 0x81, 0x4, 0xe9}) fallocate(r2, 0x4, 0x5, 0x8) r5 = semget$private(0x0, 0x5, 0xa0) semctl$GETZCNT(r5, 0x2, 0xf, &(0x7f0000000480)=""/59) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/locks\x00', 0x0, 0x0) bind$802154_dgram(r6, &(0x7f0000000500)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) syz_usb_connect$uac1(0x5, 0x10b, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf9, 0x3, 0x1, 0x7, 0x80, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x4}, [@mixer_unit={0x7, 0x24, 0x4, 0x2, 0x5, "a3d9"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x101, 0x6, 0x9, 0x100, 0xae, 0x7}, @selector_unit={0x7, 0x24, 0x5, 0x5, 0xa, '%J'}, @selector_unit={0x7, 0x24, 0x5, 0x1, 0x0, "b70f"}, @processing_unit={0xb, 0x24, 0x7, 0x2, 0x5, 0x5, "ab824848"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x303, 0x3, 0x3, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xa, 0x3, 0x2b, 0x0, "9463fccc"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x0, 0x3}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x4, 0x9, 0x6, "43a7", "104b"}, @as_header={0x7, 0x24, 0x1, 0x7a, 0x1, 0x5}, @as_header={0x7, 0x24, 0x1, 0x8, 0xa2, 0x1}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x2, 0x1, 0xf3, "f4"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0x25, 0x5, {0x7, 0x25, 0x1, 0x80, 0x5, 0x591}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x52, 0x4, 0x1}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x9, 0x1, 0x51, 0x4, "", "c974"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x3, 0x3, 0x5, 0x81, '\v'}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xd, 0x2, 0x5, 0x9, "e9211b", "a12a"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x6, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x4, 0x50, 0x28, {0x7, 0x25, 0x1, 0x3, 0x3, 0x591}}}}}}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x110, 0xa3, 0x0, 0x4, 0x20, 0x3}, 0x119, &(0x7f00000006c0)={0x5, 0xf, 0x119, 0x3, [@generic={0xfe, 0x10, 0x1, "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"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x91, 0x6, 0x6, 0x6, 0xfd}, @wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x7f, 0xff, 0x8, 0x5}]}, 0x7, [{0x99, &(0x7f0000000800)=@string={0x99, 0x3, "484b532652cf52d74644f353470244071783a25e650932cf77c482d26ae328f56dc086dcc09315a19e82e2276b99dc6de2f19fc1da9a8272437fa5698e1fc3d579fcbb86833f119f302c863f3873732bb6217deab751c205b37f1a31cd44553c99c74bb716c2b5e1adb99a7f37a38b863ff661e90d26c10dcf9eacb9ed5bd4d790dc6e4877903de11494823d809fcd50f674fd8dda4fcc"}}, {0x72, &(0x7f00000008c0)=@string={0x72, 0x3, "9b9dfeb7f0d60fe4448ef45db6706835e6607b8bed63d7920d4fed03e99111c1d3647d9a3b3ffd0fbd9c6765e4b0a55ac8b7410ecb6d9fefd400d8fce90ad2953c77b0a0e56a59e7f391d47f19a87faa6a021d3b546856f24e29e4681e3388e613a239d5087d6feb4f9e7d1243558503"}}, {0xf2, &(0x7f0000000940)=@string={0xf2, 0x3, "25c3c04fa7dbb26f5ff6d645a348d664cf853bc5f1ea969bc0fc1c9efbf1db21aae4dfa6717b40c90dfc632e72f144c1680191662ec9d783a62e36783f2e334710ae4b7a606153d63ba1aaa4dbee876bb1c312ff924e0f453f29c9267d165e167b0615db473c8f56505f8bb8d0af3a318a4c7fb3aecc1056292cb511d58e518aa3d5fbf808efd45a77dd1f75c2c83307772ad7d5ce782c96ebf5c30bf10f904bb4d1998b994dfd166e9bd364d379a87864ad6cc1413ba18a9b74ddf29d29958900a7575f9d92930965803aeefc53496e317cf363a07d327ae0d598632e5b9b8cdd97e2a97df33518666cc443faa0dfe9"}}, {0x92, &(0x7f0000000a40)=@string={0x92, 0x3, "0b14f6f7b7c8636388772addab773d68fc631e3643641accf9c0351e75215c82d6f04eeaf396ffe255d4cb45a25048f1461673b942785cb7840f9e98341c70ac40a0ae9727ac9b7e6ad610586cd5c71bbff51f4c816b2d5343767e9a37001bcd38a797c98fe8ade9e2060a0e10281c3262c6d4c81293ac4f72841f9c58c6a8f0e8da123978cb24953d912bd04c261a36"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x449}}, {0xe3, &(0x7f0000000b40)=@string={0xe3, 0x3, "452a593a0aa72001e0b71692e8ee7e558562e22998d32babb01dc308612ea858966be75c407bfab6b0edd377ef59b89fd94dbb93824e0b3f37546138c775ba72f7491ee79c7ea7278ca200dabc4c4abe6cbe574230d6681d74d8713562e54b719cc1db709ddaaaa6819c5225be858e42c0051b08fd13f4a608b98b2ce1fdc4b627ed6913a4cee014c3900b1c5cdbc42ed40e4a22357fc0fb20802f0db0823b3f252d95e21c7160bef263ad7a7af3d977f58b834654155ed3367e3a4ed45373547f43bb73442e034ba550dc992194019b425b86a7f77fa8068e9fd58cf5bf47d58f"}}, {0xe, &(0x7f0000000c40)=@string={0xe, 0x3, "fe86d1e4b08f9e2b932e037b"}}]}) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000d80), 0x1, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f0000000dc0)=0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x50009417, &(0x7f0000000e00)={{r7}, r8, 0x10, @unused=[0x8, 0x72, 0x6, 0x3ff], @subvolid=0x40}) read$FUSE(0xffffffffffffffff, &(0x7f0000001e00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000003e40)={0x50, 0xffffffffffffffda, r9, {0x7, 0x2b, 0xffffffff, 0x1000, 0x80, 0x4, 0x8000, 0x2, 0x0, 0x0, 0x1, 0x7}}, 0x50) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x2010, r6, 0x45288000) ioctl$int_in(r1, 0x5452, &(0x7f0000003ec0)=0x2) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003f40), r6) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r6, &(0x7f0000004140)={&(0x7f0000003f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004100)={&(0x7f0000003f80)={0x170, r13, 0x202, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x19}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2c}, @NL80211_ATTR_IE={0x8b, 0x2a, [@challenge={0x10, 0x1, 0x70}, @ht={0x2d, 0x1a, {0x1480, 0x3, 0x6, 0x0, {0xff, 0x1, 0x0, 0x27, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x300, 0x400, 0x7}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @chsw_timing={0x68, 0x4, {0x233, 0x1}}, @sec_chan_ofs={0x3e, 0x1}, @fast_bss_trans={0x37, 0x52, {0x2, 0x0, "9b9b02a53e680a25f151bc10cb9a26c8", "9f2e5c85ed893ee2ed1229324f3a1c09b0ba0dc2ae38c1dc2e1a76c4bb5aed25", "6741c0d69814c84a090d781c406a9a22766ffd1925d34115c381f23e15c9e7d7"}}, @mesh_chsw={0x76, 0x6, {0x0, 0x2, 0x0, 0x40}}]}, @NL80211_ATTR_IE={0x70, 0x2a, [@supported_rates={0x1, 0x5, [{0x60}, {0x2}, {0x30}, {0x36, 0x1}, {0x48}]}, @measure_req={0x26, 0x60, {0x1, 0xfd, 0x9, "c20467ddacb8f3190b9af131411521dd518349c349b3e48b9e6e327051a43d5a5d6c651001577a2ba77b4dfa4926c6fe2d5b98a55ea5343975b4ffe12626360ede983a6163a47acc2a9c8cc919fef83546d62bf9bb3f813b216160248a"}}, @dsss={0x3, 0x1, 0xb7}]}, @NL80211_ATTR_IE={0x3c, 0x2a, [@prep={0x83, 0x1f, {{}, 0xd, 0x0, @device_b, 0x8, @void, 0x1, 0x9, @device_b, 0x3}}, @mesh_chsw={0x76, 0x6, {0x1, 0x5, 0x2e, 0x1}}, @gcr_ga={0xbd, 0x6, @broadcast}, @challenge={0x10, 0x1, 0x85}, @ibss={0x6, 0x2, 0x100}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x39}]}, 0x170}, 0x1, 0x0, 0x0, 0x8084}, 0x4010) r14 = openat$cuse(0xffffffffffffff9c, &(0x7f0000004180), 0x2, 0x0) r15 = getegid() syz_fuse_handle_req(r14, &(0x7f00000041c0)="5e849e4d0d9f943da27d76e348eb7493a0241c162351f3d146bd48ca02e4b88fd0c7e7719e3fcfc8493ee89aab6f682a04a579a092fff44a6f858595b2f1e4f6d39d9d7233cd1742814f02099c7180a01768751fae074acc6ee5a33722853c1f2a73b317ef5f809e4e2e5324d1d202dc388a63a947131cbaa7172edd91259f6fdd8a73f3ffbc2e81e5e686f550d48402bc7342092cd9f058f5953ccc4f58f60e912f050e18f9cfeb86c1264b8ab0d38b4c21e921ffbbe23b393f6f847c5c9caba86b403737d4591e4e047442ad735c8c83b38d6a616eab3f6edad5b315014064e3acf3167eb4c7a6035cc3f1f999472b1b6a8be7abd659dcb6b5f008e3a26ad33cfc580f9656476076cdb8229a5394470e03288fe757237bfebaab7bffa6f526a9fce079ebe79eba003f820711d4c7160a2d414e3bf931783268b4fe7b5ef2286d6cfcbfcebbe0ca1b8f4ac9699953bc232e6747bf86e35c738f107415eed0f127574e4a3101e4e1818544a90e3530b0d0839e10d9f3c75d4a07216d306bc3331e4dac40fbcb5ce0035bfbba7cff570fc082c7cd516c213f823d60b29dcb217f4be33a4037877196b69bc975420458d834b86613edb033304e2b3bf276263c9da44a1a1f67d5e6dcf778c1aaa6ddbdc036171d9d01cf256769ef9ae410fb2dc52bcbd8e1ed41225235f67671fd4ae2f8f50445f4d906bcad68223dd7283244b47e942336b4d8fa6d879f964aff51e2cbef82e37058ea0a250c35231bdff87ac1e7ef26b44d149ccb0176b3a30ba87cdf6b87b9b812777436c2964bf6908509cb6030037f934f65dd5ac23016ffb47878127fe92d33ed1cea004aec8894c9d1b240c17b74e753c486d9ea73585f8a827116446d729b25d32b9fca4f478ec7c40077b8f43c50a8bb109c33a1cddc9995c7d998ed3e40ef15cc6588f1adac61f62bad5ef4fb9a69aea28e8547fd231e6c39e8c102e9488154e07c5ad3ecfb7e23824be7cf56736d4e825fa2500cc57902742808f4623384908ef3265652d0454d9b4ba90b1c5930500a4defe5eab894fee9386ed404bade9918e772c3c6c9f3587428fa135deea8f1436e8f6dc788fbbe91d668b623f1961333adf62313a69cfd8b3730ba1a44b20958298177d18f3c85fe74745a8823f9540aa6d729c9a54c0c608b5e9e376dda1d78938587458fd8b12436eb17ae56ed2b1b934bca14b96a87b5746b8e80837a4d93b8b96d86dc2811dfb5695162cc0acec240856672ff55b12c6ef6bd58593ae0d36b21d2611b56dece2eb9072f368121ee7950321c2ccfc10233d657bcfa20b9315baf525b47ff1d195914a6b4817ec522329efa5decf4109490360c34ea2c63d665c104e2212b2ef405eaf7a9493bcb9989800f807788ad21c2d449ef2e906594e9eee0d35228540e1d12765d887b6fd348aea183b6d9144acc73af0b8c2c7450b3b1e805ca21cb8c2c8e0e000e22d9406ea982e4edc59963dcf1871df9d7720bac6ea1c9f1635d33a354cdbbea69197248c46587cdbc01b1ca4c5647c9454b8a011c48261487440264d052773e2a87869ad05daf78d48c2fb95a21cb86515bb2ba2a95ca659b36773757dbe76a8e9f5ac8dcd54c7f56eaf9cfdc1e9e7769d6d039f428711b7b341cb427afd0cfcd71a269b61863e724213efe31399a7e9c5e7cb0a96632d0a447d3821d038baa170bba7b4738e62518b15edbd4898d0746049f0da5f75ae76e6526d8fda8a859be5802a1b50892a9e52ca6adfa274852054c67cc2a4deb190c5086b9b01389df435ccb1cdb9c8c344953016d120e11c6361dfd598facc5a22312fc0bcf5cf78de00cf0ab879de384eea41774fce4826d5da438e2beb6475df039c16bd154bba28965653103c1710e3fffa8ddae7027ec3a7467612eae1d1ccba63a1f9e511125635d33fcc4e3121a6cfb6cfc782e40202f6df5150898e5ab366563986f7d12629a8508a8de3e3b6663276da7f1721f9974e6c8dc40ae648904555e6e29654197cb737ca763bdcdbe28dbc07b525f1caaed460428f1fba73b9848572916e09088aab8f2c77bbd209c585abb3f119e8705f8aac373e9ce140f37f867c82c375598d50845257318f7af989bd41d965602e23991c324731723e887b45b60b42a5dc973f4c5b7ff4779badb0f845c116c0daa9874b87b6f37e48c5263ac1613c690908c59509c53ec98bab2b7a33318034723f0b772b1b069bf0eb2e2aa016ca52ebd39f62eb9f13f2dcf0b11fc96b4c0824b071d4f5412d61499634d1cbb540cf9a35b0dbc1603b165f7301572adceaade3d9ab411e4e4c9ad34e5f927fb0b783d62f970dc9f97ed85aa449942541f8d76e9d4a531774aa72f9fc496cac175ad5c89b3e62e8c41c87b218ab51fabc5712f86e3557599f08ad155022a4091cdca9d473273e0d585a0747bc8c801b14be266e1e35d721c5c4523bbd2cf91131af80815a452739f48364e6bf930c744e6cbaebe6ea641394de53373e4b54ffbcc6625d054dcfb7a3cd6fe480ac6b38c994fa8fa28f0a46f1e31171e02af92a2609c1724b552f0ffb3555cfc3eb13e819fa1cdd6952c66f694add40720d990a1dcc05d057cf35828ba4213a53b598fa428b4f8340aa0c35907dd593a2091caaca93ea0c6a8d33a2af19e0b5eed65ba2ec966d330c159664cc2c953880a2d21420ac537bf4a8b609882c74d9bd8fd6e24e08de69a0732539b55de4b75e4050513a8da2fff4f3ad73539bbb56e9e6c7479329d9996fd1a485c3b5fe446c7c5d5befdd69792e31652397c02a43e506f27b8c00eeacdb42788e96d6b4baae12b60702f5d440166ec06515a98ac86e3407683853a917cfc6d2eb34eacbf53c0589ff1a927637a32eb4da5f71ba35b4ea430a15be91113165804ec76e312979062efc96c2ad753b21ab71f2c3ecd6f78beeea340e8a10fcf79c6d9cec76593f4a57a6bb8f53aa3deda51d90e8b5c6da3f4f626f7dea397973f18cc3fde2b9b5996ba44ce867d6c28cf58c2a08198354aa5eedb19b7e8383b604ea962d52b5dc19a7bcef459f6608911f5ba395b830540ad60394551e92876bc3d100142d6007e82ffdac90f4b1f9035eb44da83ae5687e19bbad42b26371c9e8fe90b4d5519bcbb28c8852c40f5a4ba304b0ea057155c3a72a369db133147f5fb36032a368a38786b3231fd71e33e90c720d6f3168f44237f80fea54719a7986350f88a37701dad02ec30e2c444632bfa707cc9cd4a09e0046462d8ae46cfa8853e2fc970a6858f36fe6cf9304386f72e8a8cea5fda6092143babd30bbbb0253614654ffaa03f0ad2099b49fe466143190e101c325ec4bcea603767b3a94920149fbe41fe4122f2f0c38d1daff77492b954a33e2635610c2354937780a55ccd3f76f3b79f9be4dc474e7730db9d8b2b6001febed1690f001b1b70c22f8b8def078a670d63a3ded14f3cf9a357651ccee5f75314e7125a0d26288ec14355c0538ef22234becee7518e44f874f1ce0b57c9808816ab427e77e9f12f585c014e0b07f215612961427d7c7d68a09b5ebda78d7efe50c50f87a69c4bc018977816912c1cfe2169fb954a36285b2ea596547ecd9d0baef9d6dc91263489ca79c25eab8836cf6010950fde9f023af96b925c22e10241d308c115ac48f60c56c6e56a0fe09bf5d8944006c0034398f0d572a8b67690ac11d5dde0b58d57432dc6fab490f667bbcf70f3b763ad94889be1e69497c50bbb629c4de553944bac9e31c54f787e3038b5d5b79751d68f7e6bca32bf14ec6bb5c1271859d2808737193fab1651052ec96351c60f896cd310aa650e66dec91515c47a0698d5f8461b9d3beea4349a25d67eaf41a81452f5ae0c2d6c2518162f73bb690873d62da7fce1ad2c2e59002b55b3746ddcfa45de4b25b9e61244c5404e98676a0fa2b7c2cf51c9111bfab88ec0d55143918681665a0b3827ae01d6069fad77f0dc30040a548166c235e368d9ea60c7b591055aac61c9bf1d7d8ff796d726766ccf828108de4e2bb2875858e52c775d403a80df7af37e3a0476322fb68e0c67d964864101e9e0097c0b0c066e1be481f28ae2a1be3a07712926af007230891979d4bcc8106c37e1b18e1ad5f4d42b0822dd1b510044dce1b7bd7d020a1a97903549ac8c82638a277a58f62852bbaf6266232bdc1bd0355fa1ee2f60154bfbc21683f9eaa33bc453af2f7a7e885614059df888988564ca94af805e893e63fcb4104ecb68e66c2fb28a39648f0ae613564de5bb25a5d8d77e38588e5affe9271d846df815b6a07bb146d51ace2d4eb13c463b5edfb06626b6e6e000f20ba3a8e7ab51b8ae10289d61f87b3df4f83a5d7b5f426a75fd7f45507119fe63f1ef96a3452d7bf78905bdca0e2984820cf80088b8ea4bffe9a979ace85a14d65735f287e5e7d7cc9f928af65096a24e2ed7f707fc239aaf9c2f8e775dfbd9a9111c14bb5e84b1172b89b3c9d0d4aee5d0d3401e285773be0209d8c93ed3701d16c8dded1ecf25125e560bc24cc79d19f8e3afd896f64def257238fccf31ce87d563908d421cb0831f4896301431e5971be5bcef7a79318d723e1caae846f48639eaf361ebf08cd344249590e428fe8ec1f339b34b62245be7513662729e26d044cb0e2caf2065425cbe1882958a5ebd23633bee2c0dd9cc2560068918259e2fe4f1c9b7d51b33a4fa4ea1155b1a7b25c88953e990c0a3ad5d1c56098711916c68b3a466ef356f1271de2c727eca1929b9a464037f3f725942afbea4dd52efc5d0a5606b975ba10ece3b738bc7e312a3962c8736186b683d26abcbb2a5526ca9eedb4fe7e32d28a5031e9550ac4163b29372e4c94c63de5d78f449d1475fcb44bcf749adeeaad97b9c51358b50962b55498e251d289faea005dd9110387ef754a8044b893c1d384fd8057bb508db373ca2bae5831825be6fbd27babf56c33158c7a4fe35c4364141faa920cd39021ce95b65f3163e07428c1821054d4d622a09a959846ffdf8eea7bf7179b1ba68c7788bf42d744fdbfc8112921eba71c5ea73091f26517125f77d07e9b3b5b992a32786f8f766af5db4b909c4e25095baa3b989c53d63375c298a198ccfe043eca09c537c0af14cab5b14eb495d65ca0d241913e0c2e871785528fabd600479f7211c1481e2a6a6f53a5274f5f1596bc8d61d463e143388d11a7866c40cc32ee24665e44c57ae2a4ea32624486e0769aaa454a22a152af6c75a686236bf57facbe2d73cbd7f029739aac22515fd1de6656c838b3c150b05ff6b4d3290d4e1a6dacd252b9f0b48acd7ccd57e677dd9b0e1844959b6754307c93de9f870f18a9404a8022b08c3268d37f4444ad3735ea1aa1f32b1385311e56419a1e323e35214ea7b23ec58321b654ae71319f76e48e288ef9ddb1c817091005e1ccaa9c332eb565c0558c50fa0cba2b36abc23949bfcad19dd117a5ae2573c31f9dd9f54c678944965adc27889c55cb710dc50ef417f69bce56761a8b912b1edb7d303ccf3ef28cb487c4fceeef64a447a89004778291827050edd38b7c2da9a34a0150a4d74e7ed9fa79a28a4f32b7e7795bcce94d4c04eaf1988b247e49961140451baedd183d45df9072e956a69219d1721da9da9e991b27d9c28165d384879fd98a0c501f80903af12722e766d3d92f8fd4279341283bb017a87ef75d57dcff314b7291a149418bc3d7fc2a7e627b6de414238ea5f4965f975b5b1d166b39095805ec4f5cdff69c1d7567bb194041e7f74331cd10b3f232837e16f389e99c01995ad76241ac59158c09f99954f701c43846819f61dae24aa57fbd3d60de3ad14dcf1ce9e18977442059199e99ac9491ae3eca128a39ef2bf31317681b40377825502aaaa46e148d995d6f8950e33004af1bd3db9d99cd568a2a04014edc74b633cb6000bcc3faefe0544e8147694a3f88266a00718a07764e4fd5f001db59804649c1180755ca12b2379fef23fae4c5e62b685fbf69de83ebbef9f0dbf921b5b78255495ca06a5345f43cf0b978abc6eeff10c8dd8165042c345faff90e5a35605c1715c7a7767085829b13e18fba118621c21d4bf693643d167768a024e8aec9e993c04cc37852378774deb7b29d8a6939e442962508ba5d6e25b7a1ce137af5356daf69e316ac3347f8e4604731827966e5d58a9631e48cd04a763d239698d350ffd1e9f1fda2d6e7e880aca512e80873b9278be4a49ac951776fd023cac6dfe36018ca4c78b4bf14d97c169c71c6ff09ee5339ae4bd645b0567f8f32bfda90d24a99316dff49a77426ce3c757846ff8d8b2ae24a9512958e79b24456f72434c48df35507d4e39dd6ec3bbb82d91e9f3a61b7a3d5ac303d4dd8cb0e0f782502a55a6adc73e19370daae5e951391b1ca3f14e6dbcd014826c1606aaa5cb2ad2793c66f37b77bdea6a6839267e077b5f259a9631ab2a90efbaa00d4b9f2d00f3d250eda5a81d623d7167d1e0aba066abc73b4226957fb4224b8ed58533f5277147599f3d3265ff9d180459c8b7afda35f1cc8aec7a5a32e54a23f564c3d4672ddfbf8871ecc11f5cc790ac8e8b8817abcf6dfa5c6704184fe21f4feebe5be7afdf4b305f77280b210210c80a0221bb21a01a070dcbc7efc32d6085365b29e1b11c67c2fff82c3c7e04f59bb769106e8212271bc6423a8a4b964a1979c7756c6060c677ca4699ec56baf1d136ed8e8a562fee7183d3433c806b54ef78be2fafe7eb9e51625c863459d9cc729be4e041740d680f7f499ca6bcd84dbed3b19d9d58d2a4fc1bad6bce19c6552a7c3e49c3ad391a447e94f2dca2e8ca6856dc160ce0fc361b0b8d4d55b369b9924cfaeb8b62a9574ce342905b1e2d11759172c7fbded01cd10d2c3ab313661b9a6c10f063166353e7785382a8c3e31304eaae5a06e0f662290564e1628b0ffc610e5f65ecca49019448da2305f1c43e1aafdc1675b6440c71c794ed2790c7300bcb1897017b4d237592af03cee2045e8ae5ec39d00e777b11a63f368a2343bba68aa97451772079bf6c6217740a83ab596ef0d29da4920f45bae61c67f8ca1e55e3cbf6f6f39cf33e36158f46816d30efd3739afb898c317b154a5e8e2ecd0315593fda9fa085d0d1eb4719ea905e41c566c6e1894e98b7fb255f3e371eff4430852b360c9531855321c5ff942601627970ecb08c10f5194f94fce22cba10ab8521846e00008618b1586651502a91f66a73447c3bb6b84f0513225cc869c913fbc7ca8ee49fcf1f898ede41bd202a6cc540373bc3dd53c94762ef106c132b1d3982f229ba2b7a8d94d42ff5d11d2c1c47013b6058be1b37a63d653d617659961ec64f43c13df2873206464910731f9cb63ec03f0849d4ec60a8f8afa1e6e75d264294c76fc2db01688b00721cd54738206a5e10a23037a9eaac2d82743c9a2f3ae4f7087d6c118c6cadbefe6c4a18190d133fb2a5d53fcc52b65e21b14992363bf1f52ebb9ca4943e46dc3a21bb8e523a7082208cbb0748d0ca178397ef85f9f82e7635649b76b47e3d60e98acd6818bef8fb97976c5ca85099bbb1554e18d29967ff7706bcff679c22d73862980e002444513455eb9ed77a0dde9baa2af603914e5385f0491ec7cf4fafc918a0b687e7ac6468e6b743cc3a37f9ac5a847554e9048afbe8fcf79748db55ccb354dd93741698fe09b6629699212185a93bd7bf6942ecc7c30216671ae9cec15c8f87cf27918e4b21925ac3945f41fa5d768eb909c62f24556c9dbb64b42aa07284f9eb48d59d9aa865250406cc6d63fd2bd2a94780cf4adbeb31cbf1c5d03373387ab5df16fa6cbec1798353009be68f337a23e525ab412df2f9b55f02b92c04b5a71d1b282bc53d3218b63a7e7d675d657735dde3e5d498ac34c6b432e28b8d1a9ade67e80014d9f6abbc6e645ac8e254ecbdfc89eef18b335f9bdf65290133c37f07a50c01fb0093ee7a7ce7816667309c2459631ff0d4dbbc70c3c227c92b086bbc6a5730ddd4890019ed2f8de7e717e5e70d12e371fe173c97eeff368ed35be6eec4d5b5170cde15462c44be8286c30063b5f88498fe90ce13eeff7272af3a314132adbe287d7b521c7a3d45962a25a38296f21f72ebf1b1e35173a0fe1b87e354fa4101f202a935e41e54c497b49da2336e3afe57c523f2b9d935c13f8029481aaa82e02809f623d808560231a9cdcf987b2e5abcaab048ab8a9a4aab5aafd03162a664b48a01df5a5d57b25a13eb13cd5fb0f09a88193380413bf0993da59d97a03bf48704cf551f73e2b556c7274ad5c35ff17d81ea8317692c63c612fa6ef9d13b3b93c7cb00b2513d87da4ac5f9bbf99b3abc98a5272dc05921a322f583d694dc84abacdb248d3ada45bfb8b10263eae08c94784a3d7e574d1918b44f30a3df08aa7add5ac08c31aab18cdceb2d7f55c44dbcd40b45b269047d211b95c424a7062cda849d684921cd9b1d9ca63ec28f8533af719b43226b2a065d36e1ac8a2ffb5a05292fbeec1b4b1ffb8290dccc58843deaeef9407dc0742177ec913116490639080d28b98cdbfabb6b7a57e8b15c964aa32a205d3ec1d6175fc1319cf6290a7a7c4e0474dd0bcb95a822e969d9f791cbba2027bd440e88f824df0dd75ba3fc4a9800ad1e394caf9eedc40f4ee4177086cf72369b46e54315288f42dd29ecbdccaf3ffa6ed6180513f2fa8d1d541f7c7c6885c0805fb50b6a8b90f2e215e3246178eeb05b61ab3ec17f08992b60ba79b01d58e0a2d8bf1d66d2d953906a4cebf5658b2407abe2b215fb6ca10d2c2ccefa35ad3df59ff25aabe44f5cf3d38c57bf4e4fc286c199ea6ae451b7b91d88c6f701b6410d2b0b4997c7250862a819c062083871b53051f911ee751bc9ba9c126c581d66c6adec51d9f256697fa1a20e9c49c804406cc27ff6a83bedf5e60fce9f3798dc3ba88b4e6d6aa5ac991b5f1abec71f7d3cd87b066d418464b432e8497c656d00e8c550accab02f053d631af983cd64560bdb99d320adc282404595a15410bbf367f76f0eee1f170c29f867f8988fc5960fa49de875bff65edb59584679766087a6f87162b16da1cabe7ffa8430066a651bddb767667e77a3c042c5d4bee99121309d9d9bd7fe24a531cb9cae00b5edad0015bb75732dfa242853c93d6976500e3b70d8467828f6db9bde676761c201adf047dd7a35f6a94917ec6fc71357f377ef471bbb8d8cd9d58e4ef90d72a3dcdace480551084f79286b4c89a655db5376f00d7d6a11c63da5bfa8c3468d4ab3def2f7579dddb6de84e9d565efca70550eb6a9703fa0123dff129ced3ca824d501255d75276b0910e36f28a093c93063629fa8028264a32331eee42e434fa6952bec031070a74d400cd296e857e472c7a4d4cc4fba4b0c3ef3988a4cceaa6138747f42f22a79697700be858fb19bc3b022d4d07bb54736f092550563d3c2c87bd465b1c4060ad3560ba4b611c53f502d27a92966b08c468b4efe633e0f6cbe97b05b7d4c3c889c0e728a493b227d73ec88f4e659d19e0370d84e141195eda870bee55376ec3872b6142fba5ae3d0e783810da6534805c5e88c5efb10d03f01074fd99a85dc3a9526043548c8aa2aca847eb38e656b23e2a30993b8387e0be0ff5a22d3bf93667e684bd2eb77bd7c3a88a97ee55202812d12d158752c243d1932dbd05094db23f2caf61d9b63e43d5e66e32c31a60dee9111738c88e9039b02a21992f1a11470dabfeceb8af69b9c6d0c5bd8d955ea62feb7c0ad74a484a1ac760711964b466287fa34daa858ec06433e741d0b905f951f15101b1ea04d79ba40ecfb50d7e8f7cc9aa5c53e4ee0392fc8639ab65e8fb73ad9946ebfb09493a3a6390342fd865d4ec8cc939404932028b2fea7cb8b3a5ca0a8376af241d3b2430afb2d91cece9094614b31a75a8b0c4e3016b757b6275ada3d74932a3e8aea3b4c9e5fc50dbac67d68a8ce23cfcfb9d12337ec76355cda5e3b58d0d1f6c95f187785946e03d9991e06cb5d5cf6a1f45cef3acbfa1938bb5c5903293952d8807de878f05c5f87f92b762abdc73c3f7b31902122eb0b2268fdc7584416a8d5871a38352b3282af5d68b97dc0152f3edfef789227105cb2dbae807f95afd184e54f4bff53307633a04183a19512636ef4f7bb2db182d5ec589f860cd0c7e50111dc4463d29332fb69a6038439bcb16a7edd1de094fdd23c8c1afd8889f3819d86ce5bb567aa2605ddf846ab2a571794065a487b0653fc48929c416157e062aff4599d31409af505a3d3a167bdfaa4dd976265decca84716048126b650947a1d54872296c87c5ec1fbb0e6e22ba4ef7edb1862f5c7c576990051cb670b0d333c8e50817fb438b2bef8e8d1c6a10bf4743d4ba16c6bed3fa2dc09f655e06ff2e44a641ad58e41e752ab717088bd841d23bf03fff61e44a4654de1b7d426ce977c41828069bca7c745b78e02fda10dc1d39f0b99ecc4919da69100714c36f8943a1ede499a66e7a3c23044f9526a0c6d4ebe6df8cae5a532f861b312db17c237a18827d28b7d465ef8de2396a3a833ac226077bf709578a0218c7b198f0d23bf4d6c20f7b0d1351242174c06e913808e1d0a9329348fbd94890494b8f420cfdbb9417d625a11519a5fcf8dd01c0ab0cc69f232cdba3cd1fa8b25b9e4bd855d481d98d74f612ea4913ee29e26ebf49e74b34c1debbc4c260b15fbd54554a1db39832182516638c54bd3e7c81e5ffb10a05365404f294a40730e5fa1203cb8e3dfa7b74747cefe3abbd0363d5527fc3bfafe327a7bd22c4468412de9e604b2fc0e075e0ca15fbc2cfe6ae2b68a86f8f69d514d65ba6de0f104a2a4f3e7d2cf98d620ec16912e5ac86a37c598cccfa92c9988960e1914957f1f5e1f8a47238cbde4edcba7e6e926452d2b24d7ddd0a25302b2d21949f5768868c6f6a67bdbba5109333d99adeaa21728fd8946f9d9a53c619e3ce5b21ec02de8eef198cb9b98e404746d56927c6406f135ca87364e07833ed0b0fcaa14dde63df3ff569aa1e3efb1dd4537969f4d6ecc6332283d1e7937c8c6fbb5b7e35e01e01d58e027b0df763cfb82a8d25367722be90d428070abb87040de69fd57ba350dde70292a753f5ebf95ac02718fc3404617e20009de365cc076091d2513774551c0525cf4a5bc76584f865410434e8b0664f213cb11a9a27bea1fc102692432c5ffbbae1d95932b322ba2cfe46fa692b0fd8a75ba88ddc30c136c8d83fc1b9a6a4641bcedad3e9b10e4edb1e3a8567cd2cbd0901205a7aae0a4f0cb9e052ecaaa7a0ddcac039e3ad043355383059d3dcd2055f8a31ce87c25a83fd685717c40beb9fefb932fd23977807d857f190564f01932ebeb35a70532c3e16620782297fe52e8dc624d103e25c7f78387275a3bdf1c1695f942d59011125504a82c18ed9059df4bb74b41398434e6f26689197143f8695fc93a306d94468eacdd6211fcfb307ec637a13f8771b1bd40c40ea95494dc6c404534250bc7b2c87abdad60bdcb6bd0c7be8e3c7e7a584d587e54b70883335e7948e944312aa56c72115c695aa1023937686dede2269c6c7127", 0x2000, &(0x7f0000006e00)={&(0x7f00000061c0)={0x50, 0x0, 0x2, {0x7, 0x2b, 0x7, 0x10058000, 0x0, 0x6b, 0x0, 0xab, 0x0, 0x0, 0x8, 0x9}}, &(0x7f0000006240)={0x18, 0xffffffffffffffda, 0x6, {0x1ff}}, &(0x7f0000006280)={0x18, 0x0, 0x800, {0x80000000}}, &(0x7f00000062c0)={0x18, 0xfffffffffffffff5, 0xee2, {0x6}}, &(0x7f0000006300)={0x18, 0xfffffffffffffffe, 0x6, {0x9}}, &(0x7f0000006340)={0x28, 0xffffffffffffffda, 0xff, {{0xb, 0x558, 0x2, r12}}}, &(0x7f0000006380)={0x60, 0x0, 0x8000, {{0x1, 0x9, 0x4, 0x2, 0x8000, 0x6, 0x1ff, 0x10001}}}, &(0x7f0000006400)={0x18, 0x0, 0x7, {0x4}}, &(0x7f0000006440)={0x12, 0x0, 0x5, {';\x00'}}, &(0x7f0000006480)={0x20, 0x0, 0xf7c0000000000000, {0x0, 0x11}}, &(0x7f00000064c0)={0x78, 0x0, 0x936, {0x400, 0xc, 0x0, {0x6, 0x4, 0x1, 0xffffffffffffff7f, 0xfff, 0x2, 0x3, 0xfffffffe, 0x5b, 0x4000, 0x3, r10, r4, 0xff, 0x40}}}, &(0x7f0000006540)={0x90, 0x0, 0xe0000000000, {0x6, 0x100000001, 0x2, 0x1ff, 0x2, 0x8, {0x4, 0x6, 0x4, 0x6, 0x8001, 0x7, 0x3, 0x80, 0x80000001, 0x8000, 0x8, r3, r4, 0x9f85, 0x8}}}, &(0x7f0000006600)={0x58, 0x0, 0x81, [{0x3, 0x4, 0x2a, 0x6, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}]}, &(0x7f0000006680)={0x530, 0xffffffffffffffda, 0x7, [{{0x1, 0x3, 0x0, 0x7fffffff, 0x4, 0x0, {0x0, 0x3, 0x3, 0x1, 0xcb72, 0xe, 0x3, 0x1ff, 0x80000000, 0x8000, 0x6, r3, r4, 0xffffffff, 0x1}}, {0x3, 0xb, 0x1, 0x7127, '@'}}, {{0x0, 0x0, 0x4, 0x9, 0x5, 0x8001, {0x1, 0x0, 0x400, 0x0, 0x64, 0xffffffffffffffff, 0x3, 0x1, 0x8, 0x8000, 0x9, r10, r11, 0x0, 0x7}}, {0x1, 0x9, 0x8, 0x5, 'nl80211\x00'}}, {{0x3, 0x1, 0x8, 0x200, 0x3, 0x4, {0x0, 0x7fffffff, 0x74, 0x7, 0x0, 0xb, 0x7, 0x8000, 0x5, 0x2000, 0x3ff, r3, r4, 0x0, 0x4}}, {0x4, 0x3ff, 0xc, 0x65, '/proc/locks\x00'}}, {{0x2, 0x0, 0x6, 0x5, 0x9e, 0x4, {0x6, 0x0, 0x6, 0xc8f7, 0x3, 0x4, 0x6, 0x1, 0x4, 0x1000, 0x0, r3, r11, 0x9752, 0xd}}, {0x1, 0x6, 0x0, 0xc}}, {{0x1, 0x3, 0x400, 0xfff, 0x7fffffff, 0x1, {0x4, 0x6, 0x4, 0x1, 0x0, 0x81, 0x3, 0x3, 0x3e81, 0x2000, 0x1f40e00, r3, r4, 0x2, 0x3}}, {0x4, 0x9, 0x7, 0xeb90, '\x96.,!#@W'}}, {{0x0, 0x1, 0xc963, 0x6, 0x10001, 0x7, {0x1, 0x1, 0x4, 0x0, 0xffff, 0x80000001, 0x6, 0x20c, 0x7, 0xc000, 0xfffffffd, r10, r4, 0x0, 0xf079894}}, {0x1, 0x0, 0x4, 0x7, '\x1e[::'}}, {{0x2, 0x3, 0x80000000, 0x2, 0x70b, 0xa1, {0x5, 0x2, 0x400, 0x5, 0x4, 0xa2, 0x101, 0x9, 0xfffffff7, 0x6000, 0x5, r3, r4, 0x1, 0x2400000}}, {0x6, 0x9, 0x2a, 0xa, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}}, {{0x2, 0x0, 0x8, 0x100, 0xfffffff7, 0x9, {0x6, 0x9, 0x0, 0xf7a0, 0x80000000, 0x6, 0x6, 0x2, 0xd939, 0x6000, 0x5, r10, r11, 0x4, 0x4}}, {0x4, 0x0, 0x0, 0x3}}]}, &(0x7f0000006bc0)={0xa0, 0xfffffffffffffffe, 0x4, {{0x6, 0x2, 0xffffffffffffffff, 0x9, 0x6, 0x9, {0x3, 0xf41, 0x4, 0x3, 0x7, 0xfffffffffffffff6, 0x1, 0x200, 0x3, 0xa000, 0xafd5, r10, r15, 0x7fff, 0xffffff50}}, {0x0, 0x1}}}, &(0x7f0000006c80)={0x20, 0x0, 0xf5bb, {0x8, 0x0, 0x9, 0x4}}, &(0x7f0000006cc0)={0x130, 0x0, 0xc231, {0xa1, 0x6, 0x0, '\x00', {0x8000, 0x0, 0x8, 0x6, r10, r11, 0xc000, '\x00', 0x6, 0x9, 0x3, 0x100000000, {0x8000000000000001, 0x56}, {0xcc2, 0x5}, {0x5, 0x200}, {0xe6, 0x8}, 0xf, 0xfffffffc, 0x3fb, 0x6}}}}) connect$802154_dgram(r6, &(0x7f0000006ec0)={0x24, @long={0x3, 0x3}}, 0x14) 5m45.131798107s ago: executing program 2 (id=312): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) (async) userfaultfd(0x80001) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x18100}) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) (async) 5m43.813418235s ago: executing program 2 (id=321): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESHEX=0x0], 0x118}, 0x1, 0x0, 0x0, 0x20000000}, 0x200400c4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYRESOCT=0x0], 0x80}}, 0x8014) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000040042801400018006000600800a000006001700980a0000040002"], 0x30}, 0x1, 0x0, 0x0, 0x4008011}, 0x404c850) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0\x00'}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000300), 0x80, &(0x7f0000000780)=ANY=[@ANYBLOB="75737271756f74615f626c6f636b5f686172646c696d69743d782c67727071756f74615f626c6f636b5f686172646c696d69743d326b2c75737271756f74615f626c6f636b5f686172646c696d69743d672c73697a653d322c687567653d6164766973652c6d706f6c3d62696e643d72656c61746976653a333a332f2c71756f74612c687567653d77697468696e5f73697a652c696e6f646533322c626c6f636b733d656735256b2c6673757569643d63343534666439372d043761622d556366302d653431312d36616237363152342c66736d616769633d3078303030303030303030303030303030342c726f6f74636f6e746578743d73797374656d5f752c00"]) r5 = accept(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="564004c6852da7a299e4c397614090d1a6e12edf1767f157a1f56aa99ae4ece799867a434a96385a2431889907135326bb14c673d7770c1998cb322870dfc14904006517fc78c42bc2b442208492f1dd72f765ef3c8c6ca3b712d8aba99e301bef4581395a879b748730b758019cfadbbb0574f4118f84f9e8bc3989d2cc9a166bdeeb529f", 0x85}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000017010000030000000100000000000000180000000000000017010000020000000000000000000000980000000000000017010000020000007f0000004cd8b28951c9364f4de3d08520dad510618d9ad6106d28ef1b4518e422f1d1882db2fd4b197b543502f4babfd7301313242db15b1b11305c5e0c65b05562f3f4e98da2bcc6a55dd3fb7ce3381cc7381d547feb4bfe5ca83fc14ad0b7b5568a9631e5fe3d5eb66b69373eb3b35abfb415c647385380b23da02d44d6d24bb8bad83b10b6a6"], 0xc8}], 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002080)={0x1348, 0x3e, 0x200, 0xfffffffe, 0x0, {0x1, 0x7c}, [@generic, @generic="e7cce6031d5973306f531bac90c999740c71537e70afafca394a992c767ae03632329161", @typed={0x8, 0x4, 0x0, 0x0, @fd=r5}, @nested={0x12d4, 0xf5, 0x0, 0x1, [@typed={0x8, 0x80, 0x0, 0x0, @u32=0x7}, @typed={0x8, 0x111, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x12be, 0xd6, 0x0, 0x1, [@generic="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", @generic="a00065dbbb9a0da67b3e011803f0ed125f79077dba807b788c8333e961fc44e839abac89b3412c1c3d41c1aa4856693bb0078c15154e542c9861e5348a349e1e0482a90a9f232c298d3ff1085c07633641cd83341cee5f57c4c161620c24dc3abdb02198255eff0eea7db55e0f98d47e5e93bc70821a3866dbbb1d431fc541e224687398a9c2e5f92630e64ae59f6945dbc317358203dba3fa0b22686b5f4a1c74c0e4cdb88ece7adfde844883dbf3dcfda4d3385736cb39f0f8af63886bd3", @nested={0x4, 0x11d}, @generic="15a3892c2c69702a14b452bd8cbd6e0ad952d19f0d7d656a8a06e7e8e2e5cf7b19a8fbe2211114b2771893ab82c9ebfe6d13722df4500704ddbdd5bb4a8c3e6af51a2e9c8c8a6243ee1c7dd90962deed09411d88d76c7847e5d9a3927c7591f4d53a631cbaaad1f416198711eb4611", @nested={0x4, 0x4c}, @generic="e10a1fbc2d2a77395b8a327afa68685db61e6a9613af1ca680f43c163511a01a58578ee6cce557c034a03fe23fefc2f56eb5227ccf7a82f8a79caadc56160bfca0185c6aaa0cc58ba0365f87519734676953a4b82f36d6e4774083f2fb23c20ba4d325c4919cbf4bcbcb7da490c21b486b7d1c972b0a9a9ef9ec419fcee2864f68fbd38bf5f5ef2aa237867428b418a18be09c0e6723af2f6de3442d093ac757413f97b6981d2cacab7933d344431c5b62", @typed={0x8, 0xa1, 0x0, 0x0, @uid=r3}, @generic="c47432d5c2d91e83e8aa81dfec4714bf42c798143f3c50ba3ed7f204697fbafe28820f89eb8600cddd9fcc507ffc7bcd2bdd141625402076a76976b90f57a9722924243b75b88ec195d304b953d3cf06910449e8e26cff7c30849fb60c8bb880810e0dbceaff09ef78f1312a4cfa88ae8e6f9640598bb1dfd72570c65b07ee71045a19942fe34ac0e4246eb1f802ff4e4de0e4f12a7cb37b3fd0a67b16f1168a9e560f7c077905aa9ea49387c1156d195d63c24bfa6b6d4fe4ffeb7080055342e7c665efe620d00446e9bf"]}]}, @generic="d7458c4eb991a27cf486756a557e58d53aa487b8646b08c15d7d4db727875e92f53a3c869b63aaa1c7268594258fece6b7"]}, 0x1348}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) r7 = fsopen(&(0x7f0000000000)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r2, 0x0, 0x5) fchdir(r8) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0x20002078) getdents64(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x20000000, 0x1ff, &(0x7f00000004c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r9, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) recvmsg(r5, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb7b}], 0x2}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 5m42.799067393s ago: executing program 2 (id=324): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x22000, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) set_robust_list(&(0x7f0000000100)={0x0, 0x1}, 0x18) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 5m42.601353819s ago: executing program 2 (id=325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x4048aec9, &(0x7f0000000080)={[{0x4, 0x0, 0x0, 0x40, 0x0, 0xb, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x80}, {0x0, 0x4, 0x0, 0x0, 0x3, 0xfe, 0xfd, 0x0, 0x0, 0x0, 0x40}, {0x200002, 0xa, 0xa, 0x3, 0x8, 0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}], 0x2000003}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x1c1340, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x1) sendfile(r2, r4, 0x0, 0xe) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, &(0x7f0000000280)) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x8000, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040f304550700000000000109022400010000405e5e657ea9a348a6010009210101000122050009058103ff030c0000"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="200a07000000073500f4000000c57bfa6f0c5404b62a7cd44dba7bc7ec3e2a83f1f9b4f7ec5992334ded8652e423d32b2bc68e72ac1190b02f7547f455eb86a3f08f801880736957689a8a4d873ebccad2c503a31ae5cca77924f7f1e95a845e31518da349094f67a8501aa1e16ab81cb462be6a9330303de2d16b5e7a597232ba3231e142378f4f13106b391d6b11aee28683e206100867ebb807c86de263d396378c05622d789067f3"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x118}}, 0x240000c5) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x2d) read$char_usb(r8, &(0x7f0000000140)=""/1, 0x1) 5m41.617791682s ago: executing program 2 (id=327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x802}, 0x8080) creat(&(0x7f0000001380)='./file0\x00', 0x6) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 5m40.916675771s ago: executing program 32 (id=327): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)={0x38, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x802}, 0x8080) creat(&(0x7f0000001380)='./file0\x00', 0x6) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 2m45.470580333s ago: executing program 0 (id=1617): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r0, r0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$watch_queue(r1, &(0x7f0000000040)=""/166, 0xa6) 2m45.422292251s ago: executing program 0 (id=1618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) write$tun(r0, &(0x7f00000003c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x300, 0xca6}, @ipv6=@tipc_packet={0xf, 0x6, "e9e018", 0x20, 0x6, 0x7f, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x2, 0x1ff, 0x0, 0x2, 0x4, 0x1, 0x3, 0x9, 0xf, 0x3, 0x4e21, 0x4e20}, 0x3, 0x2}}}}}}, 0x56) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r3 = syz_usb_connect$cdc_ncm(0x5, 0x87, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x2, 0x1, 0x7, 0x0, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xcdc4}, {0xd, 0x24, 0xf, 0x1, 0xb5d, 0x2, 0x401, 0x8}, {0x6, 0x24, 0x1a, 0x3ff, 0x11}, [@mdlm={0x15, 0x24, 0x12, 0x5}, @acm={0x4, 0x24, 0x2, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x72, 0x5, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x9, 0xfd, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x5, 0x1, 0x8}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x7, 0x9d, 0x7, 0x20, 0x97}, 0x27d, &(0x7f0000000140)={0x5, 0xf, 0x27d, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "0283af5f24e0958741e10864f05bc70a"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "ea795851770028cbb3a5765931425fdf"}, @generic={0xc1, 0x10, 0x9, "eda0a5b87d1516c2d6ce54c1e2d7a93d7fcb267f69f206d70dbe160fad77e9a072083e06dc11ca71b5003da8bc4c09369400c46f28df2c7947e542dc9251613ad749f275f866ef15f5a6e1cfcaa5f7ebd890de13a5837443533aad03c09f27ca325d488b01fe5437695acbda8cc00929802bf94c1c5912172ed043b82796528775504d6e9e131a66fe1e81dd44814cc9bd4f143e16bc723fb79681d28e22edf7acdbcec36737bf0ec4d5c21e8514dc67b22d335bafa421a02a6d4c821f78"}, @generic={0xc5, 0x10, 0x0, "42d143e567d8454443a948ae262774e61def5c1d1948f63f809398612004579d6f55e78fab20a07bad9817a0fe380c6a8265f0e2ac50309eafa73b6303cd91fe6215eeb21be6d8e7402e4baa504a2065dae4c97b32a03a7ff2c969ca9eb4e14232b93a2b69362bae1426697e8c4b88331056853c85f5a651a5b242c3b09568bef70cf8e92a43d34ae93403b79bb030dd5d390867b6752688b1f6af700a1fdd13c8bd06b9a9476230fa0514d9030d57a199205ad7e5e19ae832bc9d75e5316c35dd5c"}, @generic={0xb6, 0x10, 0xa, "ce71d28427b5fb1ae6d133a47084d688d7f22f739b8ffaa3c1fea91a00244dfc5a4eb1492e879294fcca01fc16ce3fef41131d3d0c782f9f64fc20f4c64b3b610f9f848b393f5990558053dfae70ac508e1511dfb0a48d45e00c35f667de643350276359b7fd64c2b104d0097e585ecef633d578b902f5c531c3b783e7dcb1209f0caf65d1f0ec45e4eec9f2acd693110340b486f9b185e0e74c2b91c41b157a0a4ad303a43c0a3c3c9849d3247b8c1f11e2d6"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "df26e9b084c2abfcdb73716f9810e916"}]}, 0x5, [{0x8c, &(0x7f00000003c0)=ANY=[@ANYBLOB="8c03fcf1584069adf274fcde350a3b085f5b332f3c309f4706cf941378c05710a8e4a686e241a0941509d6d933690abb327c86a5bac4fa201cea30db7714733b29ce74af920d8640136ee71538561ec1c375c78cabf9d42f85e6cb6625ccd6a38e4819c23f178a28d142b693cd64acede18ee984f0d1f9d85274f65400"/140]}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x81d}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2c01}}, {0x13, &(0x7f0000000500)=@string={0x13, 0x3, "8597a3b7c8f601512bfc02321d1e3523d1"}}, {0xbb, &(0x7f0000000540)=@string={0xbb, 0x3, "046c3a36a96009d469a617655c3003060654c26eae08882214c22f2b4bc70f37f07fdcc02967296d16a0e2fd009521d145aeaedb2b4f2aa01391f1cce8b9ea4ed213a3c00f1be34845ef4cbeb67ce27dd691ece7c5798dd9d5865e4a2ccfef484187a57c4c3b78a64392bcef2e7e708a28d1c925d2e41d73d10040fafe49a36e6b36116232d16b74248a389f17057e752f0977ffa3c7de6898a00ef3001d06b3f4ef36342156eba258592452e7509d9d2531d93f7ecf60214f"}}]}) syz_usb_disconnect(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r2, 0xf648d000) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x5}}, 0x2, 0x0, 0x0, 0x10000000}}, 0x2e) 2m45.026402445s ago: executing program 0 (id=1620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="1410", @ANYRES16=r2, @ANYBLOB="00022dbd7000ffdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x80d0}, 0x8080) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="915d5fb5afa0b247518dd4468f45aa03c3c27eb7c83cacbe626e35cd02ae9197923ef3deda238884738e87d57a61819a8666bb47b0b0fd3f8538367968851519fad059cd044a362ce083ff7c2bd4a92a24b04d0d324dee0e100969d8e7a45e8526297a2c3b7af4d89b78e3ba9ddece9592e780563ba392808bee6513f6a69943075ccc844a67167b068ddcffac4073a323091d8d53fe6d862fa96dbe64c781fbe2"], 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x901281, 0xa0) write$qrtrtun(r6, &(0x7f0000000040)="b4a2e40000000000", 0x8) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000580)={[0xf82, 0x74d6, 0x7ae9, 0x28000000, 0x2, 0xfffffffffa045e83, 0x766, 0x101, 0xf, 0x9b, 0x1, 0xddf7, 0x5, 0x0, 0x7, 0x1], 0xffff1000, 0x302080}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000047000000000000020008000300", @ANYRES32=r7, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r4], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x4080) syz_usb_connect(0x2, 0x51, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000099473089911216859980000000109023f000100002000090403000100000000000006034000070e0509050700000004020309050800000404fe0709057ca73a706d40d28f3c0400ff030302046b88f74cac0b1b15a0a44654858f13b893463bc7c282fdad36212f980622c9a37387034cd890d9e1adb230e5c3967097444f8d712f4c5e555bd3286c14070d8a8ea5827093081bfa889c26d5ee4eecaad3182bb148f1927e6b0703bf002f133215"], 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000228bd7000ffdbdf255100000008000300", @ANYRES32=r7, @ANYBLOB="0c07bd9cc6e4bea7e9bb057334ad4dcdcd82382ca5d6024242f10e4344ae96be009900020000001200000005008a000100050000000000000011000000000005"], 0x5c}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a", 0x11}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x33fe0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r9, 0xf6486000) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) madvise(&(0x7f00006a1000/0x2000)=nil, 0x2000, 0x0) fremovexattr(r0, &(0x7f00000001c0)=@random={'os2.', 'nl80211\x00'}) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m44.253619645s ago: executing program 0 (id=1627): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x7e5081, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async, rerun: 32) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) (rerun: 32) 2m44.200891262s ago: executing program 0 (id=1629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r3 = getpgrp(0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x54}, @void, @val={0xc, 0x99, {0x9fb2, 0x4b}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xfff, 0x41}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x48810) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x1402, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r0) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, r5, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xff}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x3}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r4, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8180008}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0xb4, r1, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x200, 0x5}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "ddad23817add17e266bec1dbb0fc6baf"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="781613835540"}, @NL80211_ATTR_PMK={0x14, 0xfe, "67f1e3ffd4e961c5c688a420a5ad829c"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="74123f23a1f6"}, @NL80211_ATTR_PMK={0x14, 0xfe, "84a3399c6faa08d0074c999f26080568"}, @NL80211_ATTR_PMKID={0x14, 0x55, "09c96b0891b6cc7163ce668435495538"}, @NL80211_ATTR_SSID={0x12, 0x34, @random="7a247073d6c8bd9ad9bb6e6f12df"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xaa8}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008010) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000006c0), 0x100000, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x58, r5, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'rose0\x00'}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x184}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x800}]}, 0x58}, 0x1, 0x0, 0x0, 0x8800}, 0x20000912) ioctl$USBDEVFS_FORBID_SUSPEND(0xffffffffffffffff, 0x5521) ioctl$sock_bt_hci(r7, 0x400448e2, &(0x7f0000000c40)="92bce1e3efeca3bf626b43c1c83e0e40227f5f3ee1896f49438a888ce9795346da9d7a66aaac4fd77b879dcc8ac0b6ac0d049df2a2f0481cf93fc6fac84826c5917e05c01eb2cfd7b4502d9125164c93cbfc1cc1f452893a49db4cad529d14cb5e86cd1fc74f845e7c718a33769e433156d502fa7d") r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), r0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d40)={0xd0, r8, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3eb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x20040000) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000ec0)) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000001300)={{0xfff9, 0x6, 0x7, 0xffff}, 'syz1\x00', 0x39}) 2m44.136538673s ago: executing program 0 (id=1631): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x23, @loopback, 0x22}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x1a29, 0x4) (async) sendmmsg$inet6(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)="46f1", 0x2}, {&(0x7f0000000500)="79e9d08dd9a9cfde8070212767993e7d176b45d29184e29616713b6a051d7c09966c05051f64f18b670952f890cd74643d2a4c17b44edb56530375453105b928466b822a92cbf1b912061b0923785c3738c75d457ee7256a4b05a4f816352c8c9e7469c0299b37235170dd42accc762f154580dd7e656cd03887e36beddee56e0bd0dc70c15518d3c3226aa764de6c3539408ef3b0caec9a1b01d9a9f86bbf0b5e4887cef62248d505f9ad84bd77f0ddf8cbe2abeb572909f09e118e6cffb76b78f0850ef74d0b271f3e64bc78ff3280", 0xd0}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}}], 0x2, 0x4000001) (async) r2 = dup(r1) syz_genetlink_get_family_id$team(&(0x7f0000001ec0), r2) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f00000001c0)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='exfat\x00', 0x201a000, 0x0) 2m29.067716973s ago: executing program 33 (id=1631): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x23, @loopback, 0x22}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x1a29, 0x4) (async) sendmmsg$inet6(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)="46f1", 0x2}, {&(0x7f0000000500)="79e9d08dd9a9cfde8070212767993e7d176b45d29184e29616713b6a051d7c09966c05051f64f18b670952f890cd74643d2a4c17b44edb56530375453105b928466b822a92cbf1b912061b0923785c3738c75d457ee7256a4b05a4f816352c8c9e7469c0299b37235170dd42accc762f154580dd7e656cd03887e36beddee56e0bd0dc70c15518d3c3226aa764de6c3539408ef3b0caec9a1b01d9a9f86bbf0b5e4887cef62248d505f9ad84bd77f0ddf8cbe2abeb572909f09e118e6cffb76b78f0850ef74d0b271f3e64bc78ff3280", 0xd0}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}}], 0x2, 0x4000001) (async) r2 = dup(r1) syz_genetlink_get_family_id$team(&(0x7f0000001ec0), r2) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f00000001c0)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='exfat\x00', 0x201a000, 0x0) 1m11.894442788s ago: executing program 3 (id=2305): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r1, 0x8, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x40041}, 0x40840) 1m11.769075134s ago: executing program 3 (id=2308): socket(0x1d, 0x3, 0x1) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280), 0x109502, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$snddsp(r1, &(0x7f0000000880)="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", 0x1000) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f00000006c0)={0x1, 0x20, 0x9, 0x4, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xfffffffffffffffd, 0x9, 0xfffffffb, 0x2}) 1m11.092851408s ago: executing program 3 (id=2314): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/68, 0x44}], 0x1, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r1, 0xf648a000) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x1}, 0x10) close(r3) recvmsg$unix(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f0000000240)=""/102, 0x54}, {&(0x7f0000000480)=""/133, 0x90}], 0xfffffffffffff91}, 0x10020) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000380)={[{@noswap}]}) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x838422, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m10.814365639s ago: executing program 3 (id=2315): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close(r2) (async) read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020) (async) r4 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000540)={0x0, [[0x223], [0xfffffffb], [0x3, 0x0, 0x0, 0x80000000]], '\x00', [{}, {0x10, 0xffffffff, 0x0, 0x1}, {0x1}, {}, {}, {}, {}, {}, {0x3}]}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r1, 0xc3a51000) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket(0x10, 0x3, 0x9) (async) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r5, r6, 0x0, 0x7fffffffffffffff) (async) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, 0x4}) (async) write(r7, &(0x7f0000001c80)="b1", 0x1) (async) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x5, 0x0, 0x14, 0x12, 0x61, 0x0}) 1m10.729741513s ago: executing program 3 (id=2316): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000001380)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0xea68, @dev={0xfe, 0x80, '\x00', 0xb}, 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="4c2450c449", 0x5}], 0x1}}], 0x1, 0x24040880) sendto$inet6(r0, &(0x7f0000000380)='\f', 0x1, 0xcd4e8ec47367e7d3, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}, 0x1c) close(0x3) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) 1m10.275982235s ago: executing program 3 (id=2320): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004180)='/proc/mdstat\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000240)=""/263, 0x107, 0x7) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000200)={0x0, 0x0, '\x00', {0x0, @bt={0x8, 0xdb9, 0x0, 0x2, 0x4, 0x7, 0x8, 0x7, 0x10001, 0x8, 0x2, 0x9, 0x4, 0xfffffff7, 0x6, 0x1, {0x0, 0xe7}, 0x4, 0xc}}}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[], 0x30}}, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x97, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000040)={0x11}) ioctl$IOCTL_VMCI_SET_NOTIFY(r3, 0x7cb, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r5, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x21, 0x57, {0x57, 0x8, "df083fff318d08df0f405160129621999f837deee8e2630c8ab647d3ecbbdfee2a64ef06a10bed4633c6842141f6db1e7d0e41c79dca285f53dee13ffc020dcab68382a592007c7ddf3ed94bb185d8d685c337ae88"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}, &(0x7f0000000ac0)={0x0, 0xf, 0xc9, {0x5, 0xf, 0xc9, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "a6b9cc56f61ff1dcf2db807886f27c44"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x4, 0x7, 0x8}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0xf, 0x5, 0xf1, 0x0, 0x3, [0xc0c0, 0x0, 0x3f30, 0xff0000, 0x3f]}, @generic={0x86, 0x10, 0x3, "acd9a6d1b81cd08f370e6d89488f2b361b2b8e8925bfbff488258ff25639f25b2600d63fa1f91ad5cb2c3e6f7df84cc052f48dff09ada313154e8b8662a9eb29541d2a29134586963e1fe19ff47775760e624a120af5ed5adf1075f6f30f3bea1c726a98a79769d779abcbe0b686ee49023a415a7c5d9754ef684c7b2bac7e4596a60f"}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf9, 0x4, 0x9, 0xc, "93623d3a", "97cb9638"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x8, 0xe, 0x5, 0x1, 0x52, 0x1}}}, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x20, 0x5, 0xb0, "7a10771461ca0cbb253db40641b8895e836316d08dc3346ea20cde5afc269245669bcf7ff82cb181d3a1f6012866f728ec9212e5cd0c10b64f4db6c21e07a786bf5db37c713ada820fc654bb7a9fecff98e42de8b1e5331442390c4e4b1619f88ca047db340e4d81b4d2f993f922fd2ab305dbc9b9576c39c9a370b36478391ca50c3e364b6380007a9119859c821312a7b233bee6d87fe1c67a4be67ddf2271ff252604806981534fc895a1c8d98c71"}, &(0x7f0000000580)={0x0, 0xa, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x2, 0x30}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000700)={0x40, 0xb, 0x2, "2af9"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f0000000780)={0x40, 0x13, 0x6}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000800)={0x40, 0x19, 0x2, "e2a1"}, &(0x7f0000000840)={0x40, 0x1a, 0x2}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7b}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x8}}) keyctl$search(0xa, 0x0, &(0x7f0000000180)='ceph\x00', &(0x7f0000000a00)={'syz', 0x3}, 0x0) 1m9.917833194s ago: executing program 34 (id=2320): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000004180)='/proc/mdstat\x00', 0x0, 0x0) pread64(r1, &(0x7f0000000240)=""/263, 0x107, 0x7) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000200)={0x0, 0x0, '\x00', {0x0, @bt={0x8, 0xdb9, 0x0, 0x2, 0x4, 0x7, 0x8, 0x7, 0x10001, 0x8, 0x2, 0x9, 0x4, 0xfffffff7, 0x6, 0x1, {0x0, 0xe7}, 0x4, 0xc}}}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[], 0x30}}, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x97, 0x0) ioctl$DRM_IOCTL_GET_CAP(r4, 0xc010640c, &(0x7f0000000040)={0x11}) ioctl$IOCTL_VMCI_SET_NOTIFY(r3, 0x7cb, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io(r5, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x40, 0x21, 0x57, {0x57, 0x8, "df083fff318d08df0f405160129621999f837deee8e2630c8ab647d3ecbbdfee2a64ef06a10bed4633c6842141f6db1e7d0e41c79dca285f53dee13ffc020dcab68382a592007c7ddf3ed94bb185d8d685c337ae88"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}, &(0x7f0000000ac0)={0x0, 0xf, 0xc9, {0x5, 0xf, 0xc9, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "a6b9cc56f61ff1dcf2db807886f27c44"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x4, 0x7, 0x8}, @ptm_cap={0x3}, @ssp_cap={0x20, 0x10, 0xa, 0xf, 0x5, 0xf1, 0x0, 0x3, [0xc0c0, 0x0, 0x3f30, 0xff0000, 0x3f]}, @generic={0x86, 0x10, 0x3, "acd9a6d1b81cd08f370e6d89488f2b361b2b8e8925bfbff488258ff25639f25b2600d63fa1f91ad5cb2c3e6f7df84cc052f48dff09ada313154e8b8662a9eb29541d2a29134586963e1fe19ff47775760e624a120af5ed5adf1075f6f30f3bea1c726a98a79769d779abcbe0b686ee49023a415a7c5d9754ef684c7b2bac7e4596a60f"}]}}, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf9, 0x4, 0x9, 0xc, "93623d3a", "97cb9638"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x8, 0xe, 0x5, 0x1, 0x52, 0x1}}}, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x20, 0x5, 0xb0, "7a10771461ca0cbb253db40641b8895e836316d08dc3346ea20cde5afc269245669bcf7ff82cb181d3a1f6012866f728ec9212e5cd0c10b64f4db6c21e07a786bf5db37c713ada820fc654bb7a9fecff98e42de8b1e5331442390c4e4b1619f88ca047db340e4d81b4d2f993f922fd2ab305dbc9b9576c39c9a370b36478391ca50c3e364b6380007a9119859c821312a7b233bee6d87fe1c67a4be67ddf2271ff252604806981534fc895a1c8d98c71"}, &(0x7f0000000580)={0x0, 0xa, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1}, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x2, 0x30}}, &(0x7f0000000680)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000700)={0x40, 0xb, 0x2, "2af9"}, &(0x7f0000000740)={0x40, 0xf, 0x2, 0x7fff}, &(0x7f0000000780)={0x40, 0x13, 0x6}, &(0x7f00000007c0)={0x40, 0x17, 0x6, @link_local}, &(0x7f0000000800)={0x40, 0x19, 0x2, "e2a1"}, &(0x7f0000000840)={0x40, 0x1a, 0x2}, &(0x7f0000000880)={0x40, 0x1c, 0x1, 0x7b}, &(0x7f00000008c0)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000900)={0x40, 0x21, 0x1, 0x8}}) keyctl$search(0xa, 0x0, &(0x7f0000000180)='ceph\x00', &(0x7f0000000a00)={'syz', 0x3}, 0x0) 34.010495224s ago: executing program 1 (id=2407): getcwd(&(0x7f0000000440)=""/158, 0x9e) getcwd(&(0x7f0000000500)=""/247, 0xf7) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xac) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) r2 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0xc32a4cddd557707a) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb635773f04ebbeed, 0x80010, r2, 0x6000) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000200)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58efabdae53e32626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbfe8dc1e", 0xc6, r3) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) write(r5, &(0x7f00000000c0)="83650002", 0x4) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000980)={0x842, 0x1, 0x0, 0x40000}, 0x10) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./bus\x00', 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000a00000004000200"/24], 0x18}}, 0x0) r7 = add_key$user(&(0x7f0000000180), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r7, r4, r7}, &(0x7f0000000700)=""/253, 0xfd, &(0x7f0000000400)={&(0x7f0000000100)={'xxhash64-generic\x00'}}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r1, r2}}, 0x18) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 33.84272918s ago: executing program 1 (id=2408): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(r0, r0, &(0x7f0000001000)=0x9a, 0x7ffff000) 33.644463335s ago: executing program 1 (id=2409): socket(0x1d, 0x3, 0x1) write$dsp(0xffffffffffffffff, &(0x7f0000000200)='m', 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$snddsp(r1, &(0x7f0000000880)="9886b8eaa45733675ac37741e2254d90e015597fba1e576071ff13f953cf2752d3be82941cd09c594c4dc248d7e7e00cf70dbbf8a291d20bb5ff09ea3aec6494afbeb305f2fc44ceee35014e045a276c940dc5cafb24ba8d3bec9852035dae35f7e75dada4805107bb52d4cc82d80c612852f9eb60ac2067c60574409347e69bafd2c14d805a0c5728885ca3413c38ee57803c74ad5e1c1a887607c319bc0f8e4fbd44b387c5acdf0edb16ba30635f7bf8c344418ce2d023d23e3f8030f9bb56bcd4ad5d00f0cdbef319ac9cfe95bfb12300d54487c4feba1cd9653c0c353b14cac33dafd24363eb835dbac2c247ac1ec4d3d500f9fcdc347328796b0eba63ebbb75e47c3d183dd2a2fad43d00c2dde348e3c777427c1049b641cd4d9c59d899e1499862da58b04733fba66c3414dc0a5dfb13528a8b836285b375c6dc14871e828ac75289308fae409aabd990ac2e0c0a8af036dc7661084d82768bad1980e3e0a18f9832d0d7b3fa15ddf61b77a82a8ebf12a12e89dbeef95b175822a470c415fc3d0a1de33b6304269d4d7e4e8e274e03c6f9db7833f4b02123f728d057fb9e9af26e94bf9d94789d323e52478f74b003b6298aa76131cead87eacb2fa6e435fa11670977a822f954c495cf1e6a589eb8622779d2bd6b67f0b94c04379954e8a90f60c72a5751d7bbbee06e3aabd20c8b0cb07cd1242efec6550cc6e642197922e0f614be866be4998513b8e206fbfc168eeda89f96ef95d114c3bc9523400eb36de16eb30d16ad614bb2fa729b4f9ac1412353c1fd15b757d2999a2dce72f522a375f9661ba8968cfe1172a574f418bf2c70e4fc9c0502b717b0453eabc792c375958e10ddbccbc5c459b1faaa61f8392049b78a3148b30d0f31c642ca7be910532e71cbe2273bbca3ef3f03b067d1d1f4e09befeef1630e11d73ae2e23de50209b9f62046212ab2702751503ceb086365ed934e4dd88110f0359c007c865c0db05aaadcae1d83a27909c3d791ce362fe5711429df6e286e9458ddb5b9192a6006e2828529e5f4c493fb893c25f1d4241dbcbee345e0c8df7fd79c7ec9fa90503f937628b132091481857026623addbd636dd8e4e259aa231ab60c7438c3cfaa738fde765e8908416e13587c474740e3f8f5a56d6d2af0139d57e735866513d8701367b7ad8172721a94e0474c9346cb239d72d69a8ed10ff80cccd6903069fd3c6a8821cf3fffd6f418722221f4aa5a3ab7119e5a94fd991260b289938baa919cfba268d26544597a4345a24d2877fc62debaf52e67dbb1827f04c62232f299237d102b9e2f8c0ee8a18469eeedc8d638e52f572894a4a03d1d41d1341d8d98fc98bd6a0247ee5e070bac442a0b466faedfe485caa8789bfa9bad339ba6ca74390355508de495c5bc13a66bdd071cf15ae15ab57ad90717bbbccbe037c38bc692b17c5b78bd7dfa1dd11f2bf379fe467ac93bd7597fdf90ff4cb5160a9834ee246de58007dbad6eb9e9d477ccd77b32d2ec619be1c57ac28d724af2d12ff05043bf20fdbf45e6aef40c92920893f11f88ece58ce5ab47c87fe17b2360c5b527c1375bf9417e275723b0eed2d18d46f8eae50a1f116411139ab0ad95622fa8183ba96a1eb508f5494b0dd24dd92e4decb5efbd9f7e8abc16f314711415424a1b725c44d59dc4f4d9c3f52579bb3af21e09077aad31a0e6a3be2ddf303080b03e6bc6f50d14f45969f9ee18ec332c56aee2b322efb2b555fd90ce4d77c0131b999d20aac6ad06641b8b3a9e5e9b6c78bf54d5f24441f0f2a69df6f589a9c30a25aa5001a1d7a58c773f0d0d08cc4027f1b426ffc934f9ce6e2fb9d29bb24f87afa124a5eaf5dc22599ac22346e540c71a603897c4ef2f4a42c6969f8d90f737811454728b80d5890ebd17ae6fe3a5530e0c02a365dd87246586908a5b8d98e430b3ff1596beefc0c94eef07de5d3d8219949a1b3e52eba1410d2f252695a137b988c85b68a91aa57f26f22df4dda313a00ee116d848a51b93a1334259b3ec06bd001ca66a20f0fcd7abd35cbea75c0e6db8e433de636fd4ece590ccb5a925372e89922949ed3077dabb314f0124dbdaeaf67c644fa1118e6bc9ac78ac78ddbef2a9841cf454f70fcf41d6709b9f37107e775715d82d88b8e79b8f01c0918d069b3d65019173cdffda48225fe3767299420bdaa82a357c46ca9481de41255ad92389719002112358d679dcfdfda7f8be368e85aa70926d781df548f5bfedb0b5011db58924a885f506556d027d95ade891626f09ed6587ed45ca88f8e6336f6ce6bf895e1b235b814236a6bc7dd48bdf5efaeed76e169e80bf1503061176922ba7867a1b231aff5a5a2be1a6f2fd10d309a6ea643d2e23dc33f270e5fe23cef356602fded51e2f54109f33c64beca50c8faae5a98b1668b97cb926f7bc835d83d0a514dd745c8bc6f79dd4629d42ef1d211393b13aadfe44118b69c6b231ccf41693619a1a57975bd9789cfa51dbc5ca73e266249a7e110d02e4b3ea86deea5382dbbb2db39d21617cddc108bcfb84ab0fa3b71332325a71be082852906427b1040801e8bc1e8ee540b9ac6d116e7b08bbd7ac6143b86621e8a4c753bd11c3925c56394b5777f789035794a7902c656f0ad610f9ca149b2c93fc4af6ac409fd393e16410e192f1fe2d52d890c4275a60200cbf539215f1c9b0fc09416fcd5c3a80839fd8cc4b38f81b813949ec523ead8be01d3e0a53644121f1cb6e37ea3591e75e1875e413b831994ba0e0c8a477dc00590494bc5c4394dba0298f53e4d0d6bf8ebf7b677bd631076cc00454f90676176ac0522f60fecdd427c2fbf83f7aa8a6ea6ffb5b54537e6a04b95da455446d03f7aa39e3bf732afc0dbbf6ae3ee183ca9088d1458b7be8b8d6407191e2ec570b660e9a9023710d470ca976b1e132b234a1cc000062a9342def572a766b3e12a7816d5089ceacfaafec3159e6ef2c6eb140f4a1b53ac73662be1562f3f5214109b46c1179df30de25935954391e3200ac6fd7a26d98147674b55c2e6d1fdae2de6e8a8e465dd8bb93ae311ab61e007ee9929cc164b66dc7428df906e9688c92c9062d0f6b3ac355ed6477f8369c083fcb416942e78f486a978ef44804e5d2c7f4566705da6c00fdfc2243871438115d9b89b720b817dd86ca815da764dfc32fd0ae662e9106fb96470b73d27be725adfd9285e46d2fba59f8b5ceb5f90912844f904eac2a7e308770dbe9b78172499bcd32d67f58121483c930d307e3534a712eaf3914e8ad44f8a2dfcdfcf4ee65bcfd204483f71bea68aa1c6f47b9a1ff54c6c75306aeffa6bbc096b60a5b426055a6081c87a8212986724ce68334abb99f5018648e20c647ca1b16a99b40dd48a31dc5e120ae9b41acbce69b1650bdc941a3648309d4c709d27f9d07ec9295d0dfeadf5646add4421874401c43883227bc5696f3df79cbd7556c0ae0b718acfae8e80252858762c3c7ad810b08249b0c1215db3a345783bcdc67e185a189a4b866a958674998cb6b2e4fd5b207ae6f99326a5bdd4a35a9e08e82d4c3cc74c01944b36f873279cafe161781545f25b995b08e1bd19037d170db4bc324059f2e9afae2670633bfe2b0cad211bcb25cf84e4af4d2c792dc9ca7ef24f3bf27ebb4290a00ee2aa18fbedf4c6463e322f6fb657d27bd7274e4f5e9be906d176786344aa63e35c3ae5b027e11bf79f45a60a0b0634d504200471c4b26942e4294c1152f8430d9eaaa1a9baf00a15b873a7e2d35540a2c60724320a989b9655d4df8826ffee37064846c7dfc36c1d6c77e57d1a777605830e0155acef205a6990332b4a0d9fd4a37a91a41023a14816dd3ad39ee049c5514cb64b741e95a06d64426579cb982ed7da7cc6bfa3192c30ff3c0638697d433e7ada67187fedc80ef6926afee83c5071d4200a371231b7cdbac340152e24ae17ff26c3d1fec7a8f7a8bfb2ef860f2f85db820803c076a400c29ea72f68f514a6de09fc0dfadec1598d0eb6d56ead4abf37fa9ba227270819b2306afe3f9b8661cbca78b542758d7365e0a1ba9620faca1e0a39f4fe1745e22117098b899368de2ed2d8b89eeeda93175cda93b7e9523d09b135ba01557683525e80c875d3369eed2585f9451df6f587c29e3ea32744fb0578d2d8953a528ac17eef7d636c6367613841338bdcd78e022c1b8264d807ce0d9013fe1413eec29cdafec54f1f162d9576f620c1d50bd1caeb1f5dd0bc97e75c366a663fdcff61c2602f0983f1d06f7526fd53d79ce9aafa188904271762b7a9582e98afb3ef9c3779b4e6c4419b8e7970dd7f8dd2efc33f3582fe93be59c6606553005cd6d86979f2707410e3c2c2cb43cdc5ca3e9f0e195cda3d89fe8b89306ac0aee2e829f1d463f84a0c045b1f528288a48a446334e10e420f397693f989686a6a26ca8ad365b179fcc377ee03cd9b1147b9aa59864c1400b939a013cc0a1d0de555cffa95c8d6d1bf32f505db6ac37ba4bc409178f20d91116874b5e0a7e9138acf8b4c3924f778e6111f0e7c3944c76ec19c1bd8f324b389e156c8ae5d2150225f836c1d240c2711c739ec27d28f54d65756f8081ebe3de7084cadc0cf4f21f62ad79d7f89adbe649e83829f0b9e30f2f1c622d4314a871ee7baf828a63cf6b0cff50951807732f08a3c9a70b8fef51db8fa1d8fcf62c3b27698f506101d80f120d5e9bcfe12d46338690f968cbbe961a5fd344cbbef6c3c0c4fbbad4f820370def66f9e3a1f8533aadd2cf6639773309cbaf710844f62d0765c862f3f6cb9aad632021e0831136033e78e83205d3a6931dfc2338328a1000be2fdc995c59ed1ce5dab1c14f33369ae4e46e1d6062af8b4271987a47fbc406c7db43dc6066592cbb46a43a95d0bd0bcfed681ab209e65f04d0eb219c6b21f171bd92c767349b586077e4ce00cb04d2d4a24f78125d9ff013a268369feafeefb2966e5d90849663bddda4a669f76a3ca4eeb8ae64538770421dd154217ec518bd37e8817ee76c63d5450f44320c7fa8b5b226950e770828da7731b8dabf997d8820aa810cced092197bcba5abe3802c18cc69a7d163e52d62cb7b4981d60a52fd0506bccf712193e955f06acdae8e03ddcaf20c43ce5db1db89169b6b313bc4b1d84c65e923012f47c573e9a3926272201daff901cec478db5f541538b2fb71e8dadfef8736d87300a393c26039cb1e3ceb5b91d639b59105d6bb478ff20cd5829d7775ca6a50de0ee18fdfbacc9b854b79d16c05eaaffe72ef95b51fb6c354750f86fea159ac5308b10646393c38587051fa6b797baf36fef9dca50f0b5e9ed31163f148f1b3fbf0bcfef6a4bbde2e400f4d1b944acf5b6cd46cc57f7b0ef28802f8363f9c007f2505af21ccb0e0d608a5fb7dcdf5d3862592d542906baa94153f98f8ab109d015f9b4a727b4bdb0c1b4a9dd277593446029afcb6898a5405f7f4d85d9af0c693a63ac316256720f38b27f5bf9fdfa13ef6169905133f9d0ab3605556dcafda5d0171a21d0e9b39df8e58e3db543bfe91d120c26915deb9cc02717fb1d211e0d2d6772f35427fe58202e143aaad1d503847446f51b823fa8f19f7c054b10d46a5f8ffb95d3fe22cbaa85203b1ecfd741c8d7fe9d3d5e8d4004dae6cc7389f98131f94cf18c655b902cd5d418cd247ecc94f2cea38d1493df7884ceb56c467979510b0bb2bd945a64283422fc353f87cf66d893746f169c1a60983ebad82ee768aa1110f02953d87dee0f01dab4026fc044f10274c8ceda151", 0x1000) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f00000006c0)={0x1, 0x20, 0x9, 0x4, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xfffffffffffffffd, 0x9, 0xfffffffb, 0x2}) 33.383338818s ago: executing program 1 (id=2411): r0 = socket$nl_generic(0x10, 0x3, 0x10) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz '], 0x2a, 0xfffffffffffffff9) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x10}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r8, 0x5501, 0x0) ioctl$UI_GET_SYSNAME(r8, 0x8040552c, &(0x7f0000000040)) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4094) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f0000000100), 0x0, 0xfffffffffffffff9) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="200048f100008a7ae6ccb2824cb8b0046daba2eab203c40f473fe253be5f00ab8aef414794fe65def20e7f86865aa4e660a0d2ea1be06a011cdf34f2233bd2c36e5c0e7cba4ee43bfafbc1a2f7", @ANYRES16=r12, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r14, @ANYBLOB], 0x20}}, 0x0) r15 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r15, r15, 0x0, 0x7ffff000) 32.381129964s ago: executing program 1 (id=2418): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x2, 0x42876, 0x3d8e95}) r6 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e27, 0x41200003, @empty, 0xb}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x6, 0xa9611, 0x1000000}) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x10) sendmsg$rds(r7, &(0x7f0000001d80)={&(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000001e00)=""/173, 0xad}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/72, 0x48}, {&(0x7f00000005c0)=""/175, 0xaf}], 0x5, &(0x7f0000002100)=[@mask_cswp={0x58, 0x114, 0x9, {{0xfd, 0x9}, &(0x7f0000001780)=0x9, &(0x7f00000017c0)=0x9, 0x7ff, 0x9, 0x4, 0xd0, 0x65, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x8}, &(0x7f0000001800)=0x1, &(0x7f0000001840)=0x8, 0x1, 0x8, 0xffffffffffffffff, 0x6e34, 0x22, 0x2}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x8}, &(0x7f0000001880), &(0x7f00000018c0)=0xbbb, 0x7, 0x811, 0x2, 0xfff, 0x8, 0x6}}, @mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x8000007}, &(0x7f0000001900)=0xb08d, &(0x7f0000000140)=0x5, 0x7, 0x3, 0x9, 0xec2, 0x1, 0x80}}, @mask_fadd={0x58, 0x114, 0x8, {{0x6, 0x2b7d}, &(0x7f00000002c0)=0x6, &(0x7f0000000540)=0x40, 0x3, 0x4, 0x2, 0x0, 0x24, 0x16}}, @fadd={0x58, 0x114, 0x6, {{0xffffff9b, 0x3}, &(0x7f0000001980)=0x10000, &(0x7f00000019c0)=0x6, 0xff, 0x800, 0x4, 0x1, 0x4d, 0x8001}}, @rdma_dest={0x18, 0x114, 0x2, {0x79b1, 0x2}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001a00)=""/199, 0xc7}, &(0x7f0000001b00), 0x1}}], 0x258, 0x40}, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x80, 0x1}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000140)}, 0x10) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r9, 0xc0145b0e, &(0x7f0000000040)) 30.109793175s ago: executing program 1 (id=2430): r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@netrom, @bcast, @null, @bcast, @bcast, @default]}, &(0x7f0000000080)=0x48) r1 = syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) close_range(r0, r1, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x8) ioctl$COMEDI_CMDTEST(r2, 0x8050640a, &(0x7f00000001c0)={0x3, 0x1, 0x10, 0x74, 0x80, 0x10001, 0x10, 0x80000001, 0x1, 0xb2, 0x100, 0xd2, &(0x7f0000000140)=[0x9, 0x9, 0x5, 0x3], 0x4, &(0x7f0000000180)="428e1cbe8d28ce392c8589f3be68260936a19be6017a092a63424256c9f9988357c6dc4a293717150b31de49", 0x2c}) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000240)) readlinkat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/84, 0x54) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340), 0xb0040, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000400)={r4, 0x401, 0x4}) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x5, 0x1, 0x6, 0x5, 0x7, 0x1000, 0x99a4, 0x9, 0x6, 0x49, 0x2, 0x7ff, 0x740, 0x9, 0x1, 0x3079a159], 0xd000, 0x674c3}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000500)={0x2, "5ea88f68c8feae712bd40e79a2376c477ae617937b1f68f8ab9c58921509db1b", 0xffffffffffffffff}) fsetxattr$security_ima(r5, &(0x7f0000000540), &(0x7f0000000580)=@v2={0x3, 0x1, 0xf, 0x800, 0xad, "454f319cd2c2d7cffc46a2eabbf78f1eb02bd08e26b7552ec10d955a5ed0bc53cfbc57f4605d03584ff69ccf2598d6616314cf20ad11cd37024da658d95d18ef5b45aec2ca3dd2345289cf22fd1ebc7e0aa54f1ed9cc6130a2413b09e61af42b48053c8b2266246aef38d055e2c6d693d68b47c7323399b28ba61225fc675a5dcb7dc8f821cc923b12f23229493a7583a70bd5964e127b29be31e838570aabed96d657fd1411bf382ff51a80ce"}, 0xb6, 0x5) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000640)={0x4, 0x3, 0x8, 0x7, 0x4, 0xe0e8, "7d64a796f799061ecb2016ee9451bb04", 0xc0, 0xc, 0x0, 0xd0, 0x2, 0x8, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000700)={r6, 0x4, 0xf1ff}) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000740)) getsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f0000000780), &(0x7f00000007c0)=0x4) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000800), &(0x7f0000000840)={'U+', 0x4}, 0x16, 0x3) socket$netlink(0x10, 0x3, 0x12) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000880)={0x4, "53a8e3c6e84efa3be59e4822511ca8fc70c60612eb48d24d3dd06fa480030b79", 0x20, 0x1000, 0x80, 0x2, 0x2}) ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f0000000900)={0x2, 0x0, 0x8a}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000940)={0x8000, r1}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000980)={r5, 0x10, 0xe, 0x5}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f00000009c0)={0x0}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, &(0x7f0000000bc0)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000c40)={{r9, 0x3ff, 0x6, 0x5, 0x98, 0x8, 0x4, 0xe, 0xffffffa5, 0x1000, 0x7, 0xfffffffffffffff9, 0xeb03, 0x91, 0x3}}) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000001c40)=@nullb, 0xffffffffffffffff, &(0x7f0000001c80)={0x1, 0x40, 0x0, 0x3}) 29.640665941s ago: executing program 4 (id=2436): r0 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) (async) mkdir(&(0x7f0000000080)='./cgroup\x00', 0x2) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0x8, 0x32314142, 0x2, 0x6, 0x2, 0x5, 0xa6e, 0x0, 0x4, 0x0, 0x5}}) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) (async) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0xd3fc6000) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000002c0)={0x0, @raw_data="8428dd262715daacc7c2d23de9d0d38bdd2c7bc2649646cacc2aaf447da3532d761f3ecc71b27c2570e934cc31e0f5c6013bb16d57c14c673ada1ba9a8916f6fb438fc166959fc780fb709c4bcd2b12bb12dfb149cc40624aa97b65bdcabadbb590a122554bcce4e4b5ad802fd1842b45ad29d5d1fad2805f91342557153de6ae878c4171f1f20b6fbf9ac9078b87c922dc9b22965bc331e283c31f2584e0f33da79a4df657b543b3d7d79d7d9ec46885f52735344e7286c14d1f0a68ad0b29c8d4893d40018955c"}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x33, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x40, 0x9, 0xf, 0x10000, 0x6, 0x8, 0xfffffeff, 0x2174]}}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) 29.386529834s ago: executing program 4 (id=2439): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0xd1, 0x2, 0x400, 0x3, 0x0, 0x4cc573de}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="ff44b900", @ANYRES16=r2, @ANYBLOB="390225bd700000000000140000002c0003800800030005000000080002000f000000080002000900000008000200000000000800020005000000"], 0x40}, 0x1, 0x0, 0x0, 0x40041}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4) ioctl$KVM_CAP_HYPERV_SYNIC(r6, 0x4068aea3, &(0x7f00000006c0)) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r5, 0x4068aea3, &(0x7f0000000280)={0xd5, 0x0, 0x18}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b040000000000000000020000054400048018000180080001006f7366000c000280080001400000000428000180080001006e6174001c0002800800014000000001080003400000001408000240000000820900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="0100000000000f0000003a000000"], 0x14}}, 0x0) socket$kcm(0x10, 0x0, 0x0) r10 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000840), 0x4d}, 0x4048001) ioctl$TCSETS(r3, 0x40204706, 0x0) setreuid(0xffffffffffffffff, 0xee00) 28.256501712s ago: executing program 4 (id=2445): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) setreuid(r1, r1) fanotify_init(0x10, 0x800) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) socket$inet_udp(0x2, 0x2, 0x0) accept4(r0, &(0x7f0000000140)=@ax25={{0x3, @default}, [@null, @default, @rose, @null, @rose, @null, @default, @null]}, &(0x7f0000000000)=0x80, 0x80000) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) (async) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) (async) setreuid(r1, r1) (async) fanotify_init(0x10, 0x800) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) accept4(r0, &(0x7f0000000140)=@ax25={{0x3, @default}, [@null, @default, @rose, @null, @rose, @null, @default, @null]}, &(0x7f0000000000)=0x80, 0x80000) (async) 28.001009463s ago: executing program 4 (id=2447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x61) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x17, 0xfa, 0xcf, 0x20, 0x547, 0x201, 0xb400, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x15, 0xff, 0x0, 0x79, 0xb0, 0x42}}]}}]}}, 0x0) fadvise64(r1, 0x92, 0x5, 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000008, 0x100010, r1, 0x2be2d000) 26.342416231s ago: executing program 4 (id=2449): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x2, 0x42876, 0x3d8e95}) r6 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e27, 0x41200003, @empty, 0xb}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x6, 0xa9611, 0x1000000}) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x10) sendmsg$rds(r7, &(0x7f0000001d80)={&(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000001e00)=""/173, 0xad}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/72, 0x48}, {&(0x7f00000005c0)=""/175, 0xaf}], 0x5, &(0x7f0000002100)=[@mask_cswp={0x58, 0x114, 0x9, {{0xfd, 0x9}, &(0x7f0000001780)=0x9, &(0x7f00000017c0)=0x9, 0x7ff, 0x9, 0x4, 0xd0, 0x65, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x8}, &(0x7f0000001800)=0x1, &(0x7f0000001840)=0x8, 0x1, 0x8, 0xffffffffffffffff, 0x6e34, 0x22, 0x2}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x8}, &(0x7f0000001880), &(0x7f00000018c0)=0xbbb, 0x7, 0x811, 0x2, 0xfff, 0x8, 0x6}}, @mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x8000007}, &(0x7f0000001900)=0xb08d, &(0x7f0000000140)=0x5, 0x7, 0x3, 0x9, 0xec2, 0x1, 0x80}}, @mask_fadd={0x58, 0x114, 0x8, {{0x6, 0x2b7d}, &(0x7f00000002c0)=0x6, &(0x7f0000000540)=0x40, 0x3, 0x4, 0x2, 0x0, 0x24, 0x16}}, @fadd={0x58, 0x114, 0x6, {{0xffffff9b, 0x3}, &(0x7f0000001980)=0x10000, &(0x7f00000019c0)=0x6, 0xff, 0x800, 0x4, 0x1, 0x4d, 0x8001}}, @rdma_dest={0x18, 0x114, 0x2, {0x79b1, 0x2}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001a00)=""/199, 0xc7}, &(0x7f0000001b00), 0x1}}], 0x258, 0x40}, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x80, 0x1}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000140)}, 0x10) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)) 24.174525575s ago: executing program 6 (id=2458): rt_sigaction(0x14, 0x0, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x8, &(0x7f0000000d80)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r1 = epoll_create1(0x80000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="180100001f00010000000080000096000601008014000320fc010000000000000000000000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x4081}, 0x0) fgetxattr(r1, &(0x7f0000002440)=@known='security.apparmor\x00', 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 24.121125498s ago: executing program 4 (id=2460): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0xc8102, 0x91) mknodat$loop(r0, &(0x7f00000000c0)='./cgroup\x00', 0x100, 0x0) 23.382135386s ago: executing program 6 (id=2463): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x40, 0x1, 0x0, "da7893900cd98d67a85222250342d04a2c1f1a3f20d4507c14e951d29546029a"}) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000480)=0x0) sendmmsg$nfc_llcp(r1, &(0x7f0000000d40)=[{&(0x7f00000000c0)={0x27, r2, 0xffffffffffffffff, 0x1, 0x7, 0x5, "5bb3b73463a69501dd80f2a0d0f79df8f5a016c50d525ea3ff115b6d3db67ad41ac22f29b9dac810e8d22d1dd12fea05618841e4419b77c496a74aa7644efd", 0x27}, 0x60, &(0x7f0000000340)=[{&(0x7f0000000140)="793643d9878f3a6d181395", 0xb}, {&(0x7f0000000180)="fdfbfdcd4d29841b2b89c1ca6003ab8e94d221b3b73f841ecfcb64bb92334b70019e914181ce5adada899a0c2daaba7f3f1b532e410cc826dda631cd029d736a37a6d65f1643dce8737d1ce2ec3b67e223a772b23015fbc272a2de51a5fcf0e358f09fc20fb41a31add47c2b30887e043871701fbdc80250c7907740e45cfc8851cccde6a07e7ce2a274c01b8d36b4d403168a0a9d66c1a8f2c6bdafe36eaf6a0be586973f95f51905525b6f9a84b09f810baab0ed824c4bc8d518c683a3a49f5c30f3119584a6fa27718090db4ec0bea3d44be70e", 0xd5}, {&(0x7f0000000280)="8cd8ef47e6dd52c66e5ef7321e1afea551f8fcb2302cc3dce646c92bc6defe539d4e3be0bea33356581ad9bb2f87e8f7e141c0a218d9cfe31be3f70f445b51b4b94cfd5ec1749423b97f41f5cd0cbceaec932d565f55a34d243b93026b56526e9be085bf90075922d061f926cd34c350dfd9ddb1811e5df32f91f111ec3a80719e835395cd0f39e240fd034ba47776a7c2bd0dc0be33578412664d06c98918", 0x9f}], 0x3, &(0x7f0000000380)={0xe8, 0x109, 0x7, "c55af0e17076db574d5b3de016d0eb9b2ae1197428e9c116ac7d390a573feb740e99aa7908bbca0540284fa72407caf654098936bbb4a44f43993557ec9ebcb49f50688e1ff80c479819d490c6a9c6fac388a2368dc29972741648c60fc00a0aa6de82a20951ddcbc428ee1e4c4e9804300fa83b563f4c6d7d8457487ae197d865e92292b68800f4d0e19c2425f6281176b42528febcef941e4618ea2a51599971e35f1e80dd7327c66eaa46c1408bae2cfa2f94fdce2e2fa41bf5fdeef4888990049dad4adeec69e4fd209ab22d4a973c0054c3fdbe"}, 0xe8, 0x24000000}, {&(0x7f00000004c0)={0x27, r3, 0xffffffffffffffff, 0x2, 0x5, 0x7, "64f2e076e3ecae568e7e8b08a818d12217bf17a8a859ebcfa817bca74ab16ebe01e7a606a302e7e51c2dfeb29ea524956cebab991cab3c1832ff14a78c0608", 0x30}, 0x60, &(0x7f0000000c40)=[{&(0x7f0000000540)="db716853b855af6f4d2cf4165ce2", 0xe}, {&(0x7f0000000580)="9a420484d90182b500aacb1dc9254b14a70da02a95d00e8caf33d7592932d42f43c504c240a99bbb080234f7ca858c47c6e8366d5a8ba1c77874863b8056ea39a6fb5b204f703d7f706d06d78dff9d41a82b45feab58cdba0da4c170b52038bdcc46f9d4e5f5cbe160d1dfd2e334beb44f6f02f14b9919cc28883076f2cc0706c7c4e94ca53f7e9a054c2c1b0f3ee63da39a8c250ff8f8be0f282d9c584df6577fc7461382daa07dd8f69756", 0xac}, {&(0x7f0000000640)="a613252792ffd2663573f307795fdf842e764c9573f699f459297848c2d7a8adb837ebee2fa06bf99b711221c75d2b02fd421c9b3c2fa8b85adadf939c456662ad5690207a96b94f346c8f0a87ee0a34d435614ac32f3006bda86ad42c2cce2da18eb3b62c6e9a182e323ab4225cb49a59ae5186a8e55fd64eb4ffdafb60f4292939ccfbbf76e4f8de553d5a219587392c972e76556567d339e04c054ce54650adc14832e8e2e9e3b195b9331598970a431f2ace4f50", 0xb6}, {&(0x7f0000000700)="e2fbc20dbf4d2468cd7581501432634865b81a59b47a0d249d7201b9794b8deaaec5ac566d1ade7dbaecece70994d49ce01e36576d68d7572002b80d03831fbf2db96fefdde3fb2252ae5c44e2b10a4599cef3854b501c46aab0d37271eb3b4a32948dbaa7a976c12fcb109231ee8667b6606ba4b00507ecf3a8419a2a00b9ad35eab0ee7cbfddbd876bb2e1af5621584e", 0x91}, {&(0x7f00000007c0)="c0e80f318279f4125b0d9c3be2c31d8813f6b34ca558780adad7d860a87712ece9d319df0f4cb49ed2743e1b161757e2200e523f7e43be71537f7c828bcc32da1008802f315d87df4fa7b478aa6c76ea7ea362ab94ebe7cb04d5b5002df6a8e8df5bf2eaf0c6cd0bea659ee35c61d6fd3ae3acb251bf55631f5e14d4c4b954ec3f937d672ed137c2f9afee6b4a9aafe5df40c1d30cd3df5c451a12065e34012cac58538479160d3b584714440ae7f5c4570aa97f8366006366d03e2d63ee2a250f15a1c8684b82423aad936a1778a1d6b90a046cb6ada21e0b8ab864d2630a8086aeaf3d851817b6d2af89", 0xeb}, {&(0x7f00000008c0)="7c7be29642aa867fcd519323bec8d66286093c72175c84ce7f35bc50d4fa4fe53b4b7e768f2256a90cf3e5c142102fe93c7d67982529993acb6fa3cf3101d8f13aea95978c50cafd7c5509cc10af2e37deb40e230c955b1980ed1a0cd957611e69774172b6d6c052d81e999edb2107b4f464f5b277970ddfaf16fc0b935e6a0223d5b60dfc809da6f23ca60394d01e118332b1d43d5a03d8683bc3f6adc9d39fb5b5e168bcb7342a90aea7f28d43a8a5bc446c196c5902822945c41853f3526381e673fd0515cdabfff0253bf8aafd3efc8d5b614dc9aa51b550eb8b61202826fbe972", 0xe3}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f00000009c0)="4f41aa8f831ceb19b2c223f9fc26cee2a6be1dea266027c901447ae8df0e1fd303e3ffcea3bd4cc7f67accad9d089856e6672d4038bebfcbff3572965318bf88393b3da8c5101a179ae8683efd223cc02257fbe8fd28c96610456e03a8cf3006b0ef91ce06912a74a5aab28665905ea5dd0bed74f940bac17f337c7e5c4d106d0cee9c67fd1a7c7274f3e8ed9bd52633758e8ce418bf4dc3146feeff0401ec09abc51734f586a624c22e2ed0d1814cf156edf2767d6b689f9b61", 0xba}, {&(0x7f0000000a80)="5908b1cac98ce43f6875a05645b95e6c897f8f12a60130e61b0b69ddc5a61ed72da7aad43f3dfa921e18fbd4fe1ba1d5b31828827a0cc4b14087aa7d60477d5247a680d9ddf72f6cb7f8edd0c0bf8a5ae90a84a9bce2bcf8c9f8455b5dc36835d048e454196ce2817dc0e8f2d356721e91f50f8325c5bc4542a6e03d9981481e724f449581841fcd21e4fcab6c21ca0344d9f7a4c36f75d9e4f30e24391c593171a828db6f074983747199d93eab5f7f1c2108cdc20272d94948ee5ab893d3d80009b1aa1c4e116071721325d121fe880184c91ce612e1558bced801e63e170866d44384307eeabebeaec6242452c41159171071f28adcbf4bc0f605", 0xfc}, {&(0x7f0000000b80)="e094df342e3db937f9c2add042b5074d447d51ae5c8a3d180148943c1d4a1665715832a9081922415e81312900f78f4669b59eee89796c309897ab79d520fa6270befcfbc75e20f5f2ccc2fa037e1a5a2b5e5f5565e55f1a44176788deca3bf4770c90fc1a792bc218ce272ca7433faa25b692b0e12f90c502c051b87cca2b54aefca3a16c76589a4d96e531440303c8d0b66bc89af8a7b8d300fb4de06c7dd6dab9fe29384e52f392c5fea6d148321980ff534fe6f9592da9aa3e73", 0xbc}], 0xa, &(0x7f0000000d00)={0x38, 0x10c, 0x6, "103e69276531db7157ef19d85d86d0203c724897677416478abe04598fd7f26fa268c06924"}, 0x38, 0x4000}], 0x2, 0x20000801) 23.214543353s ago: executing program 6 (id=2465): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x7, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x200, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040), &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x7b}) creat(&(0x7f0000001380)='./file0\x00', 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x1d}, {0x2, [{@any, 0xd, 0x0, "cfe814", 0xfffc, 0xff}, {@none, 0x9, 0xb6, 'BM=', 0x5, 0x8}]}}}, 0x20) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 23.023114656s ago: executing program 6 (id=2467): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r6, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x24}}, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r4, 0x0, &(0x7f0000318000/0x1000)=nil, 0x1000, 0x9}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r10, 0x0, 0x10000, 0x0, 0x2, 0x42876, 0x3d8e95}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000400)=0xb00, 0x12) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000240)='io.pressure\x00', 0x2, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x6, 0xa9613, 0x1000000}) bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x80, 0x1}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f0000000580)={0x0, 'veth0_vlan\x00', {}, 0x4}) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x250401, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r12, 0x400c330d, &(0x7f0000000140)={0x6, 0x1}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000440)=@multiplanar_userptr={0x6, 0xa, 0x4, 0x1000, 0x2, {}, {0x1, 0x1, 0x0, 0x2, 0x4, 0x3, "9648976d"}, 0x7, 0x2, {0x0}, 0xb}) 22.802461908s ago: executing program 6 (id=2468): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000680)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x2, 0x42876, 0x3d8e95}) r6 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e27, 0x41200003, @empty, 0xb}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x6, 0xa9611, 0x1000000}) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000001c0)=0x10) sendmsg$rds(r7, &(0x7f0000001d80)={&(0x7f0000000100)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000001e00)=""/173, 0xad}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000300)=""/72, 0x48}, {&(0x7f00000005c0)=""/175, 0xaf}], 0x5, &(0x7f0000002100)=[@mask_cswp={0x58, 0x114, 0x9, {{0xfd, 0x9}, &(0x7f0000001780)=0x9, &(0x7f00000017c0)=0x9, 0x7ff, 0x9, 0x4, 0xd0, 0x65, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0x1, 0x8}, &(0x7f0000001800)=0x1, &(0x7f0000001840)=0x8, 0x1, 0x8, 0xffffffffffffffff, 0x6e34, 0x22, 0x2}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1, 0x8}, &(0x7f0000001880), &(0x7f00000018c0)=0xbbb, 0x7, 0x811, 0x2, 0xfff, 0x8, 0x6}}, @mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x8000007}, &(0x7f0000001900)=0xb08d, &(0x7f0000000140)=0x5, 0x7, 0x3, 0x9, 0xec2, 0x1, 0x80}}, @mask_fadd={0x58, 0x114, 0x8, {{0x6, 0x2b7d}, &(0x7f00000002c0)=0x6, &(0x7f0000000540)=0x40, 0x3, 0x4, 0x2, 0x0, 0x24, 0x16}}, @fadd={0x58, 0x114, 0x6, {{0xffffff9b, 0x3}, &(0x7f0000001980)=0x10000, &(0x7f00000019c0)=0x6, 0xff, 0x800, 0x4, 0x1, 0x4d, 0x8001}}, @rdma_dest={0x18, 0x114, 0x2, {0x79b1, 0x2}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001a00)=""/199, 0xc7}, &(0x7f0000001b00), 0x1}}], 0x258, 0x40}, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x80, 0x1}, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000140)}, 0x10) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, &(0x7f0000000040)) 20.647767693s ago: executing program 6 (id=2472): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x8000, '\x00', @p_u8=&(0x7f0000000080)=0x4}}) clock_adjtime(0x0, &(0x7f0000000100)={0x540, 0x7, 0xd26, 0xfffffffffffffff6, 0x4, 0x8, 0x8000, 0x194d, 0x7ba, 0x7fffffffffffffff, 0x7, 0x7f, 0x8000000000000000, 0x0, 0x100000000, 0x0, 0x14000000, 0x400, 0x5, 0x39d, 0x8, 0x715, 0x1ff, 0xff, 0x5f1, 0x6}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$binfmt_aout(r1, 0x0, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x2, 0xe, {}, {0xee01}, 0x4, 0x4}) sendmsg$nl_generic(r1, &(0x7f00000025c0)={&(0x7f00000000c0), 0xc, &(0x7f0000002580)={&(0x7f0000000280)={0x1400, 0x2d, 0x200, 0x70bd29, 0x25dfdbfc, {0x13}, [@generic="ca2630c62f0f4928fa8efbd009817cafb0ac3a839d30e4be879d892b48ec56ecdcbbb7d599b88803372cbfd2de2a78b130a0c27385d270894d26", @nested={0x64, 0xee, 0x0, 0x1, [@typed={0x4, 0xc7}, @typed={0x8, 0x53, 0x0, 0x0, @uid=r2}, @generic="6f51b7310199cde0fede218569649cd54d60cc98f3a68e3dfaee3cbae1013b4b50757a0dbab1b11a40de729ab3fabae0d76a33d6cf1ef0578acef08e", @typed={0x14, 0x114, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x4d}]}, @nested={0xc, 0xbd, 0x0, 0x1, [@typed={0x8, 0x129, 0x0, 0x0, @fd=r0}]}, @generic="e5f38de6138f200d90f97199f4d4fd34ce447c2254adfa5e0f5e600d130740776f09212b702f87d7b2a9df3140896d6a151a3dccf6194583add3007fb143914583020c582aacf91c336b20e2e364262c5408d226e4920e760e5f09f3b7e533d59d331b686b7b399d06b15634d8178c53ff906abaa5216700bc9be2e6b562bf554b995e644523eb681d9fafcf8171d620c13f5b18a28811c815aed5152e8d0b3125363445a8c50cf6eb4167c7c72fb6ad2d45ac3b29544ccea58461f03998e8998853ee23a59807c1b2edf849979e86da2bb825c2bf3412dbd5aaa8de15c16d2889239b84d976b610c7f5fd67c171216e8e4d30177ea757509cbd45362a18de4015a70cbb6591263d4a0024907a7af0c5db368fd8afad4414f1cc294fa7e42b1aabf97a8af94b199561c95316b6a834416890e65c37d69d1e8ba8892a84bc5f5010ed169a816bb1f176e155387b40302416589efe5e65def554e1ac9bf627723d99de1831071f03716a89c944bedd15f904ac7d4363f9760aa6872d05e585520ff12f74284143aa9348a9f2cec3701995ee0421629b72e3bd47471861ff22334aa694afe465c964d1ce09dbd1c8771211ee330a77b19c4adc93d89d632323be67659c55ed300fb3a8404b13eb6cad8f39035f0e13f119b116f48a493c39622502bd92177440943cd7f7cb70f6355231bfe0ba243451b97595324c5e620397bf813b2741d7a5bca1468c569e4671766853ba2261bd6d80d205b0e5b41e4b5a515bf8b206aec80737120580685e8212fe4f9fbb11fdd4ea8cab7aa9a1e51752d26d33d9011c957fb49b645de44ddd663d81bb49b67f4128394ad844f4f9deda551518a43eb18e7f726eefc67ba16ff35c418216016cdf017d13d0ca97dd4bff55850326d8ed72ebd129b486b86d8e52ef672a2ffc6a4287c658664928a41154b69c98fb5d4b0f948e1629672afcc5254f875278ba9477743f7231d7fd92b6fb4daf44099c76f2eb39508de90d757baf77bef7cf57fa0f980f6f442231c84d2c02dbd262c35437dc82cfb6a459cbad1082e74119aab9fc515c5286cde19f83418357f51400ccfa5eb061d69a142691b944edc6e8626b2bf28a46cbed47d7de5a10f0a7a9460655744184f2a82e4bbcd1347d131e74c5e3dbe20cbdad5e7e20ef3b87723b40eb748bfb53a07810625638c061ba64f180c3edcf5158a9940f66bba65328c7051c116865844bfcd46e74ce9f314ba87dee5ed293643b191522869b0d083afca0fbb8f897dedd23e04e857f40bd15e9820fc4100a5cd13eb03c2aeea2ff5541c97dd6f3783d3abc81a3e54279ccf536fabbb1ed8ae2f7d50320233863e8666ba9c2b37be6a9fcfa1bbc70ccf5515cc14d006f68f5e0d8baeff2fbcdbf68ed6cf8993eba2b581837f1f53966c1f1dff3c55fc61a9aca17cf0659ede05a287cf1fd0f8261222b5c619ea9169653718a008bb268443a433973fe37495021a98a1cd5937ade9aca91ded8b4846e931350b6bd3720078b350f3ce468ade2d3f20f2b92b45a1fb2dad82da493d052ae1b42977091a5e9202e9fffda14fa15b9fc89fc3b963c65335ca7f7f00585cf0f61768985729ce36d1569ff1b1fc8c52a98e3515645f596e599e4a377973484eaadc44cf974e544a412887e08f7a058ed74971705188f79ac6ebab58b8da2676f5e490bc00ba50f3e51812eb55f7e3b57917033e7883a235c7aa872777213807ae5fe68d789c4318eb67394d766bbc551f87734aec0eb4192a96690287e44ea35e997ead73a20051292a141db0349ef0359ed3c3fd4f35430c43241cbcb7f3c68ada037857584c1d453025af455a46446977b26767d9da295c72d46e979e7c10e1979e117e52c8a4edeedc3a626e0874a6575140af414a2d641da6808927830c9150bbae48f06b77138a7b9cc27d554a9a42f42636aef554af7c9b4256cce3e0380e4eb676789c6acfe49efcece6096c0b70abc90dbe7dd6760be984ad7f1fd433eb658173a21d8a2a247422198876f0b5de804386e00e197448a99e15f3061baa7d88897c9055eca04184ec4f14949ba97254e28d2730b93894e569d292e1d6ca33aed21465ace889793be94fe0d2189b4e19e638f825b106cda54e25de6fc8366e2fa4472d0f69e63e717cd526ce7ea8a2a6167ad2e99424d4e23e5c145c3bcf890e7f8f0c17e37289a3561ef04e325cf184af939f06a6bd04e1e1664219ab5a258c926e5e692826d821c38e446a629fc85717a559f58e26715deb8e08ca27829593a73d10eaf6ced10e0c2f573d259450609c966f029e2cd9a4663e3be28c634a4baf4ccae2999846ac7eb6fbcefe88d9cba7fe14523913edd22a3533df3a9106ec7f4b0e27213769ca300f8bac5ef5369490c7159d3b27bd0ebd6f2ea368a4ef45895dd582010374364aedc75ea5d43a4141fd42e39ba71fc08544ac159ab3021aac1c4b5e121fd89697665ef59b64ff4913317dc3f686c3a0b55c882f8ce4d01db1349d3266e99eae34b82b5d3701b7ee812d3eb7c64581973a470badb453396eb6c0dbc6ceac47c038363fc9c552d2c776f33141df9e09a11a7756f7ec92337efd4bd6b7f21df652585d12a73932dd707891227783ce8feab9a7dcf7b90c1e65dab9b5ab1ea84a8f1e102cf90fc6666990e67263f739e2fdbac4232dc7ffa7d8c7e4e28c47de4278f9b074704c0415a1a38926e44f1c6ca5440d330ca09626eb39fab6c94027e01834883db87591f2578bc0953b9b4eddfa435792984dafb0d4dd81328cb0c5a349d13ac4694daba9058c28532a317daeb68d17c1a786a422f0c7ba89bdb380460cbd7b4e08110b6edb285a8a11c41df96d441676333976ca70bcb54f07fe1afaf5ca4dd388e55b751394a142a6b6af832cc427ce46f7b49a415b21832b5817ca7de65eeb974726a82bebde01850f6391a192db280683f8f1b4ebdc9019cb48d9e2f0fb596f933abc29b7f56197bebfc3347826ccdaeda75271b795908c5dc24ffcbfd0764b905bb224d0ada349cff38a88db226c68c898c4d5f89d0e65e670dd390cab12557ab974576c56fb99395cb023ef4bda2fda7180a81001e25f1b174e30338877a59c68fd3e8093e044efb175dba64d52654b1b359984acab9bfa7c5cea29aa84b83cae105d7b4c93c0a99a7a09880d1d50cc87e74852471afcb2782a2d7d78d6c030507fcaeeec1cc2c191526041e14a88a927e7ee163681bb493de8297ccfb2c538600b6b47d2528a3fab19a854e8f13c2dc490fe716a2343ba2ae5de1a8b76641b2205dc4eae151ed277d85fc28264765a59415438272c1394e80a2907f1c0b37b834204f659a096909ef99f4f892ad65463586d6e4537d8714d6df7fca383f3ec9585e3aef65d56d1ef597a43bb8e2aaed9ca68f5bc7471f607b3c2bf1afc31bb9b604bc929eeedf3e011f7b053a2fee7be387193430eeda73faf1880f1e31352a7e1f9393279761d9af1f7e8008020a1badec7f8363f0eed3a4093fbd346622ba184c6800700a2c5ed6a17ae4cc84ca7d476d8425dc8db9efc0363ca0c8d6954d2399ad1793b5a092f1d6e2ab0758756573bb9b5a5a55ceab1a996e88f99c02a9b7f73aebb621cfa27383b710f67f074e944d8fc7a5f035fd2f4ead329423ee7c6da1d26c49454c158e162e5dc330d084e22cd96c85bc89f188485cb109a7581b92469aeb248f0218e454e4f8e24fa2a46040eca45619ea19b84c3dd23020031d986fd1ea0fbee88047a321fbafa8bb876d6e1152211b57eac6d3fc93f52c55156f5a646f73173e587b946ade711802aad404c286943aa36cdd312e309c34639a3d7e06704eacd9d6a64274f4ddcc0bab529a99ed9ced7385d97b1d85e5c108c63dfbf759b800ef277b32bc6583c0efaf0777d639e6ce713a32676c2c0a243062c3bd33f3df702385f2ff2bf942c67dad58a499cc3d84671476f50f6a25611f04395cc4da5ea951e609d5fd43ae4d4db5024f4205a476c89571151d605b7949e8546b015804b089dc9dc7cf7e07a0ec6df1f3c6431c156dcfb765eebbc9c735d880901a9a39b2d59f188c6770599439d79974a90207d923e19b7b21e02535d6a35a15bd11ccf9139cb33e9acce5f3fd4c2c8085731f4a6196dd294bd961f15bdce53158f2a40e43d56fc2fc23db5ad2e92ab2ddd730ac65befb0b1386eaa8d037cb236a5c8ffe449205d229c1de027a9820146259eed6c1b0b6250dac341b9664098c89ffc3090b691d7db6d56890aea46dcc56bea0d7616b63a7236b299e79a6b4c40a7427c50d7359ad6da75bf99f13e9dcf264e2b9e31e767a0e492b77f1fccdec38c1639e5e1633f575176c307cccf1b8e028cb4d7cf6ef489231a9d10866026b4fb30fd0d49f36ecfaeae526f79056d891dee6bd9f4a13d96798559cee0f069f0a59f8bca85ea59a10f5143f2ca9931ceb75ef075df0388614610d5c3df0cfd35f5f24d77b9664538b185f2c846af0e9dd630102f643ea60702ff0d46f6aeeffedcfb96b60efac0c860f0932753d08bf9eddae2e00cb1dcb7306ca3375642fc59e016733c54a13df03f6d68c4d3177b7c7c1757917fdde43a459e2e21f1308f2fe7218d6560953d720bc55efa303d21adfab1a1af3d13c1a10ac01bda51effd13bc9d6df30dcffce8595832b494dab764a9eafca32eba488de09dbbf93dd92ef4d4011bc908a61eb6eec163622439766dad4aed7243792507a5bd975f6bac7e8129829ba74f828abad15f299810fded8a43682810b0606a318040f1588ba4e89cc704f094391493ed3a95ed24a47b49f6b48de5fd11e54b50436563344650558f74a1e41ed66c535cac3af5b12404011d803d5ed6cedac81b3e791a915d8d6f241e1138bde940bbadf78d0dd41615db44209e4263a18559ac850d63f0af5ce2359d78f84cd1857853ccd9a040b0ed8d8c8a5da8b1460c534bf282bad2fa74635c994ba8916ca3c790f8a4cdf2e4c948d651ebc796c34329fb182adb0cb89352a0d84b95df06294393dec06d3a6d0d0dca96c763c9d2be81354703e5363147116d2d99cf35d38bdce4abd0c5658b4f1f5493c16d26c47af6e97a208ac9a2cd020659dddba4042b54926e3eb881a63861da6b36f8a26d89f4c16d6b46b4035d3e84cccfb8ff465b4734a74feae29719740eeae2a3328b90b5888fe214fcf1734ec61cfe63c760513c9cc7166d3ff351ee680c2989b37dcae58677494b7c114ab90c4e8d4aa8ca3d9a66c990d883a6bb168d0289fb2d5f26d72523414bfed4700680e3bc68c85e0b26690dc8f03e89e12ba9849dfed74059f6ce64929d7f5dbe23837ec7c562278b3514c1f55af1720902398cb96b0cd012aaca8005ebc4a1d4b815c1e8a1d681940b8aebbb522edd448d407bcb2ba290d2d073f08207c38d5956edd119f3c86b00bec092bfd8b84dacc38d74853b4f13c7b62272c9f2c6960a6f06762126ddcc01ed02bed92acb06c46b0cb80b8d18c7d5cc6f527a091a61935c2e77d92a06725a625e29a02fdb9ebab1e87fb962e7b99ed927d2533918cbc61e481ff6bbbbd89a47a449e354393667e0ec10fa60b7408568e25a6e75c8dc71d307ea97d0c9360885c6d590e15c79fec50c64669dfb19346f1ab7baf964289f57dd82032e2441f31411cb1075f06a1e76cb0ed9a98aad996b79ce70fd369eef60904b78acc533a3b6a2f95a43b1736ecbb3b0dd9e943cefa6739dec96a88ee13d204ab567544d8bb0a2479dd9f1da8d28d8b4145c435beb4080985fac018bcf8", @typed={0x100, 0x64, 0x0, 0x0, @binary="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"}, @typed={0x5f, 0x109, 0x0, 0x0, @binary="4c21704cc82110cd70a729528a9b696cac60a15d6c66a93cd8254f9db58d04cf41ae479e007de8c872648641b35cf01e04682c1e114225354d9681345c7bc1dcc1166aff29cde3c4f14d7f26c8b0a1a1fa971da7ae567987c39503"}, @generic="1ffb354c54b3f119d150b9cb254419d208d48b91c15ae47b398cd28cb7caf38d90653f53429de75c21f3dd382ccc9fbacf190d91f8719a7e486b1876ccc2be3849f09bb0d5e4825565b1156ee51d519a3e033c4b207483bc775030dae7a76de0d59eb6ffb557b0f557767292f7b0f9217d9a0b76b71ebdd00bc2ed", @generic="382ef8b110508e2c19c60eac6d0cbc4354f5c845c9fc895fc200f7245db3017f86fea7fa65739dc9df396563b7230346fc843565e1af56e7add08aede017c2dce9b920c0572340bf6163dad85df99e6c900aa0fc67b12b93d9e6f94b913d5196f869623896a1b2f97504ee1b026cb608f640dca44a7ddf9de0ffa9d2a5770140ce3b24e6844c7224e5ab146415", @generic="60ae72e86e0fe9c74ca66853b0c2cbf78f2a3dfe0502edcad6f62e01262383cc7d5b168158fcb322e066cba92a120b2ef781371e35fefc805e88ba9dda76bd59468719a4811a2c2d2f0ed865d7e0d855389cf12f60da1285e6c33fadc81af0c6d5b314f79a1333c882eccac459d157d24da151c54fd92ee06b1edfead87ddbfa29ce0e260147f46ba8803a18af", @generic="f06d242a6ea28803363132f4c19627a694027f289089df2a52e1dd22992b15964f4839009fbbee60d027c25cbd6a65558060d206d2fc9b4e7ae7d658eca9e5cb02b03b11376470f3d991cc75"]}, 0x1400}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) 14.907599372s ago: executing program 35 (id=2430): r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@netrom, @bcast, @null, @bcast, @bcast, @default]}, &(0x7f0000000080)=0x48) r1 = syz_open_dev$vivid(&(0x7f00000000c0), 0x2, 0x2) close_range(r0, r1, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x10000, 0x8) ioctl$COMEDI_CMDTEST(r2, 0x8050640a, &(0x7f00000001c0)={0x3, 0x1, 0x10, 0x74, 0x80, 0x10001, 0x10, 0x80000001, 0x1, 0xb2, 0x100, 0xd2, &(0x7f0000000140)=[0x9, 0x9, 0x5, 0x3], 0x4, &(0x7f0000000180)="428e1cbe8d28ce392c8589f3be68260936a19be6017a092a63424256c9f9988357c6dc4a293717150b31de49", 0x2c}) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000240)) readlinkat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/84, 0x54) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340), 0xb0040, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000400)={r4, 0x401, 0x4}) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x5, 0x1, 0x6, 0x5, 0x7, 0x1000, 0x99a4, 0x9, 0x6, 0x49, 0x2, 0x7ff, 0x740, 0x9, 0x1, 0x3079a159], 0xd000, 0x674c3}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000500)={0x2, "5ea88f68c8feae712bd40e79a2376c477ae617937b1f68f8ab9c58921509db1b", 0xffffffffffffffff}) fsetxattr$security_ima(r5, &(0x7f0000000540), &(0x7f0000000580)=@v2={0x3, 0x1, 0xf, 0x800, 0xad, "454f319cd2c2d7cffc46a2eabbf78f1eb02bd08e26b7552ec10d955a5ed0bc53cfbc57f4605d03584ff69ccf2598d6616314cf20ad11cd37024da658d95d18ef5b45aec2ca3dd2345289cf22fd1ebc7e0aa54f1ed9cc6130a2413b09e61af42b48053c8b2266246aef38d055e2c6d693d68b47c7323399b28ba61225fc675a5dcb7dc8f821cc923b12f23229493a7583a70bd5964e127b29be31e838570aabed96d657fd1411bf382ff51a80ce"}, 0xb6, 0x5) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000640)={0x4, 0x3, 0x8, 0x7, 0x4, 0xe0e8, "7d64a796f799061ecb2016ee9451bb04", 0xc0, 0xc, 0x0, 0xd0, 0x2, 0x8, 0x5}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000700)={r6, 0x4, 0xf1ff}) ioctl$VIDIOC_G_INPUT(r2, 0x80045626, &(0x7f0000000740)) getsockopt$inet_udp_int(r2, 0x11, 0xa, &(0x7f0000000780), &(0x7f00000007c0)=0x4) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000800), &(0x7f0000000840)={'U+', 0x4}, 0x16, 0x3) socket$netlink(0x10, 0x3, 0x12) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000880)={0x4, "53a8e3c6e84efa3be59e4822511ca8fc70c60612eb48d24d3dd06fa480030b79", 0x20, 0x1000, 0x80, 0x2, 0x2}) ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f0000000900)={0x2, 0x0, 0x8a}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000940)={0x8000, r1}, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000980)={r5, 0x10, 0xe, 0x5}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f00000009c0)={0x0}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, &(0x7f0000000bc0)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000c40)={{r9, 0x3ff, 0x6, 0x5, 0x98, 0x8, 0x4, 0xe, 0xffffffa5, 0x1000, 0x7, 0xfffffffffffffff9, 0xeb03, 0x91, 0x3}}) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000001c40)=@nullb, 0xffffffffffffffff, &(0x7f0000001c80)={0x1, 0x40, 0x0, 0x3}) 8.857773209s ago: executing program 36 (id=2460): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0xc8102, 0x91) mknodat$loop(r0, &(0x7f00000000c0)='./cgroup\x00', 0x100, 0x0) 4.793617997s ago: executing program 37 (id=2472): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0905, 0x8000, '\x00', @p_u8=&(0x7f0000000080)=0x4}}) clock_adjtime(0x0, &(0x7f0000000100)={0x540, 0x7, 0xd26, 0xfffffffffffffff6, 0x4, 0x8, 0x8000, 0x194d, 0x7ba, 0x7fffffffffffffff, 0x7, 0x7f, 0x8000000000000000, 0x0, 0x100000000, 0x0, 0x14000000, 0x400, 0x5, 0x39d, 0x8, 0x715, 0x1ff, 0xff, 0x5f1, 0x6}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$binfmt_aout(r1, 0x0, 0x20) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000200)={0x2, 0xe, {}, {0xee01}, 0x4, 0x4}) sendmsg$nl_generic(r1, &(0x7f00000025c0)={&(0x7f00000000c0), 0xc, &(0x7f0000002580)={&(0x7f0000000280)={0x1400, 0x2d, 0x200, 0x70bd29, 0x25dfdbfc, {0x13}, [@generic="ca2630c62f0f4928fa8efbd009817cafb0ac3a839d30e4be879d892b48ec56ecdcbbb7d599b88803372cbfd2de2a78b130a0c27385d270894d26", @nested={0x64, 0xee, 0x0, 0x1, [@typed={0x4, 0xc7}, @typed={0x8, 0x53, 0x0, 0x0, @uid=r2}, @generic="6f51b7310199cde0fede218569649cd54d60cc98f3a68e3dfaee3cbae1013b4b50757a0dbab1b11a40de729ab3fabae0d76a33d6cf1ef0578acef08e", @typed={0x14, 0x114, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x4d}]}, @nested={0xc, 0xbd, 0x0, 0x1, [@typed={0x8, 0x129, 0x0, 0x0, @fd=r0}]}, @generic="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", @typed={0x100, 0x64, 0x0, 0x0, @binary="0afbb21aa375c1ce0ef611e9ecf8b139b12caa070cb2eafbf7575c10482723176c77625ea2e45f8e93c516aa26e078132de6f172dbb4ad298f9fdecc8b778443f38b4213f829ecd466834ef0d6cd1d46005e9230fc25f12740707dc12234f7002050113a7fe5e3536618544addb01b25a3e0a7fc859ef78d1dba5e56484bc95fb38af760a440993272bfaad6d72c76c00e3150869418e1e72e7161768f170bc0ad8262cea93d948669a0352745e08f1faa584fb491dc0fb8cce2457657d9ab30dce9b0de15f79d837912e3566029b41489934365a8ed39c1cbf6050dc0c433f3d0b52928340d105f1bcf07df63b082926137407fea223596897d93d8"}, @typed={0x5f, 0x109, 0x0, 0x0, @binary="4c21704cc82110cd70a729528a9b696cac60a15d6c66a93cd8254f9db58d04cf41ae479e007de8c872648641b35cf01e04682c1e114225354d9681345c7bc1dcc1166aff29cde3c4f14d7f26c8b0a1a1fa971da7ae567987c39503"}, @generic="1ffb354c54b3f119d150b9cb254419d208d48b91c15ae47b398cd28cb7caf38d90653f53429de75c21f3dd382ccc9fbacf190d91f8719a7e486b1876ccc2be3849f09bb0d5e4825565b1156ee51d519a3e033c4b207483bc775030dae7a76de0d59eb6ffb557b0f557767292f7b0f9217d9a0b76b71ebdd00bc2ed", @generic="382ef8b110508e2c19c60eac6d0cbc4354f5c845c9fc895fc200f7245db3017f86fea7fa65739dc9df396563b7230346fc843565e1af56e7add08aede017c2dce9b920c0572340bf6163dad85df99e6c900aa0fc67b12b93d9e6f94b913d5196f869623896a1b2f97504ee1b026cb608f640dca44a7ddf9de0ffa9d2a5770140ce3b24e6844c7224e5ab146415", @generic="60ae72e86e0fe9c74ca66853b0c2cbf78f2a3dfe0502edcad6f62e01262383cc7d5b168158fcb322e066cba92a120b2ef781371e35fefc805e88ba9dda76bd59468719a4811a2c2d2f0ed865d7e0d855389cf12f60da1285e6c33fadc81af0c6d5b314f79a1333c882eccac459d157d24da151c54fd92ee06b1edfead87ddbfa29ce0e260147f46ba8803a18af", @generic="f06d242a6ea28803363132f4c19627a694027f289089df2a52e1dd22992b15964f4839009fbbee60d027c25cbd6a65558060d206d2fc9b4e7ae7d658eca9e5cb02b03b11376470f3d991cc75"]}, 0x1400}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) 2.362161162s ago: executing program 5 (id=2528): r0 = syz_open_dev$audion(&(0x7f00000000c0), 0x5, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050000000008c10000031d48cd3fb111920f7073ef42f2f080057"], 0x54}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0xf8, r2, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_IE={0xd4, 0x2a, [@sec_chan_ofs={0x3e, 0x1}, @tim={0x5, 0x82, {0x5, 0x7f, 0x60, "2e8ff03e7eda500131c4d180fbfee702967da957ec2cd531536aaa262eb5bcf92e93111047a62c6b4dfc49af6c4bf88a8329a23991e37e119b0bde31287dc141a03635a3ed142f8d83a99063f9ec84b898d9c6274138460f996d73820c8861259039b82066704ddcffcc7ea87b787032eda5b05595c5f9b19db96dea96f384"}}, @preq={0x82, 0x25, {{0x1}, 0x4, 0x3, 0x284, @broadcast, 0x1, @void, 0x80000000, 0x2, 0x1, [{{0x0, 0x0, 0x1}, @device_a, 0xf}]}}, @gcr_ga={0xbd, 0x6, @broadcast}, @mic={0x8c, 0x18, {0x1ac, "12ecefe1ff04", @long="cf1d72ac348f46684739cc55f3eaf0cb"}}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x90}, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000740)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539esp(salsa20-generic,sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1073eeda8705da74bc83496ee251e51e6d155c558a4f6dbf7076341df55b7aecaad952f364f05d5e0f", 0x29}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bd", 0x41}], 0x2}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000180)="2001987c5ccf58f5f75061ee", 0xc}, {&(0x7f00000003c0)="8b120728c90b0b4a530fab46abf402095b65870c2a0ac8f0847a8e8ab1d98f34cdd3a1c838f816c52ca57b8a7efbcea529afab803882b9f88c28cab3df58895ebffef931a275cc35f9fefa5bd7a1f580106f3c7defd09032cf42417504eefea81cfa7bfea5032e42cc0858cee1b8e74e133934cc54cd707c5c85d4e5008025c28b72b46d12248babbe0d3f7916a5610416ee255a331398dea59a1a406070cc13e81701447ded270b0c1bce36d2bf06db98dd9c1ed65668eb5c2f4cab0ee3", 0xbe}, {&(0x7f0000000940)="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", 0x177}, {&(0x7f0000000ac0)="cb0985ad89d03db16683167ac85f0aa2385eb0d0d7bec5bc858d28d00aee32f13954a3bb61ef29056625ca65858a754b2fa6acf5600ac1e45d5a3158ff95835a6e08d415224f9c3afc53186a7a77b6e87b339ec5e6", 0x55}], 0x4}}], 0x2, 0x8810) sendmsg$alg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@assoc={0x16, 0x117, 0x4, 0x4}], 0x18, 0x4040000}, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000080)={r8, 0x9}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000007c0)={r8, 0x1c, &(0x7f0000000500)=[@in6={0xa, 0x4e21, 0xabdc, @mcast2, 0x430}]}, &(0x7f0000000800)=0x10) recvmsg$unix(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4088, 0xff8}], 0x1}, 0x12060) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000700)) r10 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r9, 0x40182103, &(0x7f0000000240)={0x0, 0x3, r10, 0x2}) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f0000000480)) r12 = dup(r11) write$6lowpan_enable(r12, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$NBD_SET_TIMEOUT(r4, 0xab09, 0xe7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r4, 0xa471a000) setsockopt$nfc_llcp_NFC_LLCP_RW(r12, 0x118, 0x0, &(0x7f0000000040)=0xf, 0x4) 1.230171855s ago: executing program 5 (id=2529): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c02000002000000", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="6103060423028009012f01810b3d87687bfecae2ae5f0f7c8fab93e77e43c6536c3b30e6c751c1181d458fcc346a670508c878bfd74e4a8d9f0e41c007c26e21668cb00d068443d0aab9a8405a0d5743"], 0xb) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, &(0x7f0000000100)=0x7) 1.136228064s ago: executing program 5 (id=2530): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) fanotify_init(0x40, 0x2) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f0000001040)={0x8}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 159.896848ms ago: executing program 5 (id=2531): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) bind$inet(r4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0xe79b04dd2a128718, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000001, 0x10, r0, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r5, 0x5708e000) 34.586685ms ago: executing program 5 (id=2532): ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) 0s ago: executing program 5 (id=2533): keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000000)={0x2, 0x2d}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r3, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)=""/180, 0xb4}, {&(0x7f00000018c0)=""/4109, 0x100d}, {&(0x7f00000017c0)=""/220, 0xdc}, {&(0x7f0000000f40)=""/218, 0xda}], 0x4}, 0x80000002}], 0x4, 0x40000000, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x7f, @mcast2, 0x4}}, 0x100, 0x6}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000140)={r5, 0x7}, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) kernel console output (not intermixed with test programs): 1] usb 5-1: config 5 interface 142 has no altsetting 0 [ 334.286494][ T3411] usb 5-1: New USB device found, idVendor=1453, idProduct=4026, bcdDevice=ba.28 [ 334.306691][ T3411] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.433234][ T3411] usb 5-1: Product: 䦞⢷ꄰ굔簀⠚ᴾ힇⯌Ἰ耥⬗骤Ӭ⊾ê¤å‰¹ê†šë¹²ì¬—汖龱䪞豹ꛢ匋਴ﬗꅑ턑崀侣⣒á•ç‚žèƒšæ¢ê¨ë‹–뜿牋㦳瓊ꓣ뮹얟Ԭ焫䛺⬯닔젴뀊듷ç­î´±åž‰è„®à­Šè¹ã“«æªµìŒ¦â‡¼âœŒç†¾î®¡ç­‘咸ç‰è„”龕ዧ讈₭ꋳ퉣à¬ä¨ä±µÐµì­í‘°ì©¹à¹¨ã¢„奯䕺೛ޫ䯠켕楨잜嚈쿸졫⻮䊉ଶ꓀ΜäŽë¾¯é™£ [ 334.469675][ T3411] usb 5-1: Manufacturer: ဇ [ 334.474884][ T3411] usb 5-1: SerialNumber: ‹렢ꗚ皙钃䱙땢ã¶ì³¼áš¡é£¥é£¥åŒŒè·¥å•¯äª¬ï“¼à¸¿ç¶²á•¹í”—䫨䮦쨬蔶謠ê›ëª—冴紦궪붆é﫼佚쟙ä“㬕褩毮泸⃼ä£ë°íŸ…焦弾繢㦉銑Ʊ韞å‰ì„“ëâ·Œ [ 334.648074][T11728] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 334.720480][ T3411] pl2303 5-1:5.142: required endpoints missing [ 334.768549][ T3411] usb 5-1: USB disconnect, device number 51 [ 334.932462][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 335.542154][T11737] /dev/rnullb0: Can't open blockdev [ 336.738969][T11750] /dev/rnullb0: Can't open blockdev [ 337.252044][ T9] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 337.413383][ T9] usb 4-1: config 0 has an invalid interface number: 11 but max is 0 [ 337.433206][ T9] usb 4-1: config 0 has no interface number 0 [ 337.445726][ T9] usb 4-1: config 0 interface 11 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 337.469454][ T9] usb 4-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 337.497210][ T9] usb 4-1: config 0 interface 11 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024 [ 337.526469][ T9] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 337.536707][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.546263][ T9] usb 4-1: Product: syz [ 337.550542][ T9] usb 4-1: Manufacturer: syz [ 337.557016][ T9] usb 4-1: SerialNumber: syz [ 337.575148][ T9] usb 4-1: config 0 descriptor?? [ 337.592995][T11759] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 337.600404][T11759] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 337.741697][ T1214] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 337.859906][T11759] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 337.882551][T11759] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 337.901566][ T1214] usb 2-1: Using ep0 maxpacket: 16 [ 337.918359][ T1214] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.919354][ T9] usb 4-1: No status endpoint found [ 337.934565][ T1214] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 337.955380][ T1214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=201 [ 337.971573][ T1214] usb 2-1: SerialNumber: syz [ 337.987419][ T1214] usb 2-1: config 0 descriptor?? [ 338.442055][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 338.624662][ T1214] usbhid 2-1:0.0: can't add hid device: -71 [ 338.636231][ T9] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 338.641787][ T1214] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 338.654871][ T9] usb 5-1: config 0 has no interface number 0 [ 338.676811][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 338.677724][ T1214] usb 2-1: USB disconnect, device number 64 [ 338.704614][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.723620][ T9] usb 5-1: Product: syz [ 338.727933][ T9] usb 5-1: Manufacturer: syz [ 338.752694][ T9] usb 5-1: SerialNumber: syz [ 338.772415][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 338.784271][ T9] usb 5-1: config 0 descriptor?? [ 339.370802][T11788] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 340.703597][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 340.937855][T11777] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.962958][ T10] usb 4-1: USB disconnect, device number 82 [ 341.040856][ T9] usb 5-1: Found UVC 0.08 device syz (046d:0823) [ 341.068611][ T9] usb 5-1: No valid video chain found. [ 341.077536][ T9] usb 5-1: USB disconnect, device number 52 [ 341.683536][ T43] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 341.832093][T11804] /dev/rnullb0: Can't open blockdev [ 341.874297][ T43] usb 2-1: not running at top speed; connect to a high speed hub [ 341.914925][ T43] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 341.937106][ T43] usb 2-1: config 1 has no interface number 1 [ 341.951549][ T43] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 341.977141][ T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 341.991859][ T9] usb 1-1: USB disconnect, device number 55 [ 342.005599][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.029267][ T43] usb 2-1: Product: ê§å™êŒ™ìªžçŽ¤ã°”᦯猽Kꕎﳄ裶耓钫䑩ï㳺꾹βﴶ凡洞蒉裘⧷歲䛗徽≖닞ᱶ㮛䭣雋孟ኒ힔诡ã¸à¡˜êƒ’苅జṘᔡ䙳䲔à¥à¶“뮈掫â€ì°ƒíŒ²è—⸒ì¸ç—¿á¥Ç¾åœ¤ë·¹Í æƒ’즋郘핦뺰툾䨽î î§·éŒ´ëŠ›ä–¦á† áŽ…ë‘î žÞ…å¹ì—‡åŸ’à´„ì䀬籥ï㵔켠봙ä¡ãŠ“ﺊç¼ç¥Žä£†ã˜™é¶Žæ‡‡èª¾ [ 342.130403][ T43] usb 2-1: Manufacturer: Ђ [ 342.146708][ T43] usb 2-1: SerialNumber: syz [ 342.174678][T11806] netlink: 'syz.3.1702': attribute type 1 has an invalid length. [ 342.225662][T11806] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1702'. [ 342.427316][ T43] usb 2-1: failed to enable PITCH for EP 0x82 [ 342.460233][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 342.476609][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 342.484532][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 342.494912][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 342.503684][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 342.552898][ T43] usb 2-1: USB disconnect, device number 65 [ 342.586041][ T10] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 342.648465][T11815] netlink: 'syz.3.1705': attribute type 1 has an invalid length. [ 342.648874][T11811] lo speed is unknown, defaulting to 1000 [ 342.657358][T11815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.698288][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.761662][ T10] usb 5-1: device descriptor read/64, error -71 [ 343.012067][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 343.060689][T11817] lo speed is unknown, defaulting to 1000 [ 343.161750][ T10] usb 5-1: device descriptor read/64, error -71 [ 343.272858][ T10] usb usb5-port1: attempt power cycle [ 343.605487][T11811] chnl_net:caif_netlink_parms(): no params data found [ 343.623086][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 343.704374][ T10] usb 5-1: device descriptor read/8, error -71 [ 343.841600][ T5919] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 343.946014][ T10] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 343.972299][ T10] usb 5-1: device descriptor read/8, error -71 [ 344.034363][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 344.034435][T11811] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.056907][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.068229][ T5919] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 344.079624][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.088281][ T10] usb usb5-port1: unable to enumerate USB device [ 344.097781][T11811] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.107835][ T5919] usb 2-1: config 0 descriptor?? [ 344.117825][T11811] bridge_slave_0: entered allmulticast mode [ 344.146985][T11811] bridge_slave_0: entered promiscuous mode [ 344.174064][T11811] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.202029][T11811] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.209293][T11811] bridge_slave_1: entered allmulticast mode [ 344.233699][T11811] bridge_slave_1: entered promiscuous mode [ 344.317935][T11811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.333194][T11811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.399883][T11811] team0: Port device team_slave_0 added [ 344.412891][T11811] team0: Port device team_slave_1 added [ 344.487449][T11811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.494594][T11811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.520584][T11811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.532738][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.547608][ T5919] zydacron 0003:13EC:0006.001F: item fetching failed at offset 2/5 [ 344.555661][ T51] Bluetooth: hci4: command tx timeout [ 344.577463][T11811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.585355][ T5919] zydacron 0003:13EC:0006.001F: parse failed [ 344.592356][ T5919] zydacron 0003:13EC:0006.001F: probe with driver zydacron failed with error -22 [ 344.604986][T11811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.685893][T11811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.829655][T11811] hsr_slave_0: entered promiscuous mode [ 344.844052][T11811] hsr_slave_1: entered promiscuous mode [ 344.850450][T11811] debugfs: 'hsr0' already exists in 'hsr' [ 344.866746][T11811] Cannot create hsr debugfs directory [ 344.935152][ T5857] usb 2-1: USB disconnect, device number 66 [ 345.152144][ T5919] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 345.210383][T11811] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 345.230806][T11811] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 345.244683][T11811] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 345.258533][T11811] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 345.313875][ T5919] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 345.351763][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 345.391371][ T5919] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 345.421911][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.452859][ T5919] usb 4-1: config 0 descriptor?? [ 345.469663][T11836] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 345.485078][ T5919] hub 4-1:0.0: USB hub found [ 345.494058][T11811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.570107][T11811] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.609812][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.617056][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.654319][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.661556][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.693573][ T5919] hub 4-1:0.0: 2 ports detected [ 345.894570][T11836] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1710'. [ 345.936234][ T5919] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 345.961714][ T5919] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 345.993072][ T5919] usbhid 4-1:0.0: can't add hid device: -71 [ 346.029636][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 346.092530][ T5919] usb 4-1: USB disconnect, device number 83 [ 346.358905][T11811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.452791][ T608] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 346.611823][ T5864] Bluetooth: hci4: command tx timeout [ 346.662084][ T5857] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 346.823446][T11811] veth0_vlan: entered promiscuous mode [ 346.851151][T11811] veth1_vlan: entered promiscuous mode [ 346.858065][ T5857] usb 2-1: Using ep0 maxpacket: 8 [ 346.867860][ T5857] usb 2-1: config 5 has an invalid interface number: 143 but max is 2 [ 346.881030][ T5857] usb 2-1: config 5 has an invalid interface number: 6 but max is 2 [ 346.904059][ T5857] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 346.941065][ T5857] usb 2-1: config 5 has an invalid descriptor of length 108, skipping remainder of the config [ 346.963236][T11811] veth0_macvtap: entered promiscuous mode [ 346.971403][ T5857] usb 2-1: config 5 has no interface number 1 [ 346.983464][T11811] veth1_macvtap: entered promiscuous mode [ 346.991329][ T5857] usb 2-1: config 5 has no interface number 2 [ 347.004823][ T5857] usb 2-1: config 5 interface 143 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 347.034553][T11811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.044126][ T5857] usb 2-1: too many endpoints for config 5 interface 6 altsetting 7: 122, using maximum allowed: 30 [ 347.075115][T11811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.085059][ T5857] usb 2-1: config 5 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 122 [ 347.118967][ T608] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.132540][ T5857] usb 2-1: too many endpoints for config 5 interface 0 altsetting 5: 36, using maximum allowed: 30 [ 347.145162][ T608] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.165790][ T608] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.175176][T11876] XFS (rnullb0): Invalid superblock magic number [ 347.196852][ T5857] usb 2-1: config 5 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 347.208403][ T608] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.231577][ T5857] usb 2-1: config 5 interface 143 has no altsetting 0 [ 347.238486][ T5857] usb 2-1: config 5 interface 6 has no altsetting 0 [ 347.270602][ T5857] usb 2-1: config 5 interface 0 has no altsetting 0 [ 347.294238][ T5857] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=fc.f3 [ 347.321945][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.329978][ T5857] usb 2-1: Product: syz [ 347.342365][ T5857] usb 2-1: Manufacturer: syz [ 347.346992][ T5857] usb 2-1: SerialNumber: syz [ 347.457320][ T608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.482393][ T608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.541336][ T608] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.556062][ T608] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.616842][T11854] tipc: Enabling not permitted [ 347.622997][T11854] tipc: Enabling of bearer rejected, failed to enable media [ 347.652048][ T5860] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 347.668675][ T5857] uvcvideo 2-1:5.143: probe with driver uvcvideo failed with error -22 [ 347.711291][ T5857] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 347.720207][ T5857] usb 2-1: MIDIStreaming interface descriptor not found [ 347.790995][ T5857] usb 2-1: USB disconnect, device number 67 [ 347.844065][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 347.862846][ T5860] usb 5-1: unable to get BOS descriptor or descriptor too short [ 347.872582][ T5860] usb 5-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 347.909625][ T5860] usb 5-1: config 1 interface 0 has no altsetting 0 [ 347.944190][ T5860] usb 5-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 347.967231][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.983012][ T5860] usb 5-1: Product: syz [ 347.987305][ T5860] usb 5-1: Manufacturer: syz [ 347.993130][ T5860] usb 5-1: SerialNumber: syz [ 348.091069][T11899] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1727'. [ 348.398970][ T5860] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input31 [ 348.446153][ T5860] usb 5-1: USB disconnect, device number 57 [ 348.446421][ T5202] bcm5974 5-1:1.0: could not read from device [ 348.692792][ T5864] Bluetooth: hci4: command 0x040f tx timeout [ 349.001761][ T10] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 349.142520][ T10] usb 2-1: device descriptor read/64, error -71 [ 349.391584][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 349.533030][ T10] usb 2-1: device descriptor read/64, error -71 [ 349.652879][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 349.665318][ T10] usb usb2-port1: attempt power cycle [ 350.027667][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 350.064191][ T10] usb 2-1: device descriptor read/8, error -71 [ 350.282557][ T5860] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 350.315786][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 350.352194][ T10] usb 2-1: device descriptor read/8, error -71 [ 350.461952][ T5860] usb 4-1: Using ep0 maxpacket: 16 [ 350.467369][ T10] usb usb2-port1: unable to enumerate USB device [ 350.476355][ T5860] usb 4-1: unable to get BOS descriptor or descriptor too short [ 350.489444][ T5860] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.511473][ T5860] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 2039, setting to 1024 [ 350.523009][ T5860] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 350.534091][ T5860] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 350.552552][ T5860] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 350.562040][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.570090][ T5860] usb 4-1: Product: syz [ 350.584770][ T5860] usb 4-1: Manufacturer: syz [ 350.589391][ T5860] usb 4-1: SerialNumber: syz [ 350.610143][T11954] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 350.782601][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 350.826573][T11965] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 350.833968][T11965] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 350.919684][ T5860] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 350.938174][ T5860] cdc_ncm 4-1:1.0: bind() failure [ 350.973506][ T5860] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 350.989420][ T5860] cdc_ncm 4-1:1.1: bind() failure [ 351.019820][ T5860] usb 4-1: USB disconnect, device number 84 [ 351.326769][T11980] MTD: Couldn't look up '/dev/sg0': -15 [ 351.881283][T11997] lo speed is unknown, defaulting to 1000 [ 352.224555][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 352.380540][T12008] /dev/rnullb0: Can't open blockdev [ 352.432961][ T5860] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 352.633493][ T5860] usb 6-1: Using ep0 maxpacket: 16 [ 352.660165][ T5860] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 352.697139][ T5860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 352.735953][ T5860] usb 6-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 352.759054][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.791748][ T5860] usb 6-1: Product: syz [ 352.800438][ T5860] usb 6-1: Manufacturer: syz [ 352.814888][ T5860] usb 6-1: SerialNumber: syz [ 352.857763][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 352.870209][ T5860] usb 6-1: config 0 descriptor?? [ 353.117111][ T5860] pegasus_notetaker 6-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 353.151963][ T5860] usb 6-1: USB disconnect, device number 2 [ 353.341621][ T43] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 353.413089][T12019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1767'. [ 353.634725][T12024] XFS (rnullb0): Invalid superblock magic number [ 353.717813][ T43] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 353.761957][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.776672][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.811716][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 353.846268][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 353.869922][ T43] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 353.901630][ T43] usb 2-1: Manufacturer: syz [ 353.929292][T12036] /dev/rnullb0: Can't open blockdev [ 353.948404][ T43] usb 2-1: config 0 descriptor?? [ 354.144080][T12040] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1772'. [ 354.172862][T12041] /dev/rnullb0: Can't open blockdev [ 354.276028][T12045] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 354.282585][T12045] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 354.369776][T12045] vhci_hcd vhci_hcd.0: Device attached [ 354.403278][ T43] appleir 0003:05AC:8243.0020: unknown main item tag 0x0 [ 354.424436][T12055] /dev/rnullb0: Can't open blockdev [ 354.451426][ T43] appleir 0003:05AC:8243.0020: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 354.591298][T12046] vhci_hcd: connection closed [ 354.596250][ T12] vhci_hcd: stop threads [ 354.608913][ T12] vhci_hcd: release socket [ 354.633162][ T12] vhci_hcd: disconnect device [ 354.641962][ T10] usb 40-1: enqueue for inactive port 0 [ 354.662632][ T9] usb 2-1: USB disconnect, device number 72 [ 354.880168][T12063] fido_id[12063]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 355.022970][T12069] netlink: 'syz.4.1780': attribute type 58 has an invalid length. [ 355.172386][ T10] usb usb40-port1: attempt power cycle [ 355.284625][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1781'. [ 355.461142][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 355.653056][ C1] Unknown status report in ack skb [ 355.762939][ T10] usb usb40-port1: unable to enumerate USB device [ 355.769532][ T9] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 355.949809][T12092] /dev/rnullb0: Can't open blockdev [ 355.971790][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 355.981980][ T9] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 356.011559][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 356.019584][ T9] usb 4-1: Product: syz [ 356.042700][ T9] usb 4-1: Manufacturer: syz [ 356.047763][ T9] usb 4-1: SerialNumber: syz [ 356.067140][ T9] usb 4-1: config 0 descriptor?? [ 356.108163][T12095] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1790'. [ 356.108848][ T9] usbtest 4-1:0.0: FX2 device [ 356.160810][ T9] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 356.598699][ T5860] usb 4-1: USB disconnect, device number 85 [ 358.009888][T12123] /dev/rnullb0: Can't open blockdev [ 358.693131][ T43] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 358.911606][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 358.924211][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 358.942960][ T43] usb 6-1: config 255 has an invalid interface number: 225 but max is 0 [ 358.951352][ T43] usb 6-1: config 255 has no interface number 0 [ 358.981080][T12164] Failed to get privilege flags for destination (handle=0x2:0x0) [ 359.001539][ T43] usb 6-1: config 255 interface 225 has no altsetting 0 [ 359.045067][ T43] usb 6-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=bd.29 [ 359.080540][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.107454][ T43] usb 6-1: Product: syz [ 359.115111][ T43] usb 6-1: Manufacturer: syz [ 359.119762][ T43] usb 6-1: SerialNumber: syz [ 359.144003][T12169] sp0: Synchronizing with TNC [ 359.291919][ T9] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 359.441811][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 359.451277][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 359.467418][ T9] usb 5-1: config 254 has an invalid interface number: 242 but max is 0 [ 359.492913][ T9] usb 5-1: config 254 has no interface number 0 [ 359.509557][ T9] usb 5-1: config 254 interface 242 has no altsetting 0 [ 359.532240][ T9] usb 5-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=e9.57 [ 359.543001][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.551625][ T9] usb 5-1: Product: syz [ 359.556472][ T9] usb 5-1: Manufacturer: syz [ 359.561088][ T9] usb 5-1: SerialNumber: syz [ 359.671637][ T5906] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 359.789680][ T43] cxacru 6-1:255.225: usbatm_usb_probe: bind failed: -19! [ 359.797615][ T9] sierra 5-1:254.242: Sierra USB modem converter detected [ 359.825485][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 359.839620][ T5906] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 359.861263][ T9] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 359.886159][ T5906] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 359.901426][ T9] usb 5-1: USB disconnect, device number 58 [ 359.920455][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 359.936417][ T9] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 359.952579][ T5906] usb 4-1: Product: syz [ 359.967811][ T9] sierra 5-1:254.242: device disconnected [ 359.976076][ T5906] usb 4-1: Manufacturer: syz [ 359.993982][ T5906] usb 4-1: SerialNumber: syz [ 360.034787][ T5906] usb 4-1: config 0 descriptor?? [ 360.040940][T12175] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 360.219371][T12179] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1815'. [ 360.262787][ T5860] usb 6-1: USB disconnect, device number 3 [ 360.305741][ T9] usb 4-1: USB disconnect, device number 86 [ 360.543625][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 360.620449][T12197] /dev/rnullb0: Can't open blockdev [ 360.627595][T12198] /dev/rnullb0: Can't open blockdev [ 360.949069][T12205] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 360.955687][T12205] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 360.986790][T12205] vhci_hcd vhci_hcd.0: Device attached [ 361.006818][T12208] vhci_hcd: connection closed [ 361.007066][ T13] vhci_hcd: stop threads [ 361.048659][ T13] vhci_hcd: release socket [ 361.065076][ T13] vhci_hcd: disconnect device [ 361.100275][T12217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1824'. [ 361.193760][T12221] /dev/rnullb0: Can't open blockdev [ 361.338014][T12225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.358722][T12225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.441191][T12229] /dev/rnullb0: Can't open blockdev [ 361.528265][T12231] /dev/rnullb0: Can't open blockdev [ 361.561756][ T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 361.675951][T12240] /dev/rnullb0: Can't open blockdev [ 361.711568][ T9] usb 2-1: device descriptor read/64, error -71 [ 361.794206][T12248] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 361.800785][T12248] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 361.809213][T12248] vhci_hcd vhci_hcd.0: Device attached [ 361.816762][T12249] vhci_hcd: connection closed [ 361.817003][ T36] vhci_hcd: stop threads [ 361.837914][ T36] vhci_hcd: release socket [ 361.839867][ T49] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 361.847748][ T36] vhci_hcd: disconnect device [ 361.961599][ T9] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 362.091788][ T9] usb 2-1: device descriptor read/64, error -71 [ 362.212682][ T9] usb usb2-port1: attempt power cycle [ 362.571452][ T9] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 362.595560][ T9] usb 2-1: device descriptor read/8, error -71 [ 362.713153][T12265] /dev/rnullb0: Can't open blockdev [ 362.783396][T12265] lo speed is unknown, defaulting to 1000 [ 362.872030][ T9] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 362.914117][ T9] usb 2-1: device descriptor read/8, error -71 [ 363.042033][ T9] usb usb2-port1: unable to enumerate USB device [ 363.245633][T12271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.267084][T12271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.295317][T12271] fuse: Unknown parameter 'groui_id' [ 363.302935][T12271] /dev/rnullb0: Can't open blockdev [ 363.658036][T12279] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1841'. [ 363.703614][T12266] binder: 12264:12266 ioctl c0306201 2000000003c0 returned -14 [ 363.808612][T12285] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 363.821083][T12285] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 363.852846][T12285] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 364.027711][T12281] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1842'. [ 364.631956][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 364.710075][T12308] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1849'. [ 364.724325][T12309] /dev/rnullb0: Can't open blockdev [ 364.804976][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.833292][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.857097][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 364.878568][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.907351][ T9] usb 5-1: config 0 descriptor?? [ 365.100338][T12324] pimreg: entered allmulticast mode [ 365.173257][T12325] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1853'. [ 365.193577][T12324] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1853'. [ 365.342797][ T9] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x4 [ 365.366337][ T9] cm6533_jd 0003:0D8C:0022.0021: unknown main item tag 0x0 [ 365.383895][ T9] cm6533_jd 0003:0D8C:0022.0021: item fetching failed at offset 3/5 [ 365.404002][ T9] cm6533_jd 0003:0D8C:0022.0021: parse failed [ 365.420453][ T9] cm6533_jd 0003:0D8C:0022.0021: probe with driver cm6533_jd failed with error -22 [ 365.513647][ T5906] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 365.578751][T12301] overlay: filesystem on ./bus not supported as upperdir [ 365.586945][T12343] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1858'. [ 365.608893][T12342] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1858'. [ 365.623940][T12301] evm: overlay not supported [ 365.645519][ T9] usb 5-1: USB disconnect, device number 59 [ 365.675843][T12342] /dev/rnullb0: Can't lookup blockdev [ 365.708300][T12343] 9pnet_fd: Insufficient options for proto=fd [ 365.734914][ T5906] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 365.746126][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.761126][ T5906] usb 4-1: config 0 descriptor?? [ 365.774337][ T5906] cp210x 4-1:0.0: cp210x converter detected [ 366.180021][ T5906] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 366.207356][ T5906] usb 4-1: cp210x converter now attached to ttyUSB0 [ 366.292322][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 366.799294][T12364] tmpfs: Cannot change global quota limit on remount [ 367.211616][ T9] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 367.239065][T12376] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 367.254730][T12376] cramfs: wrong magic [ 367.385757][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 367.419119][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.433940][ T9] usb 2-1: Product: syz [ 367.436657][T12384] tmpfs: Unknown parameter 'bi' [ 367.438146][ T9] usb 2-1: Manufacturer: syz [ 367.438164][ T9] usb 2-1: SerialNumber: syz [ 367.459648][T12385] 9pnet_fd: p9_fd_create_unix (12385): problem connecting socket: ./file0: -111 [ 367.462927][ T9] usb 2-1: config 0 descriptor?? [ 367.685701][ T9] usb-storage 2-1:0.0: USB Mass Storage device detected [ 367.883153][ T1214] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 368.031675][ T1214] usb 5-1: device descriptor read/64, error -71 [ 368.225121][ T5860] usb 4-1: USB disconnect, device number 88 [ 368.247342][ T5860] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 368.285067][ T1214] usb 5-1: new low-speed USB device number 61 using dummy_hcd [ 368.296733][T12399] ceph: Path missing in source [ 368.324052][ T5860] cp210x 4-1:0.0: device disconnected [ 368.432639][ T1214] usb 5-1: device descriptor read/64, error -71 [ 368.490081][T12403] binder: 12400:12403 ioctl c0306201 0 returned -14 [ 368.551949][ T1214] usb usb5-port1: attempt power cycle [ 368.760947][T12407] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1879'. [ 368.907264][ T1214] usb 5-1: new low-speed USB device number 62 using dummy_hcd [ 368.954593][ T1214] usb 5-1: device descriptor read/8, error -71 [ 369.213074][ T1214] usb 5-1: new low-speed USB device number 63 using dummy_hcd [ 369.252169][ T1214] usb 5-1: device descriptor read/8, error -71 [ 369.362106][ T1214] usb usb5-port1: unable to enumerate USB device [ 369.510368][T12433] /dev/rnullb0: Can't lookup blockdev [ 369.960818][ T9] usb 2-1: USB disconnect, device number 77 [ 370.077291][T12439] syzkaller0: entered allmulticast mode [ 370.089014][T12438] syzkaller0: left allmulticast mode [ 370.606274][T12458] syzkaller1: entered promiscuous mode [ 370.651668][T12458] syzkaller1: entered allmulticast mode [ 371.420083][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 371.431674][ T1006] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 372.163429][T12528] /dev/sg0: Can't lookup blockdev [ 372.307746][T12530] /dev/rnullb0: Can't lookup blockdev [ 372.450961][ T36] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 372.598917][T12540] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 372.606676][T12540] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 372.614229][T12540] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 372.620845][T12540] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 372.637974][T12540] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 372.645685][T12540] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 372.653633][T12540] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 372.672275][T12540] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 372.678755][T12540] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 372.703478][T12540] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 372.709945][T12540] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 372.731181][T12540] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 372.755617][T12540] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 372.775577][T12540] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 372.974808][T12550] batadv_slave_1: entered promiscuous mode [ 372.984157][T12549] batadv_slave_1: left promiscuous mode [ 373.553536][ T9] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 373.723595][ T9] usb 4-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 373.737631][ T9] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 373.751351][ T9] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 373.768614][ T9] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 373.784634][ T9] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 373.797966][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 373.809454][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.052681][T12568] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1929'. [ 374.231630][T12570] genirq: Flags mismatch irq 4. 00200000 (aio_iiro_16) vs. 00200080 (ttyS0) [ 374.853461][ T9] ath6kl: Failed to submit usb control message: -110 [ 374.863857][ T9] ath6kl: unable to send the bmi data to the device: -110 [ 374.901610][ T9] ath6kl: Unable to send get target info: -110 [ 374.922652][ T9] ath6kl: Failed to init ath6kl core: -110 [ 374.952233][ T9] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 375.932617][ T1214] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 376.001632][ T5857] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 376.102844][ T1214] usb 2-1: Using ep0 maxpacket: 16 [ 376.118415][ T1214] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 376.131171][ T1214] usb 2-1: config 0 has no interface number 0 [ 376.148573][ T1214] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.161712][ T5857] usb 5-1: Using ep0 maxpacket: 16 [ 376.184500][ T1214] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.204739][ T5857] usb 5-1: unable to get BOS descriptor or descriptor too short [ 376.221731][ T1214] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 376.241269][ T5857] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 376.249707][ T5857] usb 5-1: can't read configurations, error -61 [ 376.261666][ T1214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.279710][ T1214] usb 2-1: config 0 descriptor?? [ 376.404848][ T5857] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 376.537658][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 376.552996][ T10] usb 4-1: USB disconnect, device number 89 [ 376.594256][ T1214] uclogic 0003:5543:0781.0022: unknown main item tag 0x0 [ 376.620502][ T1214] uclogic 0003:5543:0781.0022: unknown main item tag 0x0 [ 376.627920][ T5857] usb 5-1: Using ep0 maxpacket: 16 [ 376.643748][ T5857] usb 5-1: unable to get BOS descriptor or descriptor too short [ 376.661580][ T1214] uclogic 0003:5543:0781.0022: unknown main item tag 0x0 [ 376.669273][ T1214] uclogic 0003:5543:0781.0022: unknown main item tag 0x0 [ 376.679952][ T5857] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 376.691977][ T5857] usb 5-1: can't read configurations, error -61 [ 376.699549][ T1214] uclogic 0003:5543:0781.0022: unknown main item tag 0x0 [ 376.712366][ T5857] usb usb5-port1: attempt power cycle [ 376.728443][ T1214] uclogic 0003:5543:0781.0022: hidraw0: USB HID v0.40 Device [HID 5543:0781] on usb-dummy_hcd.1-1/input1 [ 376.866522][T12638] /dev/rnullb0: Can't open blockdev [ 376.872232][ T10] usb 2-1: USB disconnect, device number 78 [ 377.071647][ T5857] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 377.126460][ T5857] usb 5-1: Using ep0 maxpacket: 16 [ 377.142213][ T5857] usb 5-1: unable to get BOS descriptor or descriptor too short [ 377.172309][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 377.252190][ T5857] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 377.260061][ T5857] usb 5-1: can't read configurations, error -61 [ 377.392421][ T5857] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 377.432409][ T5857] usb 5-1: Using ep0 maxpacket: 16 [ 377.443099][ T5857] usb 5-1: unable to get BOS descriptor or descriptor too short [ 377.466414][ T5857] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 377.474441][ T5857] usb 5-1: can't read configurations, error -61 [ 377.492377][ T5857] usb usb5-port1: unable to enumerate USB device [ 377.561724][ T1214] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 377.727940][ T1214] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 377.751626][ T1214] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.769909][ T1214] usb 4-1: Product: syz [ 377.778075][ T1214] usb 4-1: Manufacturer: syz [ 377.787021][T12657] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 377.791668][ T1214] usb 4-1: SerialNumber: syz [ 377.806892][ T1214] usb 4-1: config 0 descriptor?? [ 378.033930][ T1214] usb-storage 4-1:0.0: USB Mass Storage device detected [ 378.275430][T12672] /dev/rnullb0: Can't open blockdev [ 378.305774][ T608] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.458126][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.471623][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.811639][ T9] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 378.981633][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 379.036948][ T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.056522][ T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.071619][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 379.081627][ T9] usb 2-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 379.091263][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.119438][ T9] usb 2-1: config 0 descriptor?? [ 379.239080][T12696] cgroup: Unknown subsys name 'obj_type' [ 379.246179][T12587] syz.1.1932 (12587) used greatest stack depth: 19992 bytes left [ 379.368622][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 379.401705][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 379.423174][ T9] usb 2-1: USB disconnect, device number 79 [ 379.795973][T12589] syz.1.1932 (12589) used greatest stack depth: 19864 bytes left [ 380.035731][T12714] netlink: 'syz.1.1974': attribute type 10 has an invalid length. [ 380.323307][ T1214] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 380.359611][ T10] usb 4-1: USB disconnect, device number 90 [ 380.496478][ T1214] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.516550][ T1214] usb 2-1: config 0 interface 0 has no altsetting 0 [ 380.550958][ T1214] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 380.571099][ T1214] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.591369][ T1214] usb 2-1: Product: syz [ 380.595693][ T1214] usb 2-1: Manufacturer: syz [ 380.600437][ T1214] usb 2-1: SerialNumber: syz [ 380.615399][ T1214] usb 2-1: config 0 descriptor?? [ 380.651419][ T1214] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 380.677762][ T1214] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 380.702357][ T1214] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 380.711023][ T1214] usb 2-1: media controller created [ 380.803314][ T1214] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 380.998581][ T1214] DVB: Unable to find symbol tda10046_attach() [ 381.047368][ T1214] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 381.106002][ T1214] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 381.173816][T12756] netlink: 'syz.3.1986': attribute type 1 has an invalid length. [ 381.181668][ T1214] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 381.191638][T12756] nbd: error processing sock list [ 381.204665][ T1214] usb 2-1: USB disconnect, device number 80 [ 381.223503][T12756] block nbd0: shutting down sockets [ 381.861987][ T10] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 382.074610][ T10] usb 2-1: no configurations [ 382.079262][ T10] usb 2-1: can't read configurations, error -22 [ 382.231584][ T10] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 382.328612][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 382.406029][ T10] usb 2-1: no configurations [ 382.410701][ T10] usb 2-1: can't read configurations, error -22 [ 382.455078][ T10] usb usb2-port1: attempt power cycle [ 382.821674][ T10] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 382.846369][ T10] usb 2-1: no configurations [ 382.851253][ T10] usb 2-1: can't read configurations, error -22 [ 382.931968][ T608] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 383.023005][ T10] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 383.067015][ T10] usb 2-1: no configurations [ 383.081572][ T10] usb 2-1: can't read configurations, error -22 [ 383.102003][ T10] usb usb2-port1: unable to enumerate USB device [ 383.478701][ T30] audit: type=1800 audit(1753863929.691:15): pid=12818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2004" name="rnullb0" dev="tmpfs" ino=184 res=0 errno=0 [ 383.612352][ T5860] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 383.781598][ T5860] usb 4-1: Using ep0 maxpacket: 16 [ 383.790585][ T5860] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 383.808819][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 383.828953][ T5860] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 383.851224][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.859559][ T5860] usb 4-1: Product: syz [ 383.866424][ T5860] usb 4-1: Manufacturer: syz [ 383.871121][ T5860] usb 4-1: SerialNumber: syz [ 383.879394][ T5860] usb 4-1: config 0 descriptor?? [ 383.893831][ T5860] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 383.909124][ T5860] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 383.998669][T12829] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 384.005332][T12829] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 384.017152][T12829] vhci_hcd vhci_hcd.0: Device attached [ 384.029120][T12830] usbip_core: unknown command [ 384.037900][T12830] vhci_hcd: unknown pdu 0 [ 384.043078][T12830] usbip_core: unknown command [ 384.048133][ T13] vhci_hcd: stop threads [ 384.067996][ T13] vhci_hcd: release socket [ 384.075531][ T13] vhci_hcd: disconnect device [ 384.392593][T12837] /dev/rnullb0: Can't lookup blockdev [ 384.573638][ T5860] em28xx 4-1:0.0: chip ID is em2874 [ 384.750762][T12849] rdma_rxe: rxe_newlink: failed to add lo [ 384.759213][T12848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.790673][T12848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.949565][ T5919] usb 4-1: USB disconnect, device number 91 [ 384.968601][T12857] binder: 12856:12857 ioctl c018620c 200000000580 returned -22 [ 384.979578][T12857] binder: 12856:12857 ioctl 5408 2000000002c0 returned -22 [ 384.983252][ T5919] em28xx 4-1:0.0: Disconnecting em28xx [ 385.023312][ T5919] em28xx 4-1:0.0: Freeing device [ 385.614966][T12881] Malformed UNC in devname [ 385.614966][T12881] [ 385.642045][T12881] CIFS: VFS: Malformed UNC in devname [ 385.948747][T12894] /dev/rnullb0: Can't open blockdev [ 386.342815][T12910] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 386.502517][ T5860] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 386.666625][ T5860] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 386.678017][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.692420][ T5860] usb 2-1: Product: syz [ 386.705211][ T5860] usb 2-1: Manufacturer: syz [ 386.709844][ T5860] usb 2-1: SerialNumber: syz [ 386.724081][ T5860] usb 2-1: config 0 descriptor?? [ 386.933092][ T5860] usb-storage 2-1:0.0: USB Mass Storage device detected [ 387.184279][ T5857] usb 2-1: USB disconnect, device number 85 [ 387.399284][T12933] 9pnet_fd: Insufficient options for proto=fd [ 388.065191][ T608] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 388.275905][T12976] MTD: Couldn't look up '/dev/rnullb0': -15 [ 388.288423][T12978] cgroup2: Unknown parameter 'obj_user' [ 388.583212][ T5906] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 388.701887][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 388.751623][ T5857] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 388.762474][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 388.796261][ T5906] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 388.811896][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.852539][ T5906] pvrusb2: Hardware description: Terratec Grabster AV400 [ 388.859604][ T5906] pvrusb2: ********** [ 388.871898][ T5906] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 388.894784][ T5906] pvrusb2: Important functionality might not be entirely working. [ 388.912877][ T5906] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 388.927423][ T5857] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 388.947006][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.948855][ T5906] pvrusb2: ********** [ 388.984716][ T5857] usb 2-1: Product: syz [ 388.988923][ T5857] usb 2-1: Manufacturer: syz [ 389.004005][ T5857] usb 2-1: SerialNumber: syz [ 389.025745][ T5857] usb 2-1: config 0 descriptor?? [ 389.046600][ T2348] pvrusb2: Invalid write control endpoint [ 389.194773][ T2348] pvrusb2: Invalid write control endpoint [ 389.226883][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 389.264096][ T5857] usb-storage 2-1:0.0: USB Mass Storage device detected [ 389.279292][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 389.296593][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 389.327523][T13014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.367393][ T2348] pvrusb2: Device being rendered inoperable [ 389.393751][ T2348] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 389.402532][T13014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.414759][ T2348] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 389.439294][ T2348] pvrusb2: Attached sub-driver cx25840 [ 389.451525][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 389.474646][ T5857] usb 2-1: USB disconnect, device number 86 [ 389.490958][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 389.599131][ T1214] usb 4-1: USB disconnect, device number 92 [ 389.693455][T13022] XFS (rnullb0): Invalid superblock magic number [ 389.718519][T13033] GUP no longer grows the stack in syz.3.2073 (13033): 200000005000-200000008000 (200000004000) [ 389.733468][T13033] CPU: 0 UID: 0 PID: 13033 Comm: syz.3.2073 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 389.733497][T13033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 389.733514][T13033] Call Trace: [ 389.733523][T13033] [ 389.733532][T13033] dump_stack_lvl+0x189/0x250 [ 389.733572][T13033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.733603][T13033] ? __pfx__printk+0x10/0x10 [ 389.733629][T13033] ? find_vma+0xe7/0x160 [ 389.733665][T13033] fixup_user_fault+0x661/0x720 [ 389.733692][T13033] fault_in_user_writeable+0x72/0xe0 [ 389.733724][T13033] futex_lock_pi+0x773/0xa90 [ 389.733756][T13033] ? __pfx_futex_lock_pi+0x10/0x10 [ 389.733803][T13033] ? futex_private_hash_put+0x4b/0x280 [ 389.733837][T13033] ? __pfx_futex_wake_mark+0x10/0x10 [ 389.733866][T13033] ? __pfx_futex_wake+0x10/0x10 [ 389.733884][T13033] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 389.733917][T13033] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 389.733955][T13033] do_futex+0x292/0x420 [ 389.733980][T13033] ? __pfx_do_futex+0x10/0x10 [ 389.733999][T13033] ? __vm_munmap+0x301/0x3d0 [ 389.734025][T13033] __se_sys_futex+0x36f/0x400 [ 389.734052][T13033] ? __pfx___se_sys_futex+0x10/0x10 [ 389.734074][T13033] ? rcu_is_watching+0x15/0xb0 [ 389.734107][T13033] ? __x64_sys_futex+0x21/0xf0 [ 389.734131][T13033] do_syscall_64+0xfa/0x3b0 [ 389.734161][T13033] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.734190][T13033] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.734211][T13033] ? clear_bhb_loop+0x60/0xb0 [ 389.734236][T13033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.734262][T13033] RIP: 0033:0x7fb77198e9a9 [ 389.734281][T13033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.734299][T13033] RSP: 002b:00007fb772842038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 389.734326][T13033] RAX: ffffffffffffffda RBX: 00007fb771bb5fa0 RCX: 00007fb77198e9a9 [ 389.734342][T13033] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 389.734356][T13033] RBP: 00007fb771a10d69 R08: 0000000000000000 R09: 0000000000000000 [ 389.734369][T13033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 389.734382][T13033] R13: 0000000000000000 R14: 00007fb771bb5fa0 R15: 00007ffca3d5f948 [ 389.734422][T13033] [ 390.322298][T13047] /dev/rnullb0: Can't lookup blockdev [ 390.508569][T13056] /dev/rnullb0: Can't open blockdev [ 390.526719][ T30] audit: type=1326 audit(1753863936.741:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13055 comm="syz.1.2081" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49c0f8e9a9 code=0xffff0000 [ 390.549119][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.138460][ T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 391.239905][T13069] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2088'. [ 391.272262][T13069] /dev/rnullb0: Can't lookup blockdev [ 391.333128][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 391.348439][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 391.377379][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 391.417556][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 391.441753][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.449775][ T10] usb 5-1: Product: syz [ 391.466532][ T10] usb 5-1: Manufacturer: syz [ 391.471163][ T10] usb 5-1: SerialNumber: syz [ 391.499425][ T10] usb 5-1: config 0 descriptor?? [ 391.528128][ T10] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 391.553687][ T10] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 391.613408][T13074] MTD: Couldn't look up '/dev/rnullb0': -15 [ 391.823281][T13079] netlink: 'syz.5.2091': attribute type 1 has an invalid length. [ 391.824652][ T10] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 391.831067][T13079] netlink: 'syz.5.2091': attribute type 1 has an invalid length. [ 391.855276][ T10] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 391.874043][ T10] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 391.887840][T13083] pimreg: entered allmulticast mode [ 391.891536][ T10] em28xx 5-1:0.0: No AC97 audio processor [ 391.930440][ T10] usb 5-1: USB disconnect, device number 68 [ 391.982847][ T10] em28xx 5-1:0.0: Disconnecting em28xx [ 391.996557][ T10] em28xx 5-1:0.0: Freeing device [ 392.322221][ T10] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 392.395768][T13095] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 392.483812][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 392.524512][T13103] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 392.544921][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 392.554436][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.571778][ T10] usb 5-1: Product: syz [ 392.577801][T13103] NILFS (nullb0): couldn't find nilfs on the device [ 392.584525][ T10] usb 5-1: Manufacturer: syz [ 392.597063][ T10] usb 5-1: SerialNumber: syz [ 392.622610][ T10] usb 5-1: config 0 descriptor?? [ 392.848761][ T10] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device: [ 392.875219][ T10] 00 00 00 00 00 00 00 00 [ 392.886981][ T10] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 393.069661][T13083] /dev/rnullb0: Can't open blockdev [ 393.086121][ T10] usb 5-1: USB disconnect, device number 69 [ 393.286185][T13111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2101'. [ 393.482880][T13114] /dev/rnullb0: Can't lookup blockdev [ 393.807335][T13129] binder: 13123:13129 ioctl c0306201 0 returned -14 [ 393.829317][ T1006] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 393.921800][T13136] /dev/rnullb0: Can't lookup blockdev [ 394.101934][ T1214] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 394.284891][ T1214] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 394.295801][ T1214] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.321534][ T1214] usb 5-1: Product: syz [ 394.325731][ T1214] usb 5-1: Manufacturer: syz [ 394.330369][ T1214] usb 5-1: SerialNumber: syz [ 394.373964][ T1214] usb 5-1: config 0 descriptor?? [ 394.422612][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 394.453285][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 394.596738][ T1214] usb-storage 5-1:0.0: USB Mass Storage device detected [ 394.734470][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 394.751818][ T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 394.759929][ T9] usb 2-1: config 0 has no interface number 0 [ 394.820152][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 394.841875][ T1214] usb 5-1: USB disconnect, device number 70 [ 394.845872][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.879356][ T9] usb 2-1: Product: syz [ 394.885286][ T9] usb 2-1: Manufacturer: syz [ 394.891858][ T5860] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 394.901633][ T9] usb 2-1: SerialNumber: syz [ 394.914944][ T9] usb 2-1: config 0 descriptor?? [ 394.934162][ T9] smsc95xx v2.0.0 [ 395.001669][T13160] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2118'. [ 395.042174][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 395.051208][ T5860] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 395.072545][ T5860] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.090229][ T5860] usb 4-1: config 0 has no interfaces? [ 395.100428][ T5860] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 395.114821][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.134484][ T5860] usb 4-1: config 0 descriptor?? [ 395.324852][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 395.374171][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 395.491009][T13172] lo speed is unknown, defaulting to 1000 [ 396.147191][T13173] netlink: 'syz.4.2124': attribute type 10 has an invalid length. [ 396.166381][T13173] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2124'. [ 396.197005][ T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 396.209262][ T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32 [ 396.210196][T13178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2124'. [ 396.297889][T13177] lo speed is unknown, defaulting to 1000 [ 397.078774][ T49] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 397.259984][ T9] usb 2-1: USB disconnect, device number 87 [ 397.533739][ T5860] usb 4-1: USB disconnect, device number 93 [ 397.696256][T13202] lo speed is unknown, defaulting to 1000 [ 397.729491][T13206] /dev/rnullb0: Can't lookup blockdev [ 397.830685][ T36] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 397.992815][T13212] /dev/rnullb0: Can't lookup blockdev [ 398.173908][ T30] audit: type=1800 audit(1753863944.391:17): pid=13203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.2131" name="/cec3" dev="devtmpfs" ino=966 res=0 errno=0 [ 398.904894][ T5919] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 399.067295][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 399.103988][ T5919] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 399.114761][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.180712][T13251] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2145'. [ 399.222328][T13252] /dev/rnullb0: Can't lookup blockdev [ 399.258282][ T5919] pvrusb2: Hardware description: Terratec Grabster AV400 [ 399.277448][ T5919] pvrusb2: ********** [ 399.287567][ T5919] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 399.318732][ T5919] pvrusb2: Important functionality might not be entirely working. [ 399.339027][ T5919] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 399.380812][ T5919] pvrusb2: ********** [ 399.472414][ T2348] pvrusb2: Invalid write control endpoint [ 399.574447][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 399.627774][ T2348] pvrusb2: Invalid write control endpoint [ 399.636537][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 399.650478][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 399.662774][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 399.684512][ T9] usb 2-1: USB disconnect, device number 88 [ 399.711884][ T2348] pvrusb2: Device being rendered inoperable [ 399.717969][ T2348] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 399.744400][ T2348] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 399.765752][ T2348] pvrusb2: Attached sub-driver cx25840 [ 399.771320][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 399.784584][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 399.847988][T13267] program syz.3.2150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.014373][ T30] audit: type=1804 audit(1753863946.231:18): pid=13272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2151" name="rnullb0" dev="tmpfs" ino=184 res=1 errno=0 [ 400.222748][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 400.865802][T13305] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 400.872371][T13305] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 400.916344][T13305] vhci_hcd vhci_hcd.0: Device attached [ 400.935819][T13307] vhci_hcd: connection closed [ 400.937140][ T36] vhci_hcd: stop threads [ 400.968643][ T36] vhci_hcd: release socket [ 400.978981][ T36] vhci_hcd: disconnect device [ 401.341588][ T10] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 401.550951][ T10] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 401.575542][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.604727][ T10] usb 5-1: Product: syz [ 401.608933][ T10] usb 5-1: Manufacturer: syz [ 401.618158][ T10] usb 5-1: SerialNumber: syz [ 401.647826][ T10] usb 5-1: config 0 descriptor?? [ 401.730689][T13328] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.874150][ T10] usb-storage 5-1:0.0: USB Mass Storage device detected [ 402.120892][ T10] usb 5-1: USB disconnect, device number 71 [ 402.757229][T13353] cgroup: Name too long [ 403.501575][ T5860] usb 4-1: new full-speed USB device number 94 using dummy_hcd [ 403.664086][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 403.677313][ T5860] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 403.697445][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.710019][T13379] CIFS mount error: No usable UNC path provided in device string! [ 403.710019][T13379] [ 403.728550][ T5860] usb 4-1: config 0 descriptor?? [ 403.736923][T13379] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 403.743206][T13369] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 404.201408][ T5860] elan 0003:04F3:0755.0023: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 404.425470][ T5860] usb 4-1: USB disconnect, device number 94 [ 404.643033][T13387] can: request_module (can-proto-0) failed. [ 404.650360][T13387] netdevsim netdevsim4 ªªªªªª: renamed from netdevsim0 (while UP) [ 404.743420][T13391] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2193'. [ 405.271595][ T9] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 405.334175][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 405.431578][ T9] usb 4-1: device descriptor read/64, error -71 [ 405.557703][T13414] FAT-fs (nullb0): bogus number of reserved sectors [ 405.565248][T13414] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 405.703184][ T9] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 405.862209][ T9] usb 4-1: device descriptor read/64, error -71 [ 405.900841][T13427] netlink: 'syz.5.2202': attribute type 6 has an invalid length. [ 405.951842][ T5860] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 405.972518][ T9] usb usb4-port1: attempt power cycle [ 405.978613][ T1331] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 406.118635][ T5860] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 406.132270][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.144753][ T5860] usb 2-1: Product: syz [ 406.149028][ T5860] usb 2-1: Manufacturer: syz [ 406.154002][ T5860] usb 2-1: SerialNumber: syz [ 406.167937][ T5860] usb 2-1: config 0 descriptor?? [ 406.243386][T13437] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 406.250040][T13437] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 406.263213][T13437] vhci_hcd vhci_hcd.0: Device attached [ 406.278552][T13438] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 406.302622][ T49] vhci_hcd: stop threads [ 406.311414][ T49] vhci_hcd: release socket [ 406.321873][ T9] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 406.332426][ T49] vhci_hcd: disconnect device [ 406.373606][ T9] usb 4-1: device descriptor read/8, error -71 [ 406.385608][ T5860] usb-storage 2-1:0.0: USB Mass Storage device detected [ 406.515060][ T10] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 406.612396][ T9] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 406.616929][ T43] usb 2-1: USB disconnect, device number 89 [ 406.643323][ T9] usb 4-1: device descriptor read/8, error -71 [ 406.661573][ T10] usb 5-1: device descriptor read/64, error -71 [ 406.762624][ T9] usb usb4-port1: unable to enumerate USB device [ 406.911723][ T10] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 407.043103][ T10] usb 5-1: device descriptor read/64, error -71 [ 407.152000][ T10] usb usb5-port1: attempt power cycle [ 407.502650][ T10] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 407.544311][ T10] usb 5-1: device descriptor read/8, error -71 [ 407.598983][T13465] /dev/rnullb0: Can't open blockdev [ 407.661254][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 407.783097][ T10] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 407.803674][ T10] usb 5-1: device descriptor read/8, error -71 [ 407.912493][ T10] usb usb5-port1: unable to enumerate USB device [ 408.819611][T13499] /dev/rnullb0: Can't open blockdev [ 410.588412][T13545] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 410.607987][T13545] /dev/rnullb0: Can't open blockdev [ 411.111879][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 411.732010][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 412.401555][ T1214] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 412.465080][T13583] vxcan1: entered allmulticast mode [ 412.570916][ T1214] usb 2-1: Using ep0 maxpacket: 8 [ 412.583057][ T1214] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 412.611630][ T1214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.646065][ T1214] pvrusb2: Hardware description: Terratec Grabster AV400 [ 412.704323][ T1214] pvrusb2: ********** [ 412.708452][ T1214] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 412.758564][ T1214] pvrusb2: Important functionality might not be entirely working. [ 412.806765][ T1214] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 412.860944][ T1214] pvrusb2: ********** [ 412.898410][ T2348] pvrusb2: Invalid write control endpoint [ 413.034944][ T2348] pvrusb2: Invalid write control endpoint [ 413.040755][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 413.084769][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 413.120918][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 413.135808][ T43] usb 2-1: USB disconnect, device number 90 [ 413.154658][ T2348] pvrusb2: Device being rendered inoperable [ 413.160843][ T2348] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 413.201665][ T2348] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 413.231763][ T2348] pvrusb2: Attached sub-driver cx25840 [ 413.237652][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 413.265483][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 413.392151][T13597] /dev/rnullb0: Can't lookup blockdev [ 413.536587][T13607] /dev/rnullb0: Can't lookup blockdev [ 413.681554][ T10] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 413.761560][ T9] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 413.831951][ T10] usb 5-1: device descriptor read/64, error -71 [ 413.936710][ T9] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 413.954143][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.981918][ T9] usb 4-1: Product: syz [ 413.991986][ T9] usb 4-1: Manufacturer: syz [ 414.003263][ T9] usb 4-1: SerialNumber: syz [ 414.022466][ T9] usb 4-1: config 0 descriptor?? [ 414.101759][ T10] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 414.211767][ T5906] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 414.231667][ T10] usb 5-1: device descriptor read/64, error -71 [ 414.250488][ T9] usb-storage 4-1:0.0: USB Mass Storage device detected [ 414.342174][ T10] usb usb5-port1: attempt power cycle [ 414.373893][ T5906] usb 2-1: config 0 has an invalid interface number: 47 but max is 0 [ 414.382599][ T5906] usb 2-1: config 0 has no interface number 0 [ 414.388713][ T5906] usb 2-1: too many endpoints for config 0 interface 47 altsetting 66: 71, using maximum allowed: 30 [ 414.410411][ T5906] usb 2-1: config 0 interface 47 altsetting 66 has 0 endpoint descriptors, different from the interface descriptor's value: 71 [ 414.441607][ T5906] usb 2-1: config 0 interface 47 has no altsetting 0 [ 414.451814][ T5906] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 414.465741][ T5919] usb 4-1: USB disconnect, device number 99 [ 414.501525][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.523613][ T5906] usb 2-1: config 0 descriptor?? [ 414.536437][ T5906] cp210x 2-1:0.47: cp210x converter detected [ 414.711585][ T10] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 414.763508][ T10] usb 5-1: device descriptor read/8, error -71 [ 414.822500][T13625] /dev/rnullb0: Can't lookup blockdev [ 414.945414][ T5906] cp210x 2-1:0.47: failed to get vendor val 0x000e size 3: -71 [ 414.973456][ T5906] usb 2-1: cp210x converter now attached to ttyUSB0 [ 414.990463][T13630] /dev/rnullb0: Can't lookup blockdev [ 414.995157][ T5906] usb 2-1: USB disconnect, device number 91 [ 415.021614][ T10] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 415.040391][ T5906] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 415.062373][ T10] usb 5-1: device descriptor read/8, error -71 [ 415.069414][ T5906] cp210x 2-1:0.47: device disconnected [ 415.175532][ T10] usb usb5-port1: unable to enumerate USB device [ 415.248785][T13634] sctp: [Deprecated]: syz.5.2268 (pid 13634) Use of struct sctp_assoc_value in delayed_ack socket option. [ 415.248785][T13634] Use struct sctp_sack_info instead [ 415.622463][ T5906] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 415.802665][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 415.825006][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 415.841561][ T5906] usb 4-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 415.861032][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.884870][ T5906] usb 4-1: config 0 descriptor?? [ 416.100573][T13636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.118283][T13636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.132160][T13636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.145279][T13636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.158580][T13636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.185210][T13636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.214033][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 416.423635][ T5906] lenovo 0003:17EF:6062.0024: unknown main item tag 0x3 [ 416.460618][ T5906] lenovo 0003:17EF:6062.0024: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.3-1/input0 [ 416.623050][T13636] /dev/rnullb0: Can't open blockdev [ 416.640411][ T5906] usb 4-1: USB disconnect, device number 100 [ 416.767821][ T30] audit: type=1800 audit(1753863962.981:19): pid=13676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2281" name="rnullb0" dev="tmpfs" ino=184 res=0 errno=0 [ 416.788581][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.831160][T13678] /dev/rnullb0: Can't open blockdev [ 416.847869][T13678] /dev/rnullb0: Can't open blockdev [ 416.871265][T13678] /dev/rnullb0: Can't open blockdev [ 416.875210][T13682] /dev/rnullb0: Can't lookup blockdev [ 416.896404][T13678] /dev/rnullb0: Can't open blockdev [ 416.924781][T13678] /dev/rnullb0: Can't open blockdev [ 416.947423][T13678] /dev/rnullb0: Can't open blockdev [ 416.970929][T13678] /dev/rnullb0: Can't open blockdev [ 416.996552][T13678] /dev/rnullb0: Can't open blockdev [ 417.015487][T13678] /dev/rnullb0: Can't open blockdev [ 417.030371][T13678] /dev/rnullb0: Can't open blockdev [ 417.050855][T13678] /dev/rnullb0: Can't open blockdev [ 417.069691][T13678] /dev/rnullb0: Can't open blockdev [ 417.084703][T13678] /dev/rnullb0: Can't open blockdev [ 417.103804][T13678] /dev/rnullb0: Can't open blockdev [ 417.116827][T13678] /dev/rnullb0: Can't open blockdev [ 417.137505][T13678] /dev/rnullb0: Can't open blockdev [ 417.151463][T13678] /dev/rnullb0: Can't open blockdev [ 417.170794][T13678] /dev/rnullb0: Can't open blockdev [ 417.210553][T13678] /dev/rnullb0: Can't open blockdev [ 417.230397][T13678] /dev/rnullb0: Can't open blockdev [ 417.253207][T13678] /dev/rnullb0: Can't open blockdev [ 417.266345][T13678] /dev/rnullb0: Can't open blockdev [ 417.284623][T13678] /dev/rnullb0: Can't open blockdev [ 417.298441][T13678] /dev/rnullb0: Can't open blockdev [ 417.315869][T13678] /dev/rnullb0: Can't open blockdev [ 417.354725][T13678] /dev/rnullb0: Can't open blockdev [ 417.360689][T13678] /dev/rnullb0: Can't open blockdev [ 417.402242][T13678] /dev/rnullb0: Can't open blockdev [ 417.494368][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 417.933609][T13720] binder: 13717:13720 ioctl c0306201 200000001a80 returned -14 [ 418.354702][T13736] /dev/rnullb0: Can't lookup blockdev [ 418.504055][T13741] fuse: Bad value for 'fd' [ 418.706283][ T5906] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 418.729276][T13747] /dev/rnullb0: Can't lookup blockdev [ 418.893486][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 418.916148][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.929452][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 418.957944][ T5906] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 418.982879][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.004907][ T5906] usb 2-1: config 0 descriptor?? [ 419.442268][ T5906] hid-multitouch 0003:1FD2:6007.0025: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 419.593433][T13777] netlink: 'syz.5.2312': attribute type 29 has an invalid length. [ 419.603822][T13777] netlink: 'syz.5.2312': attribute type 29 has an invalid length. [ 419.612561][T13777] netlink: 500 bytes leftover after parsing attributes in process `syz.5.2312'. [ 419.626047][T13777] /dev/rnullb0: Can't lookup blockdev [ 419.700095][T13780] netlink: zone id is out of range [ 419.706101][T13780] netlink: zone id is out of range [ 419.711324][T13780] netlink: zone id is out of range [ 419.716650][T13780] netlink: zone id is out of range [ 419.722110][T13780] netlink: zone id is out of range [ 419.728174][T13780] netlink: zone id is out of range [ 419.754401][T13780] netlink: zone id is out of range [ 419.760244][T13780] netlink: zone id is out of range [ 419.769846][T13780] netlink: zone id is out of range [ 419.775405][T13780] netlink: zone id is out of range [ 420.199800][ T5906] usb 2-1: USB disconnect, device number 92 [ 420.590136][ T1331] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.632454][T13798] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2319'. [ 420.650803][T13797] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2319'. [ 420.796849][ T1331] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.005693][ T1331] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.213726][ T1331] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.240934][T13810] XFS (rnullb0): Invalid superblock magic number [ 421.403398][T13819] /dev/rnullb0: Can't lookup blockdev [ 421.587938][T13823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 421.599241][T13823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 421.609295][T13823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 421.619984][T13823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 421.632179][T13823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 421.663126][ T1331] bridge_slave_1: left allmulticast mode [ 421.668898][ T1331] bridge_slave_1: left promiscuous mode [ 421.687915][ T1331] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.698305][ T1331] bridge_slave_0: left allmulticast mode [ 421.705767][ T43] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 421.714126][ T1331] bridge_slave_0: left promiscuous mode [ 421.719911][ T1331] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.872512][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 421.892159][ T43] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 421.921592][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.974129][ T43] pvrusb2: Hardware description: Terratec Grabster AV400 [ 421.985910][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 421.993487][ T43] pvrusb2: ********** [ 422.000417][ T43] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 422.043132][ T43] pvrusb2: Important functionality might not be entirely working. [ 422.050983][ T43] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 422.111543][ T43] pvrusb2: ********** [ 422.176266][ T2348] pvrusb2: Invalid write control endpoint [ 422.255825][T13839] netlink: 'syz.5.2335': attribute type 21 has an invalid length. [ 422.291568][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2335'. [ 422.316753][ T2348] pvrusb2: Invalid write control endpoint [ 422.331678][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 422.365002][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 422.386225][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 422.407484][ T2348] pvrusb2: Device being rendered inoperable [ 422.417658][ T2348] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 422.432901][ T2348] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 422.459504][ T2348] pvrusb2: Attached sub-driver cx25840 [ 422.484746][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 422.500571][ T5906] usb 5-1: USB disconnect, device number 80 [ 422.553148][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 422.750215][ T1331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.767259][ T1331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.778831][ T1331] bond0 (unregistering): Released all slaves [ 422.897822][T13822] lo speed is unknown, defaulting to 1000 [ 422.944383][ T43] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 423.124925][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.151575][ T43] usb 2-1: config 0 has no interfaces? [ 423.177717][ T43] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 423.197118][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.250280][ T43] usb 2-1: config 0 descriptor?? [ 423.255900][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 423.295750][T13855] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2338'. [ 423.332747][T13851] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2338'. [ 423.486199][ T5860] usb 2-1: USB disconnect, device number 93 [ 423.554549][T13863] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 423.561102][T13863] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 423.593183][T13863] vhci_hcd vhci_hcd.0: Device attached [ 423.653196][T13864] usbip_core: unknown command [ 423.657965][T13864] vhci_hcd: unknown pdu 0 [ 423.684202][T13864] usbip_core: unknown command [ 423.712184][ T36] vhci_hcd: stop threads [ 423.728188][ T36] vhci_hcd: release socket [ 423.741783][ T51] Bluetooth: hci0: command tx timeout [ 423.755434][ T36] vhci_hcd: disconnect device [ 423.934599][ T5860] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 424.097407][ T1331] hsr_slave_0: left promiscuous mode [ 424.106465][ T1331] hsr_slave_1: left promiscuous mode [ 424.117152][ T1331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.135627][ T5860] usb 2-1: Using ep0 maxpacket: 16 [ 424.141721][ T1331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.152698][ T1331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.155656][ T5860] usb 2-1: config 0 has an invalid interface number: 142 but max is 0 [ 424.171838][ T1331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.214191][ T5860] usb 2-1: config 0 has no interface number 0 [ 424.221002][ T5860] usb 2-1: config 0 interface 142 has no altsetting 0 [ 424.224861][ T1331] veth1_macvtap: left promiscuous mode [ 424.244714][ T5860] usb 2-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=a0.f1 [ 424.255710][ T1331] veth0_macvtap: left promiscuous mode [ 424.263723][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.265235][ T1331] veth1_vlan: left promiscuous mode [ 424.291847][ T5860] usb 2-1: Product: syz [ 424.296047][ T5860] usb 2-1: Manufacturer: syz [ 424.298066][ T1331] veth0_vlan: left promiscuous mode [ 424.300642][ T5860] usb 2-1: SerialNumber: syz [ 424.331244][ T5860] usb 2-1: config 0 descriptor?? [ 424.513080][ T1331] pimreg (unregistering): left allmulticast mode [ 424.565836][ T5860] usb 2-1: Found UVC 0.00 device syz (1bcf:0b40) [ 424.576777][ T5860] usb 2-1: Forcing UVC version to 1.0a [ 424.605036][ T5860] usb 2-1: No valid video chain found. [ 424.643479][ T5860] usb 2-1: USB disconnect, device number 94 [ 425.821624][ T51] Bluetooth: hci0: command tx timeout [ 426.189294][ T12] smc: removing ib device syz0 [ 426.277121][ T43] lo speed is unknown, defaulting to 1000 [ 426.311702][ T43] syz0: Port: 1 Link DOWN [ 426.799247][T13822] chnl_net:caif_netlink_parms(): no params data found [ 427.103820][ T608] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 427.323733][T13822] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.353929][T13822] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.361180][T13822] bridge_slave_0: entered allmulticast mode [ 427.385543][T13822] bridge_slave_0: entered promiscuous mode [ 427.426685][T13822] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.450247][T13822] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.472820][T13822] bridge_slave_1: entered allmulticast mode [ 427.496940][T13822] bridge_slave_1: entered promiscuous mode [ 427.640735][T13822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.678408][T13822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.848301][T13822] team0: Port device team_slave_0 added [ 427.892691][ T51] Bluetooth: hci0: command tx timeout [ 427.944137][T13822] team0: Port device team_slave_1 added [ 428.093389][T13822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.100427][T13822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.173110][T13822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.216736][T13822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.223740][T13822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.281528][T13822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.415538][T13822] hsr_slave_0: entered promiscuous mode [ 428.424366][T13822] hsr_slave_1: entered promiscuous mode [ 428.823973][T13822] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 428.837192][T13822] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 428.866027][T13822] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 428.896118][T13822] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 429.016092][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 429.115623][T13822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.176812][T13822] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.246040][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.253225][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.283163][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.290303][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.642250][T13822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.975254][ T51] Bluetooth: hci0: command tx timeout [ 430.210081][T13822] veth0_vlan: entered promiscuous mode [ 430.241387][T13822] veth1_vlan: entered promiscuous mode [ 430.320820][T13822] veth0_macvtap: entered promiscuous mode [ 430.339732][T13822] veth1_macvtap: entered promiscuous mode [ 430.360370][T13822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.387058][T13822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.422370][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.440689][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.450885][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.460615][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.599819][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.631697][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.680443][ T1331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.707886][ T1331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.852637][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 438.612034][ T1006] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 438.631827][ T608] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 439.896362][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.905937][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.735350][ T1006] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 444.373856][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 448.854514][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.492031][ T1331] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 451.693048][T14190] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2352'. [ 451.732973][T14192] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2354'. [ 451.764675][T14192] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2354'. [ 451.982351][ T5919] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 452.101596][ T5906] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 452.153819][ T5919] usb 2-1: Using ep0 maxpacket: 32 [ 452.160710][ T5919] usb 2-1: config 0 interface 0 has no altsetting 0 [ 452.193953][ T5919] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 452.221540][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.229584][ T5919] usb 2-1: Product: syz [ 452.253730][ T5919] usb 2-1: Manufacturer: syz [ 452.258368][ T5919] usb 2-1: SerialNumber: syz [ 452.271905][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 452.277768][ T5906] usb 5-1: too many configurations: 10, using maximum allowed: 8 [ 452.303547][ T5919] usb 2-1: config 0 descriptor?? [ 452.313329][ T5906] usb 5-1: New USB device found, idVendor=00bb, idProduct=0da4, bcdDevice=6a.6b [ 452.332038][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.354779][ T5906] usb 5-1: Product: syz [ 452.359012][ T5906] usb 5-1: Manufacturer: syz [ 452.380096][ T5906] usb 5-1: SerialNumber: syz [ 452.403977][ T5906] usb 5-1: config 0 descriptor?? [ 452.756284][ T5919] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 452.849972][ T5860] usb 5-1: USB disconnect, device number 81 [ 452.994713][T14240] /dev/rnullb0: Can't lookup blockdev [ 453.165499][ T5919] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 453.183161][T14245] /dev/rnullb0: Can't lookup blockdev [ 453.192793][ T5919] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 453.215166][ T5919] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 453.257534][ T5919] usb 2-1: USB disconnect, device number 95 [ 453.585520][T14256] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 453.585643][T14254] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 453.624771][T14254] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 453.640126][T14261] /dev/rnullb0: Can't lookup blockdev [ 453.645056][T14254] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 453.664656][T14254] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 453.715188][T14254] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 453.739698][T14254] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 453.768145][T14254] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 453.828420][T14254] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 453.879412][T14269] /dev/rnullb0: Can't open blockdev [ 454.049860][T14273] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2382'. [ 454.353123][T14284] netlink: 'syz.4.2386': attribute type 1 has an invalid length. [ 454.374066][T14284] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2386'. [ 454.410065][T14286] /dev/rnullb0: Can't open blockdev [ 454.424849][T14288] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2387'. [ 454.614328][ T1006] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 455.047323][T14314] /dev/rnullb0: Can't open blockdev [ 455.179536][ T5857] hid-generic 0006:0004:0009.0026: unknown main item tag 0x0 [ 455.197526][ T5857] hid-generic 0006:0004:0009.0026: unknown main item tag 0x0 [ 455.205118][ T5860] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 455.222432][ T5857] hid-generic 0006:0004:0009.0026: unknown main item tag 0x0 [ 455.240131][ T5857] hid-generic 0006:0004:0009.0026: unknown main item tag 0x0 [ 455.253505][ T5857] hid-generic 0006:0004:0009.0026: unknown main item tag 0x0 [ 455.263494][ T1006] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 455.286314][ T5857] hid-generic 0006:0004:0009.0026: unknown main item tag 0x0 [ 455.305111][ T5857] hid-generic 0006:0004:0009.0026: unknown main item tag 0x0 [ 455.321414][ T5857] hid-generic 0006:0004:0009.0026: unknown main item tag 0x0 [ 455.335963][T14324] /dev/rnullb0: Can't open blockdev [ 455.359287][ T5857] hid-generic 0006:0004:0009.0026: unknown main item tag 0x0 [ 455.368358][ T5860] usb 7-1: Using ep0 maxpacket: 8 [ 455.375635][ T5860] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 455.391528][ T5860] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 455.401745][ T5857] hid-generic 0006:0004:0009.0026: unknown main item tag 0x0 [ 455.425388][ T5860] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 455.441458][ T5857] hid-generic 0006:0004:0009.0026: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 455.467933][ T5860] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.661780][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 455.667927][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 455.675202][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 455.681897][ T5860] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 455.690959][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.824933][T13823] Bluetooth: hci0: command 0x0c1a tx timeout [ 455.906954][T14330] /dev/rnullb0: Can't open blockdev [ 455.916705][ T5860] usb 7-1: GET_CAPABILITIES returned 0 [ 455.929402][ T5860] usbtmc 7-1:16.0: can't read capabilities [ 456.128566][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.149566][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.159135][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.168230][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.177303][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.191466][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.200558][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.209624][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.218687][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.227853][ T5857] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 456.237455][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.246547][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.255631][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.264679][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.273728][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.285604][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.294675][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 456.461889][ T5857] usb 5-1: Using ep0 maxpacket: 8 [ 456.492765][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 456.521885][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 456.561527][ T5857] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 456.571207][ T5857] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 49 [ 456.619228][ T5857] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 456.640294][ T10] usb 7-1: USB disconnect, device number 2 [ 456.656609][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.709309][ T5857] usb 5-1: config 0 descriptor?? [ 456.728223][T14330] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 456.870799][T14353] /dev/rnullb0: Can't open blockdev [ 456.969951][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 456.981591][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 456.988657][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 456.995824][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.003372][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.010789][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.018051][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.025040][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.032194][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.039145][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.046102][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.054168][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.061046][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.069670][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.076642][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.083572][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.090443][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.097787][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.105438][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.112751][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.119643][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.127862][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.135170][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.142284][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.149150][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.156415][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.163303][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.171086][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.178463][ T51] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 457.200269][T13823] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 457.210150][ T5857] usb 5-1: USB disconnect, device number 82 [ 457.484000][T14359] netlink: 'syz.6.2410': attribute type 12 has an invalid length. [ 457.539240][T14361] input: syz1 as /devices/virtual/input/input34 [ 457.741710][T13823] Bluetooth: hci2: command 0x0406 tx timeout [ 457.747777][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 457.774886][T14365] binder: BINDER_SET_CONTEXT_MGR already set [ 457.823084][T14365] binder: 14363:14365 ioctl 4018620d 200000000040 returned -16 [ 457.842266][T14369] /dev/rnullb0: Can't open blockdev [ 457.902017][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 457.965436][T14372] /dev/rnullb0: Can't open blockdev [ 457.985386][T14373] /dev/rnullb0: Can't open blockdev [ 458.401594][ T5857] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 458.601779][ T5857] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.612049][ T5857] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 458.621064][ T5857] usb 7-1: config 1 has no interface number 1 [ 458.661583][ T5857] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 458.703110][ T5857] usb 7-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x6C, changing to 0xC [ 458.735306][ T5857] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0xC has an invalid bInterval 0, changing to 10 [ 458.771570][ T5857] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0xC has invalid maxpacket 161, setting to 64 [ 458.811294][ T5857] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 458.821701][ T5857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.829712][ T5857] usb 7-1: Product: syz [ 458.861549][ T5857] usb 7-1: Manufacturer: syz [ 458.871731][ T5857] usb 7-1: SerialNumber: syz [ 458.891632][ T10] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 459.078341][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 459.097526][T14376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.116310][ T10] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 459.122124][T14376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.134168][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 459.162173][ T10] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 459.189418][ T10] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 459.236128][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 459.256391][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.478400][ T5857] usb 7-1: USB disconnect, device number 3 [ 459.576302][T14195] udevd[14195]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.656532][ T10] usb 2-1: GET_CAPABILITIES returned 0 [ 459.671608][ T10] usbtmc 2-1:16.0: can't read capabilities [ 459.733417][ T1331] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.821591][ T51] Bluetooth: hci4: command 0x040f tx timeout [ 459.861104][ T10] usb 2-1: USB disconnect, device number 96 [ 459.954818][ T5919] usb 5-1: new full-speed USB device number 83 using dummy_hcd [ 459.971848][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 460.153104][ T5919] usb 5-1: config 0 has an invalid interface number: 157 but max is 0 [ 460.171758][ T5919] usb 5-1: config 0 has no interface number 0 [ 460.188350][ T5919] usb 5-1: config 0 interface 157 has no altsetting 0 [ 460.203032][T14400] netlink: 'syz.5.2425': attribute type 1 has an invalid length. [ 460.221095][ T5919] usb 5-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=3b.1d [ 460.232642][T14400] /dev/rnullb0: Can't lookup blockdev [ 460.241147][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.280787][ T5919] usb 5-1: config 0 descriptor?? [ 460.503847][ T3411] usb 5-1: USB disconnect, device number 83 [ 460.967151][T14419] NILFS (nullb0): couldn't find nilfs on the device [ 460.993390][ T30] audit: type=1800 audit(1753864007.201:20): pid=14421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2433" name="rnullb0" dev="tmpfs" ino=184 res=0 errno=0 [ 461.022549][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 463.085929][ T5857] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 463.211665][ T5860] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 463.273546][ T5857] usb 7-1: Using ep0 maxpacket: 32 [ 463.294960][ T5857] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.324521][ T5857] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.350533][ T5857] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 463.364105][ T5860] usb 5-1: Using ep0 maxpacket: 32 [ 463.386608][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.396775][ T5860] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 463.411477][ T5860] usb 5-1: config 0 has no interface number 0 [ 463.426366][ T5857] usb 7-1: config 0 descriptor?? [ 463.450128][ T5860] usb 5-1: config 0 interface 21 has no altsetting 0 [ 463.463189][ T5857] hub 7-1:0.0: USB hub found [ 463.480483][ T5860] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=b4.00 [ 463.505853][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.521761][ T5860] usb 5-1: Product: syz [ 463.532776][ T5860] usb 5-1: Manufacturer: syz [ 463.543425][ T5860] usb 5-1: SerialNumber: syz [ 463.572203][ T5860] usb 5-1: config 0 descriptor?? [ 463.603790][ T5860] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 463.648245][ T5860] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 463.664023][ T5857] hub 7-1:0.0: 1 port detected [ 463.682515][ T5860] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 463.701557][ T5860] usb 5-1: media controller created [ 463.766315][ T5860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 463.953835][ T5857] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 463.968812][ T5857] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 463.990239][ T5860] DVB: Unable to find symbol mt352_attach() [ 464.025440][ T5857] usbhid 7-1:0.0: can't add hid device: -71 [ 464.057711][ T5857] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 464.102476][ T5857] usb 7-1: USB disconnect, device number 4 [ 464.147612][ T5860] DVB: Unable to find symbol nxt6000_attach() [ 464.178126][ T5860] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 464.211183][ T5860] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input35 [ 464.274052][ T5860] dvb-usb: schedule remote query interval to 1000 msecs. [ 464.288170][ T5860] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 464.343529][ T5860] dvb-usb: bulk message failed: -22 (7/0) [ 464.356166][ T5860] dvb-usb: bulk message failed: -22 (7/0) [ 464.380921][ T5860] usb 5-1: USB disconnect, device number 84 [ 464.495110][ T5860] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 464.951692][ T5860] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 465.161675][ T5860] usb 5-1: Using ep0 maxpacket: 8 [ 465.168306][ T5860] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 465.188756][ T5860] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 465.210805][ T5860] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 465.251448][ T5860] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 465.283586][ T5860] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 465.313681][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.366151][T14380] syz.4.2417 (14380) used greatest stack depth: 19480 bytes left [ 465.493922][ T608] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 465.582009][ T5860] usb 5-1: GET_CAPABILITIES returned 0 [ 465.600971][ T5860] usbtmc 5-1:16.0: can't read capabilities [ 465.789757][ T5860] usb 5-1: USB disconnect, device number 85 [ 465.860738][T14487] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 466.193786][T14496] sp0: Synchronizing with TNC [ 466.211913][T14496] sp0: Found TNC [ 466.222648][T14497] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 466.231402][T14497] cramfs: wrong magic [ 466.262032][T14496] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 466.285776][T14496] cramfs: wrong magic [ 466.291033][T14495] [U] è` [ 466.637304][T14503] netlink: 'syz.6.2458': attribute type 1 has an invalid length. [ 466.671143][T14503] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2458'. [ 466.726812][T14503] XFS (rnullb0): Invalid superblock magic number [ 466.783621][ T608] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 467.775077][T14528] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2466'. [ 467.869700][T14530] binder: 14529:14530 ioctl c0306201 0 returned -14 [ 468.391940][ T5860] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 468.571540][ T5860] usb 7-1: Using ep0 maxpacket: 8 [ 468.593207][ T5860] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 468.638693][ T5860] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 468.675907][ T5860] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 468.708855][ T5860] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 468.735912][T14537] MTD: Couldn't look up '/dev/rnullb0': -15 [ 468.750118][ T5860] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 468.780564][ T5860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.939305][T14539] MTD: Couldn't look up '/dev/rnullb0': -15 [ 469.044547][ T5860] usb 7-1: GET_CAPABILITIES returned 0 [ 469.060311][ T5860] usbtmc 7-1:16.0: can't read capabilities [ 469.257314][ T5860] usb 7-1: USB disconnect, device number 5 [ 470.643493][T14545] /dev/rnullb0: Can't lookup blockdev [ 471.252186][ T13] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 471.432243][T14549] /dev/rnullb0: Can't lookup blockdev [ 472.522375][T14557] MTD: Couldn't look up '/dev/rnullb0': -15 [ 472.533620][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 474.755041][T14583] MTD: Couldn't look up '/dev/rnullb0': -15 [ 474.801538][T14583] /dev/rnullb0: Can't lookup blockdev [ 476.869877][T13823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 476.917964][T13823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 476.933937][T13823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 476.953307][T13823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 476.974437][T13823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 477.012236][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 477.258587][ T1331] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.475355][ T1331] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.650815][ T1331] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.834993][ T1331] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.188761][T14605] chnl_net:caif_netlink_parms(): no params data found [ 478.311896][ T608] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 478.856305][ T1331] dvmrp0 (unregistering): left allmulticast mode [ 479.012075][ T51] Bluetooth: hci5: command tx timeout [ 479.434644][ T1331] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.502900][ T1331] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.531818][ T1331] bond0 (unregistering): Released all slaves [ 479.846071][T14605] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.863728][T14605] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.870996][T14605] bridge_slave_0: entered allmulticast mode [ 479.893670][T14605] bridge_slave_0: entered promiscuous mode [ 479.994502][T14605] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.011634][T14605] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.029235][T14605] bridge_slave_1: entered allmulticast mode [ 480.061143][T14605] bridge_slave_1: entered promiscuous mode [ 480.256481][T14647] netlink: 'syz.5.2499': attribute type 63 has an invalid length. [ 480.264494][T14647] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2499'. [ 480.301025][T14605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.394559][T14648] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2499'. [ 480.454603][T14605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.586525][T14605] team0: Port device team_slave_0 added [ 480.701562][ T1331] hsr_slave_0: left promiscuous mode [ 480.722900][ T1331] hsr_slave_1: left promiscuous mode [ 480.787056][ T1331] veth1_macvtap: left promiscuous mode [ 480.804538][ T1331] veth0_macvtap: left promiscuous mode [ 480.814723][ T1331] veth1_vlan: left promiscuous mode [ 480.820118][ T1331] veth0_vlan: left promiscuous mode [ 481.091578][ T51] Bluetooth: hci5: command tx timeout [ 481.118659][T14658] /dev/rnullb0: Can't lookup blockdev [ 482.134324][ T1006] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 482.804030][T14688] netlink: 'syz.5.2510': attribute type 83 has an invalid length. [ 482.878964][T13823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 482.890087][T13823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 482.902143][T13823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 482.912570][T13823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 482.920259][T13823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 483.172013][ T51] Bluetooth: hci5: command tx timeout [ 483.218505][ T1331] team0 (unregistering): Port device team_slave_1 removed [ 483.308111][ T1331] team0 (unregistering): Port device team_slave_0 removed [ 484.052132][ T1006] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 484.265605][T14605] team0: Port device team_slave_1 added [ 484.512984][T14605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.530523][T14605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.597603][T14605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.652377][T14605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.663455][T14605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.724526][T14605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.921707][T14708] fuse: Bad value for 'fd' [ 484.926461][T14708] fuse: Bad value for 'fd' [ 484.931180][T14708] fuse: Bad value for 'fd' [ 484.960888][T14605] hsr_slave_0: entered promiscuous mode [ 484.993993][T14605] hsr_slave_1: entered promiscuous mode [ 485.000369][T14605] debugfs: 'hsr0' already exists in 'hsr' [ 485.011560][ T51] Bluetooth: hci2: command tx timeout [ 485.023291][T14605] Cannot create hsr debugfs directory [ 485.252940][ T51] Bluetooth: hci5: command tx timeout [ 485.958352][ T1331] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.131858][T14690] chnl_net:caif_netlink_parms(): no params data found [ 486.257036][T14735] /dev/rnullb0: Can't lookup blockdev [ 486.344788][ T1331] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.421081][T14605] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 486.585466][ T1331] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.661279][T14605] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 486.820975][T13823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 486.824254][ T1331] netdevsim netdevsim4 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.839136][T13823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 486.847127][T13823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 486.858389][T13823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 486.868779][T13823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 486.909084][T14605] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 487.000123][T14605] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 487.016471][T14743] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 487.029397][T14743] bond0: (slave lo): Error: Device can not be enslaved while up [ 487.091686][T13823] Bluetooth: hci2: command tx timeout [ 487.261258][T14690] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.279698][T14756] /dev/rnullb0: Can't lookup blockdev [ 487.289597][T14690] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.298162][T14690] bridge_slave_0: entered allmulticast mode [ 487.323160][T14690] bridge_slave_0: entered promiscuous mode [ 487.370566][T14690] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.382109][T14690] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.391672][T14690] bridge_slave_1: entered allmulticast mode [ 487.399225][T14690] bridge_slave_1: entered promiscuous mode [ 487.535032][T14761] batadv_slave_0: entered promiscuous mode [ 487.588746][T14763] batadv_slave_0: left promiscuous mode [ 487.614166][T14690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.651182][T14690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.870006][ T1331] bridge_slave_1: left allmulticast mode [ 487.888917][ T1331] bridge_slave_1: left promiscuous mode [ 487.905356][ T1331] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.907853][ T608] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 487.934098][ T1331] bridge_slave_0: left allmulticast mode [ 487.939866][ T1331] bridge_slave_0: left promiscuous mode [ 487.973299][ T1331] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.050334][T14776] /dev/rnullb0: Can't lookup blockdev [ 488.291970][T14783] /dev/rnullb0: Can't lookup blockdev [ 488.305855][T14783] netlink: 'syz.5.2526': attribute type 27 has an invalid length. [ 488.888687][ T1331]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.899889][ T1331]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.914743][ T1331]  (unregistering): Released all slaves [ 488.931503][T13823] Bluetooth: hci0: command tx timeout [ 488.955562][T14690] team0: Port device team_slave_0 added [ 489.064280][T14690] team0: Port device team_slave_1 added [ 489.138593][T14690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.156153][T14690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.174929][T13823] Bluetooth: hci2: command tx timeout [ 489.191641][T14690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.215816][T14690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.226009][T14690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.256133][T14690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.454001][T14690] hsr_slave_0: entered promiscuous mode [ 489.460637][T14690] hsr_slave_1: entered promiscuous mode [ 489.473554][T14690] debugfs: 'hsr0' already exists in 'hsr' [ 489.512076][T14690] Cannot create hsr debugfs directory [ 489.547101][T14605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.870085][T14605] 8021q: adding VLAN 0 to HW filter on device team0 [ 489.894106][ T1331] hsr_slave_0: left promiscuous mode [ 489.905211][ T1331] hsr_slave_1: left promiscuous mode [ 489.933970][ T1331] veth1_macvtap: left promiscuous mode [ 489.939530][ T1331] veth0_macvtap: left promiscuous mode [ 489.947025][ T1331] veth1_vlan: left promiscuous mode [ 489.955300][ T1331] veth0_vlan: left promiscuous mode [ 490.093600][ T1331] pimreg (unregistering): left allmulticast mode [ 490.536620][ T1331] team0 (unregistering): Port device team_slave_1 removed [ 490.607255][ T1331] team0 (unregistering): Port device team_slave_0 removed [ 490.736069][T14814] /dev/rnullb0: Can't lookup blockdev [ 491.005152][ T1331] vxcan1 (unregistering): left allmulticast mode [ 491.011994][ T51] Bluetooth: hci0: command tx timeout [ 491.094996][ T31] INFO: task syz.0.1631:11583 blocked for more than 143 seconds. [ 491.112241][ T31] Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 [ 491.119527][ T31] Blocked by coredump. [ 491.128010][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 491.140108][ T31] task:syz.0.1631 state:D stack:25096 pid:11583 tgid:11583 ppid:5854 task_flags:0x40044c flags:0x00004004 [ 491.170372][ T31] Call Trace: [ 491.173757][ T31] [ 491.176720][ T31] __schedule+0x1737/0x4d30 [ 491.190370][ T31] ? __lock_acquire+0xab9/0xd20 [ 491.200475][ T31] ? schedule+0x165/0x360 [ 491.210632][ T31] ? __lock_acquire+0xab9/0xd20 [ 491.215518][ T31] ? __pfx___schedule+0x10/0x10 [ 491.230590][ T31] ? schedule+0x91/0x360 [ 491.254009][ T51] Bluetooth: hci2: command tx timeout [ 491.255571][ T31] schedule+0x165/0x360 [ 491.287416][ T31] schedule_preempt_disabled+0x13/0x30 [ 491.307619][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 491.332987][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 491.338738][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 491.354594][ T31] ? exit_mm+0xcc/0x2c0 [ 491.358796][ T31] ? __pfx_mm_release+0x10/0x10 [ 491.365020][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.372459][ T31] down_read+0x98/0x2e0 [ 491.376647][ T31] exit_mm+0xcc/0x2c0 [ 491.382229][ T31] ? __pfx_exit_mm+0x10/0x10 [ 491.386853][ T31] ? rcu_is_watching+0x15/0xb0 [ 491.392861][ T31] do_exit+0x648/0x2300 [ 491.397069][ T31] ? do_raw_spin_lock+0x121/0x290 [ 491.406481][ T31] ? __pfx_do_exit+0x10/0x10 [ 491.411374][ T31] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 491.417319][ T31] do_group_exit+0x21c/0x2d0 [ 491.427313][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.436213][ T31] get_signal+0x1286/0x1340 [ 491.444177][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 491.449753][ T31] ? rcu_is_watching+0x15/0xb0 [ 491.456611][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 491.466996][ T31] ? __bad_area_nosemaphore+0x3fb/0x780 [ 491.472879][ T31] ? local_irq_enable_exit_to_user+0x5/0x10 [ 491.478796][ T31] irqentry_exit_to_user_mode+0x81/0x120 [ 491.490462][ T31] exc_page_fault+0x9f/0xf0 [ 491.495004][ T31] asm_exc_page_fault+0x26/0x30 [ 491.499868][ T31] RIP: 0033:0x7f3028c54e53 [ 491.507861][ T31] RSP: 002b:00007fff83f5b0a0 EFLAGS: 00010246 [ 491.515176][ T31] RAX: 0000200000000280 RBX: 0000000000000002 RCX: 0000000000000000 [ 491.526347][ T31] RDX: 000000000000000a RSI: 0000000000000000 RDI: 000055556c4933c8 [ 491.535380][ T31] RBP: 00007fff83f5b1a8 R08: 0000000000000000 R09: 0000000000000000 [ 491.549660][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 00007f3028fb608c [ 491.558360][ T31] R13: 00007f3028fb6080 R14: fffffffffffffffe R15: 00007fff83f5b1f0 [ 491.573007][ T31] [ 491.576094][ T31] INFO: task syz.0.1631:11585 blocked for more than 143 seconds. [ 491.587791][ T31] Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 [ 491.596354][ T31] Blocked by coredump. [ 491.603148][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 491.614536][ T31] task:syz.0.1631 state:D stack:28936 pid:11585 tgid:11583 ppid:5854 task_flags:0x40044c flags:0x00004004 [ 491.630101][ T31] Call Trace: [ 491.633422][ T31] [ 491.638439][ T31] __schedule+0x1737/0x4d30 [ 491.645082][ T31] ? __lock_acquire+0xab9/0xd20 [ 491.649984][ T31] ? schedule+0x165/0x360 [ 491.662447][ T31] ? __lock_acquire+0xab9/0xd20 [ 491.667331][ T31] ? __pfx___schedule+0x10/0x10 [ 491.675116][ T31] ? schedule+0x91/0x360 [ 491.679397][ T31] schedule+0x165/0x360 [ 491.686377][ T31] schedule_preempt_disabled+0x13/0x30 [ 491.693206][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 491.698878][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 491.707024][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 491.714971][ T31] ? exit_mm+0xcc/0x2c0 [ 491.719168][ T31] ? __pfx_mm_release+0x10/0x10 [ 491.726872][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.734915][ T31] down_read+0x98/0x2e0 [ 491.744030][ T31] exit_mm+0xcc/0x2c0 [ 491.748077][ T31] ? __pfx_exit_mm+0x10/0x10 [ 491.754129][ T31] ? rcu_is_watching+0x15/0xb0 [ 491.758938][ T31] do_exit+0x648/0x2300 [ 491.768499][ T31] ? do_raw_spin_lock+0x121/0x290 [ 491.775039][ T31] ? __pfx_do_exit+0x10/0x10 [ 491.779707][ T31] do_group_exit+0x21c/0x2d0 [ 491.787757][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.795352][ T31] get_signal+0x1286/0x1340 [ 491.802049][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 491.807641][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 491.815526][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 491.823531][ T31] exit_to_user_mode_loop+0x75/0x110 [ 491.828881][ T31] do_syscall_64+0x2bd/0x3b0 [ 491.835851][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.845760][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 491.853505][ T31] ? clear_bhb_loop+0x60/0xb0 [ 491.858208][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.867401][ T31] RIP: 0033:0x7f3028d8e9a9 [ 491.875688][ T31] RSP: 002b:00007f3029bc40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 491.886071][ T31] RAX: fffffffffffffe00 RBX: 00007f3028fb6088 RCX: 00007f3028d8e9a9 [ 491.897016][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3028fb6088 [ 491.912418][ T31] RBP: 00007f3028fb6080 R08: 0000000000000000 R09: 0000000000000000 [ 491.921391][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3028fb608c [ 491.929393][ T31] R13: 0000000000000000 R14: 00007fff83f5ae90 R15: 00007fff83f5af78 [ 491.942915][ T31] [ 491.946046][ T31] [ 491.946046][ T31] Showing all locks held in the system: [ 491.957772][ T31] 3 locks held by kworker/u8:0/12: [ 491.964038][ T31] #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 492.009626][ T31] #1: ffffc90000117bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 492.025686][ T31] #2: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 492.034966][ T31] 1 lock held by khungtaskd/31: [ 492.040333][ T31] #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 492.051342][ T31] 3 locks held by kworker/u8:2/36: [ 492.056469][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 492.066879][ T31] #1: ffff8880b8724008 (per_cpu_ptr(&psi_seq, cpu)){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 492.077984][ T31] #2: ffff888053b18768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 492.088324][ T31] 3 locks held by kworker/u8:6/1006: [ 492.093978][ T31] #0: ffff88814c8c4148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 492.108598][ T31] #1: ffffc90003a17bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 492.125080][ T31] #2: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 492.136004][ T31] 5 locks held by kworker/u8:8/1331: [ 492.144652][ T31] #0: ffff88801b6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 492.156713][ T31] #1: ffffc90004107bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 492.174751][ T31] #2: ffffffff8f92b870 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 492.185348][ T31] #3: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 492.198452][ T31] #4: ffffffff8e543338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 492.224825][ T31] 3 locks held by kworker/0:2/3411: [ 492.230399][ T31] #0: ffff88801a882148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 492.244231][ T31] #1: ffffc9000b66fbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 492.256238][ T31] #2: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 492.266868][ T31] 2 locks held by dhcpcd/5512: [ 492.275023][ T31] #0: ffff88814d0b46d0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xb7/0xe60 [ 492.287343][ T31] #1: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 492.299358][ T31] 2 locks held by getty/5607: [ 492.304962][ T31] #0: ffff88814e1e00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 492.317618][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 492.334262][ T31] 3 locks held by kworker/1:3/5857: [ 492.339479][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 492.353025][ T31] #1: ffff8880b8724008 (per_cpu_ptr(&psi_seq, cpu)){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 492.363834][ T31] #2: ffffffff8ece2f18 (pool_lock#2){-.-.}-{2:2}, at: free_obj_work+0x101/0x4a0 [ 492.378464][ T31] 1 lock held by syz.0.1631/11583: [ 492.386563][ T31] #0: ffff888030e301e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 [ 492.402061][ T31] 1 lock held by syz.0.1631/11584: [ 492.407196][ T31] 1 lock held by syz.0.1631/11585: [ 492.413422][ T31] #0: ffff888030e301e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 [ 492.425087][ T31] 1 lock held by syz-executor/14605: [ 492.430743][ T31] #0: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 492.440573][ T31] 2 locks held by syz-executor/14690: [ 492.445959][ T31] #0: ffffffff8fe5ceb0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 492.456464][ T31] #1: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 492.465838][ T31] 1 lock held by syz-executor/14738: [ 492.471379][ T31] #0: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 492.481231][ T31] 3 locks held by syz.5.2533/14817: [ 492.486443][ T31] #0: ffffffff8f99d770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 492.495011][ T31] #1: ffff8880248686d0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 492.505847][ T31] #2: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_dump_wiphy+0x49/0x6f0 [ 492.516454][ T31] [ 492.518804][ T31] ============================================= [ 492.518804][ T31] [ 492.528115][ T31] NMI backtrace for cpu 0 [ 492.528150][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 492.528175][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 492.528187][ T31] Call Trace: [ 492.528195][ T31] [ 492.528204][ T31] dump_stack_lvl+0x189/0x250 [ 492.528239][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.528269][ T31] ? __pfx__printk+0x10/0x10 [ 492.528312][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 492.528342][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 492.528381][ T31] ? __pfx__printk+0x10/0x10 [ 492.528414][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 492.528452][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 492.528478][ T31] watchdog+0xf93/0xfe0 [ 492.528503][ T31] ? watchdog+0x1de/0xfe0 [ 492.528528][ T31] kthread+0x70e/0x8a0 [ 492.528577][ T31] ? __pfx_watchdog+0x10/0x10 [ 492.528597][ T31] ? __pfx_kthread+0x10/0x10 [ 492.528628][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.528654][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.528679][ T31] ? __pfx_kthread+0x10/0x10 [ 492.528709][ T31] ret_from_fork+0x3f9/0x770 [ 492.528737][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 492.528767][ T31] ? __switch_to_asm+0x39/0x70 [ 492.528784][ T31] ? __switch_to_asm+0x33/0x70 [ 492.528800][ T31] ? __pfx_kthread+0x10/0x10 [ 492.528848][ T31] ret_from_fork_asm+0x1a/0x30 [ 492.528884][ T31] [ 492.528891][ T31] Sending NMI from CPU 0 to CPUs 1: [ 492.678133][ C1] NMI backtrace for cpu 1 [ 492.678148][ C1] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 492.678166][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 492.678176][ C1] Workqueue: events_unbound toggle_allocation_gate [ 492.678197][ C1] RIP: 0010:use_temporary_mm+0x136/0x220 [ 492.678219][ C1] Code: 66 64 8e 31 d2 e8 1a ee ff ff 65 4c 8b 35 a2 fc 73 11 65 48 8b 14 25 08 50 e7 92 48 89 de e8 41 ef ff ff 48 c7 c7 80 76 a8 8b 85 ae 0a 0a 65 48 8b 05 dd 9d 72 11 a8 aa 74 16 b8 00 04 00 00 [ 492.678232][ C1] RSP: 0018:ffffc90000127620 EFLAGS: 00000046 [ 492.678244][ C1] RAX: 4a8ab67466c1df00 RBX: ffff88801a870000 RCX: ffff88801d298000 [ 492.678255][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffff8ba87680 [ 492.678265][ C1] RBP: ffffc900001276d0 R08: ffff88801a8708b3 R09: 1ffff1100350e116 [ 492.678275][ C1] R10: dffffc0000000000 R11: ffffed100350e117 R12: 1ffff92000024ec4 [ 492.678286][ C1] R13: 0000000000000002 R14: ffffffff8e6466c0 R15: dffffc0000000000 [ 492.678297][ C1] FS: 0000000000000000(0000) GS:ffff8881258ab000(0000) knlGS:0000000000000000 [ 492.678308][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.678318][ C1] CR2: 00007fbf924e7d60 CR3: 000000001a878000 CR4: 00000000003526f0 [ 492.678330][ C1] Call Trace: [ 492.678336][ C1] [ 492.678343][ C1] ? __pfx_use_temporary_mm+0x10/0x10 [ 492.678359][ C1] ? __page_table_check_ptes_set+0x277/0x2f0 [ 492.678379][ C1] __text_poke+0x60f/0xa10 [ 492.678404][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 492.678427][ C1] ? __kmalloc_cache_node_noprof+0x8b/0x3d0 [ 492.678444][ C1] ? __pfx___text_poke+0x10/0x10 [ 492.678464][ C1] ? trace_contention_end+0x39/0x120 [ 492.678484][ C1] ? __mutex_lock+0x335/0x1360 [ 492.678511][ C1] smp_text_poke_batch_finish+0xd0a/0x1100 [ 492.678529][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 492.678545][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 492.678567][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 492.678584][ C1] static_key_enable_cpuslocked+0x128/0x250 [ 492.678603][ C1] static_key_enable+0x1a/0x20 [ 492.678620][ C1] toggle_allocation_gate+0xad/0x240 [ 492.678636][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 492.678653][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 492.678674][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 492.678691][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 492.678708][ C1] process_scheduled_works+0xade/0x17b0 [ 492.678738][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 492.678768][ C1] worker_thread+0x8a0/0xda0 [ 492.678797][ C1] kthread+0x70e/0x8a0 [ 492.678819][ C1] ? __pfx_worker_thread+0x10/0x10 [ 492.678854][ C1] ? __pfx_kthread+0x10/0x10 [ 492.678879][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.678901][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.678924][ C1] ? __pfx_kthread+0x10/0x10 [ 492.678948][ C1] ret_from_fork+0x3f9/0x770 [ 492.678970][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 492.678994][ C1] ? __switch_to_asm+0x39/0x70 [ 492.679009][ C1] ? __switch_to_asm+0x33/0x70 [ 492.679024][ C1] ? __pfx_kthread+0x10/0x10 [ 492.679050][ C1] ret_from_fork_asm+0x1a/0x30 [ 492.679074][ C1] [ 492.679370][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 492.679390][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 492.679420][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 492.679436][ T31] Call Trace: [ 492.679447][ T31] [ 492.679458][ T31] dump_stack_lvl+0x99/0x250 [ 492.679507][ T31] ? __asan_memcpy+0x40/0x70 [ 492.679543][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.679578][ T31] ? __pfx__printk+0x10/0x10 [ 492.679626][ T31] vpanic+0x281/0x750 [ 492.679659][ T31] ? __pfx_vpanic+0x10/0x10 [ 492.679686][ T31] ? preempt_schedule+0xae/0xc0 [ 492.679721][ T31] ? preempt_schedule_common+0x83/0xd0 [ 492.679761][ T31] panic+0xb9/0xc0 [ 492.679789][ T31] ? __pfx_panic+0x10/0x10 [ 492.679818][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 492.679854][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 492.679887][ T31] watchdog+0xfd2/0xfe0 [ 492.679919][ T31] ? watchdog+0x1de/0xfe0 [ 492.679953][ T31] kthread+0x70e/0x8a0 [ 492.679991][ T31] ? __pfx_watchdog+0x10/0x10 [ 492.680025][ T31] ? __pfx_kthread+0x10/0x10 [ 492.680063][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.680111][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.680142][ T31] ? __pfx_kthread+0x10/0x10 [ 492.680177][ T31] ret_from_fork+0x3f9/0x770 [ 492.680210][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 492.680245][ T31] ? __switch_to_asm+0x39/0x70 [ 492.680265][ T31] ? __switch_to_asm+0x33/0x70 [ 492.680285][ T31] ? __pfx_kthread+0x10/0x10 [ 492.680320][ T31] ret_from_fork_asm+0x1a/0x30 [ 492.680359][ T31] [ 493.153073][ T31] Kernel Offset: disabled [ 493.157407][ T31] Rebooting in 86400 seconds..