last executing test programs: 9m35.543483975s ago: executing program 2 (id=278): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @value=0x1}) r0 = add_key$user(&(0x7f0000000080), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000200)="000087000000000000cc4c", 0xb, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/67, 0x43, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000040)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) fstat(r4, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000880)={{{@in6, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f00000002c0)=0xe8) setresuid(r6, r7, r8) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x40, 0x6, 0x8, 0x2, {{0x14, 0x4, 0x2, 0x6, 0x50, 0x65, 0x0, 0x0, 0x29, 0x0, @local, @remote, {[@generic={0x83, 0xb, "4609f62ab52b0a518a"}, @cipso={0x86, 0x2f, 0x0, [{0x7, 0x2}, {0x2, 0xc, "05000000002a4ce41e3d"}, {0x1, 0xa, "d0a8625ef40997ff"}, {0x7, 0x7, "7421039008"}, {0x1, 0xa, "b63e2d8aeacd429b"}]}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f0000000400)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x1, 0x700, 0x0, 0x4, {{0xf, 0x4, 0x0, 0x5, 0x3c, 0x64, 0x0, 0x0, 0x29, 0x0, @multicast1, @broadcast, {[@rr={0x7, 0x17, 0xe5, [@remote, @empty, @multicast1, @multicast1, @broadcast]}, @ssrr={0x89, 0x7, 0xb8, [@dev={0xac, 0x14, 0x14, 0x18}]}, @end, @timestamp={0x44, 0x8, 0xc9, 0x0, 0x7, [0x3]}]}}}}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r9, @ANYBLOB="04002bbd7000fddbdf250d000000040001806000018008000300010000001400020076657468315f746f5f7465616d000000140002007663616e3000000000000000000000001400020076657468315f746f5f626f6e64000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="2400018008000100", @ANYRES32=r12, @ANYBLOB="08000300029b51a608000100ac5f6c09f203592acaa06156b667b05716ca09553b928af4d0428624bc92db7e8358e2fc304f1adf9e6686dc1b8d714030ed494d540d460454c8b2d170146c760a204458e2a806f07d9d8375eb0157a5ebdd042d67c5fa32224c1353549d7475279db9714a77d0a326ccff36b5ec2a3d22250f924cf04ab34650945235b02108ea020000002b8aea134261511ca53291de06ec0383a92ebf6d2c", @ANYRES32=r13, @ANYBLOB="0800030002000000"], 0x9c}, 0x1, 0x0, 0x0, 0x4040045}, 0x4088000) r14 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$binfmt_aout(r14, 0x0, 0x20) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1a) 9m30.613818022s ago: executing program 2 (id=284): r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r0, 0x40044103, &(0x7f0000000180)=0x5) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000002c0)={0x4, "421ae3543785259649154c631fb18e6a2ba2b1000000000000000000000007ee"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x3, "99bdb1b0c7251b080600f0230a74bd856e3c10db57c3f7484d9ed4190dbc00f3"}) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES16=r2], 0x21c}}, 0x0) r5 = socket$inet6(0xa, 0x80000, 0x0) sendmmsg$inet6(r5, &(0x7f0000001780)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="140100160000000029000000360000000000000600000000b3e104ff9c"], 0x18}}], 0x1, 0x81) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r7 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a58000000060a01040000000000581e47c20000010900010073797a31000000002c0019712800018007000100637400001c0002800500030001000000080004400000001008000240000000030900020073797a3200000000140000001180010000000000000000000100000a"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000002) ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, &(0x7f0000000080)={'comedi_bond\x00', [0x3, 0x7, 0x9, 0x2, 0x2f, 0x4000000, 0x1, 0xf, 0x4, 0x1, 0x7, 0x1, 0x1006, 0x5, 0xffff, 0xffff, 0x9, 0x7fffffff, 0x1ff, 0x3, 0x3ff, 0x10000, 0x8, 0xe2df, 0x2, 0x8, 0x5, 0x3, 0x2, 0x4, 0x8045]}) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) ioctl$TCSBRK(r2, 0x5409, 0x2) 9m30.298193247s ago: executing program 2 (id=285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) lseek(r1, 0x0, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) r2 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000003c0)=0x3cc9, 0x4) sendmsg$can_bcm(r2, &(0x7f00000000c0)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x20040010}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000, 0x810, r2, 0x936a0000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000100)=@ethtool_link_settings={0x2, 0x1c, 0x0, 0x87, 0x7, 0x0, 0x44, 0x0, 0x20, 0x8, [0x0, 0x0, 0xfffffffe, 0xc, 0x5, 0x0, 0x0, 0x2]}}) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000000)='selinuxfs\x00', 0x208002, 0x0) 9m29.222849852s ago: executing program 3 (id=287): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003e00070b2dbd7000fcdbdf25037c000004"], 0x24}}, 0x0) mmap(&(0x7f000051e000/0x1000)=nil, 0x1000, 0x3000004, 0x20011, r0, 0xf648d000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9m29.116444256s ago: executing program 2 (id=289): creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208883, 0x0) 9m28.822647669s ago: executing program 2 (id=290): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000a00)={0x0, 0x0, 0xaaca, 0xffff, 0x0, "87d3514787b8c600004a903184033c6700", 0x0, 0x4}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x84) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="2e0000003e0005", 0x7}, {&(0x7f0000000140)="d940d5a8319d05fabebad838d95136b2eed2e03e8088c2f0849d67430777aa3703c8a72e810707824fcb9d485bf0eb90b1560b0528c2622d8d8b616eafbe33ea87f8cdf448391f454da00d4cc1414291d06c227c82b46264c32e5789795f23", 0x5f}], 0x2, 0x0, 0x0, 0x39c}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1303000069"], 0xfe33) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) 9m28.621057981s ago: executing program 2 (id=291): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) (async) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) dup(r0) (async) r1 = dup(r0) recvfrom$inet_nvme(r1, &(0x7f00000001c0)=""/134, 0x86, 0x40010002, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x200c008, &(0x7f0000000300)='usrquota') (async) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x200c008, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') (async) chdir(&(0x7f0000000280)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x1, 0x48cd, 0xfffffffffffffffc, 0x800000df}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_XSAVE2(r5, 0x9000aecf, &(0x7f0000211000/0x4000)=nil) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r7, 0x5708e000) 9m28.533525854s ago: executing program 3 (id=292): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x10000, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0c246220090f"], 0xf) mmap(&(0x7f000043e000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x0) mlock(&(0x7f0000379000/0x2000)=nil, 0x2000) r1 = userfaultfd(0x80801) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000700, r6, &(0x7f0000000100)) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000080)=0x7, 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000004c0)={r4, @in={{0x2, 0x4e20, @loopback}}, [0x8, 0xe, 0xfffffffffffffffe, 0x5, 0x0, 0xfffffffffffffffb, 0x1, 0x1, 0x2, 0x5e1c, 0x6, 0x1, 0x2, 0x1, 0x2]}, &(0x7f00000003c0)=0x100) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) signalfd4(r2, &(0x7f0000000200)={[0x2]}, 0x8, 0x80000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x10000, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0c246220090f"], 0xf) (async) mmap(&(0x7f000043e000/0x2000)=nil, 0x2000, 0x1, 0x10, r0, 0x0) (async) mlock(&(0x7f0000379000/0x2000)=nil, 0x2000) (async) userfaultfd(0x80801) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) shutdown(r3, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', &(0x7f0000000500), 0x6000) (async) quotactl_fd$Q_GETQUOTA(r5, 0xffffffff80000700, r6, &(0x7f0000000100)) (async) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000080)=0x7, 0x2) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000004c0)={r4, @in={{0x2, 0x4e20, @loopback}}, [0x8, 0xe, 0xfffffffffffffffe, 0x5, 0x0, 0xfffffffffffffffb, 0x1, 0x1, 0x2, 0x5e1c, 0x6, 0x1, 0x2, 0x1, 0x2]}, &(0x7f00000003c0)=0x100) (async) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) (async) signalfd4(r2, &(0x7f0000000200)={[0x2]}, 0x8, 0x80000) (async) 9m28.296388966s ago: executing program 3 (id=293): pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSIG(r2, 0x40045436, 0x14) (async) tee(r0, 0xffffffffffffffff, 0x60000000000, 0x0) (async) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000e00)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @bcast, @bpq0, 0x2, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) openat$nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x109040, 0x0) (async) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r4, @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) socket$inet_mptcp(0x2, 0x1, 0x106) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x12, 0xffffffffffffffff, 0x8ee4a000) (async) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98\x00\x00\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x03bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r?v\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x00\x00\x00\x00=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) r5 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x201, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r5, 0x80045017, &(0x7f0000000040)) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x30, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800c080}, 0x20000000) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f00000001c0)) (async) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x5, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x2, 0x3, 0x8, 0x20000006, 0x4d, 0x6, 0x1, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0xff, 0x0, 0x5, 0x4, 0x0, 0x50, 0x3c5b, 0x1, 0x24, 0xd, 0x2, 0x4, 0xffffffff, 0xe661, 0x0, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x243, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x4, 0x1, 0xfffffffa, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x6, 0x5, 0x4, 0x8, 0x3ff, 0x10000000, 0x0, 0x5, 0x5, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x80000132, 0x8004, 0x8, 0x2, 0x129432e6, 0xc8, 0xfa, 0xe, 0x2bb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2e, 0xe, 0x312, 0x78, 0xea1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x4, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x4b, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0xd, 0x3, 0x3, 0x9, 0x1, 0x8, 0xffffffff, 0xbc45, 0x6, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x6, 0x8, 0x86, 0x3, 0x3038, 0x3e7, 0xb, 0x5, 0x4, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x6, 0x84, 0x800003, 0x200, 0xfffffffd, 0x1000003, 0x4, 0x2950bdaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xd, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x4000, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0xff], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x939, 0x6, 0x6, 0xfffffffc, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0xedc8, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x7ff, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x3, 0x226, 0x5, 0x5, 0x8, 0x4, 0xa1f, 0x89, 0x7, 0x1, 0x6c1b, 0x9, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xffe]}, 0x45c) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f00000001c0)={r3, 0x3db, 0x8001, 0x3}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r10, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000003080102000000000000000000000004050003000000000006000240001800001c000480080003407fffffff08000440000000ff0100084000000093"], 0x40}, 0x1, 0x0, 0x0, 0x20040}, 0x4000) ioctl$DRM_IOCTL_GET_CLIENT(r9, 0xc0286405, &(0x7f0000000cc0)={0x1000, 0x10001, {}, {0xee00}, 0x1, 0x17a}) 9m28.119611708s ago: executing program 0 (id=296): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0xb, &(0x7f0000000080)={0x0, 0x10, 0x2}) r4 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffff9]}, 0x8) read(r4, &(0x7f0000000740)=""/377, 0x179) sendfile(r1, r1, 0x0, 0x7ffff000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000006180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x90, 0x0, 0x0, {0xf7ffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, r8, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000440)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r10, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$TIOCGPTPEER(r9, 0x4004092b, 0x7) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 9m24.967212318s ago: executing program 0 (id=299): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$poke(0x91a7bfe3d5456dcd, r2, &(0x7f0000000040), 0x7) 9m23.544436253s ago: executing program 3 (id=301): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) write(r0, &(0x7f0000000080)="9a843d60743ef21bb6fbee6d275d074a637abd043a3ed5e764b7ec0600a22e82ca699326662e01dafac18f5804ce6716c95960a082ba9a359844d4fe1cab56cc04931daf9cfde2e54883f68cdb3e8bcaf1fc8aca0c76da50a212745c5107d57f0c4f836947d6042f72fac8e5de2052f49600445a785d725e43336a49f43d8f38012b2f3b428d216f86f49e72dffb4bbb9fbf7cd17042816be498f294", 0x9c) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000340)}], 0x1, 0xfffffffe, 0x4, 0x1) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000240)={0xe, 0xbe, "4cd5f24b1d5f045abd1cc9b289baba446605f79f6ce72bf7d664b18fb2f0ea9592e0c7b687415f5079d76a46443d190f4eab087b2491315f2a4986f4cc7903ae0df35cc39646173e76d916bc6b0fe78cf9b2ddc32765ad2128ddff42e17609d435ec645b3e6cb4f35e18b3b526d40ccbd7f894a43102b286f0498b3bb6a4ddb36eb84e42efa3b6d07de6b0bffb77c31d1692a59e271866cea22b20998c49560090dec36f7642682a18eafb59be7476bb91e0551b675cd22c16351e936fe4"}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x9, 0x7fffffff}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000003c0)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0482, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) accept4(r5, 0x0, 0x0, 0x0) r6 = fcntl$getown(r5, 0x9) capset(&(0x7f0000000340)={0x20071026, r6}, &(0x7f0000000380)={0xfffff0bd, 0x7, 0x8, 0x42d, 0x3, 0x3}) ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) 9m23.382051037s ago: executing program 0 (id=302): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 9m22.510253411s ago: executing program 0 (id=304): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/disk', 0x143a82, 0x33) fremovexattr(r1, &(0x7f0000000000)=@known='security.apparmor\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000000)) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r2, 0xf648d000) madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9m22.156862674s ago: executing program 1 (id=306): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b8004023655fdbaded39d65000b4824ca940417a3cd3639e431e8e2125f6c00940f6a0325010ebc0000000000000080001328baf0fffeffe809005300fff5dd02000000000000000c10003d5bcf6916b4114b32793792c395da89991a8be619c7ce1ecf8b6e3501aeb67cdb99f356f9518492cbf6d88e98f0df275f9f6dd0e185ac9b0b8902c883e0b63cf78a6f36b97cab227f62b6d35dcd058a8957d1bbf401e51d4302cbc17c3201e7b12fa4daac244b96d402183b429bbe400236", 0xc1}], 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f00000002c0), 0x220, 0x141, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xd}}}, 0x24}}, 0x0) recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) sendmsg$can_j1939(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)="76bf3931e77d8edb65ad6e76f7efd52aebb11826ad95562bd7e4bce3ac9cb055eb409f9f9b1b184d95276e24459a56cb77c554740b2d2e87618c9471030a6f0acc12d040f03f2010a8d2f9f45e63f814b93e0aca6d5b1c2213340050b11398af9b208b100c60bd0b0ec061346b8551a16d439c4984bb2e619df971d061a4b2bf513d7ae14bc01aa9d80a7c5fd2cccd728136acebb4d9f9425086fa188ebc5597694bfa58d743979ad6ff21b88a4d421a8eb7e056b465017a3ca75eaed2ae338ac4f48be78fd9c55c1cd75579941299afa48c4a648ce717c1e3c1a6bc1075ed88a15a3d", 0xe3}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) 9m22.017830728s ago: executing program 1 (id=307): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d3, 0x0) unshare(0x2c060000) unshare(0x24020400) (async) unshare(0x24020400) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x10}, 0x18) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1], [0x0, 0x80000000], [0xfa]], '\x00', [{0x0, 0x1}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x1], [0x0, 0x80000000], [0xfa]], '\x00', [{0x0, 0x1}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x48094, 0x0) 9m21.637640042s ago: executing program 0 (id=308): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)=0x0) r1 = fsmount(0xffffffffffffffff, 0x1, 0x80) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x36, 0xff, {0xffffffffffffffff}, {0xee01}, 0x800, 0x3}) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x91490006}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x13c, 0xf, 0x6, 0x5, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x8}, [@typed={0x8, 0x41, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0xd}}, @typed={0x8, 0x75, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x28, 0x0, 0x0, @u32=0x7fff}, @typed={0x8, 0xde, 0x0, 0x0, @str='/-+\x00'}, @generic="9543cd8b2985bacb129af98b7b9e4b9366d95d", @generic="b897d389b841babbab3cd6d0f3bc9a507392c6316a905de59a443197e576a30f7ea1e400753f76b40963f0f774fafcd0be496050ee04418c5958264784891bcdd6bcce15bc70e0c4b39ce0d2e6abf072a20e14dad3c7930640750d27bd691ccfef2986b4cf898124ddd17fd56344ca8f52ab0769974a85e61e64fc54b69fc133a869eaf4e8b4e6794ff5381125bb74cb1b5b6187041b206989a8e649923637b764ea77a0049cc2be8bed95332163be71c87ab4200cf895bd647b21f44d39b802ed0b0ade40d7561d0f1c93b8d6690a30251b9ebea1b6d28fc7af5970eee25173f25dabfd2afb699ed49dc7dc5528efeac6c477f740"]}, 0x13c}, 0x1, 0x0, 0x0, 0x80c0}, 0x400c081) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f0000000380)=0xe8) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000003c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4048005}, 0x91) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000202, r4, &(0x7f0000000680)='./file0\x00') ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000740)={'sit0\x00', &(0x7f00000006c0)={'gretap0\x00', r3, 0x40, 0x7, 0x22, 0x8, {{0x15, 0x4, 0x2, 0x5, 0x54, 0x66, 0x0, 0x1, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}, {[@timestamp_prespec={0x44, 0xc, 0xa4, 0x3, 0x1, [{@multicast1, 0x1}]}, @timestamp_addr={0x44, 0x34, 0x62, 0x1, 0x3, [{@rand_addr=0x64010102, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x8557}, {@multicast2, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x458245d3}, {@local, 0x43}, {@loopback, 0x5396}]}]}}}}}) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000780)) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000800), r5) sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x34, r11, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r6, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0x100}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4088054}, 0x20000000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000a00), r5) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a80), r5) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, r12, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x24}}, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_LLC_SET_PARAMS(r13, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x44, r11, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x2}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x87}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xd}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004084}, 0x20000810) read$FUSE(r1, &(0x7f0000000cc0)={0x2020}, 0x2020) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x10, 0x0, 0x0, 0x44204881}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x34, r11, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r0}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2044084}, 0x4010) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r14 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e40), r13) sendmsg$NLBL_CIPSOV4_C_REMOVE(r5, &(0x7f0000003180)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003140)={&(0x7f0000002e80)={0x2a0, r14, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0xa8, 0x8, 0x0, 0x1, [{0x4}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcd}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f5f9fd5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c453749}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x20f89b8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x599180b2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52c4418}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x34}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x11c, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42b02c0a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe9be0ba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67bdd3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x50}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45ea9623}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6e31}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56e13b61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5860996b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59934db8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55ee5c85}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22392573}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31dbee9b}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26b58773}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f275b3b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x70a711b3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3eeebd46}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b396d65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4364697f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ec327eb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x64, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53179ad1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5de6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8eed}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x766efabc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x785e0476}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xbe43199}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc618}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfb1}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x18ddaabf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x27c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x337b0c23}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x54, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x80}, 0x20004040) write$sequencer(r1, &(0x7f00000031c0)=[@echo=0x100000, @n={0x0, 0x17, @SEQ_NOTEON=@note=0x21, 0x5}, @echo=0xff, @n={0x0, 0x7, @SEQ_NOTEON=@note=0x36, 0x7}], 0x10) 9m21.503810353s ago: executing program 0 (id=309): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff0009240605060201002009240300f2020005490c240206"], 0x0) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x0, 0x9, 0x42, {0x42, 0x2, "9089a14b87d269e9c8e014896b2e600baeaeb6a9936d00e0605081f1555cf2e142f6b1f9c6c797e6b5383c0e2554b2da662fe1195539224c69008bf214d59cf7"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x2, 0xe, 0xdb, "98711b8f", "d8485a51"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x6, 0x8, 0xfd, 0x5, 0xd6dc}}}, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x20, 0x15, 0xe3, "758d3919b1e7432fcb9135413042e3559d6dc1ff625b345ff0f61d61e4e5c4e13148a47438dcd41000f1b528bb76596ba2c0d0ac20a2a3ed850680b5db8a508b8b69792206255fc2f60fe37cff83d5ce085b2f59cf2b4c59eec8371643871d4ef82499a86c7edfaa0ffbc61770f69eb99ab040ee4bc549b97afc253b811e3dba8cc8b1f9b963d3b2d47cff6aac5c46914565a9b1e2644c4abbaebe3bd03ff54cee0336852e071e2ec0604ec5d3c9efdd666b7a1c8bf7646f1c25cf8df45ee2b5a1141bcbb5879c815ef2d5416128245d580e20d80f5cbd53460cfd6ab67d2b01b8a19e"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xee}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x7}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0xa8, 0x20, [0xff0]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0xc}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000540)={0x40, 0xb, 0x2, "cd76"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0xb2d}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, "8f20"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x5f}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xb}}) write$dsp(0xffffffffffffffff, &(0x7f0000000840)="0173507af92795bd73d6dd7bf5b5d5380f59fa53f0dc7df96d17836ba26dc6d906f5f8bd7056605e47aa95b59e86f916924a30149c69af610985aed9ff7534013dff49f706c4314d63e03af4afc4313520224d2699fd375bd7bdc3bb57892e58baa744beb081e30660a076b31e45df1ef461861e3b2859effd82e1bc34c80499a1f9b64a710b48ddaf16efdb410b6c90ac2f825ce6d4ef8b70a02f0b92756b60f4340c9088c1d37075b19dbb06ee6ea060017fa8bcc0ea59215c37d4ea2838a0f0476343b99101641eb80c976adbab522d669c", 0xd3) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x0, 0x2be3, 0x800}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000) 9m21.347659921s ago: executing program 1 (id=310): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) write(r0, &(0x7f00000001c0)="4c7b41f57a7cce1405775f07cb1aa998744a0f83c67900fded999414f8693a7467ee2e02e75f98dd34fc5ac586dcf34fb557375af53dec1621bc3c2ef8ce190857e5d98f164e6a53bbd7d592dfc4cab414165f7a005e01e78593903cfa", 0x5d) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0x8ee4a000) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x0) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) (async) write$char_usb(r1, &(0x7f0000000040)="e2", 0x918) (async) write(r0, &(0x7f00000001c0)="4c7b41f57a7cce1405775f07cb1aa998744a0f83c67900fded999414f8693a7467ee2e02e75f98dd34fc5ac586dcf34fb557375af53dec1621bc3c2ef8ce190857e5d98f164e6a53bbd7d592dfc4cab414165f7a005e01e78593903cfa", 0x5d) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0x8ee4a000) (async) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) 9m21.168684827s ago: executing program 1 (id=311): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'sit0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x62}, 0x14) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000019d00)={0x14, 0x15, 0x1, 0x70bd2b, 0x25dfdbfe, {0xf, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x24008850}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x2c39000) 9m21.086034263s ago: executing program 1 (id=312): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001a00010000000000001000001c0000000000000004"], 0x28}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r2 = timerfd_create(0x7, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x3938700}}, 0x0) readv(r2, &(0x7f0000000200)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001a00010000000000001000001c0000000000000004"], 0x28}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) (async) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) timerfd_create(0x7, 0x0) (async) timerfd_settime(r2, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x3938700}}, 0x0) (async) readv(r2, &(0x7f0000000200)=[{0x0}], 0x1) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) (async) 9m20.937417493s ago: executing program 3 (id=313): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x20}, 0xc) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) 9m20.451469413s ago: executing program 1 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000100)={r3}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r8, 0x19b02000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r11 = getpgid(0x0) sendmsg$unix(r10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r11}}}], 0x20}, 0xc0) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000180)=0x0) setpgid(r11, r12) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000240)={r2}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x28, r5, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0xff}]}]}, 0x28}}, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) 9m20.451098594s ago: executing program 3 (id=315): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101342, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = gettid() rt_tgsigqueueinfo(r3, r3, 0x14, &(0x7f0000000480)={0x12, 0x0, 0x80000000}) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)="178bb7969f5410bca56a1d89599c6a5bdbc9d13544ec8b8106000000ce39f973081e50a0c8f7a757b1b2511606439ec636ef209b5f9f93bfc081841c110d66", 0x3f, 0x10008095, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x87, @remote, 0x4e23, 0x0, 'sh\x00', 0x15, 0x5, 0x2b}, 0x43) r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0x2}) sendfile(r2, r1, 0x0, 0x7ffff000) 8m47.692349866s ago: executing program 32 (id=291): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) (async) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) dup(r0) (async) r1 = dup(r0) recvfrom$inet_nvme(r1, &(0x7f00000001c0)=""/134, 0x86, 0x40010002, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x200c008, &(0x7f0000000300)='usrquota') (async) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x200c008, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') (async) chdir(&(0x7f0000000280)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x1, 0x48cd, 0xfffffffffffffffc, 0x800000df}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_XSAVE2(r5, 0x9000aecf, &(0x7f0000211000/0x4000)=nil) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r7, 0x5708e000) 4m37.018938071s ago: executing program 33 (id=309): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff0009240605060201002009240300f2020005490c240206"], 0x0) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000280)={0x2c, &(0x7f0000000080)={0x0, 0x9, 0x42, {0x42, 0x2, "9089a14b87d269e9c8e014896b2e600baeaeb6a9936d00e0605081f1555cf2e142f6b1f9c6c797e6b5383c0e2554b2da662fe1195539224c69008bf214d59cf7"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, &(0x7f00000001c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x2, 0xe, 0xdb, "98711b8f", "d8485a51"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x6, 0x8, 0xfd, 0x5, 0xd6dc}}}, &(0x7f0000000780)={0x84, &(0x7f00000002c0)={0x20, 0x15, 0xe3, "758d3919b1e7432fcb9135413042e3559d6dc1ff625b345ff0f61d61e4e5c4e13148a47438dcd41000f1b528bb76596ba2c0d0ac20a2a3ed850680b5db8a508b8b69792206255fc2f60fe37cff83d5ce085b2f59cf2b4c59eec8371643871d4ef82499a86c7edfaa0ffbc61770f69eb99ab040ee4bc549b97afc253b811e3dba8cc8b1f9b963d3b2d47cff6aac5c46914565a9b1e2644c4abbaebe3bd03ff54cee0336852e071e2ec0604ec5d3c9efdd666b7a1c8bf7646f1c25cf8df45ee2b5a1141bcbb5879c815ef2d5416128245d580e20d80f5cbd53460cfd6ab67d2b01b8a19e"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xee}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x1, 0x7}}, &(0x7f0000000480)={0x20, 0x0, 0x8, {0xa8, 0x20, [0xff0]}}, &(0x7f00000004c0)={0x40, 0x7, 0x2, 0xc}, &(0x7f0000000500)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000540)={0x40, 0xb, 0x2, "cd76"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0xb2d}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000600)={0x40, 0x17, 0x6, @local}, &(0x7f0000000640)={0x40, 0x19, 0x2, "8f20"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x7}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x5f}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000740)={0x40, 0x21, 0x1, 0xb}}) write$dsp(0xffffffffffffffff, &(0x7f0000000840)="0173507af92795bd73d6dd7bf5b5d5380f59fa53f0dc7df96d17836ba26dc6d906f5f8bd7056605e47aa95b59e86f916924a30149c69af610985aed9ff7534013dff49f706c4314d63e03af4afc4313520224d2699fd375bd7bdc3bb57892e58baa744beb081e30660a076b31e45df1ef461861e3b2859effd82e1bc34c80499a1f9b64a710b48ddaf16efdb410b6c90ac2f825ce6d4ef8b70a02f0b92756b60f4340c9088c1d37075b19dbb06ee6ea060017fa8bcc0ea59215c37d4ea2838a0f0476343b99101641eb80c976adbab522d669c", 0xd3) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x0, 0x2be3, 0x800}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000) 4m31.885408513s ago: executing program 34 (id=314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000100)={r3}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r8, 0x19b02000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r11 = getpgid(0x0) sendmsg$unix(r10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@cred={{0x1c, 0x1, 0x2, {r11}}}], 0x20}, 0xc0) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000180)=0x0) setpgid(r11, r12) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000240)={r2}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x28, r5, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0xff}]}]}, 0x28}}, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) 4m31.27514856s ago: executing program 35 (id=315): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x3}}, 0x10) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101342, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = gettid() rt_tgsigqueueinfo(r3, r3, 0x14, &(0x7f0000000480)={0x12, 0x0, 0x80000000}) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000000040)="178bb7969f5410bca56a1d89599c6a5bdbc9d13544ec8b8106000000ce39f973081e50a0c8f7a757b1b2511606439ec636ef209b5f9f93bfc081841c110d66", 0x3f, 0x10008095, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x87, @remote, 0x4e23, 0x0, 'sh\x00', 0x15, 0x5, 0x2b}, 0x43) r4 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}, 0x2}) sendfile(r2, r1, 0x0, 0x7ffff000) 50.156153794s ago: executing program 4 (id=1397): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000200)=0x9, 0x4) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r3, 0x200}, &(0x7f00000001c0)=0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000000c0)=r5) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) (async) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$tipc(0x1e, 0x5, 0x0) (async) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000200)=0x9, 0x4) (async) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) (async) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r3, 0x200}, &(0x7f00000001c0)=0x8) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) ioctl$TUNSETIFINDEX(r4, 0x400454da, &(0x7f00000000c0)=r5) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) (async) 49.97160428s ago: executing program 4 (id=1400): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}}, 0x2400c0c1) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000040)='befs\x00', 0x200002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 49.590086874s ago: executing program 4 (id=1404): r0 = getpid() prlimit64(r0, 0x9, &(0x7f0000000000)={0x9, 0x89}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x82843, 0x0) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000001100)) getpeername(r1, 0x0, &(0x7f00000000c0)) unshare(0x22020600) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x4) r5 = openat$cgroup_ro(r4, &(0x7f00000011c0)='cgroup.controllers\x00', 0x5000000, 0x0) readv(r5, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) ioprio_set$pid(0x1, 0x0, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendfile(r6, r6, 0x0, 0x27ffff000) socket$nl_route(0x10, 0x3, 0x0) 49.453456156s ago: executing program 4 (id=1405): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2c0000002b000b00000000080000000008000000040003000c0001800800000001800000080002"], 0x2c}}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r1, 0x92, 0x5, 0x2) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x80280, 0x0) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x2040, 0xa440bbc8e621c4f7}, 0x18) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x4}) splice(r4, 0x0, r6, 0x0, 0x8000f28, 0x0) splice(r5, 0x0, r4, 0x0, 0x7f, 0xe) write(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x2, {0x2, 0x1000000000000, 0x0, 0x3, 0x4000, 0x0, {0x200000000000003, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, r9, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r7, &(0x7f0000001240)={0x50, 0x0, r8, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) r11 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r11, 0x401070c9, &(0x7f0000000000)) mmap(&(0x7f0000a44000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x9aaa6000) r12 = syz_open_procfs(r10, &(0x7f0000000580)='smaps_rollup\x00') lseek(r12, 0x2004, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="4741aa2d2693d37b2a5600", 0xb}], 0x1, 0x0, 0x0, 0x11000000}, 0x81) r13 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r13) 48.9810829s ago: executing program 4 (id=1409): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) getpgid(r1) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) 48.870650084s ago: executing program 4 (id=1410): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000) 48.784383564s ago: executing program 36 (id=1410): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000) 4.228702988s ago: executing program 6 (id=1668): syz_open_dev$loop(&(0x7f0000000080), 0x4, 0x101881) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) socket$igmp(0x2, 0x3, 0x2) creat(&(0x7f0000001380)='./file0\x00', 0x12c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x7, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/109, 0x6d, 0x0, 0x40}, @flat=@binder={0x73622a85, 0x108a, 0x3}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) 4.160129035s ago: executing program 7 (id=1669): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x1aa) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) getdents64(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd70080000002501000000010000000b00000000030014"], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000004) fchdir(0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x240000, 0x44}}}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x9}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x81}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004885}, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r13 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r13, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x0, '\x00', @p_u32=0x0}}) sendmsg$NL80211_CMD_DEL_STATION(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, r11, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x50, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x20, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x7, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @random="589733b902f1", @broadcast, @device_a, {0x2, 0x500}, "", @void, @value=@ver_80211n={0x0, 0xdf, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @a_msdu}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 4.157598981s ago: executing program 6 (id=1670): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x84, 0x2, "06ac"}, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000a00)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x20, 0x84, 0x2, "46e2"}, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000b80)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x81, 0x2, "b822"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}, 0x1, 0x0, 0x0, 0x15}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000340)={'filter\x00', 0x0, [0x3, 0x5, 0x8, 0x9, 0x9]}, &(0x7f00000001c0)=0x54) syz_usb_control_io(r1, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000600)={0x0, 0xf, 0x2, "e6d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.126987986s ago: executing program 7 (id=1671): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xc000, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x5, 0x8, 0x3, 0x9}, {0x800, 0xff, 0x4, 0x2}, {0xa, 0x6, 0xe8}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={r2, 0x3, r0, 0x5, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f00000001c0)={0x8, 0x10, 0xfffffff5, 0x4, 0x4}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r4, 0x3b83, &(0x7f0000000280)={0x28, 0x2, r5, 0x0, 0x3174f6, 0x7, 0x2, 0x1363e5}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) statx(0xffffffffffffffff, &(0x7f0000000380)='.\x00', 0x1000, 0x7ff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x32500e, &(0x7f0000000540)={{'fd', 0x3d, r6}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@default_permissions}], [{@obj_user}]}}) llistxattr(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)=""/77, 0x4d) close_range(r6, r1, 0x2) fallocate(r1, 0x3, 0x6, 0x91) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x82401, 0x132, 0x1}, 0x18) r10 = openat(r9, &(0x7f0000000740)='./file0/file0\x00', 0x601800, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000780)) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) bind$x25(r10, &(0x7f0000000800), 0x12) r11 = accept4$x25(r10, &(0x7f0000000840)={0x9, @remote}, &(0x7f0000000880)=0x12, 0x80000) bind$x25(r11, &(0x7f00000008c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000900), 0x24101, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f0000000ac0)={0xc, 0x8, 0xfa00, {&(0x7f0000000940)}}, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), r10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r10, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x90, r12, 0x20, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x6e}, {0x6, 0x16, 0x1}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0x4}, {0x5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r13 = openat$dir(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x4480, 0x1) fsconfig$FSCONFIG_SET_PATH(r10, 0x3, &(0x7f0000000cc0)='*\x00', &(0x7f0000000d00)='./file0\x00', r13) flock(r0, 0x6) 4.082631512s ago: executing program 7 (id=1672): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x22042, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14, 0x10}}, 0xc0}}, 0x400c0) write$UHID_INPUT(r2, &(0x7f0000004000)={0xf, {"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", 0x1000}}, 0x1006) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r6 = openat$cgroup_ro(r2, &(0x7f0000000400)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000440)) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000240)={0x8, 0x0, [{0x0, 0x0, 0xb, 0x0, 0xb, 0x5, 0x8}, {0x0, 0xff, 0x4, 0x1, 0x7, 0x979, 0x917}, {0xd, 0x9, 0x4, 0xffffff9c, 0x2, 0x2, 0xbda}, {0xc0000000, 0x5, 0x4, 0x8, 0xff, 0x5, 0x6}, {0x4, 0x2, 0x2, 0x8, 0x776, 0x9, 0xb}, {0x80000001, 0x2, 0x3, 0x7, 0x7ff, 0x8, 0x5}, {0xec086d7f2e29ad38, 0x1ff, 0x1, 0x7f, 0x9, 0x7, 0x1}, {0x40000000, 0x3, 0x0, 0x8, 0x5, 0x5}]}) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, 0x0, &(0x7f00000000c0)) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r8 = creat(&(0x7f0000001380)='./file0\x00', 0x4) sendto$isdn(r8, &(0x7f0000000140)=ANY=[@ANYBLOB="f5400000af000000716b928a57dd9c9dfbd93cabca08038ccfe4e310c3f227a6ff0dd6d225bf8037f7e4422337d6e458ba317186dd6a612e754689098ec0d73228cd3b21f709ef6cc14396a82c6d8340692ecfc5874b767de575a747061e8738c6608a19e74fb84e38a4075f86914a4176850bde8e3369c0ef9b6c1ee078feaccc08d23dbb"], 0x8f, 0x4000004, 0x0, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000000)="6705dbf26a", 0x5}], 0x1) mount$nfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0xa0040, &(0x7f00000001c0)=ANY=[@ANYBLOB='fsc']) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r10, 0x100000000) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x810, r11, 0x5708e000) 3.479501976s ago: executing program 8 (id=1673): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000440)) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) (async) creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 3.460738127s ago: executing program 8 (id=1674): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x420000, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}}) (async) writev(r0, &(0x7f0000000300)=[{&(0x7f00000002c0)="b9", 0x1}], 0x1) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) pread64(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x80004, 0x0, 0x0) (async) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, 0x0) (async) openat$userio(0xffffffffffffff9c, &(0x7f00000013c0), 0x103000, 0x0) (async) mount$bpf(0x0, 0x0, 0x0, 0x22, 0x0) (async) r2 = socket$phonet(0x23, 0x2, 0x1) close_range(0xffffffffffffffff, r2, 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000002140)={{0x12, 0x1, 0x200, 0xf5, 0x90, 0x5c, 0x40, 0x19d2, 0xff90, 0xed4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x9, 0x40, 0xd, [{{0x9, 0x4, 0x9b, 0x0, 0x0, 0x2, 0x2, 0xff, 0x3}}]}}]}}, 0x0) (async) write$apparmor_exec(0xffffffffffffffff, &(0x7f00000001c0)={'stack ', '/dev/rnullb0\x00'}, 0x13) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) ioprio_set$pid(0x1, 0x0, 0x2007) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) 2.85235746s ago: executing program 8 (id=1679): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x100010, r0, 0xf648d000) madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2) readv(0xffffffffffffffff, &(0x7f00000017c0)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1) mmap$binder(&(0x7f000076c000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x800) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.734131078s ago: executing program 8 (id=1680): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x0, 0x1, 0x1, 0x2, 0xfffe}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000800)=""/187, 0xbb}], 0x1, 0x6, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000) 2.403680278s ago: executing program 8 (id=1681): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="58000000020603000000000000000000000000050c000780050014002000000011000300686173683a6e65742c6e657400000000050005000200000005000400000000000900020073797a31000000000500010007"], 0x58}}, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x8, 0x19dff}}}, 0x90) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f00000038c0)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000043c0001802c00018014000300fc00000000000000000000000000000014000400fc0000000000000000000000000000010c000280050001"], 0x50}, 0x1, 0x0, 0x0, 0x20004044}, 0x80) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000000)) (async) ioctl$PPPIOCSPASS(r9, 0x40107447, &(0x7f0000000100)={0x1fffffffffffffa8, &(0x7f0000000080)=[{}, {}]}) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x7, &(0x7f0000000200)=0x3, 0x4) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="050000400000000000002e00000008000300", @ANYRES32=r12, @ANYBLOB="050034008b0000001400490009ac0f0002ac0f0005ac0f000d00000006006600eb224f7c0000000000001e0150179cbe6009e47652209cbf54e67e6f5513d4d031d2bdc24aa37b221190b8927c2e0ee29e868eec135a4692930654e1360575d62472e4f875543ca7e711e492eb5981c5109f0be71f277d8d4e905d1c75e1beaa55fea42177e1c5bb59cff0c5fd07422c22fec608aa0ae94e17531f3d9ed4c094d873e8d07997bed330385f0ef2b84e3d4bb79d09116686e1d7afd0919d0602208b68529dff2e1bbe5fc97cab1aac54"], 0x48}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x2, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) (async) sendto$inet6(r10, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) (async) r14 = syz_open_dev$hidraw(&(0x7f0000000080), 0x340, 0x502) ioctl$HIDIOCGRDESC(r14, 0x90044802, &(0x7f0000000380)={0x930, "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"}) (async) syz_usb_ep_write(r0, 0x81, 0x3, &(0x7f0000000140)="c0b740") (async) readv(r3, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/99, 0x63}], 0x1) syz_usb_disconnect(r1) 1.582455195s ago: executing program 8 (id=1688): r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000007c0), 0x42140, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xa) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, &(0x7f00000006c0)={0x14, &(0x7f0000000480)={0x40, 0xa, 0x22, {0x22, 0x2d, "8389213f6a153a1ccb492bae8489c1f47b437deaa15121066aaaddad885dff75"}}, &(0x7f0000000c40)={0x0, 0x3, 0x102, @string={0x102, 0x3, "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"}}}, &(0x7f0000000c00)={0x34, &(0x7f0000000d80)=ANY=[@ANYBLOB="4030eb000000c2757761ad64d86bff48dd4f7feaaccab1a3ee20d366d5fa4751ae1861c98ac86796a1d34f3e47b8118319273d67cbf6001a99367cac1bb8cceeb8c8a6033c9d90ba4cc8856ebb266fa2b0f82a628ceb434042718094f104443d732ee1901384918ae91756a16f52db7af866a8e5434c1f3d9ab5221e8af5fe7886e978a51abfced031bf070c962b7cc976f00e2523e509d7bb3b0fa269aa9c0051f1388ffda353bf26a4288715bd5e6fd5ecf665f3bf6a0ddcf7f06af28e562e169d8728c5ca3d42183ea4f5c979d060fd2f5be8de0d25d1a602725dc1ef6967012575000000000000db135eadb30bac23b0c9849eed86f305c71dec317fc149cb58e5c012a809686ba904bbe178d866000f3accedefa618be28f4e7d34ba7ad83afb9c333ba2c3eec1c0d0dc8c5555dc036fd5c981d8456adfcacb7ff519d192c2aa062a221d6263104098edac07ac2d7ff5fee1044d17daff108ffb596268a4df1c992193e54a58176c77fe2954278bb36fc03622b022b22da96606145e2111ca6e5f1823aa3960b97f6bc67984b9b70a6a9917f8ad1e6e892cb01c2f6f644f37cf0a1c7c465a7f67ba6fd9084a7e9c34fdfe8a557b892"], &(0x7f0000000740)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000f80)=ANY=[@ANYBLOB="2000ff00000000fdf1019837d340b0d9e8db91885ae3e662754113ab2b02000f757933f933ae8cdf61282d31ea2659bc016e0316bba7d60bb2d014ea20c313b95381d5dccd45d6c1f18deb7b5e16201dfe3cbf369895752e9726a28a75a66eaad2dc59e4b25c346f871bef4250109468a202e4dd80734b3b6d718f00cab8de1f955e5ac53461d45c71a35db62d1afde4beafaf1ec34c37863e94e344477b8422b7bdf766ae2bfe0f7f10480147bbebf2b53fa93153426fea6ae9dcf2b470b5abf7327ea6672b41f5efceb31b55f14f7c7c351516b9cee352df1a94f1c5e80a5be72888336badfc228c85c4e066bee80c367aabe7857c7f5f5add095add70c623f8559dbba9ed72c89f5371bef6ecaac7189d8a9d67e769865db323860648557fc0c04778442e339aba36efb3f8fa711e77ddf97feba2d4d760eeae2750219600c83088bd67bebdcdb048cb49ac81fed693c99c72b0ccdbec6d48dd921bdb3e8d241ab5f8baf272ba924e094f3bd174e30cf23f526722951fe80af6dd5b4c16ffc3c64c15c45fd2d496f3db26b4ad130772d4ad95110553789efec8a65f8913d31bc0fb4c5b98a7d25c3d0ca4b77a601dc0525db434c77f16cd6173c9708f96f2cda5fd266496ef4a7cc3f8216e"], &(0x7f0000000b80)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000bc0)={0x20, 0x0, 0x1, 0xe4}}) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x408400, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4}) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000800)=0x2) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000000100)={0x2b, 0x403, 0x3, 0xb102, 0x7, "c24092f3b7e9f607000000e70000ee0800", 0x804}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io$printer(r2, &(0x7f00000002c0)={0x14, &(0x7f0000000200)={0x0, 0xd, 0x75, {0x75, 0x22, "cac2603fcf03d71094fbc40b556af85734618467f21fee78118a9cf68b6d78edf36c29b4a1e117026329e121df219dce8cb74ecafb50d2fc84eb21dc4f17e22046ad08056c058614d7a09909d313b127b9260788fde9879d891aa64e445be0ab176ff7529d74ba5f3bff0c12f5958af0a44553"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x81a}}}, &(0x7f0000000540)={0x34, &(0x7f0000000300)={0x20, 0x16, 0xed, "0f4332bfb1f65ee416da18fd139f5fe1e45d4267a6b60078284c44f413982c192963a8922a496c6d7d94d15c610f02c36253eefebde2adea27c78cef58a123d105aa5465e989a4d4adf193788e80cde5800e84eb0aee1446faf928f0b8f1b73236245b4af81ffcf8042329657501bc29e06ece30a721fa87da3fdf9843264d25063abc07dcb57e2197b00c8e161616c2f9977a0c3844f393ee0ef12fe68e5bc98a837cf28255c91f87a4c8c4e735be3d0ea1f47e161430a7757c1efc289374ad1d9207b3247e49030dbd2a7cbd41d82d714f1129550dc4ae9cd28673c002a9c3c8e1c608fb4409772c9ec3912e"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000640)=ANY=[@ANYBLOB="2000180000000016ba81f428e70bb3fdff5c0056eeb6d2295047193d5d9020fb3d37382cccb99c9c591ed62c83c325f36bf412898e71aef6e6b3c83f9f3499a4cd5833cb5aecbc585a7e6234cc94ec40bd7fbf9370"], &(0x7f00000004c0)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x5}}) 780.077229ms ago: executing program 6 (id=1690): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) (async) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) r1 = accept$nfc_llcp(r0, 0x0, &(0x7f0000000040)) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000000c0)={'vcan0\x00', {0x2, 0x0, @multicast1}}) close(r0) (async) close(r0) openat(r0, &(0x7f0000000000)='./bus\x00', 0x490001, 0x108) (async) openat(r0, &(0x7f0000000000)='./bus\x00', 0x490001, 0x108) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 671.304374ms ago: executing program 6 (id=1691): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c2a00, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c2a00, 0x0) (async) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) (async) 596.319137ms ago: executing program 6 (id=1692): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r2, 0xa, 0x9, 0xe, 0x1, 0x9}, &(0x7f0000000180)=0x14) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r4, 0x4068aea3, &(0x7f00000000c0)={0xbc, 0x0, 0x1}) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f00000001c0)="f30f0ddf66b9170800000f322c00660f18d766b87c7300000f23c80f21f866350c0090000f23f82ee1d66526f30f2ce226360f01ca0f070fc7bc0400", 0x3c}], 0x1, 0x4c, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) mmap$xdp(&(0x7f00007e1000/0x3000)=nil, 0x3000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 562.857247ms ago: executing program 6 (id=1693): inotify_init1(0x800) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x3a) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000080)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x24) socket$can_j1939(0x1d, 0x2, 0x7) syz_init_net_socket$ax25(0x3, 0x2, 0xcc) close(r3) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 468.14115ms ago: executing program 7 (id=1695): creat(&(0x7f00000001c0)='./file0\x00', 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) unlink(&(0x7f00000003c0)='./file0\x00') (async) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2082) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000008, 0x3, 0x4, 0x80000001}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x801f, 0xe1d9, 0x1101, 0xff}) (async) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x8, 0x0, &(0x7f0000002140)=0xfccf) ioprio_set$pid(0x0, r1, 0x2007) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r5 = memfd_create(&(0x7f0000000500)='y\x105\x14\xf8u\x83%\x1f\xe09@>r\xc2#\x05\x00\x00P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\x15]\x95\xd1\xc8s\x06\x00\x00\x00\x00\x00\x00\x00\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc4\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV\x06\xee\x91\'\xae\x9c\x06\xb2?$\xb1\xeeE\b\xbc\xd1[\xd5tO`Z\x15 1\v\xa6\xd0[K!+>,FE\x10\t\xbb\x90Jj\xb8{\xc6\x16\x92\xeb\xb8\xc1\xe8\xd0\xa1wM\xb7z\f\x94\xe0&\xcaC,>\x1b^\xc2\xc6\x1b\x83^\xf7\xf9\x9b*\xf4jSJ\r7\x85=\x14;\xdbCAs\xc56h/#\xe4\xe5\x8d\xf2@\xbbe\xfbT\xd5\x84t\xbe\xf1\xb9\xcb\x1d\x05B\xec\xe9Vb\xfb\x16su\t\x1d\xe2\xf2\xde\x04\f\x00\x00\x00\x00\x00\x00\x00\x00\xb9\xd6\xda\x8c\x18\xdc\xdb\xd3\x81x\x99\x18\xa1J\xfa\b\xe5\x16\x92\xe4oF\x93\x85\xb1\xb0\x02\xc6o\xaef\x177\xd6af\xed7\x96\xb0\xa9\x1e\xfc\x80%\xa0\xfe.\x17<\xd1\xad\x17\x8e', 0x2) ftruncate(r5, 0x400ffff) (async) fcntl$addseals(r5, 0x409, 0x7) (async) r6 = socket$inet6(0x10, 0x3, 0x0) write(r6, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000002", 0x24) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/asound/seq/clients\x00', 0x0, 0x0) fcntl$lock(r7, 0x25, &(0x7f00000010c0)={0x0, 0x2, 0x1, 0x1fe}) preadv(r7, &(0x7f0000000000)=[{&(0x7f0000001100)=""/4104, 0x1008}], 0x1, 0x33, 0x3) (async) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000100)={r5, 0x0, 0x1000000, 0x1000000}) (async) r8 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000880), 0x2) r9 = ioctl$UDMABUF_CREATE(r8, 0x40187542, &(0x7f00000002c0)={r5, 0x4, 0x4000, 0x10000}) (async) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async, rerun: 32) r11 = open$dir(&(0x7f0000000840)='./file0\x00', 0x624080, 0x2) (rerun: 32) statx(r11, &(0x7f00000009c0)='./file0\x00', 0x2500, 0x1, &(0x7f00000008c0)) (async) getpgrp(0xffffffffffffffff) (async) syz_open_dev$sg(&(0x7f0000000800), 0x6, 0x58000) sendfile(r10, r10, 0x0, 0x7ffff000) (async, rerun: 32) preadv(r9, &(0x7f0000000780)=[{&(0x7f0000000140)=""/64, 0x40}, {&(0x7f0000000180)=""/34, 0x22}, {&(0x7f0000000200)=""/110, 0x6e}, {&(0x7f0000000300)=""/180, 0xb4}, {&(0x7f0000000480)=""/117, 0x75}, {&(0x7f0000000400)}, {&(0x7f0000000700)=""/75, 0x4b}], 0x7, 0x1, 0x3) (rerun: 32) 467.799567ms ago: executing program 5 (id=1696): mount(&(0x7f0000000140)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='cramfs\x00', 0x10c400, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0x480000, 0xfffffffc}]}, 0xc, 0x1) 414.998781ms ago: executing program 7 (id=1697): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x6, @remote, 0xe9a}}, 0xb03c, 0x7}, 0x90) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0702000000000000000001000000040008802c000480050003000100000005000300000000000500030001e97a0d6e00030000000000050003000500000008000100032000000800020001"], 0x54}}, 0x880) r5 = getpgrp(0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) syz_open_procfs$userns(0x0, &(0x7f0000000100)) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f00000002c0)={0x6, r6, 0x1}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x60, r1, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x60}, 0x1, 0x0, 0x0, 0x8c0}, 0x801) mq_open(&(0x7f0000000240)='ns/user\x00', 0x2, 0x172, &(0x7f0000000280)={0x3a74, 0x200, 0xc67f, 0x6}) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 404.406564ms ago: executing program 5 (id=1698): socket(0x80000000000000a, 0x2, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x428101, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x6, 0x14) r2 = epoll_create(0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000000100000051000000", 0xfe60) openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r2, &(0x7f0000000080)={0x1e0004017}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000000)=0x6e) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)=0x3ff) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000280)={r8, 0x40, 0xa4, 0x7, 0x732, 0x9}, &(0x7f0000000400)=0x14) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x406f) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x77359400}}, &(0x7f00000001c0)) sendfile(r4, r1, 0x0, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="090929bd700000000000010000000000000009410000004c00180000006065746800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9de71202c3c4f4974bee6536c282bb0cb8f6975130972f0a"], 0x68}}, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000005380004800c000180080001006f73660028000180080021006e6174001c00028008000140000000011e00034000000014080002400000000208000a40000000010900020073797a320000000009000200730000000000000000000000000a"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000002c0)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r9, 0x3b89, &(0x7f0000000340)={0x28, 0x1, 0x0, r12, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000300)}) 208.189687ms ago: executing program 7 (id=1699): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3001}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x84, 0x2, "06ac"}, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000a00)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x20, 0x84, 0x2, "46e2"}, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000b80)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x81, 0x2, "b822"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}, 0x1, 0x0, 0x0, 0x15}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000340)={'filter\x00', 0x0, [0x3, 0x5, 0x8, 0x9, 0x9]}, &(0x7f00000001c0)=0x54) syz_usb_control_io(r1, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000600)={0x0, 0xf, 0x2, "e6d7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 144.428137ms ago: executing program 5 (id=1700): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b8004023655fdbaded39d65000b4824ca940417a3cd3639e431e8e2125f6c00940f6a0325010ebc0000000000000080001328baf0fffeffe809005300fff5dd02000000000000000c10003d5bcf6916b4114b32793792c395da89991a8be619c7ce1ecf8b6e3501aeb67cdb99f356f9518492cbf6d88e98f0df275f9f6dd0e185ac9b0b8902c883e0b63cf78a6f36b97cab227f62b6d35dcd058a8957d1bbf401e51d4302cbc17c3201e7b12fa4daac244b96d402183b429bbe400236", 0xc1}], 0x1) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 99.467634ms ago: executing program 5 (id=1701): set_mempolicy(0x3, &(0x7f0000000080)=0x7e, 0x9) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x16d342, 0x0) munmap(&(0x7f0000012000/0x4000)=nil, 0x4000) write(r0, &(0x7f0000000400)="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", 0x1f000) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1405, 0x100, 0x70bd2a, 0x25dfdbfe, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000800) 380.113µs ago: executing program 5 (id=1702): creat(&(0x7f0000000080)='./file0\x00', 0xac) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='hugetlbfs\x00', 0x1008010, 0x0) 0s ago: executing program 5 (id=1703): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(r3, 0x0) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r4, 0x0) setreuid(0x0, 0xee00) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r5, 0x3b80, 0x0) close(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) kernel console output (not intermixed with test programs): 677.433898][ T7054] usb 8-1: SerialNumber: syz [ 677.440188][ T7054] usb 8-1: config 0 descriptor?? [ 677.447484][ T7054] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 677.456948][ T5976] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 677.464584][ T7054] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 677.474864][ T5926] usb 7-1: Using ep0 maxpacket: 8 [ 677.481358][ T5926] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 677.490227][ T5926] usb 7-1: config 0 has no interface number 0 [ 677.496742][ T5926] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 677.507799][ T5926] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 677.519426][ T5926] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 677.530648][ T5926] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 677.543779][ T5926] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 677.553821][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.564544][ T5926] usb 7-1: config 0 descriptor?? [ 677.578414][ T5926] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 677.603279][ T5976] usb 5-1: device descriptor read/64, error -71 [ 677.722700][ T5976] usb usb5-port1: attempt power cycle [ 677.845311][ T5905] usb 7-1: USB disconnect, device number 34 [ 677.845308][ C0] ldusb 7-1:0.55: usb_submit_urb failed (-19) [ 678.073429][T10470] /dev/rnullb0: Can't open blockdev [ 678.082321][T10457] ldusb: No device or device unplugged -19 [ 678.082321][ T5905] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 678.092170][ T7054] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 678.104076][ T5976] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 678.112708][ T7054] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 678.114091][T10453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.129294][T10453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.139406][ T5976] usb 5-1: device descriptor read/8, error -71 [ 678.148004][ T7054] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 678.155521][ T7054] em28xx 8-1:0.0: No AC97 audio processor [ 678.982611][ T5926] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 679.155265][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 679.167669][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.179634][ T5926] usb 7-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 679.196205][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.210858][ T5926] usb 7-1: config 0 descriptor?? [ 679.279645][T10479] /dev/rnullb0: Can't open blockdev [ 679.379845][ T5976] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 679.445315][T10477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.461638][T10477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.473189][T10477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.482018][T10477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.494147][ T5976] usb 5-1: device descriptor read/8, error -71 [ 679.502058][T10477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.511523][T10477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.516534][T10481] /dev/rnullb0: Can't open blockdev [ 679.527263][T10477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.536540][T10477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.552603][ T5926] usbhid 7-1:0.0: can't add hid device: -71 [ 679.558730][ T5926] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 679.575771][ T5926] usb 7-1: USB disconnect, device number 35 [ 679.626772][ T5976] usb usb5-port1: unable to enumerate USB device [ 680.396812][ T7054] usb 8-1: USB disconnect, device number 35 [ 680.422324][ T7054] em28xx 8-1:0.0: Disconnecting em28xx [ 680.502871][ T7054] em28xx 8-1:0.0: Freeing device [ 680.731718][T10502] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 680.846451][ T7054] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 680.877262][T10508] netlink: 'syz.6.1124': attribute type 31 has an invalid length. [ 680.885178][T10508] netlink: 'syz.6.1124': attribute type 1 has an invalid length. [ 680.899172][T10508] bridge0: port 1(bridge_slave_0) entered learning state [ 680.911681][T10508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.933612][T10508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.998902][T10512] netlink: 'syz.4.1125': attribute type 22 has an invalid length. [ 681.011500][T10512] netlink: 14380 bytes leftover after parsing attributes in process `syz.4.1125'. [ 681.026089][T10513] /dev/rnullb0: Can't open blockdev [ 681.046472][ T7054] usb 8-1: Using ep0 maxpacket: 32 [ 681.054068][ T7054] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 681.063765][ T7054] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.080427][ T7054] usb 8-1: config 0 descriptor?? [ 681.084504][T10516] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1126'. [ 681.085661][T10518] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1126'. [ 681.105784][ T7054] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 681.174782][ T5926] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 681.337721][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 681.350725][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.363188][ T5926] usb 6-1: New USB device found, idVendor=056a, idProduct=0217, bcdDevice= 0.fc [ 681.375002][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.390016][ T5926] usb 6-1: config 0 descriptor?? [ 681.810723][T10529] /dev/rnullb0: Can't open blockdev [ 681.866174][ T5926] wacom 0003:056A:0217.000F: Unknown device_type for 'HID 056a:0217'. Ignoring. [ 682.202573][ T7054] gspca_nw80x: reg_w err -71 [ 682.207640][ T7054] nw80x 8-1:0.0: probe with driver nw80x failed with error -71 [ 682.220801][ T7054] usb 8-1: USB disconnect, device number 36 [ 682.258958][ T5905] usb 6-1: USB disconnect, device number 41 [ 682.831536][T10549] /dev/rnullb0: Can't open blockdev [ 682.959276][T10557] /dev/rnullb0: Can't open blockdev [ 683.233477][T10573] No control pipe specified [ 683.343493][T10585] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 683.350524][T10585] /dev/rnullb0: Can't open blockdev [ 683.399202][ T5926] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 683.495391][ T5976] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 683.527530][ T5905] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 683.570486][ T5926] usb 7-1: Using ep0 maxpacket: 8 [ 683.578719][ T5926] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 683.595109][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.607843][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.619034][ T5926] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 683.633260][ T5926] usb 7-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 683.642439][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.652844][ T5926] usb 7-1: config 0 descriptor?? [ 683.666561][ T5976] usb 5-1: Using ep0 maxpacket: 32 [ 683.671929][ T5905] usb 8-1: device descriptor read/64, error -71 [ 683.681552][ T5976] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 683.691619][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.702617][ T5976] usb 5-1: config 0 descriptor?? [ 683.715699][ T5976] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 683.718227][T10602] overlayfs: missing 'lowerdir' [ 683.878031][ T5926] redragon 0003:0C45:760B.0010: Fixing Redragon ASURA report descriptor. [ 683.933793][ T5905] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 684.003610][ T5926] redragon 0003:0C45:760B.0010: unknown main item tag 0x6 [ 684.014667][ T5926] redragon 0003:0C45:760B.0010: item fetching failed at offset 7/133 [ 684.023795][ T5926] redragon 0003:0C45:760B.0010: probe with driver redragon failed with error -22 [ 684.098169][ T5905] usb 8-1: device descriptor read/64, error -71 [ 684.265799][ T5905] usb usb8-port1: attempt power cycle [ 684.735586][T10608] netlink: 'syz.5.1156': attribute type 1 has an invalid length. [ 684.746499][ T5905] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 684.768344][ T5905] usb 8-1: device descriptor read/8, error -71 [ 684.925899][ T5976] gspca_nw80x: reg_w err -71 [ 684.930859][ T5976] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 684.945204][ T5976] usb 5-1: USB disconnect, device number 49 [ 685.024645][ T5905] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 685.047230][ T5905] usb 8-1: device descriptor read/8, error -71 [ 685.165444][ T5905] usb usb8-port1: unable to enumerate USB device [ 685.625039][ T30] audit: type=1326 audit(1756641598.540:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10607 comm="syz.5.1156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776d18ebe9 code=0x7fc00000 [ 686.029768][ T5944] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 686.190180][ T5944] usb 6-1: Using ep0 maxpacket: 32 [ 686.197536][ T5944] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 686.207244][ T5944] usb 6-1: config 0 has no interface number 0 [ 686.213693][ T5944] usb 6-1: config 0 interface 184 has no altsetting 0 [ 686.222323][ T5944] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 686.231720][ T5944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.239778][ T5944] usb 6-1: Product: syz [ 686.244034][ T5944] usb 6-1: Manufacturer: syz [ 686.248909][ T5944] usb 6-1: SerialNumber: syz [ 686.258010][ T5944] usb 6-1: config 0 descriptor?? [ 686.264742][ T5944] smsc75xx v1.0.0 [ 686.505139][ T5865] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 686.906670][ T5976] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 686.920754][ T5944] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 686.931714][ T5944] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 687.013649][ T5864] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 687.068576][ T5976] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 687.080718][ T5976] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 43926, setting to 64 [ 687.094435][ T5976] usb 8-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 687.103826][ T5976] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.111956][ T5976] usb 8-1: Product: syz [ 687.116145][ T5976] usb 8-1: Manufacturer: syz [ 687.120850][ T5976] usb 8-1: SerialNumber: syz [ 687.126918][ T5976] usb 8-1: config 0 descriptor?? [ 687.135566][T10630] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 687.179305][ T5864] usb 5-1: unable to get BOS descriptor or descriptor too short [ 687.189423][ T5864] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 687.196220][ T5976] rc_core: IR keymap rc-streamzap not found [ 687.199346][ T5864] usb 5-1: can't read configurations, error -71 [ 687.203379][ T5976] Registered IR keymap rc-empty [ 687.226797][ T5976] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 687.242080][ T5976] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input28 [ 687.285499][ T7051] usb 7-1: USB disconnect, device number 36 [ 687.383193][ T5926] usb 8-1: USB disconnect, device number 41 [ 687.756783][T10643] /dev/rnullb0: Can't open blockdev [ 688.015898][T10620] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1159'. [ 688.034370][T10650] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1159'. [ 688.035975][T10652] netlink: 'syz.7.1170': attribute type 1 has an invalid length. [ 688.052839][T10652] netlink: 204 bytes leftover after parsing attributes in process `syz.7.1170'. [ 688.063937][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1170'. [ 688.064655][T10619] /dev/rnullb0: Can't open blockdev [ 688.080404][T10652] /dev/rnullb0: Can't open blockdev [ 688.125969][ T5864] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 688.160130][ T5944] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 688.174257][ T5944] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 688.184597][ T5944] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 688.194517][ T5944] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 688.217689][ T5944] usb 6-1: USB disconnect, device number 42 [ 688.310507][ T5864] usb 5-1: Using ep0 maxpacket: 32 [ 688.317236][ T5864] usb 5-1: config 3 has an invalid interface number: 140 but max is 3 [ 688.326378][ T5864] usb 5-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 688.338182][ T5864] usb 5-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 688.348476][ T5864] usb 5-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 688.358582][ T5864] usb 5-1: config 3 has no interface number 0 [ 688.365061][ T5864] usb 5-1: config 3 interface 140 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 688.377829][ T5864] usb 5-1: config 3 interface 140 altsetting 1 has an endpoint descriptor with address 0x14, changing to 0x4 [ 688.390883][ T5864] usb 5-1: config 3 interface 140 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 688.403534][ T5864] usb 5-1: config 3 interface 140 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 688.403798][ T5905] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 688.421062][ T5864] usb 5-1: config 3 interface 140 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 688.434788][ T5864] usb 5-1: config 3 interface 140 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 688.445907][ T5864] usb 5-1: config 3 interface 140 altsetting 1 has 10 endpoint descriptors, different from the interface descriptor's value: 16 [ 688.462765][ T5864] usb 5-1: config 3 interface 140 has no altsetting 0 [ 688.471783][ T5864] usb 5-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=e7.48 [ 688.482199][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.491052][ T5864] usb 5-1: Product: ⩪瘧涺戃⋺頄꯬쓉쫭졧넇ɇ𼜸嚥ᠮ姬△絢⼓趤벁䚭◫њഞ煾쎾䬍쇄ᖊ＼齶䁄뙔升鋇㈔曡 [ 688.506881][ T5864] usb 5-1: Manufacturer: 튙 [ 688.511604][ T5864] usb 5-1: SerialNumber: ࠌ [ 688.566287][T10660] /dev/rnullb0: Can't open blockdev [ 688.571738][T10661] /dev/rnullb0: Can't open blockdev [ 688.597710][ T5905] usb 8-1: Using ep0 maxpacket: 16 [ 688.605939][ T5905] usb 8-1: unable to get BOS descriptor or descriptor too short [ 688.615580][ T5905] usb 8-1: config 1 interface 0 altsetting 175 bulk endpoint 0x1 has invalid maxpacket 64 [ 688.628604][ T5905] usb 8-1: config 1 interface 0 has no altsetting 0 [ 688.637142][ T5905] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 688.647762][ T5905] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.656888][ T5905] usb 8-1: Product: syz [ 688.662788][ T5905] usb 8-1: Manufacturer: syz [ 688.667404][ T5905] usb 8-1: SerialNumber: syz [ 688.681369][T10654] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 688.748999][ T5864] usb 5-1: USB disconnect, device number 51 [ 688.908332][T10654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.919718][T10654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.960050][T10676] /dev/rnullb0: Can't open blockdev [ 689.034728][ T7051] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 689.196930][ T7051] usb 6-1: config 1 has an invalid descriptor of length 121, skipping remainder of the config [ 689.207367][ T7051] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 689.220384][ T5864] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 689.230207][ T7051] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 689.240140][ T7051] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.248239][ T7051] usb 6-1: Product: syz [ 689.252725][ T7051] usb 6-1: Manufacturer: syz [ 689.257334][ T7051] usb 6-1: SerialNumber: syz [ 689.387605][ T5864] usb 7-1: Using ep0 maxpacket: 32 [ 689.410813][ T5864] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 689.422910][ T5864] usb 7-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 689.443754][ T5864] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 689.455015][ T5864] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 689.473329][ T5864] usb 7-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 689.490851][T10672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 689.495711][ T5864] usb 7-1: config 0 interface 0 has no altsetting 0 [ 689.508862][ T5864] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 689.537621][T10672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 689.554341][ T5864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.563673][ T7051] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 689.578932][ T7051] usb 6-1: USB disconnect, device number 43 [ 689.603055][ T5864] usb 7-1: config 0 descriptor?? [ 690.058362][ T5864] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 690.082702][ T5864] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 690.090845][ T5864] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 690.104342][ T7051] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 690.120268][ T5864] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 690.128475][ T5864] hid-thrustmaster 0003:044F:B65D.0011: unknown main item tag 0x0 [ 690.145350][ T5864] hid-thrustmaster 0003:044F:B65D.0011: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0 [ 690.157846][ T5864] hid-thrustmaster 0003:044F:B65D.0011: setup data couldn't be sent [ 690.253830][ T7051] usb 6-1: device descriptor read/64, error -71 [ 690.296259][ C0] hid-thrustmaster 0003:044F:B65D.0011: URB to get model id failed with error -71 [ 690.318018][ T5864] usb 7-1: USB disconnect, device number 37 [ 690.439585][T10691] block nbd4: NBD_DISCONNECT [ 690.517745][T10693] /dev/rnullb0: Can't open blockdev [ 690.525893][ T7051] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 690.671132][ T7051] usb 6-1: device descriptor read/64, error -71 [ 690.789935][ T7051] usb usb6-port1: attempt power cycle [ 691.141908][ T7074] Bluetooth: hci4: command 0x1003 tx timeout [ 691.148058][ T5865] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 691.167748][ T7051] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 691.171583][ T5905] usb 8-1: USB disconnect, device number 42 [ 691.224193][ T7051] usb 6-1: device descriptor read/8, error -71 [ 691.483697][ T5864] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 691.492956][ T7051] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 691.530248][ T7051] usb 6-1: device descriptor read/8, error -71 [ 691.655324][ T7051] usb usb6-port1: unable to enumerate USB device [ 691.665445][ T5864] usb 7-1: Using ep0 maxpacket: 32 [ 691.678833][ T5864] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 691.689231][ T5864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.698005][ T5864] usb 7-1: Product: syz [ 691.702188][ T5864] usb 7-1: Manufacturer: syz [ 691.706962][ T5864] usb 7-1: SerialNumber: syz [ 691.719270][ T5864] usb 7-1: config 0 descriptor?? [ 691.728644][ T5864] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 691.749857][T10705] /dev/rnullb0: Can't open blockdev [ 693.369063][ T7051] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 693.539342][ T7051] usb 6-1: Using ep0 maxpacket: 32 [ 693.548988][ T7051] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 693.577167][ T7051] usb 6-1: config 0 interface 0 has no altsetting 0 [ 693.590341][ T7051] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 693.599437][ T7051] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.623142][ T7051] usb 6-1: config 0 descriptor?? [ 694.056133][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 694.066559][ T7051] magicmouse 0003:05AC:0265.0012: unknown main item tag 0x0 [ 694.074295][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 694.090771][ T7051] magicmouse 0003:05AC:0265.0012: unknown main item tag 0x0 [ 694.098225][ T7051] magicmouse 0003:05AC:0265.0012: unknown main item tag 0x0 [ 694.107173][ T7051] magicmouse 0003:05AC:0265.0012: unknown main item tag 0x0 [ 694.119684][ T7051] magicmouse 0003:05AC:0265.0012: unknown main item tag 0x0 [ 694.131501][ T7051] magicmouse 0003:05AC:0265.0012: hidraw0: USB HID v4.06 Device [HID 05ac:0265] on usb-dummy_hcd.5-1/input0 [ 694.143407][ T7051] magicmouse 0003:05AC:0265.0012: magicmouse input not registered [ 694.155233][ T7051] magicmouse 0003:05AC:0265.0012: probe with driver magicmouse failed with error -12 [ 694.296480][T10740] /dev/rnullb0: Can't open blockdev [ 694.314660][ T5905] usb 6-1: USB disconnect, device number 48 [ 694.896802][T10812] /dev/rnullb0: Can't open blockdev [ 694.950396][T10814] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1212'. [ 694.978175][T10814] binder: BC_ACQUIRE_RESULT not supported [ 694.985676][T10814] binder: 10813:10814 ioctl c0306201 200000000580 returned -22 [ 695.509631][T10820] /dev/rnullb0: Can't open blockdev [ 695.551093][T10818] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 695.691344][T10831] /dev/rnullb0: Can't open blockdev [ 695.764200][T10837] syzkaller1: entered promiscuous mode [ 695.770005][T10837] syzkaller1: entered allmulticast mode [ 695.847049][ T5864] gspca_stk1135: reg_w 0x18 err -110 [ 695.854004][ T5864] gspca_stk1135: serial bus timeout: status=0x00 [ 695.862061][ T5864] gspca_stk1135: Sensor write failed [ 695.867464][ T5864] gspca_stk1135: serial bus timeout: status=0x00 [ 695.881631][ T5864] gspca_stk1135: Sensor write failed [ 695.887046][ T5864] gspca_stk1135: serial bus timeout: status=0x00 [ 695.894774][ T5864] gspca_stk1135: Sensor read failed [ 695.901496][ T5864] gspca_stk1135: serial bus timeout: status=0x00 [ 695.908262][ T5864] gspca_stk1135: Sensor read failed [ 695.913854][ T5864] gspca_stk1135: Detected sensor type unknown (0x0) [ 695.927643][ T5864] gspca_stk1135: serial bus timeout: status=0x00 [ 695.936218][ T5864] gspca_stk1135: Sensor read failed [ 695.940256][T10844] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 695.941731][ T5864] gspca_stk1135: serial bus timeout: status=0x00 [ 695.960957][ T5864] gspca_stk1135: Sensor read failed [ 695.966585][ T5864] gspca_stk1135: serial bus timeout: status=0x00 [ 695.973141][ T5864] gspca_stk1135: Sensor write failed [ 695.980077][ T5864] gspca_stk1135: serial bus timeout: status=0x00 [ 695.986764][ T5864] gspca_stk1135: Sensor write failed [ 695.992545][ T5864] stk1135 7-1:0.0: probe with driver stk1135 failed with error -110 [ 696.114066][ T5905] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 696.213135][ T5976] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 696.286554][ T5905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.296972][ T5905] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 696.310291][ T5905] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 696.319547][ T5905] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.329436][ T5905] usb 8-1: config 0 descriptor?? [ 696.392218][ T5976] usb 5-1: Using ep0 maxpacket: 32 [ 696.399243][ T5976] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 696.408589][ T5976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.418614][ T5976] usb 5-1: config 0 descriptor?? [ 696.427822][ T5976] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 696.576650][ T7054] usb 7-1: USB disconnect, device number 38 [ 696.775564][ T5905] kovaplus 0003:1E7D:2D50.0013: unknown main item tag 0x0 [ 696.799719][ T5905] kovaplus 0003:1E7D:2D50.0013: unknown main item tag 0x0 [ 696.817885][ T5905] kovaplus 0003:1E7D:2D50.0013: unknown main item tag 0x0 [ 696.839332][ T5905] kovaplus 0003:1E7D:2D50.0013: unknown main item tag 0x0 [ 696.856061][ T5905] kovaplus 0003:1E7D:2D50.0013: unknown main item tag 0x0 [ 696.875228][ T5905] kovaplus 0003:1E7D:2D50.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.7-1/input0 [ 697.172840][ T7050] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 697.334242][ T7050] usb 6-1: Using ep0 maxpacket: 32 [ 697.344243][ T7050] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 697.354006][ T7050] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.363601][ T7050] usb 6-1: Product: syz [ 697.377968][ T7050] usb 6-1: Manufacturer: syz [ 697.382616][ T7050] usb 6-1: SerialNumber: syz [ 697.390604][ T7050] usb 6-1: config 0 descriptor?? [ 697.403170][ T7050] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 697.435790][T10875] erofs (device nbd6): cannot find valid erofs superblock [ 697.532255][ T5976] gspca_nw80x: reg_w err -71 [ 697.539883][ T5976] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 697.551979][ T30] audit: type=1326 audit(1756641609.687:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10877 comm="syz.6.1232" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f283ad8ebe9 code=0x0 [ 697.575474][ T5976] usb 5-1: USB disconnect, device number 52 [ 697.608132][T10880] MTD: Couldn't look up './cgroup': -15 [ 697.615541][T10880] ./cgroup: Can't lookup blockdev [ 697.624334][T10880] autofs: Bad value for 'fd' [ 698.136999][T10882] loop7: detected capacity change from 0 to 7 [ 698.144846][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.154057][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 698.168658][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.177942][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 698.186166][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.195450][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 698.207028][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.216762][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 698.224979][T10883] netlink: 'syz.4.1233': attribute type 5 has an invalid length. [ 698.233866][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.243056][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 698.255196][T10883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1233'. [ 698.264217][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.264251][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 698.280466][T10884] /dev/sg0: Can't lookup blockdev [ 698.282759][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.295454][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 698.303649][ T9921] ldm_validate_partition_table(): Disk read failed. [ 698.311656][T10883] netlink: 'syz.4.1233': attribute type 1 has an invalid length. [ 698.319454][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.319488][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 698.343569][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.352840][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 698.364092][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 698.373592][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 698.384459][ T9921] Dev loop7: unable to read RDB block 0 [ 698.391098][ T9921] loop7: unable to read partition table [ 698.419182][ T9921] loop7: partition table beyond EOD, truncated [ 698.437958][T10882] ldm_validate_partition_table(): Disk read failed. [ 698.449148][T10882] Dev loop7: unable to read RDB block 0 [ 698.466291][T10882] loop7: unable to read partition table [ 698.478813][T10882] loop7: partition table beyond EOD, truncated [ 698.485337][T10882] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր0֐ȵ4FLQk݊) failed (rc=-5) [ 698.487888][T10886] netlink: 'syz.6.1234': attribute type 21 has an invalid length. [ 698.524502][ T5235] ldm_validate_partition_table(): Disk read failed. [ 698.535779][ T5235] Dev loop7: unable to read RDB block 0 [ 698.550334][ T5235] loop7: unable to read partition table [ 698.562527][ T5235] loop7: partition table beyond EOD, truncated [ 698.596242][T10886] PKCS7: Unknown OID: [5] (bad) [ 698.601219][T10886] PKCS7: Only support pkcs7_signedData type [ 698.658359][T10888] /dev/rnullb0: Can't open blockdev [ 698.883923][ T5926] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 698.977980][ T5905] kovaplus 0003:1E7D:2D50.0013: couldn't init struct kovaplus_device [ 699.003804][ T5905] kovaplus 0003:1E7D:2D50.0013: couldn't install mouse [ 699.024270][ T5905] kovaplus 0003:1E7D:2D50.0013: probe with driver kovaplus failed with error -71 [ 699.052910][ T5905] usb 8-1: USB disconnect, device number 43 [ 699.069011][ T5926] usb 7-1: config 0 has no interfaces? [ 699.074846][ T5926] usb 7-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 699.084468][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.099851][ T5926] usb 7-1: config 0 descriptor?? [ 699.324196][T10886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.341130][T10886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.350232][ T5926] usb 7-1: USB disconnect, device number 39 [ 699.386412][ T5905] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 699.471905][ T7051] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 699.546756][ T5905] usb 8-1: Using ep0 maxpacket: 8 [ 699.553939][ T5905] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 699.563008][ T5905] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 699.573172][ T5905] usb 8-1: config 0 has no interface number 0 [ 699.580979][ T5905] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 699.592672][ T5905] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 699.605689][ T5905] usb 8-1: config 0 interface 52 has no altsetting 0 [ 699.611298][ T7051] usb 5-1: device descriptor read/64, error -71 [ 699.613495][ T5905] usb 8-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 699.627976][ T5905] usb 8-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 699.637362][ T5905] usb 8-1: Manufacturer: syz [ 699.643200][ T5905] usb 8-1: config 0 descriptor?? [ 699.835516][ T5926] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 699.867726][ T7051] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 699.870145][ T5905] input: syz as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.52/input/input29 [ 699.996210][ T5926] usb 7-1: Using ep0 maxpacket: 8 [ 700.003404][ T5926] usb 7-1: config 0 has no interfaces? [ 700.009858][ T7051] usb 5-1: device descriptor read/64, error -71 [ 700.016335][ T5926] usb 7-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 0.00 [ 700.025559][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.035709][ T5926] usb 7-1: config 0 descriptor?? [ 700.108216][ T5926] usb 8-1: USB disconnect, device number 44 [ 700.108239][ C1] synaptics_usb 8-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 700.124461][ T7051] usb usb5-port1: attempt power cycle [ 700.498642][ T7051] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 700.531118][ T7051] usb 5-1: device descriptor read/8, error -71 [ 700.711206][T10906] /dev/rnullb0: Can't open blockdev [ 700.787607][ T7051] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 700.811542][ T7051] usb 5-1: device descriptor read/8, error -71 [ 700.928809][ T7051] usb usb5-port1: unable to enumerate USB device [ 701.193892][ T5926] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 701.325347][ T7050] gspca_stk1135: reg_w 0x19 err -71 [ 701.334072][ T7050] gspca_stk1135: serial bus timeout: status=0x00 [ 701.340858][ T7050] gspca_stk1135: Sensor write failed [ 701.349855][ T7050] gspca_stk1135: serial bus timeout: status=0x00 [ 701.356744][ T7050] gspca_stk1135: Sensor write failed [ 701.362518][ T7050] gspca_stk1135: serial bus timeout: status=0x00 [ 701.367847][ T5926] usb 8-1: Using ep0 maxpacket: 8 [ 701.371517][ T7050] gspca_stk1135: Sensor read failed [ 701.380326][ T7050] gspca_stk1135: serial bus timeout: status=0x00 [ 701.388122][ T7050] gspca_stk1135: Sensor read failed [ 701.389307][ T5926] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 701.393563][ T7050] gspca_stk1135: Detected sensor type unknown (0x0) [ 701.407504][ T5926] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 701.413535][ T7050] gspca_stk1135: serial bus timeout: status=0x00 [ 701.426744][ T7050] gspca_stk1135: Sensor read failed [ 701.430060][ T5926] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 701.433411][ T7050] gspca_stk1135: serial bus timeout: status=0x00 [ 701.449594][ T7050] gspca_stk1135: Sensor read failed [ 701.450432][ T5926] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 701.456369][ T7050] gspca_stk1135: serial bus timeout: status=0x00 [ 701.471637][ T5926] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 701.472183][ T7050] gspca_stk1135: Sensor write failed [ 701.492021][ T7050] gspca_stk1135: serial bus timeout: status=0x00 [ 701.493804][ T5926] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 701.498930][ T7050] gspca_stk1135: Sensor write failed [ 701.515031][ T7050] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 701.525150][ T5926] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.543889][ T7050] usb 6-1: USB disconnect, device number 49 [ 701.752813][ T5926] usb 8-1: GET_CAPABILITIES returned 0 [ 701.759455][ T5926] usbtmc 8-1:16.0: can't read capabilities [ 701.775795][ T7050] usb 7-1: USB disconnect, device number 40 [ 701.780795][ T5926] usb 8-1: USB disconnect, device number 45 [ 701.837563][T10920] rdma_rxe: rxe_newlink: failed to add veth1_vlan [ 701.923355][T10922] sctp: [Deprecated]: syz.7.1246 (pid 10922) Use of struct sctp_assoc_value in delayed_ack socket option. [ 701.923355][T10922] Use struct sctp_sack_info instead [ 702.085744][T10935] syz.7.1249: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 702.104960][T10935] CPU: 1 UID: 0 PID: 10935 Comm: syz.7.1249 Not tainted syzkaller #0 PREEMPT(full) [ 702.104983][T10935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 702.104995][T10935] Call Trace: [ 702.105001][T10935] [ 702.105008][T10935] dump_stack_lvl+0x189/0x250 [ 702.105037][T10935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 702.105059][T10935] ? __pfx__printk+0x10/0x10 [ 702.105079][T10935] ? lock_release+0x4b/0x3e0 [ 702.105095][T10935] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 702.105116][T10935] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 702.105137][T10935] warn_alloc+0x214/0x310 [ 702.105154][T10935] ? stack_depot_save_flags+0x40/0x860 [ 702.105180][T10935] ? __pfx_warn_alloc+0x10/0x10 [ 702.105196][T10935] ? kasan_save_track+0x4f/0x80 [ 702.105217][T10935] ? xskq_create+0x56/0x170 [ 702.105235][T10935] ? xsk_init_queue+0xb0/0x110 [ 702.105251][T10935] ? xsk_setsockopt+0x4dc/0x8d0 [ 702.105266][T10935] ? do_sock_setsockopt+0x17c/0x1b0 [ 702.105295][T10935] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 702.105314][T10935] ? do_syscall_64+0xfa/0xfa0 [ 702.105333][T10935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.105353][T10935] __vmalloc_node_range_noprof+0x125/0x12f0 [ 702.105379][T10935] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 702.105395][T10935] ? xsk_setsockopt+0x462/0x8d0 [ 702.105413][T10935] ? __kasan_kmalloc+0x93/0xb0 [ 702.105435][T10935] vmalloc_user_noprof+0xad/0xf0 [ 702.105450][T10935] ? xskq_create+0xbf/0x170 [ 702.105467][T10935] xskq_create+0xbf/0x170 [ 702.105486][T10935] xsk_init_queue+0xb0/0x110 [ 702.105504][T10935] xsk_setsockopt+0x4dc/0x8d0 [ 702.105522][T10935] ? __pfx_xsk_setsockopt+0x10/0x10 [ 702.105538][T10935] ? __pfx_aa_sk_perm+0x10/0x10 [ 702.105554][T10935] ? lock_release+0x4b/0x3e0 [ 702.105569][T10935] ? aa_sock_opt_perm+0xff/0x1b0 [ 702.105590][T10935] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 702.105607][T10935] ? __pfx_xsk_setsockopt+0x10/0x10 [ 702.105624][T10935] do_sock_setsockopt+0x17c/0x1b0 [ 702.105646][T10935] __x64_sys_setsockopt+0x13f/0x1b0 [ 702.105667][T10935] do_syscall_64+0xfa/0xfa0 [ 702.105687][T10935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.105702][T10935] ? clear_bhb_loop+0x60/0xb0 [ 702.105720][T10935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.105736][T10935] RIP: 0033:0x7fe07058ebe9 [ 702.105751][T10935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 702.105764][T10935] RSP: 002b:00007fe0713cc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 702.105782][T10935] RAX: ffffffffffffffda RBX: 00007fe0707c5fa0 RCX: 00007fe07058ebe9 [ 702.105794][T10935] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 702.105804][T10935] RBP: 00007fe070611e19 R08: 0000000000000004 R09: 0000000000000000 [ 702.105815][T10935] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.105826][T10935] R13: 00007fe0707c6038 R14: 00007fe0707c5fa0 R15: 00007ffef516efd8 [ 702.105844][T10935] [ 702.106394][T10935] Mem-Info: [ 702.416194][T10935] active_anon:11280 inactive_anon:0 isolated_anon:0 [ 702.416194][T10935] active_file:43263 inactive_file:52400 isolated_file:0 [ 702.416194][T10935] unevictable:1194 dirty:42 writeback:0 [ 702.416194][T10935] slab_reclaimable:9584 slab_unreclaimable:112316 [ 702.416194][T10935] mapped:24862 shmem:4243 pagetables:2262 [ 702.416194][T10935] sec_pagetables:0 bounce:0 [ 702.416194][T10935] kernel_misc_reclaimable:0 [ 702.416194][T10935] free:1268165 free_pcp:2666 free_cma:0 [ 702.462358][T10935] Node 0 active_anon:45120kB inactive_anon:0kB active_file:148420kB inactive_file:207476kB unevictable:3240kB isolated(anon):0kB isolated(file):0kB mapped:99448kB dirty:164kB writeback:0kB shmem:15436kB shmem_thp:4096kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:13532kB pagetables:8892kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 702.518323][T10935] Node 1 active_anon:0kB inactive_anon:0kB active_file:24632kB inactive_file:2124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:80kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 702.570078][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1252'. [ 702.579665][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1252'. [ 702.599766][T10935] Node 0 DMA free:11252kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4096kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 702.646975][T10935] lowmem_reserve[]: 0 2495 2496 2496 2496 [ 702.686447][T10935] Node 0 DMA32 free:1193804kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:2048KB free_highatomic:2048KB active_anon:33488kB inactive_anon:0kB active_file:140012kB inactive_file:204376kB unevictable:9740kB writepending:264kB present:3129332kB managed:2555588kB mlocked:8304kB bounce:0kB free_pcp:23220kB local_pcp:6324kB free_cma:0kB [ 702.755051][T10935] lowmem_reserve[]: 0 0 1 1 1 [ 702.759888][T10935] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:96kB inactive_anon:0kB active_file:12kB inactive_file:1000kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 702.806629][T10962] ubi7: attaching mtd0 [ 702.810669][T10963] vxcan1: MTU too low for tipc bearer [ 702.816216][T10963] tipc: Enabling of bearer rejected, failed to enable media [ 702.827179][T10935] lowmem_reserve[]: 0 0 0 0 0 [ 702.834895][T10935] Node 1 Normal free:3867604kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:36864KB free_highatomic:33440KB active_anon:0kB inactive_anon:0kB active_file:24632kB inactive_file:2124kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 702.869793][T10935] lowmem_reserve[]: 0 0 0 0 0 [ 702.872243][T10962] ubi7: scanning is finished [ 702.879925][T10935] Node 0 DMA: 3*4kB (U) 3*8kB (U) 3*16kB (U) 3*32kB (U) 3*64kB (U) 3*128kB (U) 3*256kB (U) 3*512kB (U) 4*1024kB (U) 2*2048kB (UM) 0*4096kB = 11252kB [ 702.896630][T10962] ubi7: empty MTD device detected [ 702.902859][T10935] Node 0 DMA32: 1283*4kB (UME) 6460*8kB (UM) 8308*16kB (UME) 2772*32kB (UME) 2184*64kB (UME) 2197*128kB (UME) 1000*256kB (UME) 351*512kB (UME) 55*1024kB (UM) 1*2048kB (H) 0*4096kB = 1193516kB [ 702.929747][T10935] Node 0 Normal: 3*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 702.942341][T10935] Node 1 Normal: 4673*4kB (UMH) 4546*8kB (UMEH) 4530*16kB (UMEH) 3087*32kB (UMEH) 715*64kB (UMEH) 446*128kB (UMEH) 254*256kB (UMEH) 206*512kB (UMEH) 177*1024kB (UMEH) 172*2048kB (UMEH) 692*4096kB (UMH) = 3867604kB [ 702.956913][T10968] binder: 10967:10968 unknown command 0 [ 702.974574][T10968] binder: 10967:10968 ioctl c0306201 200000000080 returned -22 [ 702.974605][T10935] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 702.985936][T10968] binder: 10967:10968 ioctl 4802 7fffffff returned -22 [ 703.006858][T10968] /dev/rnullb0: Can't open blockdev [ 703.023282][T10935] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 703.032690][T10935] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 703.066725][T10935] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 703.077717][T10935] 97498 total pagecache pages [ 703.089724][T10962] ubi7 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt7d", error -4 [ 703.126059][T10935] 32 pages in swap cache [ 703.150544][T10935] Free swap = 123172kB [ 703.154756][T10935] Total swap = 124996kB [ 703.159001][T10935] 2097051 pages RAM [ 703.193631][T10935] 0 pages HighMem/MovableOnly [ 703.198586][T10935] 426256 pages reserved [ 703.214980][T10935] 0 pages cma reserved [ 703.743021][T11001] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 703.919899][T11008] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 703.937356][T11008] /dev/rnullb0: Can't open blockdev [ 704.020281][T11015] /dev/rnullb0: Can't open blockdev [ 704.090513][T11020] /dev/rnullb0: Can't open blockdev [ 704.188241][ T7051] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 704.241383][ T5976] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 704.369690][ T7051] usb 5-1: Using ep0 maxpacket: 8 [ 704.385948][ T7051] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 704.403400][ T5976] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 704.611168][ T7051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.634342][ T7051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.669127][ T5976] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 704.683312][ T5976] usb 8-1: config 1 has no interface number 0 [ 704.700359][ T5976] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.702643][ T7051] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 704.727239][ T7051] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 704.736930][ T7051] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.752909][ T7051] usb 5-1: config 0 descriptor?? [ 704.771038][ T5976] usb 8-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 704.793026][ T5976] usb 8-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 704.824558][ T5976] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 704.844638][ T5976] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.863303][ T5976] usb 8-1: Product: syz [ 704.870996][ T5976] usb 8-1: Manufacturer: syz [ 704.884531][ T5976] usb 8-1: SerialNumber: syz [ 704.950787][T11025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1279'. [ 705.200284][ T7051] redragon 0003:0C45:760B.0014: unknown main item tag 0x0 [ 705.218446][ T7051] redragon 0003:0C45:760B.0014: unknown main item tag 0x0 [ 705.237156][ T7051] redragon 0003:0C45:760B.0014: unknown main item tag 0x0 [ 705.244468][ T7051] redragon 0003:0C45:760B.0014: unknown main item tag 0x0 [ 705.267940][ T7051] redragon 0003:0C45:760B.0014: unknown main item tag 0x0 [ 705.286094][ T7051] redragon 0003:0C45:760B.0014: unknown main item tag 0x0 [ 705.296886][ T7051] redragon 0003:0C45:760B.0014: unknown main item tag 0x0 [ 705.310780][ T7051] redragon 0003:0C45:760B.0014: unknown main item tag 0x0 [ 705.317975][ T7051] redragon 0003:0C45:760B.0014: unknown main item tag 0x0 [ 705.342876][ T7051] redragon 0003:0C45:760B.0014: unknown main item tag 0x0 [ 705.363941][ T7051] redragon 0003:0C45:760B.0014: hidraw0: USB HID v0.04 Device [HID 0c45:760b] on usb-dummy_hcd.4-1/input0 [ 706.497050][ T5926] usb 5-1: USB disconnect, device number 57 [ 706.524208][ T5976] cdc_ncm 8-1:1.1: failed GET_NTB_PARAMETERS [ 706.530519][ T5976] cdc_ncm 8-1:1.1: bind() failure [ 706.541289][ T5976] usb 8-1: USB disconnect, device number 46 [ 706.718036][T11047] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 706.725584][T11047] /dev/rnullb0: Can't open blockdev [ 706.906735][ T5926] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 707.228505][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 707.236938][ T5926] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 707.256465][ T5926] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 707.278029][ T5926] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 707.300711][ T5926] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 707.319883][ T5926] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 707.353503][ T5926] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 707.363189][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.380092][T11053] /dev/rnullb0: Can't open blockdev [ 707.604861][ T5926] usb 5-1: usb_control_msg returned -32 [ 707.610553][ T5926] usbtmc 5-1:16.0: can't read capabilities [ 707.617209][T11057] random: crng reseeded on system resumption [ 707.645691][T11057] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1287'. [ 708.454767][ T5926] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 708.627753][ T5926] usb 6-1: Using ep0 maxpacket: 16 [ 708.639440][ T5926] usb 6-1: config 1 interface 0 altsetting 66 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 708.691411][ T5926] usb 6-1: config 1 interface 0 has no altsetting 0 [ 708.700472][ T5926] usb 6-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.40 [ 708.715442][ T5926] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.732913][ T5926] usb 6-1: Product: ࠔ [ 708.741989][ T5926] usb 6-1: Manufacturer: 《 [ 708.751507][ T5926] usb 6-1: SerialNumber: ಡ熾烑惾蔄㞎닓頋⏯﫬坰挎ꩢ芈䐡冈겹잦뼧꟪̘긠䗳ꐳ죮ᖩ欷⪳㌥혖ဣ⋙ꅽ笂ꂸ◁᫵햬쨅扵拐ᦀ㪷젉搬伜鈅Ṁ䝈誰゛Ϩ╛ꍽ쩅⻮ꄜ㐌潿馵顪ྲ쳜尅㈤로ﾚஆ쟜瀯劸眩뽿ꋦ鿿㓮悇覩Ḙᚳ罂솇䲉訹嘣ྜ㓌ᚳ堥蟵喀 [ 708.812512][T11077] /dev/rnullb0: Can't open blockdev [ 709.047477][ T5926] usbhid 6-1:1.0: can't add hid device: -71 [ 709.054898][ T5926] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 709.069453][ T5926] usb 6-1: USB disconnect, device number 50 [ 709.107991][ T5976] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 709.278158][ T5976] usb 8-1: Using ep0 maxpacket: 32 [ 709.291369][ T5976] usb 8-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 709.301489][ T5976] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.310212][ T5976] usb 8-1: Product: syz [ 709.314754][ T5976] usb 8-1: Manufacturer: syz [ 709.319448][ T5976] usb 8-1: SerialNumber: syz [ 709.326355][ T5976] usb 8-1: config 0 descriptor?? [ 709.568408][T11082] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 709.575414][T11082] /dev/rnullb0: Can't open blockdev [ 709.683341][T11087] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1298'. [ 709.696737][T11088] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1298'. [ 709.776581][ T5926] usb 5-1: USB disconnect, device number 58 [ 709.980608][ T5976] peak_usb 8-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 710.059077][ T5976] peak_usb 8-1:0.0: probe with driver peak_usb failed with error -71 [ 710.068810][ T7050] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 710.090124][ T5976] usb 8-1: USB disconnect, device number 47 [ 710.240569][ T7050] usb 7-1: Using ep0 maxpacket: 16 [ 710.248768][ T7050] usb 7-1: unable to get BOS descriptor or descriptor too short [ 710.260520][ T7050] usb 7-1: config 1 has an invalid interface number: 231 but max is 0 [ 710.272487][ T7050] usb 7-1: config 1 has no interface number 0 [ 710.283391][ T7050] usb 7-1: config 1 interface 231 has no altsetting 0 [ 710.299180][ T7050] usb 7-1: string descriptor 0 read error: -22 [ 710.305851][ T7050] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=5c.f5 [ 710.325955][ T7050] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.389941][T11102] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1302'. [ 710.399532][T11102] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1302'. [ 710.583629][ T7050] usbtest 7-1:1.231: Linux gadget zero [ 710.589251][ T7050] usbtest 7-1:1.231: high-speed {control in/out int-out} tests (+alt) [ 710.938210][T11117] /dev/rnullb0: Can't open blockdev [ 711.235122][ T5905] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 711.269319][ T7050] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 711.385519][ T5905] usb 5-1: device descriptor read/64, error -71 [ 711.450727][ T7050] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.461286][ T7050] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 711.470845][ T7050] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.481126][ T7050] usb 6-1: config 0 descriptor?? [ 711.488322][ T7050] pwc: Askey VC010 type 2 USB webcam detected. [ 711.503344][ T7051] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 711.641555][ T5905] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 711.662927][ T7051] usb 8-1: Using ep0 maxpacket: 32 [ 711.669616][ T7051] usb 8-1: config 0 has an invalid interface number: 196 but max is 0 [ 711.678074][ T7051] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.688388][ T7051] usb 8-1: config 0 has no interface number 0 [ 711.694720][ T7051] usb 8-1: config 0 interface 196 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 711.708188][ T7051] usb 8-1: config 0 interface 196 has no altsetting 0 [ 711.718022][ T7051] usb 8-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 711.727551][ T7051] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.735550][ T7051] usb 8-1: Product: syz [ 711.739976][ T7051] usb 8-1: Manufacturer: syz [ 711.744672][ T7051] usb 8-1: SerialNumber: syz [ 711.757050][ T7051] usb 8-1: config 0 descriptor?? [ 711.764087][ T7051] ipheth 8-1:0.196: Unable to find alternate settings interface [ 711.780601][ T5905] usb 5-1: device descriptor read/64, error -71 [ 711.899757][ T5905] usb usb5-port1: attempt power cycle [ 711.924273][ T7050] pwc: recv_control_msg error -32 req 02 val 2b00 [ 711.932456][ T7050] pwc: recv_control_msg error -32 req 02 val 2700 [ 711.939327][ T7050] pwc: recv_control_msg error -32 req 02 val 2c00 [ 711.946292][ T7050] pwc: recv_control_msg error -32 req 04 val 1000 [ 711.953359][ T7050] pwc: recv_control_msg error -32 req 04 val 1300 [ 711.960382][ T7050] pwc: recv_control_msg error -32 req 04 val 1400 [ 711.967779][ T7050] pwc: recv_control_msg error -32 req 02 val 2000 [ 712.033495][ T30] audit: type=1326 audit(1756641623.227:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11127 comm="syz.7.1310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe07058ebe9 code=0x7fc00000 [ 712.064303][ T5976] usb 8-1: USB disconnect, device number 48 [ 712.196017][ T7050] pwc: recv_control_msg error -32 req 04 val 1500 [ 712.209310][ T7050] pwc: recv_control_msg error -71 req 02 val 2500 [ 712.216432][ T7050] pwc: recv_control_msg error -71 req 02 val 2400 [ 712.225224][ T7050] pwc: recv_control_msg error -71 req 02 val 2600 [ 712.233095][ T7050] pwc: recv_control_msg error -71 req 02 val 2900 [ 712.239954][ T7050] pwc: recv_control_msg error -71 req 02 val 2800 [ 712.247305][ T7050] pwc: recv_control_msg error -71 req 04 val 1100 [ 712.254422][ T7050] pwc: recv_control_msg error -71 req 04 val 1200 [ 712.270180][ T7050] pwc: Registered as video103. [ 712.275542][ T5905] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 712.288543][ T7050] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input30 [ 712.305191][ T5905] usb 5-1: device descriptor read/8, error -71 [ 712.323280][ T7050] usb 6-1: USB disconnect, device number 51 [ 712.423388][T11146] /dev/rnullb0: Can't open blockdev [ 712.561159][ T5905] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 712.584279][ T5905] usb 5-1: device descriptor read/8, error -71 [ 712.712281][ T5905] usb usb5-port1: unable to enumerate USB device [ 712.721766][ T7054] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 712.790809][T11157] /dev/rnullb0: Can't open blockdev [ 712.863533][ T5905] usb 7-1: USB disconnect, device number 41 [ 712.885491][ T7054] usb 8-1: Using ep0 maxpacket: 32 [ 712.902327][ T7054] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 712.923696][ T7054] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.939296][ T7054] usb 8-1: config 0 descriptor?? [ 712.950623][ T7054] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 713.249597][T11170] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1322'. [ 713.621474][T11178] ksmbd: Unknown IPC event: 3, ignore. [ 713.836822][ T7054] gspca_nw80x: reg_r err -71 [ 713.841589][ T7054] nw80x 8-1:0.0: probe with driver nw80x failed with error -71 [ 713.861272][ T7054] usb 8-1: USB disconnect, device number 49 [ 713.919451][ T5944] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 714.090350][ T5944] usb 7-1: Using ep0 maxpacket: 16 [ 714.097176][ T5944] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 714.107255][ T5944] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 714.120560][ T5944] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 714.131429][ T5944] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 714.140433][ T5944] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 714.150753][ T5944] usb 7-1: config 0 has no interface number 0 [ 714.157422][ T5944] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 714.170039][ T5944] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 714.180476][ T5944] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 714.192163][ T5944] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 714.206415][ T5944] usb 7-1: config 0 interface 125 has no altsetting 0 [ 714.214760][ T5944] usb 7-1: config 0 interface 125 has no altsetting 2 [ 714.223949][ T5944] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 714.256475][ T5944] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.274340][ T5944] usb 7-1: Product: syz [ 714.282995][ T5944] usb 7-1: Manufacturer: syz [ 714.287755][ T5944] usb 7-1: SerialNumber: syz [ 714.304512][ T5944] usb 7-1: config 0 descriptor?? [ 714.312824][ T5944] usb 7-1: selecting invalid altsetting 2 [ 714.706648][T11196] /dev/rnullb0: Can't open blockdev [ 714.721513][ T7054] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 714.915226][ T7054] usb 5-1: config 0 has an invalid interface number: 254 but max is 0 [ 714.923693][ T7054] usb 5-1: config 0 has no interface number 0 [ 714.932146][ T7054] usb 5-1: config 0 interface 254 has no altsetting 0 [ 714.942741][ T7054] usb 5-1: New USB device found, idVendor=0499, idProduct=1051, bcdDevice=54.79 [ 714.952186][ T7054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.967462][ T7054] usb 5-1: Product: syz [ 714.976945][ T7054] usb 5-1: Manufacturer: syz [ 715.007594][ T7054] usb 5-1: SerialNumber: syz [ 715.018168][ T7054] usb 5-1: config 0 descriptor?? [ 715.247520][T11184] /dev/rnullb0: Can't open blockdev [ 715.285432][ T7054] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 715.335077][ T7054] snd-usb-audio 5-1:0.254: probe with driver snd-usb-audio failed with error -2 [ 715.360191][ T9893] udevd[9893]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.254/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 715.384656][ T7054] usb 5-1: USB disconnect, device number 63 [ 716.131178][T11213] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1336'. [ 716.325516][T11212] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.1336'. [ 716.902698][ T5905] usb 7-1: USB disconnect, device number 42 [ 716.940296][T11219] /dev/rnullb0: Can't open blockdev [ 717.420469][T11245] /dev/rnullb0: Can't open blockdev [ 717.811830][ T5905] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 717.930060][T11267] /dev/rnullb0: Can't open blockdev [ 717.995468][T11262] /dev/rnullb0: Can't open blockdev [ 718.001305][ T5905] usb 5-1: Using ep0 maxpacket: 32 [ 718.011268][ T5905] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 718.033087][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.050449][ T5905] usb 5-1: config 0 descriptor?? [ 718.071647][ T5905] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 718.260997][ T5944] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 718.432447][ T5944] usb 8-1: Using ep0 maxpacket: 16 [ 718.448099][ T5944] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.459228][ T5944] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.469556][ T5944] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 718.483629][ T5944] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 718.494512][ T5944] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.508691][ T5944] usb 8-1: config 0 descriptor?? [ 718.944520][ T5905] gspca_nw80x: reg_r err -71 [ 718.945515][ T5926] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 718.959306][ T5905] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 718.969974][ T5944] hid_parser_main: 123 callbacks suppressed [ 718.969992][ T5944] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 718.979109][ T5905] usb 5-1: USB disconnect, device number 64 [ 718.985193][ T5944] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 718.997050][ T5944] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 719.004586][ T5944] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 719.014010][ T5944] shield 0003:0955:7214.0015: unknown main item tag 0x0 [ 719.039772][ T5944] input: HID 0955:7214 Haptics as /devices/virtual/input/input31 [ 719.072329][ T5944] shield 0003:0955:7214.0015: Registered Thunderstrike controller [ 719.083613][ T5944] shield 0003:0955:7214.0015: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 719.150047][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 719.157168][ T5926] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 719.167491][ T5926] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 719.180223][ T5926] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 719.184517][ T5944] usb 8-1: USB disconnect, device number 50 [ 719.201839][ T9] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 719.213133][ T5926] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 719.227135][ T9] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 719.239451][ T5926] usb 6-1: config 0 interface 0 has no altsetting 0 [ 719.259334][ T9] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 719.273843][ T9] shield 0003:0955:7214.0015: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 719.293207][ T5926] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 719.304785][ T5926] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 719.313637][ T5926] usb 6-1: Product: syz [ 719.317821][ T5926] usb 6-1: Manufacturer: syz [ 719.323597][ T5926] usb 6-1: SerialNumber: syz [ 719.330524][ T5926] usb 6-1: config 0 descriptor?? [ 719.342381][ T5926] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 719.353001][ T5926] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 719.411148][T11271] /dev/rnullb0: Can't open blockdev [ 719.602705][T11299] sp0: Synchronizing with TNC [ 719.668704][T11299] sp0: Synchronizing with TNC [ 719.670113][ T5944] usb 6-1: USB disconnect, device number 52 [ 719.681316][T11299] /dev/rnullb0: Can't open blockdev [ 719.690045][ T5944] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 719.745119][T11306] binder: BINDER_SET_CONTEXT_MGR already set [ 719.751250][T11306] binder: 11305:11306 ioctl 4018620d 200000000040 returned -16 [ 719.875805][ T7054] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 720.050373][ T7054] usb 7-1: config 7 has an invalid interface number: 90 but max is 3 [ 720.063246][ T7054] usb 7-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 720.073248][ T7054] usb 7-1: config 7 has 1 interface, different from the descriptor's value: 4 [ 720.083686][ T7054] usb 7-1: config 7 has no interface number 0 [ 720.091444][ T7054] usb 7-1: config 7 interface 90 altsetting 9 endpoint 0x84 has invalid maxpacket 1023, setting to 64 [ 720.103663][ T7054] usb 7-1: config 7 interface 90 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 1 [ 720.118567][ T7054] usb 7-1: config 7 interface 90 has no altsetting 0 [ 720.128769][ T7054] usb 7-1: New USB device found, idVendor=1199, idProduct=68a8, bcdDevice=4e.a1 [ 720.138617][ T7054] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.148583][ T7054] usb 7-1: Product: syz [ 720.153072][ T7054] usb 7-1: Manufacturer: О [ 720.159873][ T7054] usb 7-1: SerialNumber: syz [ 720.228799][ T5976] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 720.428205][ T5976] usb 5-1: unable to get BOS descriptor or descriptor too short [ 720.449818][ T5976] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 720.475725][ T5976] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 720.508757][ T5976] usb 5-1: config 63 has no interface number 0 [ 720.527129][ T5976] usb 5-1: config 63 interface 66 has no altsetting 0 [ 720.547820][ T5976] usb 5-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 720.563426][ T5976] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.596980][ T5976] usb 5-1: Product: syz [ 720.612132][ T5976] usb 5-1: Manufacturer: syz [ 720.640508][ T5976] usb 5-1: SerialNumber: syz [ 721.270946][T11327] Malformed UNC in devname [ 721.270946][T11327] [ 721.300494][T11327] CIFS: VFS: Malformed UNC in devname [ 722.789795][ T7054] usb 7-1: USB disconnect, device number 43 [ 722.909047][T11356] /dev/rnullb0: Can't open blockdev [ 722.990548][T11356] /dev/rnullb0: Can't open blockdev [ 723.056314][T11356] /dev/rnullb0: Can't open blockdev [ 723.077131][T11356] /dev/rnullb0: Can't open blockdev [ 723.089054][T11356] /dev/rnullb0: Can't open blockdev [ 723.109645][T11356] /dev/rnullb0: Can't open blockdev [ 723.123197][T11356] /dev/rnullb0: Can't open blockdev [ 723.128854][ T7050] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 723.140544][T11356] /dev/rnullb0: Can't open blockdev [ 723.146420][T11356] /dev/rnullb0: Can't open blockdev [ 723.152209][T11356] /dev/rnullb0: Can't open blockdev [ 723.158182][T11356] /dev/rnullb0: Can't open blockdev [ 723.180287][T11356] /dev/rnullb0: Can't open blockdev [ 723.187356][T11356] /dev/rnullb0: Can't open blockdev [ 723.194472][ T5976] uvcvideo 5-1:63.66: probe with driver uvcvideo failed with error -22 [ 723.224605][T11356] /dev/rnullb0: Can't open blockdev [ 723.230447][T11356] /dev/rnullb0: Can't open blockdev [ 723.245777][ T5976] usb 5-1: USB disconnect, device number 65 [ 723.272010][T11356] /dev/rnullb0: Can't open blockdev [ 723.292988][T11356] /dev/rnullb0: Can't open blockdev [ 723.306424][T11356] /dev/rnullb0: Can't open blockdev [ 723.313084][T11356] /dev/rnullb0: Can't open blockdev [ 723.326523][T11356] /dev/rnullb0: Can't open blockdev [ 723.336554][T11373] netlink: 'syz.5.1385': attribute type 16 has an invalid length. [ 723.346133][T11373] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.1385'. [ 723.349079][T11356] /dev/rnullb0: Can't open blockdev [ 723.355849][T11373] netlink: 'syz.5.1385': attribute type 16 has an invalid length. [ 723.362502][T11356] /dev/rnullb0: Can't open blockdev [ 723.368623][T11373] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.1385'. [ 723.368910][T11373] netlink: 'syz.5.1385': attribute type 16 has an invalid length. [ 723.393647][T11373] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.1385'. [ 723.403188][T11373] netlink: 'syz.5.1385': attribute type 16 has an invalid length. [ 723.411236][T11373] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.1385'. [ 723.420981][T11373] netlink: 'syz.5.1385': attribute type 16 has an invalid length. [ 723.428958][T11373] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.1385'. [ 723.430445][T11356] /dev/rnullb0: Can't open blockdev [ 723.439157][T11373] netlink: 'syz.5.1385': attribute type 16 has an invalid length. [ 723.451776][T11373] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.1385'. [ 723.461724][T11373] netlink: 'syz.5.1385': attribute type 16 has an invalid length. [ 723.469916][T11373] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.1385'. [ 723.470292][T11373] netlink: 'syz.5.1385': attribute type 16 has an invalid length. [ 723.470313][T11373] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.1385'. [ 723.472183][T11356] /dev/rnullb0: Can't open blockdev [ 723.472689][T11356] /dev/rnullb0: Can't open blockdev [ 723.473114][T11356] /dev/rnullb0: Can't open blockdev [ 723.474255][T11356] /dev/rnullb0: Can't open blockdev [ 723.474710][T11356] /dev/rnullb0: Can't open blockdev [ 723.475165][T11356] /dev/rnullb0: Can't open blockdev [ 723.475551][T11356] /dev/rnullb0: Can't open blockdev [ 723.475913][T11356] /dev/rnullb0: Can't open blockdev [ 723.476287][T11356] /dev/rnullb0: Can't open blockdev [ 723.476670][T11356] /dev/rnullb0: Can't open blockdev [ 723.547016][T11382] /dev/rnullb0: Can't open blockdev [ 723.639131][T11379] tty tty33: ldisc open failed (-12), clearing slot 32 [ 723.699411][T11395] sctp: [Deprecated]: syz.6.1391 (pid 11395) Use of struct sctp_assoc_value in delayed_ack socket option. [ 723.699411][T11395] Use struct sctp_sack_info instead [ 723.717629][T11396] overlay: Unknown parameter 'fowner<00000000000000000000' [ 724.156624][T11429] befs: (nbd4): No write support. Marking filesystem read-only [ 724.166398][T11429] block nbd4: Attempted send on invalid socket [ 724.172600][T11429] blk_print_req_error: 40 callbacks suppressed [ 724.172618][T11429] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 724.174940][ T5944] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 724.179955][T11429] befs: (nbd4): unable to read superblock [ 724.269475][ T30] audit: type=1326 audit(1756641634.664:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11434 comm="syz.5.1403" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f776d18ebe9 code=0x0 [ 724.347091][ T5944] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.360336][ T5944] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1287, setting to 1024 [ 724.372053][ T5944] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 724.385073][ T5944] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 724.394329][ T5944] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.404666][ T5944] usb 8-1: config 0 descriptor?? [ 724.412978][T11415] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 724.630248][T11440] netlink: 'syz.4.1405': attribute type 1 has an invalid length. [ 724.639165][T11440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1405'. [ 724.872326][ T5944] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xd [ 724.898559][T11444] sd 0:0:1:0: PR command failed: 1026 [ 724.901396][ T5944] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 724.922537][T11444] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 724.952342][T11444] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 725.010108][T11454] /dev/rnullb0: Can't open blockdev [ 725.121936][ T8101] bond0: (slave syz_tun): Releasing backup interface [ 725.149605][T11415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.158223][T11415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.238956][ T7056] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.282622][ T7056] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.334506][ T7056] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.388939][ T7056] batman_adv: batadv0: Removing interface: netdevsim0 [ 725.397679][ T7056] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.427612][ T7074] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 725.435120][ T7074] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 725.443200][ T7074] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 725.451014][ T7074] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 725.462294][ T7074] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 725.506085][ T7056] bridge_slave_1: left allmulticast mode [ 725.515257][ T7056] bridge_slave_1: left promiscuous mode [ 725.521363][ T7056] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.531558][ T7056] bridge_slave_0: left allmulticast mode [ 725.538718][ T7056] bridge_slave_0: left promiscuous mode [ 725.544496][ T7056] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.658642][ T7056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.669911][ T7056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.681800][ T7056] bond0 (unregistering): Released all slaves [ 725.706371][T11458] wlan1 speed is unknown, defaulting to 1000 [ 725.751236][ T7056] tipc: Left network mode [ 725.766624][ T7051] usb 8-1: USB disconnect, device number 51 [ 726.272168][T11494] /dev/rnullb0: Can't open blockdev [ 726.570248][T11502] /dev/sg0: Can't lookup blockdev [ 726.894134][T11519] /dev/rnullb0: Can't open blockdev [ 726.986077][T11524] netlink: 'syz.5.1422': attribute type 46 has an invalid length. [ 727.045688][T11524] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1422'. [ 727.331377][ T7056] hsr_slave_0: left promiscuous mode [ 727.352689][ T7056] hsr_slave_1: left promiscuous mode [ 727.367291][ T7056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.375833][ T7056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.452919][ T7056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.452940][ T7056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.555468][ T7056] veth1_macvtap: left promiscuous mode [ 727.555523][ T7056] veth0_macvtap: left promiscuous mode [ 727.591441][ T7056] veth1_vlan: left promiscuous mode [ 727.591545][ T7056] veth0_vlan: left promiscuous mode [ 727.671610][ T7074] Bluetooth: hci1: command tx timeout [ 727.849813][ T7056] team0 (unregistering): Port device team_slave_1 removed [ 727.878193][T11560] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 727.892094][T11560] /dev/rnullb0: Can't open blockdev [ 727.899535][T11565] trusted_key: encrypted_key: master key parameter '' is invalid [ 727.946606][ T7056] team0 (unregistering): Port device team_slave_0 removed [ 728.136854][T11458] chnl_net:caif_netlink_parms(): no params data found [ 728.270578][ T5944] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 728.372611][T11458] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.380648][T11458] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.390267][T11458] bridge_slave_0: entered allmulticast mode [ 728.397332][T11458] bridge_slave_0: entered promiscuous mode [ 728.405707][T11458] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.413946][T11458] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.421578][T11458] bridge_slave_1: entered allmulticast mode [ 728.423621][ T5944] usb 6-1: device descriptor read/64, error -71 [ 728.428719][T11458] bridge_slave_1: entered promiscuous mode [ 728.489997][T11458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.503703][ T7056] IPVS: stop unused estimator thread 0... [ 728.515095][T11458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.582557][T11458] team0: Port device team_slave_0 added [ 728.603173][T11458] team0: Port device team_slave_1 added [ 728.644060][T11458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.662009][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.709540][ T5944] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 728.717277][T11458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.739945][T11458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.760337][T11458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.815732][T11458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 728.869313][ T5944] usb 6-1: device descriptor read/64, error -71 [ 728.900918][T11458] hsr_slave_0: entered promiscuous mode [ 728.946821][T11458] hsr_slave_1: entered promiscuous mode [ 728.987548][ T5944] usb usb6-port1: attempt power cycle [ 729.177069][T11458] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 729.203028][T11458] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 729.226730][T11458] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 729.242993][T11458] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 729.366181][T11458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.393351][ T5944] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 729.420417][T11458] 8021q: adding VLAN 0 to HW filter on device team0 [ 729.433877][T11625] __nla_validate_parse: 1 callbacks suppressed [ 729.433902][T11625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1436'. [ 729.454776][ T7048] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.462033][ T7048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 729.470538][ T5944] usb 6-1: device descriptor read/8, error -71 [ 729.486709][ T7048] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.494148][ T7048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 729.724998][ T5944] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 729.757315][ T5944] usb 6-1: device descriptor read/8, error -71 [ 729.809009][T11458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 729.877434][ T5944] usb usb6-port1: unable to enumerate USB device [ 729.906776][ T7074] Bluetooth: hci1: command tx timeout [ 729.927993][ T9] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 730.085436][T11458] veth0_vlan: entered promiscuous mode [ 730.097794][T11458] veth1_vlan: entered promiscuous mode [ 730.109886][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 730.122670][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.141059][ T9] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 730.151338][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.169851][ T9] usb 7-1: Product: syz [ 730.181240][T11458] veth0_macvtap: entered promiscuous mode [ 730.189764][ T9] usb 7-1: Manufacturer: syz [ 730.194474][ T9] usb 7-1: SerialNumber: syz [ 730.205453][T11458] veth1_macvtap: entered promiscuous mode [ 730.214874][ T9] usb 7-1: config 0 descriptor?? [ 730.230621][ T9] usb 7-1: bad CDC descriptors [ 730.237244][ T9] usb 7-1: unsupported MDLM descriptors [ 730.250664][T11458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.276530][T11458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.289934][ T2978] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.299403][ T2978] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.320898][ T2978] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.331974][ T2978] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 730.373498][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.386984][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.413431][ T7048] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 730.423899][ T7048] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 730.753225][ T5905] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 730.912017][ T5905] usb 9-1: device descriptor read/64, error -71 [ 731.189822][ T5905] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 731.329013][ T5905] usb 9-1: device descriptor read/64, error -71 [ 731.450911][ T5905] usb usb9-port1: attempt power cycle [ 731.713829][ T24] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 731.820767][ T5905] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 731.853967][ T5905] usb 9-1: device descriptor read/8, error -71 [ 731.885129][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 731.891727][ T24] usb 6-1: config 0 has an invalid interface number: 83 but max is 0 [ 731.904982][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.926085][ T24] usb 6-1: config 0 has no interface number 0 [ 731.940298][ T24] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 731.957782][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.966184][ T24] usb 6-1: Product: syz [ 731.976789][ T24] usb 6-1: Manufacturer: syz [ 731.987558][ T24] usb 6-1: SerialNumber: syz [ 732.000028][ T24] usb 6-1: config 0 descriptor?? [ 732.016760][ T24] redrat3 6-1:0.83: Couldn't find all endpoints [ 732.120469][ T5905] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 732.128050][ T7074] Bluetooth: hci1: command tx timeout [ 732.152775][ T5905] usb 9-1: device descriptor read/8, error -71 [ 732.242230][T11657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.260653][T11657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.287826][ T5905] usb usb9-port1: unable to enumerate USB device [ 732.362917][ T9] usb 6-1: USB disconnect, device number 58 [ 732.868054][ T5905] usb 7-1: USB disconnect, device number 44 [ 733.041980][T11686] mkiss: ax0: crc mode is auto. [ 733.735220][ T5905] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 733.943575][ T5905] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 733.962984][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.998979][ T5905] usb 6-1: Product: syz [ 734.010937][ T5905] usb 6-1: Manufacturer: syz [ 734.033667][ T5905] usb 6-1: SerialNumber: syz [ 734.077233][ T5976] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 734.134999][ T5905] usb 6-1: config 0 descriptor?? [ 734.249193][ T5976] usb 9-1: Using ep0 maxpacket: 8 [ 734.277891][ T5976] usb 9-1: config index 0 descriptor too short (expected 29970, got 18) [ 734.321568][ T5976] usb 9-1: config 0 has too many interfaces: 168, using maximum allowed: 32 [ 734.347235][ T7074] Bluetooth: hci1: command tx timeout [ 734.358697][ T5905] usb 6-1: USB disconnect, device number 59 [ 734.382790][ T5976] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 168 [ 734.424450][T11720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 734.439926][ T5976] usb 9-1: config 0 has no interface number 0 [ 734.453878][ T5976] usb 9-1: too many endpoints for config 0 interface 97 altsetting 109: 101, using maximum allowed: 30 [ 734.473217][T11720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.507927][ T5976] usb 9-1: config 0 interface 97 altsetting 109 has 0 endpoint descriptors, different from the interface descriptor's value: 101 [ 734.557908][ T5976] usb 9-1: config 0 interface 97 has no altsetting 0 [ 734.600806][ T5976] usb 9-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a [ 734.638259][ T5976] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.655555][ T5976] usb 9-1: Product: syz [ 734.664226][ T5976] usb 9-1: Manufacturer: syz [ 734.676009][ T24] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 734.686030][ T5976] usb 9-1: SerialNumber: syz [ 734.704121][ T5976] usb 9-1: config 0 descriptor?? [ 734.834265][ T24] usb 7-1: device descriptor read/64, error -71 [ 734.951686][ T5976] usb 9-1: USB disconnect, device number 6 [ 734.997211][ T5905] usb 6-1: new full-speed USB device number 60 using dummy_hcd [ 735.114718][ T24] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 735.187668][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 735.204838][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.216808][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 735.230461][ T5905] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 735.241044][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.252220][ T5905] usb 6-1: config 0 descriptor?? [ 735.275021][ T24] usb 7-1: device descriptor read/64, error -71 [ 735.405271][ T24] usb usb7-port1: attempt power cycle [ 735.593479][T11732] netlink: 'syz.8.1452': attribute type 46 has an invalid length. [ 735.602975][T11732] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1452'. [ 735.712790][ T5905] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.0017/input/input33 [ 735.799432][ T24] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 735.813976][ T5905] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.0017/input/input34 [ 735.863786][ T24] usb 7-1: device descriptor read/8, error -71 [ 735.890544][ T5905] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.0017/input/input35 [ 735.912582][T11726] tipc: Failed to remove unknown binding: 66,1,1/0:3086806373/3086806375 [ 735.963458][ T5905] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:20D6:CB17.0017/input/input36 [ 736.082148][ T5905] hid-udraw 0003:20D6:CB17.0017: hidraw0: USB HID vff.fa Device [HID 20d6:cb17] on usb-dummy_hcd.5-1/input0 [ 736.141963][ T24] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 736.172374][ T5905] usb 6-1: USB disconnect, device number 60 [ 736.195914][ T24] usb 7-1: device descriptor read/8, error -71 [ 736.211451][T11737] fido_id[11737]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 736.326102][ T24] usb usb7-port1: unable to enumerate USB device [ 736.672464][T11748] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 737.286418][ T5905] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 737.473012][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 737.490242][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.503023][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.534007][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 737.580619][ T5905] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 737.606078][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.637617][ T5905] usb 6-1: config 0 descriptor?? [ 737.880289][T11774] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 738.037927][T11777] /dev/rnullb0: Can't open blockdev [ 738.066277][ T24] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 738.124064][T11779] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1465'. [ 738.148110][ T3015] Bluetooth: hci4: Frame reassembly failed (-84) [ 738.162761][ T3015] Bluetooth: hci4: Frame reassembly failed (-84) [ 738.244928][T11784] netlink: 'syz.7.1466': attribute type 21 has an invalid length. [ 738.255007][T11784] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1466'. [ 738.266045][T11784] netlink: 3 bytes leftover after parsing attributes in process `syz.7.1466'. [ 738.285501][T11784] bridge0: port 3(wlan0) entered blocking state [ 738.326029][T11784] bridge0: port 3(wlan0) entered disabled state [ 738.346492][T11784] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 738.366003][T11766] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 738.372971][T11766] /dev/rnullb0: Can't open blockdev [ 738.406356][T11784] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 738.464604][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.475647][ T24] usb 7-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 739.000085][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.197287][ T24] usb 7-1: config 0 descriptor?? [ 739.240623][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1469'. [ 739.584512][ T7050] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 739.640417][ T24] zydacron 0003:13EC:0006.0018: item fetching failed at offset 4/5 [ 739.652840][ T24] zydacron 0003:13EC:0006.0018: parse failed [ 739.659162][ T24] zydacron 0003:13EC:0006.0018: probe with driver zydacron failed with error -22 [ 739.744983][ T7050] usb 9-1: Using ep0 maxpacket: 16 [ 739.755150][ T7050] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 739.766768][ T7050] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 739.776619][ T7050] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 739.792352][ T7050] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 739.802097][ T7050] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.811694][ T7050] usb 9-1: Product: syz [ 739.816114][ T7050] usb 9-1: Manufacturer: syz [ 739.822184][ T7050] usb 9-1: SerialNumber: syz [ 739.919040][ T24] usb 7-1: USB disconnect, device number 49 [ 740.047928][ T7050] usb 9-1: 2:1 : format type 0 is detected, processed as PCM [ 740.333229][ T5865] Bluetooth: hci4: command 0x1003 tx timeout [ 740.340932][ T7074] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 740.354893][ T5905] usbhid 6-1:0.0: can't add hid device: -71 [ 740.375638][ T5905] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 740.404355][ T5905] usb 6-1: USB disconnect, device number 61 [ 740.461798][T11797] sctp: [Deprecated]: syz.5.1471 (pid 11797) Use of int in max_burst socket option deprecated. [ 740.461798][T11797] Use struct sctp_assoc_value instead [ 740.701641][ T7050] usb 9-1: 2:1: cannot get freq at ep 0x82 [ 741.726705][ T24] usb 9-1: USB disconnect, device number 7 [ 742.131456][T11830] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 742.170213][T11830] /dev/rnullb0: Can't open blockdev [ 742.475827][ T24] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 742.676331][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 742.691839][ T24] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.716438][ T24] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.737707][ T24] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 742.760890][ T5944] usb 8-1: new full-speed USB device number 52 using dummy_hcd [ 742.765635][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 742.790444][ T24] usb 6-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.00 [ 742.815072][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.837961][ T24] usb 6-1: config 0 descriptor?? [ 742.924934][ T5944] usb 8-1: device descriptor read/64, error -71 [ 743.038631][ T5864] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 743.111187][T11831] mkiss: ax0: crc mode is auto. [ 743.208368][ T5944] usb 8-1: new full-speed USB device number 53 using dummy_hcd [ 743.227241][T11872] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1482'. [ 743.263137][ T5864] usb 9-1: Using ep0 maxpacket: 8 [ 743.275880][T11872] /dev/rnullb0: Can't open blockdev [ 743.290283][ T5864] usb 9-1: unable to get BOS descriptor or descriptor too short [ 743.323292][ T5864] usb 9-1: config 59 has an invalid interface number: 141 but max is 0 [ 743.336061][ T5864] usb 9-1: config 59 has no interface number 0 [ 743.344517][ T5864] usb 9-1: config 59 interface 141 altsetting 6 endpoint 0xC has an invalid bInterval 160, changing to 11 [ 743.350248][ T24] lenovo 0003:04B3:3109.0019: item fetching failed at offset 5/9 [ 743.360459][ T5944] usb 8-1: device descriptor read/64, error -71 [ 743.373611][ T5864] usb 9-1: config 59 interface 141 has no altsetting 0 [ 743.384592][ T5864] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.72 [ 743.386865][ T24] lenovo 0003:04B3:3109.0019: hid_parse failed [ 743.395634][ T5864] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.409752][ T5864] usb 9-1: Product: syz [ 743.413402][ T24] lenovo 0003:04B3:3109.0019: probe with driver lenovo failed with error -22 [ 743.415227][ T5864] usb 9-1: Manufacturer: syz [ 743.428726][ T5864] usb 9-1: SerialNumber: syz [ 743.501819][ T5944] usb usb8-port1: attempt power cycle [ 743.562767][ T7054] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 743.580177][T11831] /dev/rnullb0: Can't open blockdev [ 743.627979][ T5926] usb 6-1: USB disconnect, device number 62 [ 743.744462][ T7054] usb 7-1: Using ep0 maxpacket: 16 [ 743.756097][ T7054] usb 7-1: config 0 has an invalid descriptor of length 125, skipping remainder of the config [ 743.770971][ T7054] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 743.784618][ T7054] usb 7-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 743.796412][ T7054] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.807071][ T7054] usb 7-1: config 0 descriptor?? [ 743.874780][ T5944] usb 8-1: new full-speed USB device number 54 using dummy_hcd [ 743.896780][ T5944] usb 8-1: device descriptor read/8, error -71 [ 744.031456][T11872] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1482'. [ 744.062699][T11872] openvswitch: netlink: Flow actions attr not present in new flow. [ 744.152530][ T5944] usb 8-1: new full-speed USB device number 55 using dummy_hcd [ 744.190347][ T5944] usb 8-1: device descriptor read/8, error -71 [ 744.274639][ T7074] Bluetooth: hci0: unexpected event for opcode 0x2027 [ 744.312614][ T5944] usb usb8-port1: unable to enumerate USB device [ 744.624889][ T7054] usb 7-1: string descriptor 0 read error: -71 [ 744.647448][ T7054] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 744.680144][ T7054] usb 7-1: USB disconnect, device number 50 [ 745.036651][T11897] netlink: 'syz.5.1485': attribute type 6 has an invalid length. [ 745.163822][T11903] /dev/rnullb0: Can't open blockdev [ 745.835810][T11913] /dev/rnullb0: Can't open blockdev [ 745.954747][ T5864] usbtest 9-1:59.141: couldn't get endpoints, -71 [ 745.973565][ T5864] usbtest 9-1:59.141: probe with driver usbtest failed with error -71 [ 745.988068][ T5864] usb 9-1: USB disconnect, device number 8 [ 746.001849][T11917] /dev/rnullb0: Can't open blockdev [ 746.050821][T11919] /dev/rnullb0: Can't open blockdev [ 746.126559][T11920] sctp: [Deprecated]: syz.8.1493 (pid 11920) Use of int in maxseg socket option. [ 746.126559][T11920] Use struct sctp_assoc_value instead [ 746.237611][T11922] /dev/rnullb0: Can't open blockdev [ 746.286642][T11926] /dev/rnullb0: Can't open blockdev [ 746.498705][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803446a400: rx timeout, send abort [ 746.507160][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88803446a400: 0x1f001: (3) A timeout occurred and this is the connection abort to close the session. [ 746.565636][T11945] CIFS: iocharset name too long [ 746.804403][T11957] /dev/rnullb0: Can't open blockdev [ 746.851508][T11958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.860874][T11958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.102277][ T5944] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 747.241366][ T5944] usb 9-1: device descriptor read/64, error -71 [ 747.497949][ T5944] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 747.637018][ T5944] usb 9-1: device descriptor read/64, error -71 [ 747.694096][T11971] /dev/rnullb0: Can't open blockdev [ 747.701754][T11972] /dev/rnullb0: Can't open blockdev [ 747.755948][ T5944] usb usb9-port1: attempt power cycle [ 747.785333][T11977] /dev/rnullb0: Can't open blockdev [ 747.975109][T11991] 9p: Unknown parameter '0x0000000000000005' [ 748.118827][ T5944] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 748.150467][ T24] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 748.172179][ T5944] usb 9-1: device descriptor read/8, error -71 [ 748.312470][T12002] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 748.312470][T12002] The task syz.6.1521 (12002) triggered the difference, watch for misbehavior. [ 748.331625][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 748.348574][ T24] usb 6-1: config 0 interface 0 has no altsetting 0 [ 748.357453][ T24] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 748.372948][T12004] /dev/rnullb0: Can't open blockdev [ 748.381576][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.390081][ T24] usb 6-1: Product: syz [ 748.394350][ T24] usb 6-1: Manufacturer: syz [ 748.401283][ T24] usb 6-1: SerialNumber: syz [ 748.409636][ T24] usb 6-1: config 0 descriptor?? [ 748.419866][ T24] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 748.440350][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 748.440400][ T5944] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 748.451242][ T24] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 748.464029][T12008] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 748.468842][ T24] usb 6-1: media controller created [ 748.475434][ T5944] usb 9-1: device descriptor read/8, error -71 [ 748.485690][T12007] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 748.496656][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 748.545190][ T24] DVB: Unable to find symbol tda10046_attach() [ 748.551700][ T24] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 748.551717][ T24] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 748.599804][ T5944] usb usb9-port1: unable to enumerate USB device [ 749.288227][T11989] /dev/rnullb0: Can't open blockdev [ 749.294812][ T24] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 749.310241][ T24] usb 6-1: USB disconnect, device number 63 [ 749.348398][ T5864] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 749.512246][ T5864] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 749.529719][ T5864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.549073][ T5864] usb 7-1: Product: syz [ 749.553731][ T5864] usb 7-1: Manufacturer: syz [ 749.559489][ T5864] usb 7-1: SerialNumber: syz [ 749.798473][T12018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 749.807097][T12018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 749.827601][T12018] fuse: Bad value for 'fd' [ 749.884664][T12024] /dev/rnullb0: Can't open blockdev [ 749.894976][ T5864] rtl8150 7-1:1.0: couldn't reset the device [ 749.902260][T12026] /dev/rnullb0: Can't open blockdev [ 749.933984][T12028] cgroup: subsys name conflicts with all [ 749.935036][ T5864] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 749.974626][ T5864] usb 7-1: USB disconnect, device number 51 [ 750.230999][T12040] /dev/rnullb0: Can't open blockdev [ 750.268105][ T24] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 750.441886][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 750.461257][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 750.483478][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 750.515400][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 750.547689][ T24] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 750.567354][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.586361][ T24] usb 8-1: config 0 descriptor?? [ 751.063728][ T24] microsoft 0003:045E:07DA.001A: ignoring exceeding usage max [ 751.084514][ T24] microsoft 0003:045E:07DA.001A: unsupported Resolution Multiplier 0 [ 751.105162][ T24] microsoft 0003:045E:07DA.001A: implement() called with n (152) > 32! (kworker/1:0) [ 751.213911][T12057] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1542'. [ 751.235708][T12057] /dev/rnullb0: Can't open blockdev [ 751.288401][ T24] microsoft 0003:045E:07DA.001A: unsupported Resolution Multiplier 0 [ 751.300165][ T24] microsoft 0003:045E:07DA.001A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 751.326093][ T24] microsoft 0003:045E:07DA.001A: no inputs found [ 751.344802][ T24] microsoft 0003:045E:07DA.001A: could not initialize ff, continuing anyway [ 751.444081][ T7055] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 752.171668][ T7055] usb 9-1: config 0 has an invalid interface number: 151 but max is 0 [ 752.180086][ T7055] usb 9-1: config 0 has no interface number 0 [ 752.186504][ T7055] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db98, bcdDevice=ad.73 [ 752.199840][ T7055] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.230224][ T7055] usb 9-1: config 0 descriptor?? [ 752.239584][ T7055] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' in warm state. [ 752.249103][ T7055] dvb-usb: bulk message failed: -22 (2/0) [ 752.256865][ T7055] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 752.289767][ T7055] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)) [ 752.299863][ T7055] usb 9-1: media controller created [ 752.334475][ T7055] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 752.359862][ T7055] cxusb: set interface failed [ 752.369180][ T7055] dvb-usb: bulk message failed: -22 (1/0) [ 752.387726][ T7055] dvb-usb: bulk message failed: -22 (3/0) [ 752.393588][ T7055] usb 9-1: bluebird_gpio_write failed. [ 752.438768][ T7055] dvb-usb: bulk message failed: -22 (3/0) [ 752.444538][ T7055] usb 9-1: bluebird_gpio_write failed. [ 752.559144][ T7055] DVB: Unable to find symbol dib7000p_attach() [ 752.732151][ T7055] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2)' [ 752.866222][ T7055] rc_core: IR keymap rc-dvico-mce not found [ 752.872154][ T7055] Registered IR keymap rc-empty [ 752.879805][ T7055] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 752.900773][ T7055] input: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input37 [ 752.932392][ T7055] dvb-usb: schedule remote query interval to 100 msecs. [ 752.939464][ T7055] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 (rev 2) successfully initialized and connected. [ 753.048004][ T7055] dvb-usb: bulk message failed: -22 (1/0) [ 753.178198][ T7055] dvb-usb: bulk message failed: -22 (1/0) [ 753.281975][ T5976] usb 8-1: USB disconnect, device number 56 [ 753.294553][ T7055] dvb-usb: bulk message failed: -22 (1/0) [ 753.414154][ T7055] dvb-usb: bulk message failed: -22 (1/0) [ 753.535295][ T7055] dvb-usb: bulk message failed: -22 (1/0) [ 753.541323][T12084] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1549'. [ 753.626203][T12086] fuse: Unknown parameter 'rootmo. [ 753.626203][T12086] ' [ 753.679099][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 753.808812][ T7055] dvb-usb: bulk message failed: -22 (1/0) [ 754.029019][ T7074] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 754.145364][ T7055] dvb-usb: bulk message failed: -22 (1/0) [ 754.425288][ T7055] dvb-usb: bulk message failed: -22 (1/0) [ 754.436047][ T5976] usb 9-1: USB disconnect, device number 13 [ 754.570813][ T5976] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 ( successfully deinitialized and disconnected. [ 755.224261][T12109] /dev/rnullb0: Can't open blockdev [ 755.231159][T12109] netlink: 65051 bytes leftover after parsing attributes in process `syz.8.1557'. [ 755.280229][T12112] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1560'. [ 755.316806][T12114] usb usb8: usbfs: process 12114 (syz.7.1559) did not claim interface 0 before use [ 755.406442][T12121] /dev/rnullb0: Can't open blockdev [ 755.678825][ T5976] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 755.851817][ T5976] usb 6-1: Using ep0 maxpacket: 32 [ 755.865855][ T5976] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 755.890763][ T5976] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 755.926973][ T5976] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 755.972724][ T5976] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 755.991249][ T5976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.027756][ T5976] usb 6-1: Product: ᠁ [ 756.043466][ T5976] usb 6-1: Manufacturer: 巴뚱ꗬ㰫ァ갢榜剡！哛䇄ᷬ屽띵싮帑ꇆ⾟랿 [ 756.083230][ T5976] usb 6-1: SerialNumber: 燮傩칆៭뫑䄜ఓ糠ꗤ饰뇙䯣쥑䭨鞮柪炩ᜏԶﯺ幠籟ﴝ輧部⼴鑁܄䑷쬄孄뫲曥韂붐䝮ᳬ拦섵ȋ侊ᇸ귌밥ﮪ渱ꐗ幮앆툥蔹毹ㅵ兡ẞ摺蠛⃀腊恍쾥췛ᩫঃℱ艆악㝉獏 [ 756.387500][ T5976] usb 6-1: 0:2 : does not exist [ 756.413643][ T5976] usb 6-1: USB disconnect, device number 64 [ 756.448316][ T9893] udevd[9893]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 757.499361][ T5976] usb 6-1: new full-speed USB device number 65 using dummy_hcd [ 757.515047][ T30] audit: type=1400 audit(1756641665.756:11): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="{" pid=12164 comm="syz.8.1573" [ 757.610076][T12172] /dev/rnullb0: Can't open blockdev [ 757.619275][T12171] /dev/rnullb0: Can't open blockdev [ 757.628855][T12172] /dev/rnullb0: Can't open blockdev [ 757.699294][T12179] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.707048][T12179] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.716917][T12179] bridge0: entered promiscuous mode [ 757.727322][T12179] bridge0: entered allmulticast mode [ 757.733775][ T5976] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 757.741725][T12179] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.752423][T12179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.759209][ T5976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 757.760036][T12179] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.778006][T12179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.832026][ T5976] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 757.843510][ T5976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.858964][ T5976] usb 6-1: config 0 descriptor?? [ 758.096931][ T5976] ath6kl: Failed to submit usb control message: -71 [ 758.120360][T12183] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1579'. [ 758.136306][ T7074] Bluetooth: hci2: unexpected event for opcode 0x203d [ 758.255922][ T5976] ath6kl: unable to send the bmi data to the device: -71 [ 758.263405][ T5976] ath6kl: Unable to send get target info: -71 [ 758.289332][ T5976] ath6kl: Failed to init ath6kl core: -71 [ 758.295792][ T5976] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 758.323587][ T5976] usb 6-1: USB disconnect, device number 65 [ 758.682865][T12208] /dev/rnullb0: Can't open blockdev [ 759.208071][ T5926] usb 7-1: new full-speed USB device number 52 using dummy_hcd [ 759.351717][ T7055] usb 9-1: new low-speed USB device number 14 using dummy_hcd [ 759.381060][ T5926] usb 7-1: config 5 has an invalid interface number: 123 but max is 0 [ 759.389585][ T5926] usb 7-1: config 5 has no interface number 0 [ 759.395695][ T5926] usb 7-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 759.408169][ T5926] usb 7-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 759.421559][ T5926] usb 7-1: config 5 interface 123 has no altsetting 0 [ 759.454782][ T5926] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 759.468914][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.486961][ T5926] usb 7-1: Product: syz [ 759.491165][ T5926] usb 7-1: Manufacturer: syz [ 759.495771][ T5926] usb 7-1: SerialNumber: syz [ 759.531244][ T7055] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 759.549972][ T7055] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.559792][ T7055] usb 9-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 759.574731][ T7055] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.594689][ T7055] usb 9-1: config 0 descriptor?? [ 759.610407][ T7055] usbhid 9-1:0.0: can't add hid device: -22 [ 759.637246][ T7055] usbhid 9-1:0.0: probe with driver usbhid failed with error -22 [ 759.757188][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 759.766824][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 759.822235][T12222] /dev/rnullb0: Can't open blockdev [ 759.831409][ T5864] usb 9-1: USB disconnect, device number 14 [ 759.850609][ T5926] ni6501 7-1:5.123: driver 'ni6501' failed to auto-configure device. [ 759.871543][ T5926] usb 7-1: USB disconnect, device number 52 [ 759.902791][ T5976] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 760.064590][ T5976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 760.074861][ T5976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 760.087782][ T5976] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 760.097715][ T5976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.105733][ T5976] usb 6-1: Product: syz [ 760.109932][ T5976] usb 6-1: Manufacturer: syz [ 760.114939][ T5976] usb 6-1: SerialNumber: syz [ 760.121078][ T5976] usb 6-1: config 0 descriptor?? [ 760.266420][ T7054] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 760.389321][T12229] /dev/rnullb0: Can't open blockdev [ 760.440982][ T7054] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 760.452717][ T7054] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 760.476138][ T7054] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 760.492921][ T5976] usb 6-1: USB disconnect, device number 66 [ 760.499025][ T7054] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.507393][ T7054] usb 8-1: Product: Ц [ 760.511784][ T7054] usb 8-1: Manufacturer: ɔ [ 760.530059][T12241] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1597'. [ 760.537137][ T7054] usb 8-1: SerialNumber: ఄ [ 760.546491][ T9877] udevd[9877]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 760.550089][T12241] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 760.683534][ T5926] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 760.843885][ T5926] usb 9-1: Using ep0 maxpacket: 8 [ 760.849045][ T5944] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 760.858803][ T5926] usb 9-1: config 9 has an invalid interface number: 213 but max is 0 [ 760.867086][ T5926] usb 9-1: config 9 has no interface number 0 [ 760.873195][ T5926] usb 9-1: config 9 interface 213 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 760.884794][ T5926] usb 9-1: config 9 interface 213 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 760.895730][ T5926] usb 9-1: config 9 interface 213 has no altsetting 0 [ 760.904884][ T5926] usb 9-1: New USB device found, idVendor=1199, idProduct=90e3, bcdDevice=9e.43 [ 760.914158][ T5926] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.922239][ T5926] usb 9-1: Product: syz [ 760.926658][ T5926] usb 9-1: Manufacturer: 軈Ⅽ俑㢖⑐麩ό蹭逵㰐뙛踉졀䢙䷓掠솠炝✕魩Ꜵ쌓盎흛ꩻ媝铿톘ᇷ빐ᓃ秒ٙ䔤炟䯝失쑱됾愢江℟圫➳壩ⵦ蜘礚黢ㅴ鳎ᛅ趵겕宀烏񡫎髏䤆⌔ʣ䖜덗檻㵄䀉쇸参킵脛﨎炣鳗稊♐쿈๝ࣣລ驥靗蜸惯 [ 760.955312][ T5926] usb 9-1: SerialNumber: syz [ 761.009674][ T7054] cdc_ncm 8-1:1.0: bind() failure [ 761.019974][ T7054] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 761.025673][ T5944] usb 7-1: device descriptor read/64, error -71 [ 761.027225][ T7054] cdc_ncm 8-1:1.1: bind() failure [ 761.042061][ T7054] usb 8-1: USB disconnect, device number 57 [ 761.282352][ T5944] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 761.394935][ T5926] option 9-1:9.213: GSM modem (1-port) converter detected [ 761.407463][ T5926] usb 9-1: USB disconnect, device number 15 [ 761.416023][ T5926] option 9-1:9.213: device disconnected [ 761.432053][ T5944] usb 7-1: device descriptor read/64, error -71 [ 761.550183][ T5944] usb usb7-port1: attempt power cycle [ 761.686030][T12259] netlink: 'syz.7.1602': attribute type 1 has an invalid length. [ 761.694119][T12259] netlink: 'syz.7.1602': attribute type 3 has an invalid length. [ 761.702668][T12259] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1602'. [ 761.820895][T12261] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1603'. [ 761.913251][ T5944] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 761.935194][ T5944] usb 7-1: device descriptor read/8, error -71 [ 762.202004][ T5944] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 762.224261][ T5944] usb 7-1: device descriptor read/8, error -71 [ 762.343056][ T5944] usb usb7-port1: unable to enumerate USB device [ 762.458616][ T5976] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 762.654628][ T5976] usb 6-1: Using ep0 maxpacket: 32 [ 762.668893][ T5976] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 762.690567][ T5976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.711015][ T5976] usb 6-1: Product: syz [ 762.721325][ T5976] usb 6-1: Manufacturer: syz [ 762.731599][ T5976] usb 6-1: SerialNumber: syz [ 762.747972][ T5976] usb 6-1: config 0 descriptor?? [ 763.228811][ T5944] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 763.411139][ T5944] usb 9-1: Using ep0 maxpacket: 32 [ 763.413703][ T5976] peak_usb 6-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 763.424710][ T5944] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.427893][ T5976] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 763.444174][ T5944] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 763.444200][ T5944] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.444216][ T5944] usb 9-1: Product: syz [ 763.444226][ T5944] usb 9-1: Manufacturer: syz [ 763.444239][ T5944] usb 9-1: SerialNumber: syz [ 763.476148][ T5944] usb 9-1: config 0 descriptor?? [ 763.478880][ T5976] peak_usb 6-1:0.0 can0: sending command failure: -22 [ 763.491211][ T5944] usb 9-1: bad CDC descriptors [ 763.499437][ T5944] usb 9-1: unsupported MDLM descriptors [ 763.540165][ T5976] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -22 [ 763.708803][ T5976] usb 6-1: USB disconnect, device number 67 [ 763.721052][T12292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 763.733190][T12292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.747897][ T5944] usb 9-1: USB disconnect, device number 16 [ 764.287747][ T5976] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 764.462365][ T5976] usb 7-1: Using ep0 maxpacket: 8 [ 764.481973][ T5976] usb 7-1: config 6 has an invalid interface number: 151 but max is 0 [ 764.490612][ T5976] usb 7-1: config 6 has no interface number 0 [ 764.511830][ T5976] usb 7-1: config 6 interface 151 has no altsetting 0 [ 764.520448][ T5976] usb 7-1: New USB device found, idVendor=0bfd, idProduct=010d, bcdDevice=7e.a3 [ 764.530742][ T5976] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.538937][ T5976] usb 7-1: Product: syz [ 764.543339][ T5976] usb 7-1: Manufacturer: syz [ 764.549365][ T5976] usb 7-1: SerialNumber: syz [ 764.554035][T12306] sctp: [Deprecated]: syz.5.1617 (pid 12306) Use of int in maxseg socket option. [ 764.554035][T12306] Use struct sctp_assoc_value instead [ 764.609363][ T5864] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 764.759884][ T5864] usb 9-1: device descriptor read/64, error -71 [ 764.977111][ T5976] kvaser_usb 7-1:6.151: error -ENODEV: Cannot get usb endpoint(s) [ 765.003433][ T5976] usb 7-1: USB disconnect, device number 57 [ 765.028645][ T5864] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 765.036313][T12322] wlan1 speed is unknown, defaulting to 1000 [ 765.184381][ T5864] usb 9-1: device descriptor read/64, error -71 [ 765.303501][ T5864] usb usb9-port1: attempt power cycle [ 765.467085][T12332] /dev/rnullb0: Can't open blockdev [ 765.485487][ T30] audit: type=1326 audit(1756641673.088:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12321 comm="syz.6.1623" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f283ad8ebe9 code=0x0 [ 765.500908][T12336] /dev/rnullb0: Can't open blockdev [ 765.563299][T12338] /dev/rnullb0: Can't open blockdev [ 765.666811][ T5864] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 765.688651][ T5864] usb 9-1: device descriptor read/8, error -71 [ 765.863624][T12351] could not allocate digest TFM handle sha256-arm64-neon [ 765.944843][ T5864] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 765.989661][ T5864] usb 9-1: device descriptor read/8, error -71 [ 766.127099][ T5864] usb usb9-port1: unable to enumerate USB device [ 766.894988][T12374] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 766.920972][T12374] /dev/rnullb0: Can't open blockdev [ 767.615493][T12381] ./file0: Can't lookup blockdev [ 768.087267][T12405] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 768.094670][T12405] /dev/rnullb0: Can't open blockdev [ 768.420865][T12413] netlink: 'syz.5.1651': attribute type 1 has an invalid length. [ 768.430528][T12413] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1651'. [ 768.828653][T12430] tty tty36: ldisc open failed (-12), clearing slot 35 [ 768.905226][T12438] netlink: 184 bytes leftover after parsing attributes in process `syz.6.1658'. [ 768.979695][T12442] /dev/rnullb0: Can't open blockdev [ 769.020229][T12444] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 769.492324][T12448] /dev/rnullb0: Can't open blockdev [ 769.638915][T12452] /dev/rnullb0: Can't open blockdev [ 769.810989][T12462] binder: 12461:12462 ioctl c0306201 200000000040 returned -22 [ 769.838713][T12462] binder: BINDER_SET_CONTEXT_MGR already set [ 769.853688][T12462] binder: 12461:12462 ioctl 4018620d 2000000002c0 returned -16 [ 769.863044][T12462] binder: 12461:12462 ioctl c018620c 200000000240 returned -1 [ 769.899584][T12462] binder: 12461:12462 ioctl c0306201 200000000340 returned -14 [ 769.964138][T12473] /dev/rnullb0: Can't open blockdev [ 770.211705][ T7055] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 770.372133][ T7055] usb 7-1: Using ep0 maxpacket: 16 [ 770.380219][ T7055] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 770.394246][ T7055] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 770.413526][ T7055] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 770.425318][ T7055] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 770.436378][ T7055] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.444666][ T7055] usb 7-1: Product: syz [ 770.450686][ T7055] usb 7-1: Manufacturer: syz [ 770.455422][ T7055] usb 7-1: SerialNumber: syz [ 770.579856][T12478] /dev/rnullb0: Can't open blockdev [ 770.791085][T12481] loop7: detected capacity change from 0 to 7 [ 770.791429][T12482] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 770.895572][ T7055] usb 7-1: 0:2 : does not exist [ 771.007303][T12489] /dev/rnullb0: Can't open blockdev [ 771.039077][T12481] Dev loop7: unable to read RDB block 7 [ 771.044809][T12481] loop7: unable to read partition table [ 771.051439][T12481] loop7: partition table beyond EOD, truncated [ 771.072576][T12481] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 771.184500][T12493] tipc: Started in network mode [ 771.190968][T12493] tipc: Node identity 4, cluster identity 4711 [ 771.197548][T12493] tipc: Node number set to 4 [ 771.262218][T12496] /dev/rnullb0: Can't open blockdev [ 771.944458][ T5944] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 772.136251][ T5944] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.152696][ T5944] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 772.177526][ T5944] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.192215][ T5944] usb 9-1: config 0 descriptor?? [ 772.242229][T12512] /dev/rnullb0: Can't open blockdev [ 772.281547][T12515] /dev/rnullb0: Can't open blockdev [ 772.430248][ T5944] usbhid 9-1:0.0: can't add hid device: -71 [ 772.458453][ T5944] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 772.501957][ T5944] usb 9-1: USB disconnect, device number 21 [ 772.671079][ T7055] usb 7-1: USB disconnect, device number 58 [ 772.896304][ T5944] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 773.057057][ T5944] usb 9-1: Using ep0 maxpacket: 32 [ 773.064873][ T5944] usb 9-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 773.074429][ T5944] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 773.086971][ T5944] usb 9-1: config 0 descriptor?? [ 773.094670][ T5944] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 774.104667][ T7055] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 774.129743][ C0] ------------[ cut here ]------------ [ 774.135320][ C0] WARNING: ./include/linux/skbuff.h:1165 at nf_send_unreach6+0x828/0xa20, CPU#0: kworker/0:3/5864 [ 774.146368][ C0] Modules linked in: [ 774.150650][ C0] CPU: 0 UID: 0 PID: 5864 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 774.160458][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 774.170573][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 774.176674][ C0] RIP: 0010:nf_send_unreach6+0x828/0xa20 [ 774.182367][ C0] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20 [ 774.202214][ C0] RSP: 0018:ffffc900000073c0 EFLAGS: 00010246 [ 774.208341][ C0] RAX: ffffffff8a51b3b7 RBX: ffff88809b0ab280 RCX: ffff888027f09e00 [ 774.216474][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 774.224508][ C0] RBP: ffffc90000007568 R08: ffff88802ef3f183 R09: 1ffff11005de7e30 [ 774.232520][ C0] R10: dffffc0000000000 R11: ffffed1005de7e31 R12: ffff8880784f0101 [ 774.240606][ C0] R13: dffffc0000000001 R14: 1ffff1101361565b R15: 0000000000000000 [ 774.248897][ C0] FS: 0000000000000000(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000 [ 774.257884][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 774.264503][ C0] CR2: 000000110c30c61f CR3: 00000000869e4000 CR4: 00000000003526f0 [ 774.272632][ C0] Call Trace: [ 774.275972][ C0] [ 774.278839][ C0] ? __pfx_nf_send_unreach6+0x10/0x10 [ 774.284497][ C0] ? rcu_is_watching+0x15/0xb0 [ 774.289419][ C0] ? rcu_is_watching+0x15/0xb0 [ 774.294208][ C0] ? __update_load_avg_cfs_rq+0x6f6/0xbd0 [ 774.300349][ C0] nft_reject_inet_eval+0x441/0x690 [ 774.305664][ C0] nft_do_chain+0x40c/0x1920 [ 774.310601][ C0] ? rcu_is_watching+0x15/0xb0 [ 774.315678][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 774.320756][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 774.325636][ C0] ? rcu_is_watching+0x15/0xb0 [ 774.330466][ C0] ? unwind_next_frame+0xa5/0x2390 [ 774.335789][ C0] nft_do_chain_inet+0x25d/0x340 [ 774.340908][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 774.346403][ C0] ? NF_HOOK+0x9a/0x3a0 [ 774.350697][ C0] ? rcu_is_watching+0x15/0xb0 [ 774.355695][ C0] ? lock_acquire+0x5f/0x360 [ 774.360317][ C0] ? ip_sabotage_in+0x57/0x270 [ 774.365265][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 774.370767][ C0] nf_hook_slow+0xc5/0x220 [ 774.375436][ C0] NF_HOOK+0x206/0x3a0 [ 774.379536][ C0] ? skb_orphan+0xaf/0xd0 [ 774.384013][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 774.389320][ C0] ? NF_HOOK+0x9a/0x3a0 [ 774.393621][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 774.398280][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 774.403511][ C0] __netif_receive_skb+0xd3/0x380 [ 774.408698][ C0] ? process_backlog+0x2d5/0x14f0 [ 774.413939][ C0] process_backlog+0x60e/0x14f0 [ 774.419042][ C0] ? __pfx_process_backlog+0x10/0x10 [ 774.424437][ C0] ? net_rx_action+0x51b/0xe30 [ 774.429320][ C0] ? rcu_is_watching+0x15/0xb0 [ 774.434285][ C0] __napi_poll+0xc4/0x360 [ 774.438681][ C0] net_rx_action+0x707/0xe30 [ 774.443303][ C0] ? ktime_get+0x3e/0x1f0 [ 774.447786][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 774.452928][ C0] ? rcu_is_watching+0x15/0xb0 [ 774.457763][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 774.463077][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 774.468420][ C0] handle_softirqs+0x283/0x870 [ 774.473277][ C0] ? do_softirq+0xec/0x180 [ 774.477727][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 774.483094][ C0] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 774.489151][ C0] do_softirq+0xec/0x180 [ 774.493414][ C0] [ 774.496352][ C0] [ 774.499404][ C0] ? __pfx_do_softirq+0x10/0x10 [ 774.504424][ C0] ? rcu_is_watching+0x15/0xb0 [ 774.509209][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 774.514474][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 774.520335][ C0] ? do_raw_read_unlock+0x3d/0x80 [ 774.525515][ C0] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 774.531281][ C0] wg_packet_tx_worker+0x1c8/0x7c0 [ 774.536460][ C0] ? rcu_is_watching+0x15/0xb0 [ 774.541253][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 774.547034][ C0] process_scheduled_works+0xae1/0x17b0 [ 774.552621][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 774.558843][ C0] worker_thread+0x8a0/0xda0 [ 774.563568][ C0] ? __kthread_parkme+0x7b/0x200 [ 774.568742][ C0] kthread+0x711/0x8a0 [ 774.572837][ C0] ? __pfx_worker_thread+0x10/0x10 [ 774.578184][ C0] ? __pfx_kthread+0x10/0x10 [ 774.582908][ C0] ? rcu_is_watching+0x15/0xb0 [ 774.587751][ C0] ? __pfx_kthread+0x10/0x10 [ 774.592371][ C0] ret_from_fork+0x47c/0x820 [ 774.597021][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 774.602224][ C0] ? __switch_to_asm+0x39/0x70 [ 774.607139][ C0] ? __switch_to_asm+0x33/0x70 [ 774.611919][ C0] ? __pfx_kthread+0x10/0x10 [ 774.616623][ C0] ret_from_fork_asm+0x1a/0x30 [ 774.621445][ C0] [ 774.624579][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 774.632047][ C0] CPU: 0 UID: 0 PID: 5864 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 774.641425][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 774.651715][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 774.657900][ C0] Call Trace: [ 774.661192][ C0] [ 774.664049][ C0] dump_stack_lvl+0x99/0x250 [ 774.668659][ C0] ? __asan_memcpy+0x40/0x70 [ 774.673301][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 774.678535][ C0] ? __pfx__printk+0x10/0x10 [ 774.683340][ C0] vpanic+0x281/0x750 [ 774.687444][ C0] ? __pfx_vpanic+0x10/0x10 [ 774.691985][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 774.697522][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 774.702818][ C0] panic+0xb9/0xc0 [ 774.706674][ C0] ? __pfx_panic+0x10/0x10 [ 774.711258][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 774.716331][ C0] __warn+0x334/0x4c0 [ 774.720408][ C0] ? nf_send_unreach6+0x828/0xa20 [ 774.725686][ C0] ? nf_send_unreach6+0x828/0xa20 [ 774.730815][ C0] report_bug+0x2be/0x4f0 [ 774.735233][ C0] ? nf_send_unreach6+0x828/0xa20 [ 774.740248][ C0] ? nf_send_unreach6+0x828/0xa20 [ 774.745273][ C0] ? nf_send_unreach6+0x82a/0xa20 [ 774.750300][ C0] handle_bug+0x84/0x160 [ 774.754798][ C0] exc_invalid_op+0x1a/0x50 [ 774.759377][ C0] asm_exc_invalid_op+0x1a/0x20 [ 774.764397][ C0] RIP: 0010:nf_send_unreach6+0x828/0xa20 [ 774.770382][ C0] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20 [ 774.790184][ C0] RSP: 0018:ffffc900000073c0 EFLAGS: 00010246 [ 774.796258][ C0] RAX: ffffffff8a51b3b7 RBX: ffff88809b0ab280 RCX: ffff888027f09e00 [ 774.804306][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 774.812266][ C0] RBP: ffffc90000007568 R08: ffff88802ef3f183 R09: 1ffff11005de7e30 [ 774.820308][ C0] R10: dffffc0000000000 R11: ffffed1005de7e31 R12: ffff8880784f0101 [ 774.828278][ C0] R13: dffffc0000000001 R14: 1ffff1101361565b R15: 0000000000000000 [ 774.836239][ C0] ? nf_send_unreach6+0x827/0xa20 [ 774.841273][ C0] ? __pfx_nf_send_unreach6+0x10/0x10 [ 774.846635][ C0] ? rcu_is_watching+0x15/0xb0 [ 774.851411][ C0] ? rcu_is_watching+0x15/0xb0 [ 774.856190][ C0] ? __update_load_avg_cfs_rq+0x6f6/0xbd0 [ 774.861954][ C0] nft_reject_inet_eval+0x441/0x690 [ 774.867150][ C0] nft_do_chain+0x40c/0x1920 [ 774.871728][ C0] ? rcu_is_watching+0x15/0xb0 [ 774.876494][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 774.881504][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 774.886362][ C0] ? rcu_is_watching+0x15/0xb0 [ 774.891182][ C0] ? unwind_next_frame+0xa5/0x2390 [ 774.896286][ C0] nft_do_chain_inet+0x25d/0x340 [ 774.901224][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 774.907109][ C0] ? NF_HOOK+0x9a/0x3a0 [ 774.911323][ C0] ? rcu_is_watching+0x15/0xb0 [ 774.916203][ C0] ? lock_acquire+0x5f/0x360 [ 774.920862][ C0] ? ip_sabotage_in+0x57/0x270 [ 774.925876][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 774.931407][ C0] nf_hook_slow+0xc5/0x220 [ 774.935814][ C0] NF_HOOK+0x206/0x3a0 [ 774.939871][ C0] ? skb_orphan+0xaf/0xd0 [ 774.944222][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 774.949501][ C0] ? NF_HOOK+0x9a/0x3a0 [ 774.953825][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 774.959070][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 774.964268][ C0] __netif_receive_skb+0xd3/0x380 [ 774.969487][ C0] ? process_backlog+0x2d5/0x14f0 [ 774.974506][ C0] process_backlog+0x60e/0x14f0 [ 774.979353][ C0] ? __pfx_process_backlog+0x10/0x10 [ 774.984627][ C0] ? net_rx_action+0x51b/0xe30 [ 774.989470][ C0] ? rcu_is_watching+0x15/0xb0 [ 774.994223][ C0] __napi_poll+0xc4/0x360 [ 774.998547][ C0] net_rx_action+0x707/0xe30 [ 775.003185][ C0] ? ktime_get+0x3e/0x1f0 [ 775.007531][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 775.012727][ C0] ? rcu_is_watching+0x15/0xb0 [ 775.017665][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 775.022867][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 775.028146][ C0] handle_softirqs+0x283/0x870 [ 775.032905][ C0] ? do_softirq+0xec/0x180 [ 775.037412][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 775.042781][ C0] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 775.048666][ C0] do_softirq+0xec/0x180 [ 775.052995][ C0] [ 775.055946][ C0] [ 775.058898][ C0] ? __pfx_do_softirq+0x10/0x10 [ 775.063759][ C0] ? rcu_is_watching+0x15/0xb0 [ 775.068515][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 775.073715][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 775.079429][ C0] ? do_raw_read_unlock+0x3d/0x80 [ 775.084454][ C0] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 775.090253][ C0] wg_packet_tx_worker+0x1c8/0x7c0 [ 775.095528][ C0] ? rcu_is_watching+0x15/0xb0 [ 775.100293][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 775.106181][ C0] process_scheduled_works+0xae1/0x17b0 [ 775.111742][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 775.117809][ C0] worker_thread+0x8a0/0xda0 [ 775.122411][ C0] ? __kthread_parkme+0x7b/0x200 [ 775.127470][ C0] kthread+0x711/0x8a0 [ 775.131638][ C0] ? __pfx_worker_thread+0x10/0x10 [ 775.136740][ C0] ? __pfx_kthread+0x10/0x10 [ 775.141329][ C0] ? rcu_is_watching+0x15/0xb0 [ 775.146093][ C0] ? __pfx_kthread+0x10/0x10 [ 775.150694][ C0] ret_from_fork+0x47c/0x820 [ 775.155277][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 775.160383][ C0] ? __switch_to_asm+0x39/0x70 [ 775.165190][ C0] ? __switch_to_asm+0x33/0x70 [ 775.169948][ C0] ? __pfx_kthread+0x10/0x10 [ 775.174571][ C0] ret_from_fork_asm+0x1a/0x30 [ 775.179420][ C0] [ 775.182731][ C0] Kernel Offset: disabled [ 775.187049][ C0] Rebooting in 86400 seconds..