last executing test programs: 27m32.795070523s ago: executing program 32 (id=547): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0, &(0x7f0000005480)=0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r7 = syz_open_dev$video(&(0x7f0000000440), 0xfffffffffffffffa, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x3, 0x1000, 0xfc, 0x1a8}}) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x1f6e, 0xa, 0x3, 0x1008}, 0x30, 0x0) r9 = syz_ublk_setup_io_uring(0xd61, &(0x7f0000000500)={0x0, 0xdf75, 0x1000, 0x40002, 0x393}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r10, r11, r12, &(0x7f0000000400)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x2, 0x603, 0x0, 0x0, 0x1000, 0xb6a4, 0x0, 0x0, 0xa8}}}, &(0x7f0000000180)=0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x82042, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_ublk_setup_queues(r15, r14, &(0x7f0000000480)={0x0, 0x18e2, 0x10000, 0xfffffffd, 0x1d2}, &(0x7f0000002680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb656, 0x200, 0x5, 0x41}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x216, 0x2, 0x80000002, 0x359}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb6d4, 0x1, 0x0, 0x252}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaff, 0x800, 0x0, 0x1e3}}], 0x4, &(0x7f0000003900)={0x2e, 0x62, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r13, '\x00', {0x2, 0xb66, 0x0, 0x0}}, 0x0) syz_ublk_setup_queues(r9, r14, &(0x7f0000000200)={0x0, 0x1462, 0x10f00, 0x1, 0xb6}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x100, 0x5, 0x3b7, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x20000, 0x5, 0x44a, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68ea, 0x20000, 0x80000000, 0x90, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x96e8, 0x0, 0x2, 0x40021a, 0x0, r16}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x0, r17, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x1, 0x48b, 0x0, 0x0}}, 0x0) landlock_restrict_self(r8, 0xe) r18 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r18, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000480)=@IORING_OP_SEND={0x1a, 0x8, 0x0, r4, &(0x7f00000000c0), 0x0, 0x0, 0x20040000, 0x1}) r19 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r19, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc0000001900010026bd70000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000100000000000000000000000044000500ac1414aa000000000000000000000000000080003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) r20 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r20, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0x4, {{@in6=@private1, @in6=@dev={0xfe, 0x80, '\x00', 0x8}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2f}}, [@migrate={0x9c, 0x11, [{@in6=@remote, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @in=@loopback, @in6=@private2, 0x33, 0x1, 0x0, 0x3501, 0x2, 0x2}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xec}}, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 22m0.875314666s ago: executing program 33 (id=1817): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) (async) syz_usb_connect$midi(0x0, 0x5a, &(0x7f0000000700)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x582, 0x108, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x7, 0x80, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0xa, 0x2, 0x40, 0x9, 0x8, 0x22, {0x11, 0x25, 0x1, 0xd, "d09b82c382fade2afb2114195c"}}}, {{0x9, 0x5, 0x2, 0x3, 0x400, 0x6, 0x3, 0x1, {0x13, 0x25, 0x1, 0xf, "205c205f9cc187328b37e822958b8b"}}}]}}}}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$vim2m(&(0x7f0000000700), 0xb1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000001c0)=@mmap={0x0, 0x1, 0x4, 0x20, 0x0, {0x77359400}, {0x4, 0xfdfd, 0x1, 0x1, 0x0, 0x1}, 0x291d}) (async) r4 = syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x4, 0x2, 0x40, 0x1, 0xff, 0x7}, {0x9, 0x5, 0x1, 0x2, 0x200, 0xff, 0x3, 0x6}, {0x9, 0x5, 0xb, 0x3, 0x40, 0x5, 0xff, 0x2}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r4, &(0x7f0000000100)={0x12, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1004}}}, &(0x7f0000000600)={0x1c, &(0x7f0000000140)={0x40, 0x15, 0x26, "e83f34d7adfe4d97779dfca1a28917098ffc38bb86a25794d2e2da303e06f7159c1e36ad22c9"}, &(0x7f0000000b00)={0xa1, 0x1, 0x400, "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"}, &(0x7f00000005c0)={0x21, 0x0, 0x3, "5dd4e4"}}) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2e04, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x16) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r6, &(0x7f000000a040)=[{{&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)=""/71, 0x47}], 0x1, &(0x7f0000000840)=""/238, 0xee}}, {{&(0x7f0000000940)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002100)=[{&(0x7f00000009c0)=""/142, 0x8e}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/150, 0x96}], 0x3}, 0x3}, {{&(0x7f0000002140)=@qipcrtr, 0x80, &(0x7f0000002380)=[{&(0x7f00000021c0)=""/131, 0x83}, {&(0x7f0000002280)=""/36, 0x24}, {&(0x7f00000022c0)=""/147, 0x93}], 0x3, &(0x7f00000023c0)=""/4096, 0x1000}, 0x5}, {{&(0x7f00000033c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000003640)=[{&(0x7f0000003440)=""/246, 0xf6}, {&(0x7f0000003540)=""/222, 0xde}], 0x2, &(0x7f0000003680)=""/45, 0x2d}}, {{&(0x7f00000036c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003740)=""/106, 0x6a}, {&(0x7f00000037c0)=""/42, 0x2a}, {&(0x7f0000003800)=""/105, 0x69}, {&(0x7f0000003880)=""/146, 0x92}, {&(0x7f0000003940)=""/118, 0x76}, {&(0x7f00000039c0)=""/101, 0x65}], 0x6, &(0x7f0000003ac0)=""/19, 0x13}, 0x5}, {{&(0x7f0000003b00)=@can={0x1d, 0x0}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000003b80)=""/4096, 0x1000}, {&(0x7f0000004b80)=""/232, 0xe8}, {&(0x7f0000004c80)=""/59, 0x3b}, {&(0x7f0000004cc0)=""/198, 0xc6}, {&(0x7f0000004dc0)=""/55, 0x37}, {&(0x7f0000004e00)=""/169, 0xa9}, {&(0x7f0000004ec0)=""/247, 0xf7}, {&(0x7f0000004fc0)=""/175, 0xaf}, {&(0x7f0000005080)=""/27, 0x1b}], 0x9, &(0x7f0000005180)=""/154, 0x9a}, 0xfffffff8}, {{0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f0000005240)=""/146, 0x92}, {&(0x7f0000005300)=""/4096, 0x1000}, {&(0x7f0000006300)=""/141, 0x8d}, {&(0x7f00000063c0)=""/54, 0x36}, {&(0x7f0000006400)=""/151, 0x97}], 0x5, &(0x7f0000006540)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000007540)=@ax25={{0x3, @default}, [@null, @default, @remote, @netrom, @bcast, @remote, @null]}, 0x80, &(0x7f0000008ac0)=[{&(0x7f00000075c0)=""/8, 0x8}, {&(0x7f0000007600)=""/5, 0x5}, {&(0x7f0000007640)=""/54, 0x36}, {&(0x7f0000007680)=""/230, 0xe6}, {&(0x7f0000007780)=""/244, 0xf4}, {&(0x7f0000007880)=""/235, 0xeb}, {&(0x7f0000007980)=""/115, 0x73}, {&(0x7f0000007a00)=""/143, 0x8f}, {&(0x7f0000007ac0)=""/4096, 0x1000}], 0x9, &(0x7f0000008b80)=""/105, 0x69}, 0x4}, {{&(0x7f0000008c00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000009f00)=[{&(0x7f0000008c80)=""/44, 0x2c}, {&(0x7f0000008cc0)=""/106, 0x6a}, {&(0x7f0000008d40)=""/85, 0x55}, {&(0x7f0000008dc0)=""/94, 0x5e}, {&(0x7f0000008e40)=""/159, 0x9f}, {&(0x7f0000008f00)=""/4096, 0x1000}], 0x6, &(0x7f0000009f80)=""/177, 0xb1}, 0xb}], 0x9, 0x4001, 0x0) (async) clock_gettime(0x3, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000080)={0x2b, 0x0, 0xffffffc5}) (async) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000300)={r8, 0x1, 0x6, @remote}, 0x10) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r9, 0x8004f50e, &(0x7f00000002c0)) (async) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r10, 0x1) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f0000000000)={0x0, 'vlan0\x00', {0x2}, 0x10}) shutdown(r10, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) close_range(r11, r7, 0x2) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 21m45.705530298s ago: executing program 1 (id=1862): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x4, &(0x7f0000000300)=0x7, 0x4) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2}, @void, @val={0xc, 0x99, {0x5, 0x3e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x6, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, 0x1}, 0xe) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0402030c"], 0x7) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000100)=""/233, &(0x7f0000000200)=0xe9) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000000c0)={0x0, 'batadv0\x00', {0x4}, 0x7}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x9, 0xc8, 0x6, 0x5, "3cb218036da9a487"}}}, 0x10) 21m44.28102389s ago: executing program 1 (id=1864): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x255}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = syz_usb_connect$hid(0x5, 0x5f, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44e, 0x120b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x84, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x77, 0x2, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x4022f4442ddecb9d, 0x3, 0x3, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000540)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB=' !)'], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)="d80000001c0081ee4e81f782db44b904021d0802010000000500f0a1180002000000000000000e120a000f0100810401a8001600200001400300000803600cfab94dcf5c049118312d655179c0420df0f820862161c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e002c2827a3aeb44009fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x300060d1) r10 = dup(r7) syz_ublk_setup_queues(r10, r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x10002, 0x27e}, &(0x7f0000001240)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x988a, 0x5420, 0x0, 0x10000003, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5240, 0x200, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd15, 0x10, 0x1, 0x262}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x20002, 0x1, 0x1, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r4, '\x00', {0x0, 0x5, 0x0, 0x0}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$cgroup_ro(r10, &(0x7f00000007c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x400000, 0x0, 0x7, 0x0, &(0x7f0000000340)=0x37}) 21m41.462828675s ago: executing program 1 (id=1872): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) (async) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x1c, 0x5e, 0x101, 0x0, 0xffffffff, "", [@typed={0xc, 0x10, 0x0, 0x0, @u64}]}, 0x1c}], 0x1}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) (async) syz_usb_connect(0x3, 0x24, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x6, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffce3}}, 0x20) (async) shutdown(r5, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) r8 = dup(r4) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r7, 0x0, 0x80000000}, 0xc) (async) ioctl$SNDCTL_DSP_GETIPTR(r8, 0x800c5011, &(0x7f0000000000)) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f00000041c0)={0x4}, 0x2) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x0, 0xc95a, 0xf, 0x8, 0x80, 0x4, 0x3, 0x80000000, 0x20000006, 0x4d, 0x9, 0x5d, 0xa, 0x5, 0xffff2d38, 0xffffff03, 0x6, 0x3, 0x0, 0xe, 0x7, 0x0, 0x7, 0x23c5b, 0x1, 0x20, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0x3e, 0x4000008c, 0x6, 0x5, 0x0, 0x4, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x6, 0x4, 0x1, 0xf], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x2, 0x9, 0xfffffffe, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x0, 0x312, 0x78, 0xe, 0xfffffffe, 0x4, 0x7, 0x7fff, 0x5, 0x400, 0x401, 0x7, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0x1, 0x4e2, 0xc, 0x4, 0xb, 0x10000, 0x9, 0x8, 0x1009, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x0, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x94f, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x7, 0x5, 0xfffffffe, 0x6, 0x8d2, 0x9, 0x5, 0x8002, 0x0, 0x5, 0xb, 0x4, 0x5, 0x7, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2, 0x4, 0x6d01, 0x3, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xc8, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x7, 0x3, 0x3, 0x5, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0x0, 0x5, 0x93a, 0x5, 0x2, 0xfffffffc, 0xb9, 0xce7, 0x203, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0xb8, 0x3, 0x28, 0xa620, 0x2, 0x5, 0x1, 0x7ff, 0x14c, 0x20a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x10001, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0xfffffff9, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xb1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd8, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x800, 0x0, 0x1}, 0x20) (async) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, 0x0) 21m40.934044769s ago: executing program 1 (id=1873): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000480), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) mkdirat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x911091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x104000, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000000)={0x2b, 0x18, 0x2, 0x80006, 0xa, 0x5a, 0x2, 0x99}) add_key(&(0x7f0000000140)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0) chroot(&(0x7f0000000080)='./file0/file0/../file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) rmdir(&(0x7f0000000180)='./file0\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000011}, 0x24004980) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000240)="c4a179119ed0a22da936660f3882460a0f32460f20c247aab959b8aac30f01c1c74424008800c0fec744240200180000c74424060000000066440f3882980100000024ba6100b800000000430f38077d382666470ff6050080000066410fc7768c", 0x61}], 0x1, 0x33, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x200}) mmap(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x4, 0x6013, r6, 0x100000000) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r7 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r7, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 21m40.69100389s ago: executing program 1 (id=1875): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000000)) 21m38.285102706s ago: executing program 1 (id=1879): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x140001, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000080)={0x20004, r2, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x1, r5, 0xff, 0x100007, 0xa, 0x1ff, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) ioctl$SIOCGETNODEID(r6, 0x89e1, &(0x7f0000000180)={0x2}) recvfrom$inet6(r8, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r8, 0x0, r7, 0x0, 0x10000008ebc, 0x0) pread64$ublk_ch(r7, &(0x7f0000001f80)=@buf_max_buf, 0x1000, 0x7) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r10, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r10, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r10, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r10, 0x0, r9, 0x0, 0x20000000042, 0xc) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f", 0x12}], 0x1}, 0x200040d0) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r11, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) 21m37.34723223s ago: executing program 34 (id=1879): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x140001, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa8203, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000080)={0x20004, r2, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000440)={0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x59, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000280)={0x1, r5, 0xff, 0x100007, 0xa, 0x1ff, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r8, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) ioctl$SIOCGETNODEID(r6, 0x89e1, &(0x7f0000000180)={0x2}) recvfrom$inet6(r8, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r8, 0x0, r7, 0x0, 0x10000008ebc, 0x0) pread64$ublk_ch(r7, &(0x7f0000001f80)=@buf_max_buf, 0x1000, 0x7) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r10, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r10, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r10, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r10, 0x0, r9, 0x0, 0x20000000042, 0xc) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f", 0x12}], 0x1}, 0x200040d0) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r11, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) 20m50.890120903s ago: executing program 6 (id=1974): r0 = socket(0x10, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x40, 0x4, 0x1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000000)=0xa942) accept4$bt_l2cap(r3, 0x0, 0x0, 0x80000) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r4, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$VHOST_VDPA_GET_VQS_COUNT(0xffffffffffffffff, 0x8004af80, &(0x7f0000000000)) socket$tipc(0x1e, 0x5, 0x0) fsmount(0xffffffffffffffff, 0x1000000, 0x20) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f00000000c0)=0x6, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x6f479580, 0x0, 0x1002, 0xffffffff}, 0x10) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f0000fff000000001000a0000", 0x1c) 20m50.238909066s ago: executing program 6 (id=1976): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz0\x00', {0x3ff, 0x3, 0x2, 0x10}, 0x49, [0x7, 0x0, 0x9, 0x5, 0x7, 0xe, 0x8, 0x61924c86, 0x9, 0x5c3, 0xfffffff8, 0x7, 0x1, 0x2, 0xffffffff, 0x712b, 0xdd7, 0x6, 0x1, 0x0, 0x8, 0x0, 0x7ff, 0x0, 0x7, 0x200, 0x2, 0x9, 0x2, 0x300, 0x8, 0x80000000, 0x1, 0x401, 0x0, 0x100, 0x5, 0x4, 0xf3, 0x9, 0x8, 0x4, 0x8, 0x1, 0x40, 0x400000, 0xb, 0x5, 0xbc, 0x6, 0x10000, 0x80, 0xff, 0x21e, 0x5, 0xe000, 0x7, 0x8cc, 0x3, 0xbb78, 0x4, 0xd, 0x0, 0xc7b], [0x0, 0x8, 0x2, 0x1, 0x2d4e, 0x2, 0x40, 0x6, 0x4, 0x3ff, 0xe93, 0x5, 0x9, 0x8166, 0x8, 0x85, 0xe, 0x6, 0xfff, 0x7, 0x7, 0xfffffffd, 0x2, 0x7, 0x9c82, 0xfffff831, 0x9, 0xeb, 0xd, 0x8001, 0x3, 0x4, 0x1, 0x4008, 0x4000000, 0x3, 0x3b, 0x10001, 0x9, 0xe, 0x101, 0x3, 0xffffffff, 0x3, 0x40, 0x100, 0x9, 0xffff8f98, 0x4000, 0x7f, 0x6, 0xfffffffe, 0xae, 0x8, 0x736, 0x9, 0x8, 0xc, 0x7ff, 0x8, 0xb, 0x2, 0x3e, 0x819], [0x0, 0x9, 0x3, 0x1000, 0xad, 0x2, 0x0, 0x7f, 0x7, 0xffff, 0x9, 0xfffffffd, 0x0, 0x7, 0x5, 0x1cc3, 0xd87e, 0x4, 0xff0, 0x7, 0x4, 0x101, 0x9, 0x7, 0x1, 0x9, 0xc060, 0x9, 0x40, 0x2, 0x9, 0x6, 0x1, 0x1, 0x9, 0x4, 0x4, 0xd8, 0x9, 0x0, 0x9, 0x5700, 0x7, 0x0, 0x7, 0x3, 0x401, 0x8, 0x100, 0x3ff, 0x80000000, 0x1, 0x2, 0xeb, 0x9, 0x4, 0x62a00000, 0x7, 0x45f4, 0xd, 0x0, 0x1, 0x8, 0x101], [0x10, 0x2925b934, 0xffffff80, 0x8001, 0xa, 0x4, 0x0, 0xa, 0xf6c, 0xe, 0x2a0, 0xfffffffb, 0x4, 0x1, 0x2000, 0x0, 0xff, 0xb, 0x3, 0x10, 0x2, 0x7b, 0x4, 0x5, 0x8, 0x2a3, 0xd, 0x4000, 0x1, 0x9, 0x2, 0x9, 0x51, 0x0, 0x6, 0x1, 0x55, 0x3, 0xc, 0xffffffff, 0x4, 0x6e, 0x8, 0x5, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x2b, 0x0, 0x9, 0x6, 0x0, 0x1, 0x1c501be6, 0xfffffff8, 0x80000001, 0x40, 0x3ff, 0x3, 0x4, 0x1, 0x1]}, 0x45c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)="00ef", 0x2}], 0x1) (async, rerun: 32) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (rerun: 32) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async) accept4$llc(r2, 0x0, 0x0, 0x80000) (async) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xe) (async, rerun: 64) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) (rerun: 64) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) 20m49.424534172s ago: executing program 6 (id=1978): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) r1 = dup(r0) ioctl$TCFLSH(r1, 0x80047456, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) close(r2) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f0000000100)) 20m49.075040905s ago: executing program 6 (id=1980): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x49, 0xd4, 0x2e, 0x20, 0x1397, 0xbd, 0xd4af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x40, 0x7, 0x10, 0x40, "", [{{0x9, 0x4, 0xe7, 0xc, 0x0, 0x7f, 0xaa, 0x6c, 0x7}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000003060101000000000000000002000003037b2ee27f87ef1e0ddab555c15e65fe002116214832ca20ff20601fa4d17a225962b32b25174484d6d19337c31c645fd2260f9bf62e769106e305667789613aa7e1ca3c8b6f94b570a6108a743a75a0119b2f59f1251bfeebe92afb3980449dd310de20000039c939e8482ee03b3731e3a4f890fd41f488e1b61d854202bdaaecce420b1091c01faf3bb19a210d5b9d3985de949cb8f55e819f3b00ab29ba6fdfb4ed7a49b78fc3460eef26ff8a3ea90c9632d4db3f61f43a6300e7cc41e81fa172bce7be20f9c55207f852a22882753ae82c5f68c2221e72b9396316d9b3fe1ae9e24f03086b20b97694d5ab23c8ef8c947b6786a033b42fb91d95b8705f294ae3ba3f9aebde589f1449b7511fa1955d7f31e7e3acded7c463008e25e041d6cdb215b59e"], 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x4004004) 20m47.538797733s ago: executing program 6 (id=1986): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="14000000df250000000000000600000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000c000000180001801400020076657468315f746f5f6261746164760068000380080003800400018021000400168e61c980c444b4043713eac521765bf9faa584a4a40fa48aa7f1c5fd000000300003802c00018008000100fb1300000800010040000000080001000200000004000300040003000600020025000000080002"], 0x94}, 0x1, 0x0, 0x0, 0x840}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast2, @remote}, &(0x7f0000000280)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x8, 0x0, 0x6, @vifc_lcl_ifindex=r4, @multicast1}, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={0x0, @broadcast, @broadcast}, &(0x7f0000000380)=0xc) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) setsockopt$inet_tcp_int(r6, 0x6, 0x19, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r6, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) r8 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r8, 0x0, 0x3, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7d) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x3) setuid(0xee01) semop(0x0, &(0x7f0000000180)=[{0x1, 0xfffd}], 0x1) splice(r6, 0x0, r5, 0x0, 0xfea8, 0xa) 20m46.683355464s ago: executing program 6 (id=1991): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)='(', 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x880) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)={0x40, 0xb, 0x3}, 0x18) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000140)={0x0, 0x2, 0xff, 0x10}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 20m30.779346072s ago: executing program 35 (id=1991): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000080)='(', 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x880) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r0}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)={0x40, 0xb, 0x3}, 0x18) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000140)={0x0, 0x2, 0xff, 0x10}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="200f11000000", @ANYRES16=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14m10.462758413s ago: executing program 7 (id=2594): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) (async, rerun: 64) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (rerun: 64) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000040)=0x7) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="7148f8cecf4f74566c44b42987d276a7dcc27faa980b23be6c7706e1bf868355648b86d4ac7270df568c9926cd50f5a43462c2af6d6c42b86517c4b54e5fb5ef58f6465d8598a85453474312cbd4f3a5e08abc04c4f641c75c770f692823429ca5e6ef1d84f97f0852df6cae28008208bddb4783b3", @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="4a0ac24cc9d2d60c7a3e3bdd7b0119d80ef50ca4974afcee337b9529256583d6748fa955679dd8f1bda9e4309ce551043e1a012a568d92c3f659c98c18b75a62038e839f28ffc7e75b17deea4272db34d8356992aacbdb9edb6b15f382d156d0a5dafc681773aaa0b7ac8c8f330ae2fdf31440b6deafb3de4645049347349a7fab5572d2638ad06e1fc6c1182f7aad1f79fb854302e7e60a90c039e5c909b73dcafa554e2811fde914a2f86b5355f038b12ad496b68f5a9588e10c68342c741ad5f801389eb804b3176ca2ceb334050faef8716b2a6b2efdfcd9316cfa6583700e028b0273a9cc27eda6f0a71732092761ab064e36e6124a56"]) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24a2438, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) (async, rerun: 64) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b659eb5c8cda2bdb0000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x1, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) (async) close(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001040)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000010614000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={0x0}}, 0x20000400) (async) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x34000, 0x63) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x80000000]}, 0x8, 0x0) (async, rerun: 64) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) (rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r8) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) (async, rerun: 64) write(0xffffffffffffffff, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d0000", 0x23) (async) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001180)=ANY=[@ANYBLOB="071bc50045f5289c9f84cef4050338525dd00f5419feb3c8bd60eca3b75ecb600f106548042e964346c6d7e138375f41357f0ae0498a0900b5c18193a8bc962a2206e998f0cf0e840f562b119556fb9518cac3a769cdf61936444f2acd7dc420bd2500"/114, @ANYRESHEX, @ANYBLOB="0100000000714040c25f341d7500f9ec4f009d110c0344953b00", @ANYRESDEC=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) writev(r7, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) 14m9.656985784s ago: executing program 7 (id=2596): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xe4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x30, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2e}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x202, 0x0) sendfile(r1, r1, 0x0, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}}, 0x0) add_key(&(0x7f0000000980)='logon\x00', &(0x7f00000009c0)={'syz', 0x1}, &(0x7f0000000a00)="fb180ecae5", 0x5, 0xffffffffffffffff) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 14m7.035434977s ago: executing program 7 (id=2598): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x2000c851}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x24000850}, 0x4000040) mount$tmpfs(0x0, &(0x7f0000000500)='./file2\x00', &(0x7f0000004d00), 0x800000, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES16, @ANYBLOB="860d7630474366", @ANYRES8=r0]) 14m6.680403787s ago: executing program 7 (id=2599): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000080)={0x1d, r2}, 0x10) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56e, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xf6, 0x1, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x18, 0xf, 0x1, {0x22, 0x26}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xd5, 0x8, 0x21}}}}}]}}]}}, 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect$midi(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0xff, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x7, 0x10, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x1}}}}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000580)={0x14, &(0x7f0000000840)={0x0, 0x11, 0x26, {0x26, 0x10, "8a65661a8081cd446e16958d3c956620ff0868bb9200000000000000006a3c000000bc95"}}, 0x0}, 0x0) read$FUSE(r3, &(0x7f0000004500)={0x2020}, 0xfffffe0c) 14m5.939328623s ago: executing program 7 (id=2600): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0x8, 0xf8, 0x5b, 0x16, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7800, 0x700, 0x3, 0x9}}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="a7613196ffca94bccce758d6b872216dc47a38d3b7ce890e3598d2b92d", 0x1d}, {&(0x7f00000000c0)="c9106a490822fa6094ed00119832ab1e4057dca022611aba51f2dd22d983e65b156d52c79bb452c27516e444aee8", 0x2e}], 0x2, &(0x7f0000000200)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @remote}}}], 0x38}, 0x0) 14m5.74697919s ago: executing program 7 (id=2601): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) readv(r2, &(0x7f0000001840)=[{&(0x7f00000001c0)=""/255, 0xff}], 0x1) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x14, 0x0, 0x1, 0x4070bd28, 0x1}, 0x14}}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) readv(r3, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000280)=""/39, 0x27}, {&(0x7f00000002c0)=""/25, 0x19}, {&(0x7f0000000440)=""/115, 0x73}], 0x4) (async) readv(r3, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000280)=""/39, 0x27}, {&(0x7f00000002c0)=""/25, 0x19}, {&(0x7f0000000440)=""/115, 0x73}], 0x4) fcntl$setown(r2, 0x8, r0) r4 = gettid() tkill(r4, 0x13) (async) tkill(r4, 0x13) r5 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000d00)={0x34, &(0x7f0000000900)={0x0, 0xd, 0x1, "8b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000d00)={0x34, &(0x7f0000000900)={0x0, 0xd, 0x1, "8b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 13m50.422799917s ago: executing program 36 (id=2601): r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) readv(r2, &(0x7f0000001840)=[{&(0x7f00000001c0)=""/255, 0xff}], 0x1) fcntl$setsig(r1, 0xa, 0x12) dup2(r1, r2) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x14, 0x0, 0x1, 0x4070bd28, 0x1}, 0x14}}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) readv(r3, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000280)=""/39, 0x27}, {&(0x7f00000002c0)=""/25, 0x19}, {&(0x7f0000000440)=""/115, 0x73}], 0x4) (async) readv(r3, &(0x7f00000004c0)=[{0x0}, {&(0x7f0000000280)=""/39, 0x27}, {&(0x7f00000002c0)=""/25, 0x19}, {&(0x7f0000000440)=""/115, 0x73}], 0x4) fcntl$setown(r2, 0x8, r0) r4 = gettid() tkill(r4, 0x13) (async) tkill(r4, 0x13) r5 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b36cec20ca08602058c60102030109024b0e01000000000904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$rtl8150(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000d00)={0x34, &(0x7f0000000900)={0x0, 0xd, 0x1, "8b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000d00)={0x34, &(0x7f0000000900)={0x0, 0xd, 0x1, "8b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m54.467546493s ago: executing program 4 (id=3038): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x98, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x84, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}}}]}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private2}}}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 7m54.088633114s ago: executing program 4 (id=3040): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x20, 0x11, 0x4f, {0x4f, 0x33, "af5c874dd4d2764dd93415785b74d35a61fbcf3d4895b6bda278066fd0c82461518a11e5f524c074fef308aa7c2827adde0c3d7b6fe52c5065baadcc5a554ad40cea1c6b93c2f3afcfa15560a0"}}, &(0x7f0000000140)={0x0, 0x3, 0x7b, @string={0x7b, 0x3, "cc6920423f928100a60d502eabaeed43f30d5d83dccc44d6fe3ce0dc98329bfe0dbdd20795a083460f8ab9a84d0ecd3c012f9034e9eae7c8dff25d910beaef7722946ffb8db38b3827f04e7764816ff3691365447e91d597a298a78dd8cef7b693e0456fbe0c4f7824188341a27d0d5ccf35e2c728d83b2f88"}}}, &(0x7f00000004c0)={0x34, &(0x7f00000005c0)=ANY=[@ANYBLOB="0015710000002987637b64b618b6083a4cbef604030b23d6b4915d87f43909f9981651ad79bb3940faccd75822d1ff2615b26d9dc822630000000008170000d13d70c18a0f69c8c7ac3b74072db90f0c2d1b3b1f1a70d34070bafa6a3f19fff9984a6d07b4ee16c50b8ee83079aeccecf8b232cab2a64f1d7ce6fb0488898c59bd52d2afbc3baf30aff0ea530914ae6c71b6eb043769cf1ee838debf8807a068d8bcdcd24c587e0059a1843726d1ebcde2341bb513"], &(0x7f0000000300)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x61}, &(0x7f00000003c0)={0x20, 0x0, 0x56, {0x54, "cce24f918ba1eb0d2aefe41158c2ebc8c2fa5752fc5a54659668871f044fc4d10554bd742ae0384f959649dabd3203727dc6c49fd01c6ebb411bb1b4b30d9dae773bc96b00aedba9a65cbfe2f950ef2dea9ceb2f"}}, &(0x7f0000000440)={0x20, 0x1, 0x1, 0x32}, &(0x7f0000000480)={0x20, 0x0, 0x1, 0x6}}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000000500)={0x20, 0x10, 0x2, '!k'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x23a, 0x101000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000000c0)={0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, 't'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x8, 0x10000, 0x3, 0x4002004c2, 0x1, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x10000) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x9a5c81) 7m48.67299555s ago: executing program 4 (id=3047): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x12, 0x0, 0x2, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x30, 0x0, "2e86741490f5"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa0000000}, @sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0xc0) 7m48.274845285s ago: executing program 4 (id=3048): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xc000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') setxattr$system_posix_acl(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [{0x2, 0x2}, {0x2, 0x4}, {0x2, 0x2}], {}, [{0x8, 0x4}], {0x10, 0x5}, {0x20, 0x7}}, 0x44, 0x2) ioctl$PTP_SYS_OFFSET_EXTENDED(r0, 0xc4c03d09, &(0x7f00000003c0)={0x12}) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) ptrace(0x4207, r3) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000cc0)={{0x2, 0x4e22, @private=0xa010102}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x6, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}, 'veth1_to_batadv\x00'}) mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, r2}}, {@version_9p2000}, {@aname={'aname', 0x3d, '\'\'[.$'}}, {@posixacl}, {@cache_readahead}, {@cache_none}, {@privport}]}}) 7m46.745436807s ago: executing program 4 (id=3050): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) pwritev(r0, 0x0, 0x0, 0x4, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0101fdffffffffdbdf252b00000008000300", @ANYRES32=r2, @ANYBLOB="059b00030000002a00"], 0x28}}, 0x20004800) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) (async) getsockopt$bt_hci(r5, 0x84, 0xd, &(0x7f0000002740)=""/4122, &(0x7f0000000000)=0x101a) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000, 0x0) ioctl$SOUND_MIXER_INFO(r6, 0x805c4d65, &(0x7f0000000600)) 7m41.247683113s ago: executing program 4 (id=3053): setresuid(0x0, 0xee01, 0x0) (async) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) (async) ioctl$NILFS_IOCTL_GET_VINFO(0xffffffffffffffff, 0xc0186e86, &(0x7f0000000140)={&(0x7f0000000080)=[{0x2000000006, 0x6, 0x1, 0x6a06}, {0x3, 0xfff, 0x5, 0x70}, {0x800, 0x80000001, 0x0, 0x3}, {0xfffffffffffffe00, 0x3, 0x100000000, 0x4}, {0x93, 0x8, 0x382, 0x6}, {0x9, 0x5, 0x5d5, 0x31000}], 0x6, 0x20, 0x1, 0x4}) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)) 7m40.975326707s ago: executing program 37 (id=3053): setresuid(0x0, 0xee01, 0x0) (async) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) (async) ioctl$NILFS_IOCTL_GET_VINFO(0xffffffffffffffff, 0xc0186e86, &(0x7f0000000140)={&(0x7f0000000080)=[{0x2000000006, 0x6, 0x1, 0x6a06}, {0x3, 0xfff, 0x5, 0x70}, {0x800, 0x80000001, 0x0, 0x3}, {0xfffffffffffffe00, 0x3, 0x100000000, 0x4}, {0x93, 0x8, 0x382, 0x6}, {0x9, 0x5, 0x5d5, 0x31000}], 0x6, 0x20, 0x1, 0x4}) getsockopt$inet_mreqsrc(r0, 0x0, 0x53, 0x0, &(0x7f0000000040)) 3m17.647845367s ago: executing program 8 (id=3762): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000000)={0x2, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @local}}}, 0x108) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005140)={0x188, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xd8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x9c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private2}}}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008000) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000300), 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x64, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x64}, 0x1, 0x0, 0x0, 0x20010085}, 0x4000010) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="1d0098f896bac345318106608a80aceec1e40617c827c5e009268c78b1d2f77a82e3776d7a89b47bd2a7fbec7aa424d12ecf9a6b5c304c002cd50cb9522edafe1274e5f755bd6e636cedbfc2ab26471988feff1993cba20f051fcba49c071ae91f8b6c28eea6fd36c998ded1834c8d51a68c86a784c87627b5a8eab78bb0644a71f214baa42d9cfbd3a6c0f3152fdcbbf60d4b21aa655306e85d2151f760f6b98506a07a46a09376f693385b00000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf250700000008000300", @ANYRES32=r1, @ANYBLOB="080005000c0000001400040076657468305f746f5f62726964676500"], 0x38}, 0x1, 0x0, 0x0, 0x44041}, 0x44090) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) (async) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) (async) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000000)={0x2, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @local}}}, 0x108) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000005140)={0x188, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xd8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_NAT={0x9c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private2}}}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008000) (async) socket(0x10, 0x803, 0x0) (async) sendto(r4, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) (async) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000740)={&(0x7f0000000300), 0xc, &(0x7f0000000700)={&(0x7f0000000400)={0x64, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}]}, 0x64}, 0x1, 0x0, 0x0, 0x20010085}, 0x4000010) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="1d0098f896bac345318106608a80aceec1e40617c827c5e009268c78b1d2f77a82e3776d7a89b47bd2a7fbec7aa424d12ecf9a6b5c304c002cd50cb9522edafe1274e5f755bd6e636cedbfc2ab26471988feff1993cba20f051fcba49c071ae91f8b6c28eea6fd36c998ded1834c8d51a68c86a784c87627b5a8eab78bb0644a71f214baa42d9cfbd3a6c0f3152fdcbbf60d4b21aa655306e85d2151f760f6b98506a07a46a09376f693385b00000000", @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf250700000008000300", @ANYRES32=r1, @ANYBLOB="080005000c0000001400040076657468305f746f5f62726964676500"], 0x38}, 0x1, 0x0, 0x0, 0x44041}, 0x44090) (async) 3m17.325530086s ago: executing program 8 (id=3764): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0xc, "", [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb4, 0x83, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x3b, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_REAPURB(r2, 0x4008550c, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) getsockopt$inet_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000040)) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000022, 0x0, 0x3}]}) r6 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r6, 0xc03064b7, &(0x7f0000000200)={r7, r8, r9, 0x4, 0x80000003, 0x0, 0x0, 0x0, 0x5, 0xe, 0xff, 0x8000}) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0xc008ae88, &(0x7f0000000040)={0x4f}) 3m13.54377716s ago: executing program 8 (id=3778): syz_clone3(&(0x7f00000003c0)={0x100001000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x66) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x2, 0xfff9, 0xc60, @empty, 0x100}, 0xffffffffffffffff, 0x9dff7ffc}}, 0x48) pidfd_send_signal(r0, 0x5, &(0x7f0000000180)={0x5, 0x77, 0xfffffff8}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000002280)='nfsd\x00', 0x0, 0x0) 3m11.85409787s ago: executing program 8 (id=3783): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@code={0xa, 0x54, {"36664c0f3a16cb0df047f650000f35c422b500ec430f001ef266420f0179000f35c46279bf53ff66baf80cb89a571d8cef66bafc0c66b8970066efb8010000000f01d9"}}], 0x54}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x86, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24660f38816810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80c430f01c4ef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f21f835030009000f23f8450f2244c4417c50cc"}}], 0x86}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x36900, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x140) ioctl$VIDIOC_QUERYCTRL(r2, 0xc0445624, &(0x7f0000000340)={0xc, 0x281, "eff34541fc6ee8ae5300000000000000000000000000009827a256506d91b500", 0x5, 0x3, 0x6, 0x5, 0x1a04}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = epoll_create1(0x80000) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r5, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f0000000140)=[{r7, 0x8}], 0x1, 0x8000007) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m10.467118514s ago: executing program 8 (id=3788): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000140)='./file1\x00') (async) r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c0000180037801300010071747228", @ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x8800) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) r3 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) (async) syz_open_dev$video(&(0x7f0000000180), 0x7, 0x0) 3m10.019242924s ago: executing program 8 (id=3791): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f5e0325010ebc000000000000008000f0fffeffe809005300fff5dd005e1faafc27a3c95110000000224e224e0000fa13ed155f7a3d42121f5a760376b980972e88a59a0f62fec210e5046d67fd4e4838368e7ef6714380e957d7475c202d259d53540f1877ba745f25a09db6d45cf9f8aa6d78781ca6712685f0cc267e3dcbd05e8d72eaa3a692059301f266b98e6f0b1ba74e6bcc1d7e3db9d14d902945cdce1e9ae466fe10b436b2c96be3202f58c6094965d777de062c0800000000000000bbd631ff8c13380c4fbb15d472b3805cada3b2252aef13c1b962ed13a4d252b83e50f7e869b97c69030eaa1f92e32801ba29f54c086d6c70a8e5fe0bd07af5ce925c2a0dc46205006e502d3ce51a26a9d644cfce5b6cf3f3fe85a70eef26071ecb25658061ea80deab5198733224593c30723c2a55529cf332ab44805ac9aa0083b2ce04ac608ae3ce670ed933fbb6b48ac44afc7267243fb00450c4042d433a8ccaf021d0737a58530e1812132bc33e25e7a7d88095a65cac368afa56cc21e8c489a47227a63e8826352d4025c8c5e4102364fdd3870695caf4435d483ce3f384de3544c2bf9dc70ecea5ede1c593e36022bfccccd683d0e00affa854179f07a09d2880e29d85bc4af46b569f607fa8315beca17764359c9522d8bcf0dba02f2969079962d0e61aced91301f8295676657d56e040c5aab7f80091d5c20eea00"/564, 0x234}], 0x1) 2m54.755022041s ago: executing program 38 (id=3791): r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="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"/564, 0x234}], 0x1) 2m54.509980796s ago: executing program 3 (id=3848): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x1, 0x46, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYRES16=r1, @ANYRES16=r1], 0x0) 2m53.726522077s ago: executing program 3 (id=3849): r0 = socket$netlink(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000003500)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000003540)=ANY=[@ANYBLOB="84140000150001"], 0x1484}], 0x1}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x40384708, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xa000, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000100)=0xaae, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r3], 0x0) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) pselect6(0x40, &(0x7f0000000180)={0x8, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x3, 0x4}, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f00000002c0)={0x8, @sliced={0x6, [0x6, 0x6, 0x6, 0x400, 0x8, 0x1ff, 0x3, 0x0, 0x79a, 0x7, 0x150a, 0x3fff, 0xf, 0x8, 0x6, 0x2, 0xfffb, 0x7, 0xfffd, 0x7, 0x80, 0x8000, 0x2, 0x4294, 0x4, 0x5, 0xeb95, 0x1, 0xa, 0x0, 0x5, 0x7, 0xffff, 0x7f, 0xa62c, 0x7, 0xffff, 0x8, 0x7fff, 0x9, 0x6, 0x9, 0xf, 0x8, 0x193, 0x9, 0x7, 0xfcc4], 0x6}}) syz_usb_connect(0x1, 0x51, &(0x7f0000000040)=ANY=[@ANYRES32=r1], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 2m52.448748679s ago: executing program 3 (id=3854): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async, rerun: 64) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async, rerun: 64) r1 = socket(0x40000000015, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000440)={'veth1_to_batadv\x00', 0x305d, 0x6a}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (rerun: 64) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1f) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x303}, '\x00', "ec094e071cc80f218d360356a936a7e3971a8c35c47e580400", "cf00", "fffffffffffffffd"}, 0x38) (async) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYRESDEC=r0], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 2m52.161496186s ago: executing program 3 (id=3855): r0 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x4, 0x0, 0x0, &(0x7f0000001940)={0xa, &(0x7f0000001700)={0xa, 0x6, 0x201, 0x4, 0x10, 0x0, 0xff, 0x10}, 0x0, 0x0}) syz_usb_connect(0x4, 0xa3d, &(0x7f0000001980)={{0x12, 0x1, 0x201, 0x30, 0x8a, 0xe1, 0xff, 0x9fb, 0x602a, 0x8a1a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2b, 0x4, 0x3, 0x1, 0xe0, 0x5, "", [{{0x9, 0x4, 0x2, 0x8, 0x2, 0xa, 0xd6, 0xf6, 0xe, [], [{{0x9, 0x5, 0xf, 0x3, 0x20, 0x0, 0x9, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x8000}, @generic={0x89, 0x22, "954000db26fe5ee5a3616137e317cf295afeb9cb1428cebbb52626a8870b9e868eba1b63773fc86125d988014ed58d7af95408f7df61034eed39265734de16c017f8738432dbe2cc298a3f550c7dd4441cadc9a11063c1095704a0bda4060eb03b9cd42c010483bba34224d484afec821825daeef491a2148f67598c428305e353a5739c0ff97c"}]}}, {{0x9, 0x5, 0x8, 0xc, 0x200, 0xb, 0x3, 0x9, [@generic={0xf6, 0x24, "6c45267f75a156650a765374e5fa4b194dfcee71df15ac0eb81b17f6dd71cf086053d10e805cdc4b9b3946453e5f416af038ee8192a0b417133998aabb452d35c7bc7fe57db397f442e1f1deb0f26514a59da71eafe70e61b73df8aa181fd7479ead58b6b60a1ab8138d442a6e2a17a3509fe36445b2a50058a2b5420bd91032170609d428daa4c729b7682dc68c15144c72c565e7acf2df72388914f0f3866ce2e651327df5e572c5820d90dddfa3c31e2df0545460c3ae689591c28198d9d418b97dfd7a152967687fa8608542f13d72d32c8e2b7bdb914651033cabef467b06ddb02ce06fa04f7251e0b6ca9415696abc9ef4"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x3580}]}}]}}, {{0x9, 0x4, 0xd6, 0x6, 0xc, 0x8e, 0xc8, 0x1a, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0x35}, [@processing_unit={0xb, 0x24, 0x7, 0x2, 0x4, 0x6, "3ba6e9f4"}, @mixer_unit={0xa, 0x24, 0x4, 0x4, 0xe0, "f3bccc9877"}, @selector_unit={0x9, 0x24, 0x5, 0x6, 0x52, "0fe36f71"}, @feature_unit={0xd, 0x24, 0x6, 0x4, 0x5, 0x3, [0x4, 0xa, 0x8], 0x2}]}], [{{0x9, 0x5, 0x80, 0x1, 0x200, 0x6, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xb4, 0x3}, @generic={0xa2, 0x6, "d1ab266ff114c3ba934787ee0d2075ec7d234bb7e9291fe5729f483719dd8c682fcaa581e88791c6cbedcc8097225b3c95953e3c6203232492c6f4a9a064a17c323f7b6af61fa0933eafd84bbd04da5fb8084430e552ed0c1818689c6b83aeb6540a5b00ef98b9e24451c31fd7b0aab1f353df9f3534688cdcca7108654597bd2dd745d022a4a6cb263c1a86153b7587c76abf9a376a9926950b503584f7de00"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0x8, 0xc4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x3}, @generic={0xc7, 0x3, "c1bd67ba6e99b95bf4452eb9c0d6b6169d652ed03bb399e8b8d08493fe663c875609a9042a4b2e3368dddcfad41c552c9493b8329c4d112e7015d6949909b8135a76accda1b220ce8f32655691f95c37eb7c747112bea5b62098f76c0efd9bdd389052b42d8a01ce751ea92f30e86f060be3f9729e85d767fe3fcf584a99e3bec02e032dac81b343f549cac5c9bf2606c69516e2b195ea1736fc6ae043e0d62bb570e0ee9bb242f002f68f8b8e7caf6e698df751770595090e0d8e1064370d1188c5307d50"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x84, 0x3, 0x8}}, {{0x9, 0x5, 0x8d, 0x3, 0x40, 0xfe, 0x8, 0x40, [@generic={0xc1, 0x2, "9f5e33c2611d1194e7fbac17c1dda5e105b31b3f455b0e37aa01271a580a8d8498cd4b6ac57a84d6aa5f948d80fa4e1d3f5dee43d1bf44f4c04d7c0c5be52ad02b9287f98144906eea6dcd518dad0ed7e1d942803d039016b895855d03a4f993f0b6fd688dd48f80aab5e60056d3ee3dbecfaa0886762cccba68a81324aec16c0d547606481d104d226e30674001b4efe8a499a50fcd30c03efe1ae1db7d5367d4a6a11982f17811f7efd8854132f18fb2a141355e3697b61982c748897884"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x10, 0x6, 0x5, 0x72, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc1, 0xb9b}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x4, 0x2, 0x82, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xa, 0xcec}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x0, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x481}]}}, {{0x9, 0x5, 0x5, 0x10, 0x40, 0x6, 0x7, 0x0, [@generic={0xdf, 0x22, "e9b948ca2520aeecb215bfc26ef0fe63cd9792ae4b208f151980e0ef65f51fb2d9478c5003b2df316b361f0312c564f72e7063dafeb9ac252ed1d51c8d81800718e2c21e12c28b7ac38ebd70356f6733487eed55cdd61023319ee1a514a92418a2f4335e94f0c0ffb60fd7125e6e6a71ee362b7131823395b3c7465bd8771572984ca92c08e776f3d40b5587435994d176b04a55bb781a87e3ba7ad9d1a0a11cfda0a3fbe01914f32f5338aacc11efc2c80d8a7b0b8085f63abeeb4b42e9d903e333a5ac99b07f70b93efee1c15d1d530d0a62b31ea971b56172d09a25"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x0, 0xd, 0x7, 0x86}}, {{0x9, 0x5, 0xc, 0x0, 0x210, 0x3, 0x6, 0x99, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xa, 0x4}]}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x4, 0xc3, 0x3, [@generic={0x84, 0x21, "de65d6a834fc6dd6f9677c1ff1615e20a32e8aff96f65c0805350943f02e20cf0136f4aba4e0c5dd1273b891cb4a7d60dd9fc09fea1c7cadf754a7d704c28d80f92dd74df60c561b9f4893d5b8f2e40bc7eed9b50c7b5e67076eee352f8f6fb6124771995ebd8f9e45133cfbc58f015952a6f21548d72e7b9ac8540d752e4fe3019f"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x40, 0x0, 0x4a, 0xcf, [@generic={0xc2, 0x21, "b0ae544d8825b8b7d3ff22aff07a6ce26dacee924ec1d37ec1fd6cfe364fdb58ef4739d14134b9fa33abf414072dfe05d566a6d7bda20c7127410b0ee782ecafd47b795df57e5ffea474f021757be856964ad0dcc8a340c7aab9f6887d95a0d150c415c2e1644723475fbbe46774790f323394662d231c07bbc497be99e763a1660be15ea6d881ad3b8f7082cf6b65c233c3ef61611fcbe36124f1af6cc4739997f9b5eb077ca940d9f357c76da54407a2ce247cb85fcf892ec12178a8efc20c"}]}}]}}, {{0x9, 0x4, 0x2d, 0x0, 0x4, 0xff, 0x39, 0x9a, 0x8, [], [{{0x9, 0x5, 0x80, 0x4, 0x8, 0xf5, 0x4, 0x9}}, {{0x9, 0x5, 0x7, 0x14, 0x200, 0xf7, 0xe1, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x7}]}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x1, 0x4, 0x7, [@generic={0x37, 0x23, "1268d980af3b3247975696403769d5af67e5383722a04e60d6516d6f31d9eb2c5a22f740ca28656d58f235420132eb4175035cb1d1"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x1}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x8, 0x1, 0x0, [@generic={0x7d, 0x7, "35d90a7439406cc879900703a7de9ffb8c0be8c0eba64aafc014e266a580201954e56951be24d2a43cbed87abdd6c6c60ac676910fe40fb315cd972d6719ad5f6e663c1a30622b208bfb7b1610a9348f1ebd7f40c324a728112eeb5bbc80f5e4049118b1566981ffe4c6227202a2ba1ec8f6c6dc300e6c50420070"}, @generic={0xc5, 0x4, "ce0c66863bdafe598ac38b334aea9fd0092b3747d8e95f944a5065e894b01284be892c18ee59d4d43c5841aca8317ee731ef2f7fa3a7f09b9e326ace956367044f7345977fc2e9fd2e69670b347355dadee5167cab4937f3635a55456dcf8db53dbdd48b72eff16a495ec6f2b1e308046f2e7795cffe09a432c1b96604c390d6846e06986b09323c4563fb59feffcfc06d15a04b4d26206889b1e26d0f7e5b764d821e693a102233ae4a07a512c9c1aaddeb561d8790433a82ba97c91e8e786bba99b1"}]}}]}}, {{0x9, 0x4, 0xd8, 0x2, 0x4, 0x93, 0x19, 0xa2, 0x40, [], [{{0x9, 0x5, 0xb, 0x1, 0x400, 0x9, 0x2, 0x77, [@generic={0x22, 0x2, "d1c13e915f2a763a36d1dcc84e12abf90a5a4ea73214cfdaa1da4a8fa1a837d4"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xff, 0x4}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x1, 0xf7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x4}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x10, 0x0, 0x2, [@generic={0x3e, 0x7, "984d4536e441dc556107c6db14fe45b547f1c5c62b2a7c0f8b61c657f104036e478c8dc32a7d1a5a2e908548d3c2b58e2430920019b94fe705623080"}, @generic={0xf3, 0x10, "7be1ac880376f27f99d63f1f7055b74e58296efb1fd610a8e18b8f3e93e4b68d90a82ebca8106da3889bd03e542878faa1e86d968050e12de2ef1c7c4ad8f324fcccc67098874958d5bc861e4684f196e53f1213b8babd0d6e2f003ccdfbd68b1cbf477e774700593df5f8c9747bba8235e6b2445ba05b2240c6bbda7d05a35f5c83145cf369644913cae803be81a89f081ad131f1598ac6e519fd2f3d5d3040ebc32858dd0be26e3ec16599bf409cb2af2621eb35600779fce0bda1c2abf5e45894232ca5422ab8306b8e74263cf435d282744624f66a2edf64718a4dc6b3aec35a93e41ac0d51b31cfea1aebf3d6c4b7"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x8, 0x1e, 0x4, 0x76, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xb}]}}]}}]}}]}}, &(0x7f0000002840)={0xa, &(0x7f00000023c0)={0xa, 0x6, 0x200, 0x6, 0x8, 0xa, 0x40, 0xf}, 0x6a, &(0x7f0000002400)={0x5, 0xf, 0x6a, 0x2, [@generic={0x5a, 0x10, 0x4, "fac75c5f10e7da3ed5ff7281593a3c4a4b46e9d1a319f980983eef91e328f668f654d69b85c88ec04d00badf87cfba4a02252c80988b9e96c0bad87acdfed877bf06e03a79c997a3e38eb843138a27a9748cdd43c6881c"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x2, 0x10, 0x3ff, 0x5}]}, 0x8, [{0x4, &(0x7f0000002480)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f00000024c0)=@lang_id={0x4, 0x3, 0x813}}, {0xa3, &(0x7f0000002500)=@string={0xa3, 0x3, "0eb1953dd9a5c70714824772bb3d252a1b774f545cb20e13ff80d8c8afe6978aab75914904046db5e34f819bd48b367da38b1406ad18cb1b75c7e46cbee9bc17a53454107587a2b000618acf6543203a8f52547d3638d76c13b2c0aa6e8005e09ae4170b078bd52d36af9703afc78d88c90de83348177eff2f735ff2ace9002e56152241b76f6cccb46f760f13549bf953db25b8e2c739b2d0fbe99c1589c88408"}}, {0x3c, &(0x7f00000025c0)=@string={0x3c, 0x3, "5de4dd9e4a466c463fd11eb5fa5c16dee63da6facd96fc87d350591b97bf3e7e273ad3068d9cad0234fe95c00d5bb9e77e9fe9c9e2994759c804"}}, {0xf4, &(0x7f0000002600)=@string={0xf4, 0x3, "c0d92b41a2e159287c428264dd2e9843e7359c8249ce1cd759f011cf43b13de8e260be586c4ebb2d069369f1bed7b7280e06ce80106204137ee81a0f740c738001f438cb30eb673cd6228bbf7df8059028fbd8e3c3b3f3262152ea2c67e5a8ebc7d9a037a797cf86a9dc92db5cc12c81162403c3fe730a597eda40befab56c920fef1da597ba0ef4b3f596300793b971f7930fb08ccddc4968a3ec7153aa759d9d3554df99c3002236cb0b054c2f7b53e127fa94ce4694ffbbe3d494812a582d1d5a5254a9bbc40faf5c32ba67a34b8da2a373a5a12ea07e3dc1f490e201f204056578110a6724b3755157ca6c165f1b9d8f"}}, {0xb, &(0x7f0000002700)=@string={0xb, 0x3, "0e2e5c6e3ae00c5344"}}, {0x4, &(0x7f0000002740)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}]}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000240)={0x0, 0x18, 0x14, "92a2288ec2285ab169b1f5d58459868f00d48aa1"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904"], 0x0) 2m51.262700093s ago: executing program 3 (id=3857): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc3) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000180)=0x20) unlink(&(0x7f00000001c0)='./file1\x00') syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x6f, 0xde, 0xb7, 0x40, 0x2c7c, 0x306, 0xe445, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x3, 0xc0, 0x4, "", [{{0x9, 0x4, 0xd1, 0xb9, 0x0, 0xff, 0xff, 0xff, 0xb}}]}}]}}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0}) 2m50.494995853s ago: executing program 3 (id=3859): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@loopback, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) r2 = socket$inet6(0xa, 0x80000, 0x9) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000880), 0x101000, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x3207, 0x4) 2m34.028972623s ago: executing program 39 (id=3859): syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x10, 0x0, 0x25dfdbfb, {{@in6=@loopback, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x7, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x6, 0x6e6bc0, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) r2 = socket$inet6(0xa, 0x80000, 0x9) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000880), 0x101000, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x3207, 0x4) 29.670966166s ago: executing program 9 (id=4234): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000002740)={&(0x7f0000000000)={0xa, 0x4e24, 0x4, @empty, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000640)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffffa}}], 0x18}, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r1, 0x0, 0x0, 0x3) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x8, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x24000004) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x4080, &(0x7f0000000140)={@_ha_fsid={[0xe, 0x3]}, {0x8, 0x6, 0x5, 0x6}}, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x5c000000}) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x3f9, 0x10, 0x70bd26, 0x25dfdbfc, {0x0, 0x1}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 29.564851795s ago: executing program 9 (id=4236): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f727400001f000c0007"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='@\n.'], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 27.770540413s ago: executing program 9 (id=4241): r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0x0, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r4, &(0x7f0000000500)=[{&(0x7f0000000340)=""/139, 0x8b}, {&(0x7f0000000400)=""/161, 0xa1}], 0x2) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, &(0x7f0000000080)={0x40, 0x9, 0x44, {0x44, 0x5, "3c653ec44179e74065360280b3b44597687055bbb6652f5b8ece5d56eaf3bda8aec174ca64323a448509a4ba6f8e143c980f3820d91b088765c086b8b55ec27400a5"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x404}}, &(0x7f0000000140)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x7, "f801d833"}, @global=@item_012={0x1, 0x1, 0x6, '>'}, @main=@item_012={0x0, 0x0, 0xa}, @main=@item_4={0x3, 0x0, 0x9, "6f237f7b"}, @local=@item_012={0x2, 0x2, 0x4, "cc90"}, @main=@item_4={0x3, 0x0, 0xc, "17ad1a31"}, @global=@item_012={0x2, 0x1, 0x2, "ac52"}, @local=@item_4={0x3, 0x2, 0x7, "2b0c9c3f"}, @main=@item_4={0x3, 0x0, 0x8, "7e00efe9"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x9, 0x1, {0x22, 0x5b2}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00166d000000dfe224ac946986835f6d6bc4135a7cbb7aa4b3faa1e67ab8a9406eb6ca37e01da21071b11d97cab5ca2db19ab25d4be3fc3c2221710415012a6639d7fc8d01b56c1b51ef75bb0c12aa5fddecd42e465fc0cead9f8f5836b94bd9d3bb32e774677787e80b2dcfe4a214152ad506"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000380)={0x20, 0x1, 0x3f, "30f8c471064d12bfbc17f5dcd15ac9f422cd7140f79d8db76c9482e123af23cebcc1b161ed747c0e070b75e4d6a8dddec0fb8e3c924fc2ee29cd3abf84a393"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x8}}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000300)={0x27, 0x3, 0x80000001, 0xfffffffd, 0x83, "bcd1a1fffffffffeff06080544effe5d471400"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000340)=0xff) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405668, &(0x7f00000004c0)={0x0, 0x0, 0x7}) syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000cc0)={0x14, &(0x7f0000000c00)={0x40, 0x24, 0x48, {0x48, 0x22, "cd1f23fec64dcc73eaf36213ce0ebdc213fa1fb4d55a371ff424b8bf196e8d155b19199fa7105a6a2be4cdd0825fc25e61e34920fc3fced90008511fb78977fe80596fc311bf"}}, &(0x7f0000000c80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000f00)={0x44, &(0x7f0000000d00)={0x0, 0xa, 0x6, "7e3df12c13ac"}, &(0x7f0000000d40)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000d80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000dc0)={0x20, 0x80, 0x1c, {0x101, 0x80, 0x2, 0x9, 0x0, 0x7, 0x6, 0x2, 0x8, 0x27, 0xc1, 0x576f}}, &(0x7f0000000e00)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000e40)={0x20, 0x83, 0x2}, &(0x7f0000000e80)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000ec0)={0x20, 0x89, 0x2, 0x1}}) 24.375461338s ago: executing program 9 (id=4249): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) read$FUSE(r0, &(0x7f00000034c0)={0x2020}, 0xcac) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00044000000000000000000900010073797a300000000038000000020a01"], 0x110}}, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002300), 0x401, 0x0) close_range(r3, r0, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000002340)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) (async) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="680000c988409d316dfb00", @ANYRES16=r2, @ANYBLOB="00082bbd7000fddbdf254b0000000c00a700606600000000000008000300000000000c00a70005000000000000000e00a80066697273746e616d650000000f00a8007365636f6e646e616d6500000c00a600d6000000000000000800030003000000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x804) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFBR(r5, 0x8941, &(0x7f0000000440)=@get={0x1, &(0x7f0000000480)=""/4096, 0x81}) 24.013530709s ago: executing program 9 (id=4250): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x9300, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007"], 0x50}}, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800, 0x2) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="18000000680001"], 0x18}], 0x1}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000) 23.658632644s ago: executing program 9 (id=4252): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x400002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000140)={0xc, r4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x84000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x34, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb8}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 23.151095655s ago: executing program 0 (id=4256): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet6_mreq(r1, 0x29, 0x0, 0x0, &(0x7f0000000040)) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="540100001000010000000008000000000a01010200000000000000000000000000000000000000000000000000000001000200004e2000500000200032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fffffffc33000000ac1414aa0000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000001000000000001040000470000000000000000000000000000000a000100b0000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017"], 0x154}}, 0x24000058) 23.072427211s ago: executing program 0 (id=4257): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r3, &(0x7f0000004200)={0x2020}, 0x2020) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)='T01\n', 0x4}, {&(0x7f0000000040)='F', 0x1}], 0x2) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20800, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}, {@cache_loose}, {@dfltuid={'dfltuid', 0x3d, r6}}], [{@fsname={'fsname', 0x3d, '@:\xa4[!*('}}, {@flag='async'}, {@smackfsdef={'smackfsdef', 0x3d, '.,[}-\xe7$)'}}, {@dont_appraise}]}}) 22.629190325s ago: executing program 0 (id=4260): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="2e00000010008188040f80ec59acbc0413a1f8482a0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x400c084) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/103, 0x67}, {&(0x7f0000000480)=""/191, 0xbf}, {&(0x7f0000000540)=""/4, 0x4}, {&(0x7f0000000580)=""/40, 0x28}], 0x4) fchdir(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x110) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000340)=0x9) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r2, &(0x7f0000008740)=[{{&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, {0xa, 0x4e22, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfff}}}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20000000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x10, 0x1ff, 0x4, 0x4, 0x9, 0x0, 0x50, 0x8b4e, 0x180}}) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x600) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000000)=r7) r8 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x8000, 0x4000) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r8, 0x80184153, &(0x7f0000000300)={0x0, &(0x7f00000002c0)=[&(0x7f00000000c0)="f7", &(0x7f0000000100)="64e1559f9655d8bfcf27682252da3f4fd603180d310b7f03343755661725d1898939b2a38917044095b4afeeb1189f5724", &(0x7f0000000140)="9820fa54c7de23cba6ebc228cce221a2c6379cdbeff307a393c2935629e3f33f305478df8bca6e1aeae39364badfa02976559001c80dd6d1b2f28731994a4f7f77849db5206b63adb62a9c432317319fec0a1b71a3af39b252fee4ae7456751ea07be6af7ebd00da9a5a5ed1748635e61ba374876e8fd0b0dbc04a6388ca8da5f36e2bf51e7d879d106c1b11c0fc025b095a5528177347cca258ab970d11c3b5859dfe0fdfa49d58bc41cdc70485c11b498b524cafe82dde93e308b88c2746bf6d2da800cf74a77536660ea7c8a367a19f2d41a822479da3bae3", &(0x7f0000000240)="8ee91c2d79e0b2e2e2561fb4bb18454ffd8536fc6e594bf38ca9ba7fdd6a4752cc734c391bc9d6e48092a731a24bddfdcc0a45ce5ac24c6cd5870decdca293fbe1f8327fa11af3f2f783df6ce584e427aed2e4ac7a38f6e63fbfbff951a05dbe62c72f04"]}) 21.655278214s ago: executing program 0 (id=4265): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) pipe(&(0x7f0000000500)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x2, 0xfe, 0x0, 0x0, 0x88, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfd}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x0, 0x4, 0x20, 0x0, 0x1000000}]}) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3eb, 0x100, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20000041}, 0x44040000) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r3, 0x4068aea3, &(0x7f0000000080)={0xa4, 0x0, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000240)={0x0, 0x8097, 0x20, 0x0, 0x51}, &(0x7f0000000100), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x610f40, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x3, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x10004, 0x3, 0x80a0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f08c40f009b27000000f2e10a8e690f3271008000c90f30b80e0000000f23d80f215035800000a0c9b9490300000f60b932c00a00b9730200000f32328fe8587db660602fb92dbf0002e6e6006880000000000000000f30", 0x64}], 0x4dd17ed7c0be0334, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x0, r8, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000040)}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f00000002c0)={0x30, r9, 0x0, 0x0, 0x2, 0xa435, 0x4, 0x0}) 20.411144055s ago: executing program 0 (id=4268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x4c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4) (async, rerun: 32) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) (rerun: 32) landlock_restrict_self(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f000000b780)=@newtaction={0x58, 0x31, 0x69b6754e5abcd8c9, 0x50bd28, 0x25dfdbfb, {}, [{0x44, 0x1, [@m_ipt={0xffffffffffffffc8, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x15, 0x6, "b59c8e7bfe12ec4ea42820cca0cbd1d473"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1719e530651ed1be}, 0x5044) (async) r4 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYRES64=r3, @ANYRES64=r0, @ANYRES32=r2], 0x0) msgsnd(0x0, 0x0, 0x401, 0x0) (async) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) 19.848675166s ago: executing program 0 (id=4269): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x0, 0x1000}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0xffffffff, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x816, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1001f, 0x3, 0x4, 0x0, 0x4, 0x0, 0x42ac, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x7c45, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x800000, &(0x7f0000000380)={[{@noprefix}]}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x2, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x0, 0x7, 0x62}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x23}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x90) 8.090602633s ago: executing program 40 (id=4252): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) prctl$PR_MCE_KILL(0x35, 0x0, 0x2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x400002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000140)={0xc, r4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x84000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x34, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb8}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 6.268561076s ago: executing program 2 (id=4293): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00005fd000/0x2000)=nil, 0x2000}}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), r0) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="09002abd7000ffdbdf25250000000e0001006e6574646576000f0002006e657464657673696d30000008008c0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) 6.095299811s ago: executing program 2 (id=4294): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="680100001000010000000000fadbdf2508000000", @ANYRES32=r0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32, @ANYBLOB="0d002b80080003"], 0x168}], 0x1, 0x0, 0x0, 0xc1a6ec5e92f4d87e}, 0x20000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r1}, './file1\x00'}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x2, 0x6b28e7eea7abd1f7, 0xffffffff, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 6.093035449s ago: executing program 5 (id=4295): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201cf5b1097853cf6f8e9363866d0be41d4ca31d3cdf85291dffacca2eb7e96cd5eadf2247a3d8f2503e5be532814a7c5"], 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="140000000082cea765934935a2a3b0ff8739b712440000000c3d7287f1d2dc835889e6d23dc2dc2c"], 0x18}, 0x20002880) syz_usb_connect(0x3, 0x0, 0x0, 0x0) 5.968825971s ago: executing program 2 (id=4296): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0xfffffffc, 0x2) (async) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) read$proc_mixer(r1, &(0x7f0000000480)=""/133, 0x85) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 5.85152239s ago: executing program 2 (id=4297): setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x4, 0x4) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x8000, 0xa4) fchdir(r0) symlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x14}, 0x1}}, [0xdf7, 0xfffffffffffffff2, 0x6, 0x400, 0x7fffffff, 0x0, 0x2a, 0x0, 0x1, 0x2, 0x3, 0x1ff, 0x5, 0x7, 0x560]}, &(0x7f0000000200)=0x100) mkdir(&(0x7f0000000240)='./file0\x00', 0x2) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0xc00, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000003c0)={&(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000400)={0x2, r4, 0x0, 0xcccccccc}) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x4161, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000440)=r2, 0x4) r7 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000480), 0x0) getsockopt$nfc_llcp(r7, 0x118, 0x1, &(0x7f00000004c0)=""/225, 0xe1) quotactl_fd$Q_SYNC(r3, 0xffffffff80000101, 0x0, 0x0) pivot_root(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='./file0\x00') ioctl$XFS_IOC_PATH_TO_HANDLE(r5, 0xc0385869, &(0x7f0000000740)={r7, &(0x7f0000000640)='\x00', 0xc240, &(0x7f0000000680)={@align=0x1, {0x8, 0xa, 0x2, 0x7}}, 0x8, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0xe}) sendmsg$tipc(r8, &(0x7f00000009c0)={&(0x7f0000000780)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x2, 0x1}}, 0x10, &(0x7f0000000980)=[{&(0x7f00000007c0)="4266cd33ddb98cfa53e5efa4b7ae9184af699a0919df11e71f096d2eb606bc04c3f56607f4924a23a5d74abe3854d0fdd5ccccb92c73b9b9043b2db60ebcb1b1beb5f814448c85b535befb0f9be6f835db72b7ed3f41a50de43ff751f74f6ccd9c376f5e", 0x64}, {&(0x7f0000000840)="2b43415b33515ce957c0ef115cdcb0a8a5be1c8730638357af39f67d0ce3545fb8bd8693ddfd48f72d3621e09777b82cbea441365ab6268bb7b83054e606f8c65dbfc16da0bcc81129c2298b", 0x4c}, {&(0x7f00000008c0)="a5701c95db6873f2792ec837838b303284a1be5c1a414f3e1f87", 0x1a}, {&(0x7f0000000900)="2d88ff474c626f42048cfdc5ae77fda24e4e42c868f409729c4b20ba28592b5f7d3f0c38668d1b41cbac3c65b9059cd87e0936cac3c0e0cebd1a6c973fc92ca282bcb5afd32e79e5f0aabc51", 0x4c}], 0x4, 0x0, 0x0, 0x4000004}, 0x4044191) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000a00)={0x0, 0x8, 0x80000001}) ioctl$BTRFS_IOC_DEV_INFO(r8, 0xd000941e, &(0x7f0000000e00)={r9, "debf2bc07989178476c7653c4114b9a6"}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000001e00)={0x8, 0x8, 0x3, 0x1ff, r2}, 0x10) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000001e40)="d110edc4c5be9e74444963836681c31f741ff4d2a436c1abb71440e8c160f06a0cd3a0afa6862ca957301c449b4f957f75b049ca5c020ece04a49797c44b250bf4de3695a67f9c14ca61b52df9f3c06da0f89c2228896be9c49c2f5a8c1df409ff9d32ebe00973a307b43ca4308ac4a9df78efde4aa84f72a6a79744748777de4ae3071c050c10") r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001f00), 0x10002, 0x0) ioctl$RTC_IRQP_SET(r10, 0x4008700c, 0x319) sendto$inet6(r5, &(0x7f0000001f40)="4209de102e443772e6ee3dbefbe3fb59778745c835347d5d5186a13e5cc21e4b006243d3bab6743190fe3457a8ccd609ca952c03670fcd11e91899ae5ed7aa46b9899a23efeff21f61ebae768a508cd91f7e2f81c751ff282c9a3bcc3f8f9781a2c30696a27b6b441bde39f0de19612a2d5b5d4d62704495cfc859b7c8cc950d4f634f3ed31a59a7ed76693bef91452532cff588fdccdb1a22f57eaaadb23a51d7f5bebc9b88a701", 0xa8, 0x20000000, &(0x7f0000002000)={0xa, 0x4e22, 0x80000000, @mcast2, 0x9}, 0x1c) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000002080)={&(0x7f0000002040)=""/43, 0x21000, 0x1800, 0x7ad, 0x2}, 0x20) sendmsg$NFT_MSG_GETGEN(r8, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x7c5b5d7a5bb75912) 5.760967339s ago: executing program 2 (id=4298): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000e40)={0x44, &(0x7f0000000280)={0x20, 0x10, 0x6, "5fc32f2b6213"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000480)={0x14, &(0x7f00000002c0)={0x0, 0x22, 0x100, {0x100, 0xe, "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"}}, &(0x7f0000000400)={0x0, 0x3, 0x35, @string={0x35, 0x3, "9eb12258f56c3ca8f4370fae6b077c94055f1d390b18970649471827781d36f26086c128d33b878f39688aae1d0020ce07418a"}}}, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x0, 0xc, 0x54, "43825aad2fb486a3e2e7d2d925d02aff20411479371f7111ddb6db129ce3b52555fb3701ab38cf2b2422586bdfaa167e5a2e18d06c05dffc6cbf2abe4d2841c10ad9f98b3b1ddf9993150fce324e316612495eda"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000005c0)={0x20, 0x81, 0x2, "7094"}, &(0x7f0000000600)={0x20, 0x82, 0x1, 'A'}, &(0x7f0000000640)={0x20, 0x83, 0x3, "6a05cc"}, &(0x7f0000000680)={0x20, 0x84, 0x1, "bb"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "10fad5"}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRES16=r2], 0x94}, 0x1, 0x0, 0x0, 0x4044050}, 0x8040) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003340)={0x2558, 0xa, 0xa, 0x101, 0x0, 0x0, {0xd, 0x0, 0x5}, [@NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", ""]}}}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_USERDATA={0xf, 0xd, 0x1, 0x0, "e90b1ab007bdc33d63153d"}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x308c3b15bc29c18b}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_EXPRESSIONS={0x2504, 0x12, 0x0, 0x1, [{0x24ac, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24a0, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_DATA={0x2494, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xde, 0x1, "f589dfcc49c82ef0e00d2a12c732ca8bd541e2619e673086f7b392caadb2769742c19f6dcd6c1fd8d7ce014f2e664075411753679fa37ae9d58ea3d2e653c9e9f609ce0c443b2ec709a5e9c2388e8e9b867e6ccc0c87e24c288d654ec6e761b92530e7551093167b9e0007e6bd80537084a9fa4c5baa9af8fa93bab313228bace52c31418cb54478c614ddf1c794f113bd851ecef68c87eac2b6826fd56c6cc74dbcadfa3fe867cae92d70614b3b936f25e21d3498217a9b32f8cca9874d6d12f6fdc42562dc66ad185d076cfc576be8ea078addde92073a657e"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xc5, 0x1, "473acbdf45d2b8aaf992fe76cdf5dfbaacc86ab56c0e494bb0ea6060c5ca821cbf073fcf988fa114c6978d86d46c4a0e63a9b26d260cde9261c43e0d2344a7b2972f90b8c8218b907cea16ae140f5749184feb48c62d0b812518f71a62b00d142df51a8232461b69aea178427fbb253afdd5af3837abdabf3d5ab0a4a3bec7c46e8227abef703c9433c52154d233c0cc4848dc5a9246c111414391377c99ec046a301381a60a96c3a13e43dc2bcda353a503f253148d57ea9fb01c05a86d84f634"}, @NFTA_DATA_VALUE={0x12b, 0x1, "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"}, @NFTA_DATA_VALUE={0xf9, 0x1, "ce3078bc3d6f850916a10ce8468f6d25ed0aa736ccb4b1a149759c5ceb8442c09a4dfa51f39f21e090f8ef5af87cae56759ebe6a5a14d5f87f8ae94508a96b4f4f36c4c10b4f38ff11bd05bfa8c9b72b34b2677369625ff91bdfdf366adbe9c5db462ee0e3cbeaafc06426b1016b2416880e5f594e8e6bf73972279e09dbee9d166884b60792e87d6ca6ebc1f205835375546af6fc16923413c153142f69fe290b92dcef583bbf6fd6c9ff89b997c8b7fdebe55c559a3529cd3e299087cdc14e9dee16dbcfc9a67d148c186d589de4c84f54897f629029f653ad2f3b5aa67067173e6a994168532507f2a0b641cbd084b6abe9d133"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfc8e71c487cbf904}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xa}]}}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}]}]}, 0x2558}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 4.681891879s ago: executing program 41 (id=4269): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0x5, 0x1, 0x0, 0x1000}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x4001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0xffffffff, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x816, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x1001f, 0x3, 0x4, 0x0, 0x4, 0x0, 0x42ac, 0x10, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe43, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x7c45, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x81, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffff7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) mount$cgroup(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x800000, &(0x7f0000000380)={[{@noprefix}]}) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x2, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x0, 0x7, 0x62}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x23}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x90) 3.58766369s ago: executing program 5 (id=4300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000000)="b8010000000f01d9c4a179fabf0a000000650f167b1dc4627978899949091a460f01c2430f12c766baf80cb87c3b9b83ef66bafc0cec66450f388184a1633edccd66baf80cb846c0078def66bafc0c66b82f5166efc74424003a010000c744240279f80000ff1c24", 0x68}], 0x1, 0x19, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.717669635s ago: executing program 5 (id=4301): pipe2(&(0x7f0000000400), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') r1 = fanotify_init(0x0, 0x2) fanotify_mark(r1, 0x1, 0x8000039, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x26, 0x1e, 0x81, 0x8, 0x46, 0xe, 0x75, 0x3, 0xa, 0x3, [0x1, 0xd07, 0x2, 0x4, 0x5, 0x1, 0x0, 0x1]}}) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, &(0x7f0000000100)={0x2, 0x6b6a, 0xa7, &(0x7f0000000000)=""/167}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2.194266075s ago: executing program 5 (id=4302): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x1c, &(0x7f0000000440)=[@in6={0xa, 0x4e21, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1e9}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e22, 0x5, @empty, 0x2800}}, 0xb, 0x1000, 0x20000, 0x0, 0x34, 0x1000, 0x4}, 0x9c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000051c0)={0x1, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x0, 0x0) r4 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) 1.522830959s ago: executing program 2 (id=4303): prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x108101f) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x4000000, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) (async) r3 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x9}, {0x8, 0xaff3, 0xa, 0x5, 0xc, 0x2, 0x9, 0x3, 0x4, 0x13, 0x1, 0x6, 0x12005}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0x3, 0x7, 0xfb, 0x1, 0x3, 0x2}], 0x8}) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000b40)={[0x9, 0x400000000007, 0xfffffffffffffffd, 0x6, 0x3, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x2a, 0x14, 0xffff, 0x4, 0x0, 0x8, 0x7], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00', 0x3}], 0x1}}], 0x1, 0x41) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000000200)=ANY=[], 0x0) (async) syz_usb_connect$uac1(0x5, 0xa4, &(0x7f0000000200)=ANY=[], 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x2a00) r7 = syz_open_procfs(0x0, &(0x7f0000000440)='net/if_inet6\x00') pread64(r7, &(0x7f0000000040)=""/30, 0x1e, 0x800000000040042) ioctl$USBDEVFS_CLAIM_PORT(r6, 0x80045518, 0x0) (async) ioctl$USBDEVFS_CLAIM_PORT(r6, 0x80045518, 0x0) signalfd(r1, &(0x7f0000000000)={[0x8]}, 0xffffffffffffff7c) (async) r8 = signalfd(r1, &(0x7f0000000000)={[0x8]}, 0xffffffffffffff7c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r9) sendmsg$FOU_CMD_ADD(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0902000000000000000001000000050002000a00000014000700ff00000000000000000000000000000108000b0075544492"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$FOU_CMD_ADD(r8, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r10, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2e}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async) sendmsg$FOU_CMD_ADD(r8, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r10, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2e}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 1.007162147s ago: executing program 5 (id=4304): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r1, 0x0, 0x0, 0x40000, &(0x7f0000002500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @empty}, 0x1, 0x2, 0x4, 0x81}}, 0x80) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000140)="4588fa25ba61", 0x0, 0x100006, 0x10026, 0x3, 0x0}) 0s ago: executing program 5 (id=4305): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x0) r0 = syz_open_dev$I2C(&(0x7f00000003c0), 0x1, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000580)={&(0x7f0000000500)=[{0x4, 0x4011, 0x0, 0x0}], 0x1}) kernel console output (not intermixed with test programs): 4b4, idProduct=1002, bcdDevice=6f.78 [ 1811.250052][T20132] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.250074][T20132] usb 6-1: Product: syz [ 1811.250089][T20132] usb 6-1: Manufacturer: syz [ 1811.250104][T20132] usb 6-1: SerialNumber: syz [ 1811.466966][ T5688] usb write operation failed. (-71) [ 1811.467409][ T5688] usb write operation failed. (-71) [ 1811.467948][ T5688] usb write operation failed. (-71) [ 1811.467970][ T5688] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 1811.475647][ T5688] usb 1-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 1811.475677][ T5688] usb 1-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 1811.719476][T20132] usb 6-1: USB disconnect, device number 53 [ 1812.404976][T22955] tmpfs: Bad value for 'gid' [ 1812.404998][T22955] tmpfs: Bad value for 'gid' [ 1812.681279][ T39] audit: type=1326 audit(2000001644.790:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=22945 comm="syz.2.3987" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feef467de99 code=0x7fc00000 [ 1813.276324][T22981] netlink: 'syz.2.3993': attribute type 4 has an invalid length. [ 1813.276352][T22981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3993'. [ 1813.278688][T22981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3993'. [ 1813.555603][T22990] x_tables: ip6_tables: CHECKSUM target: only valid in mangle table, not syz1 [ 1813.754095][T22997] afs: Unknown parameter '' [ 1813.771984][T22999] afs: Unknown parameter '' [ 1814.276535][T23023] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3999'. [ 1815.182241][T20132] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 1815.242995][ T5739] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1815.315409][T20132] usb 10-1: device descriptor read/64, error -71 [ 1815.404959][ T5739] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1815.405003][ T5739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.442918][ T5739] usb 3-1: config 0 descriptor?? [ 1815.460993][ T5739] cp210x 3-1:0.0: cp210x converter detected [ 1815.647359][T20132] usb 10-1: new high-speed USB device number 101 using dummy_hcd [ 1815.691814][ T5739] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1815.691837][ T5739] cp210x 3-1:0.0: querying part number failed [ 1815.716951][ T5739] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1815.781448][T20132] usb 10-1: device descriptor read/64, error -71 [ 1815.882478][T20132] usb usb10-port1: attempt power cycle [ 1816.339510][T20132] usb 10-1: new high-speed USB device number 102 using dummy_hcd [ 1816.362951][T20132] usb 10-1: device descriptor read/8, error -71 [ 1816.632124][T20132] usb 10-1: new high-speed USB device number 103 using dummy_hcd [ 1816.653082][T20132] usb 10-1: device descriptor read/8, error -71 [ 1816.767534][T20132] usb usb10-port1: unable to enumerate USB device [ 1816.902099][ T1254] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1817.053301][ T1254] usb 6-1: device descriptor read/64, error -71 [ 1817.302216][ T1254] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1817.442153][ T1254] usb 6-1: device descriptor read/64, error -71 [ 1817.552419][ T1254] usb usb6-port1: attempt power cycle [ 1817.784025][T23158] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4015'. [ 1817.819625][T23158] overlayfs: invalid origin (00000079000000000000000000000000000000000000) [ 1817.897294][ T1254] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1817.929695][ T1254] usb 6-1: device descriptor read/8, error -71 [ 1818.071728][ T5768] usb 3-1: USB disconnect, device number 65 [ 1818.103936][ T5768] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1818.180941][ T1254] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1818.220213][ T1254] usb 6-1: device descriptor read/8, error -71 [ 1818.333676][ T1254] usb usb6-port1: unable to enumerate USB device [ 1818.408750][ T5768] cp210x 3-1:0.0: device disconnected [ 1818.504213][T23183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4017'. [ 1818.504238][T23183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4017'. [ 1818.795195][T15681] usb 10-1: new high-speed USB device number 104 using dummy_hcd [ 1818.972531][T15681] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1818.972561][T15681] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1818.972582][T15681] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1818.972605][T15681] usb 10-1: config 1 has no interface number 1 [ 1818.972651][T15681] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1818.972693][T15681] usb 10-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1818.977944][T15681] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1818.977978][T15681] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.978001][T15681] usb 10-1: Product: syz [ 1818.978016][T15681] usb 10-1: Manufacturer: syz [ 1818.978033][T15681] usb 10-1: SerialNumber: syz [ 1819.322435][T15681] usb 10-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1819.322495][T15681] usb 10-1: MIDIStreaming interface descriptor not found [ 1819.534853][T15681] usb 10-1: USB disconnect, device number 104 [ 1819.571503][T23228] Invalid argument reading file caps for ./file0 [ 1819.916892][T19080] udevd[19080]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1820.183985][T23278] bridge0: port 4(erspan0) entered blocking state [ 1820.184359][T23278] bridge0: port 4(erspan0) entered disabled state [ 1820.184671][T23278] erspan0: entered allmulticast mode [ 1820.277113][T23278] erspan0: entered promiscuous mode [ 1820.311595][T23278] bridge0: port 4(erspan0) entered blocking state [ 1820.319356][T23278] bridge0: port 4(erspan0) entered forwarding state [ 1820.511896][ T1254] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1820.664263][ T1254] usb 3-1: config index 0 descriptor too short (expected 64900, got 72) [ 1820.667587][ T1254] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1820.667619][ T1254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.667653][ T1254] usb 3-1: Product: syz [ 1820.667668][ T1254] usb 3-1: Manufacturer: syz [ 1820.667684][ T1254] usb 3-1: SerialNumber: syz [ 1820.784651][T15681] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1821.080900][T23269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1821.093529][T23269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.125043][T23269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1821.125785][T23269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.127940][T23269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1821.128625][T23269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1821.133062][T20132] usb 3-1: USB disconnect, device number 66 [ 1821.731854][ T1254] usb 10-1: new high-speed USB device number 105 using dummy_hcd [ 1821.897942][ T1254] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1821.897975][ T1254] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.897999][ T1254] usb 10-1: Product: syz [ 1821.898015][ T1254] usb 10-1: Manufacturer: syz [ 1821.898031][ T1254] usb 10-1: SerialNumber: syz [ 1822.082113][T15681] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1822.112575][T15681] ath9k_htc: Failed to initialize the device [ 1822.136159][T20132] usb 3-1: ath9k_htc: USB layer deinitialized [ 1822.418543][ T1254] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1822.418608][ T1254] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1823.396727][ T821] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1823.544470][ T821] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1823.544501][ T821] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1823.546575][ T821] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1823.546607][ T821] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1823.546628][ T821] usb 6-1: SerialNumber: syz [ 1823.847917][ T821] usb 6-1: 0:2 : does not exist [ 1823.848011][ T821] usb 6-1: unit 48 not found! [ 1824.026851][ T821] usb 6-1: USB disconnect, device number 58 [ 1824.096121][T18993] udevd[18993]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1824.269023][T23313] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4034'. [ 1824.447524][T23381] fuse: Bad value for 'fd' [ 1824.588794][T23384] sg_write: data in/out 491484/136 bytes for SCSI command 0x0-- guessing data in; [ 1824.588794][T23384] program syz.5.4041 not setting count and/or reply_len properly [ 1824.647988][T18907] Bluetooth: hci4: Unexpected cc 0x0000 with no status [ 1824.866207][T23394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4043'. [ 1824.870713][T23394] netlink: 'syz.5.4043': attribute type 21 has an invalid length. [ 1824.870816][T23394] netlink: 'syz.5.4043': attribute type 1 has an invalid length. [ 1825.115526][ T1254] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e8. ret = -EPROTO [ 1825.115594][ T1254] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 1825.115617][ T1254] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1825.185838][ T1254] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1825.214417][ T1254] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 1825.236046][ T1254] usb 10-1: USB disconnect, device number 105 [ 1826.361599][ T5768] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1826.492930][ T5768] usb 3-1: device descriptor read/64, error -71 [ 1826.700717][T23467] netlink: 'syz.5.4052': attribute type 10 has an invalid length. [ 1826.741631][ T5768] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1826.778318][T23467] team0: Device nlmon0 is of different type [ 1826.871521][ T5768] usb 3-1: device descriptor read/64, error -71 [ 1826.994285][ T5768] usb usb3-port1: attempt power cycle [ 1827.342944][ T5768] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1827.362524][ T5768] usb 3-1: device descriptor read/8, error -71 [ 1827.420188][ T821] usb 10-1: new high-speed USB device number 106 using dummy_hcd [ 1827.571686][ T821] usb 10-1: device descriptor read/64, error -71 [ 1827.641472][ T5768] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1827.685753][ T5768] usb 3-1: device descriptor read/8, error -71 [ 1827.801961][ T5768] usb usb3-port1: unable to enumerate USB device [ 1827.816584][ T821] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 1827.961974][ T821] usb 10-1: device descriptor read/64, error -71 [ 1827.965039][T19835] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1828.076774][ T821] usb usb10-port1: attempt power cycle [ 1828.461538][ T821] usb 10-1: new high-speed USB device number 108 using dummy_hcd [ 1828.484383][ T821] usb 10-1: device descriptor read/8, error -71 [ 1828.723693][ T821] usb 10-1: new high-speed USB device number 109 using dummy_hcd [ 1828.761857][ T821] usb 10-1: device descriptor read/8, error -71 [ 1828.871972][ T821] usb usb10-port1: unable to enumerate USB device [ 1829.701790][ T1254] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1829.721458][ T5768] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1829.851599][ T5768] usb 6-1: device descriptor read/64, error -71 [ 1829.871483][ T1254] usb 3-1: Using ep0 maxpacket: 16 [ 1829.873607][ T1254] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1829.873634][ T1254] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1829.873663][ T1254] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1829.873692][ T1254] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1829.873709][ T1254] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.878680][ T1254] usb 3-1: config 0 descriptor?? [ 1830.101325][ T5768] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1830.241436][ T5768] usb 6-1: device descriptor read/64, error -71 [ 1830.297995][ T1254] microsoft 0003:045E:07DA.0058: unknown main item tag 0x0 [ 1830.298032][ T1254] microsoft 0003:045E:07DA.0058: unknown main item tag 0x0 [ 1830.298059][ T1254] microsoft 0003:045E:07DA.0058: unknown main item tag 0x0 [ 1830.298087][ T1254] microsoft 0003:045E:07DA.0058: unknown main item tag 0x0 [ 1830.298115][ T1254] microsoft 0003:045E:07DA.0058: unknown main item tag 0x0 [ 1830.298142][ T1254] microsoft 0003:045E:07DA.0058: unknown main item tag 0x0 [ 1830.298170][ T1254] microsoft 0003:045E:07DA.0058: unknown main item tag 0x0 [ 1830.298197][ T1254] microsoft 0003:045E:07DA.0058: unknown main item tag 0x0 [ 1830.298224][ T1254] microsoft 0003:045E:07DA.0058: unknown main item tag 0x0 [ 1830.298252][ T1254] microsoft 0003:045E:07DA.0058: unknown main item tag 0x0 [ 1830.299828][ T1254] HID 045e:07da: Invalid code 65791 type 1 [ 1830.383288][ T5768] usb usb6-port1: attempt power cycle [ 1830.413918][ T1254] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0058/input/input99 [ 1830.609849][ T1254] microsoft 0003:045E:07DA.0058: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 1830.639778][ T1254] usb 3-1: USB disconnect, device number 71 [ 1830.735333][T23568] fido_id[23568]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 1830.751332][ T5768] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1830.773257][ T5768] usb 6-1: device descriptor read/8, error -71 [ 1830.821668][ T821] usb 10-1: new high-speed USB device number 110 using dummy_hcd [ 1830.973872][ T821] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1830.975101][ T821] usb 10-1: config 39 has an invalid interface number: 42 but max is 2 [ 1830.975133][ T821] usb 10-1: config 39 has an invalid interface number: 212 but max is 2 [ 1830.975153][ T821] usb 10-1: config 39 has an invalid descriptor of length 0, skipping remainder of the config [ 1830.975173][ T821] usb 10-1: config 39 has 2 interfaces, different from the descriptor's value: 3 [ 1830.975197][ T821] usb 10-1: config 39 has no interface number 0 [ 1830.975210][ T821] usb 10-1: config 39 has no interface number 1 [ 1830.975254][ T821] usb 10-1: config 39 interface 42 altsetting 11 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1830.975274][ T821] usb 10-1: config 39 interface 42 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 1830.975290][ T821] usb 10-1: config 39 interface 42 altsetting 11 has a duplicate endpoint with address 0x7, skipping [ 1830.975384][ T821] usb 10-1: config 39 interface 42 altsetting 11 has a duplicate endpoint with address 0xB, skipping [ 1830.975412][ T821] usb 10-1: config 39 interface 42 altsetting 11 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 1830.975441][ T821] usb 10-1: config 39 interface 42 altsetting 11 has a duplicate endpoint with address 0x4, skipping [ 1830.975469][ T821] usb 10-1: config 39 interface 42 altsetting 11 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1830.975498][ T821] usb 10-1: config 39 interface 212 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 1830.975518][ T821] usb 10-1: config 39 interface 42 has no altsetting 0 [ 1830.975531][ T821] usb 10-1: config 39 interface 212 has no altsetting 0 [ 1830.977950][ T821] usb 10-1: New USB device found, idVendor=19d2, idProduct=0070, bcdDevice=3c.44 [ 1830.977978][ T821] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.978005][ T821] usb 10-1: Product: syz [ 1830.978016][ T821] usb 10-1: Manufacturer: syz [ 1830.978027][ T821] usb 10-1: SerialNumber: syz [ 1831.021252][ T5768] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1831.050788][ T5768] usb 6-1: device descriptor read/8, error -71 [ 1831.162794][ T5768] usb usb6-port1: unable to enumerate USB device [ 1831.591189][ T1254] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1831.638038][ T821] option 10-1:39.42: GSM modem (1-port) converter detected [ 1831.670758][ T821] cdc_ether 10-1:39.212: skipping garbage [ 1831.670775][ T821] cdc_ether 10-1:39.212: bad CDC descriptors [ 1831.698317][ T821] usb 10-1: USB disconnect, device number 110 [ 1831.720677][ T821] option 10-1:39.42: device disconnected [ 1831.741621][ T1254] usb 3-1: Using ep0 maxpacket: 8 [ 1831.754227][ T1254] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1831.754262][ T1254] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1831.754287][ T1254] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1831.754318][ T1254] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1831.754355][ T1254] usb 3-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.00 [ 1831.754380][ T1254] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.825259][ T1254] usb 3-1: config 0 descriptor?? [ 1832.034323][T23608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1832.036074][T23608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1832.067595][ T1254] wacom 0003:056A:0323.0059: reserved main item tag 0xd [ 1832.238396][T20132] usb 3-1: USB disconnect, device number 72 [ 1832.451333][ T821] usb 10-1: new high-speed USB device number 111 using dummy_hcd [ 1832.601791][ T821] usb 10-1: Using ep0 maxpacket: 16 [ 1832.603931][ T821] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1832.603957][ T821] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1832.604021][ T821] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1832.604039][ T821] usb 10-1: config 1 interface 1 has no altsetting 0 [ 1832.606506][ T821] usb 10-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 1832.606534][ T821] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.606561][ T821] usb 10-1: Product: syz [ 1832.606573][ T821] usb 10-1: Manufacturer: syz [ 1832.606584][ T821] usb 10-1: SerialNumber: syz [ 1832.751177][T12964] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1832.904991][T12964] usb 6-1: Using ep0 maxpacket: 32 [ 1832.907980][T12964] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1832.908073][T12964] usb 6-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1832.908101][T12964] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1832.910916][T12964] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1832.912503][T12964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.912531][T12964] usb 6-1: Product: syz [ 1832.912548][T12964] usb 6-1: Manufacturer: syz [ 1832.912564][T12964] usb 6-1: SerialNumber: syz [ 1832.988796][T12964] usb 6-1: config 0 descriptor?? [ 1833.236853][T23631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1833.237598][T23631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1833.409253][ T821] usb 10-1: selecting invalid altsetting 0 [ 1833.474212][T12964] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 1833.936806][T23654] snd-usb-audio 10-1:1.0: Runtime PM usage count underflow! [ 1833.965498][ T821] usb 10-1: USB disconnect, device number 111 [ 1834.144276][ T1254] usb 6-1: USB disconnect, device number 63 [ 1834.397588][T18978] udevd[18978]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1834.761782][ T821] usb 10-1: new high-speed USB device number 112 using dummy_hcd [ 1834.913204][ T821] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1834.913260][ T821] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1834.913279][ T821] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.939616][ T821] usb 10-1: config 0 descriptor?? [ 1835.041354][ T1254] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1835.192545][ T821] usbhid 10-1:0.0: can't add hid device: -71 [ 1835.192685][ T821] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1835.207554][ T821] usb 10-1: USB disconnect, device number 112 [ 1835.221868][ T1254] usb 6-1: Using ep0 maxpacket: 8 [ 1835.224516][ T1254] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1835.244798][ T1254] usb 6-1: config 15 has an invalid interface number: 234 but max is 0 [ 1835.244829][ T1254] usb 6-1: config 15 has no interface number 0 [ 1835.244866][ T1254] usb 6-1: config 15 interface 234 has no altsetting 0 [ 1835.258665][ T1254] usb 6-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=20.aa [ 1835.258698][ T1254] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.258720][ T1254] usb 6-1: Product: syz [ 1835.258736][ T1254] usb 6-1: Manufacturer: syz [ 1835.258752][ T1254] usb 6-1: SerialNumber: syz [ 1835.553335][ T1254] pl2303 6-1:15.234: required endpoints missing [ 1835.568298][ T1254] usb 6-1: USB disconnect, device number 64 [ 1835.730979][ T821] usb 10-1: new high-speed USB device number 113 using dummy_hcd [ 1835.883345][ T821] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1835.883395][ T821] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1835.883418][ T821] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.890737][ T821] usb 10-1: config 0 descriptor?? [ 1836.188196][T23753] syzkaller0: entered allmulticast mode [ 1836.732207][ T821] aiptek 10-1:0.0: Aiptek using 400 ms programming speed [ 1836.737303][T23703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1836.739512][ T821] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input100 [ 1836.740274][T23703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1836.980990][ T1254] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1837.133562][ T1254] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1837.133589][ T1254] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1837.133606][ T1254] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1837.133625][ T1254] usb 6-1: config 1 has no interface number 1 [ 1837.133663][ T1254] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1837.133698][ T1254] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1837.136305][ T1254] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1837.136333][ T1254] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.136353][ T1254] usb 6-1: Product: syz [ 1837.136367][ T1254] usb 6-1: Manufacturer: syz [ 1837.136381][ T1254] usb 6-1: SerialNumber: syz [ 1837.290074][T23703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1837.303496][T23703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1837.456026][T23768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1837.459549][T23768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1837.512932][ T1254] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1837.513000][ T1254] usb 6-1: MIDIStreaming interface descriptor not found [ 1837.677420][ T1254] usb 6-1: USB disconnect, device number 65 [ 1837.787253][ T821] usb 10-1: USB disconnect, device number 113 [ 1837.787347][ C1] aiptek 10-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1837.895320][T18978] udevd[18978]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1838.045808][ T5739] IPVS: starting estimator thread 0... [ 1838.130887][T23828] IPVS: using max 8 ests per chain, 19200 per kthread [ 1838.403011][ T5768] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1838.544447][ T5768] usb 6-1: device descriptor read/64, error -71 [ 1838.630897][ T821] usb 10-1: new low-speed USB device number 114 using dummy_hcd [ 1838.633445][T23850] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4079'. [ 1838.784687][ T821] usb 10-1: too many configurations: 57, using maximum allowed: 8 [ 1838.785961][ T821] usb 10-1: invalid descriptor for config index 0: type = 0x2, length = 112 [ 1838.785998][ T821] usb 10-1: can't read configurations, error -22 [ 1838.818471][ T5768] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1838.911292][ T821] usb 10-1: new low-speed USB device number 115 using dummy_hcd [ 1838.950867][ T5768] usb 6-1: device descriptor read/64, error -71 [ 1839.064098][ T821] usb 10-1: too many configurations: 57, using maximum allowed: 8 [ 1839.071280][ T5768] usb usb6-port1: attempt power cycle [ 1839.072870][ T821] usb 10-1: invalid descriptor for config index 0: type = 0x2, length = 112 [ 1839.072926][ T821] usb 10-1: can't read configurations, error -22 [ 1839.076452][ T821] usb usb10-port1: attempt power cycle [ 1839.290862][T12964] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1839.440857][ T5768] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1839.440856][ T821] usb 10-1: new low-speed USB device number 116 using dummy_hcd [ 1839.443356][T12964] usb 3-1: Using ep0 maxpacket: 16 [ 1839.446009][T12964] usb 3-1: config 0 has no interfaces? [ 1839.446050][T12964] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1839.446069][T12964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.458219][T12964] usb 3-1: config 0 descriptor?? [ 1839.485795][ T5768] usb 6-1: device descriptor read/8, error -71 [ 1839.512312][ T821] usb 10-1: too many configurations: 57, using maximum allowed: 8 [ 1839.513501][ T821] usb 10-1: invalid descriptor for config index 0: type = 0x2, length = 112 [ 1839.513540][ T821] usb 10-1: can't read configurations, error -22 [ 1839.640763][ T821] usb 10-1: new low-speed USB device number 117 using dummy_hcd [ 1839.666271][ T821] usb 10-1: too many configurations: 57, using maximum allowed: 8 [ 1839.667440][ T821] usb 10-1: invalid descriptor for config index 0: type = 0x2, length = 112 [ 1839.667478][ T821] usb 10-1: can't read configurations, error -22 [ 1839.667864][ T821] usb usb10-port1: unable to enumerate USB device [ 1839.700125][ T821] usb 3-1: USB disconnect, device number 73 [ 1839.721444][ T5768] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1839.741374][ T5768] usb 6-1: device descriptor read/8, error -71 [ 1839.851097][ T5768] usb usb6-port1: unable to enumerate USB device [ 1840.170819][ T5768] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1840.347023][ T5768] usb 3-1: config 0 has no interfaces? [ 1840.347062][ T5768] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1840.347088][ T5768] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.359738][ T5768] usb 3-1: config 0 descriptor?? [ 1840.584530][T23858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1840.586687][T23858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1840.596733][ T5768] usb 3-1: USB disconnect, device number 74 [ 1841.090751][ T5768] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1841.180478][T23891] ./bus: Can't lookup blockdev [ 1841.245382][ T5768] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1841.245415][ T5768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1841.245443][ T5768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1841.245460][ T5768] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1841.247790][ T5768] usb 3-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=34.b1 [ 1841.247815][ T5768] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1841.247834][ T5768] usb 3-1: Product: syz [ 1841.247854][ T5768] usb 3-1: Manufacturer: syz [ 1841.247864][ T5768] usb 3-1: SerialNumber: syz [ 1841.259823][ T5768] usb 3-1: config 0 descriptor?? [ 1841.355699][ T5768] bfusb 3-1:0.0: probe with driver bfusb failed with error -5 [ 1841.483967][T23902] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4083'. [ 1841.549501][T23876] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma? [ 1841.633158][ T821] usb 3-1: USB disconnect, device number 75 [ 1841.969585][T23939] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4085'. [ 1842.310909][ T5768] usb 6-1: new low-speed USB device number 70 using dummy_hcd [ 1842.450648][ T1254] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1842.450877][ T5768] usb 6-1: device descriptor read/64, error -71 [ 1842.600852][ T1254] usb 3-1: Using ep0 maxpacket: 8 [ 1842.614810][ T1254] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1842.616062][ T1254] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1842.616088][ T1254] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1842.618571][ T1254] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 1842.618604][ T1254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.618622][ T1254] usb 3-1: Product: syz [ 1842.618633][ T1254] usb 3-1: Manufacturer: syz [ 1842.618643][ T1254] usb 3-1: SerialNumber: syz [ 1842.731376][ T5768] usb 6-1: new low-speed USB device number 71 using dummy_hcd [ 1842.901876][ T5768] usb 6-1: device descriptor read/64, error -71 [ 1842.902051][ T1254] usb 3-1: failed waiting for Axe-Fx III to boot: -71 [ 1842.902237][ T1254] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1842.944465][ T1254] usb 3-1: USB disconnect, device number 76 [ 1843.014474][ T5768] usb usb6-port1: attempt power cycle [ 1843.029727][T23957] bridge0: port 3(syz_tun) entered disabled state [ 1843.184302][T23957] syz_tun (unregistering): left allmulticast mode [ 1843.184327][T23957] syz_tun (unregistering): left promiscuous mode [ 1843.197127][T23957] bridge0: port 3(syz_tun) entered disabled state [ 1843.422706][ T5768] usb 6-1: new low-speed USB device number 72 using dummy_hcd [ 1843.441449][ T5768] usb 6-1: device descriptor read/8, error -71 [ 1843.690926][ T5768] usb 6-1: new low-speed USB device number 73 using dummy_hcd [ 1843.712782][ T5768] usb 6-1: device descriptor read/8, error -71 [ 1843.821062][ T5768] usb usb6-port1: unable to enumerate USB device [ 1844.010861][T12849] usb 10-1: new high-speed USB device number 118 using dummy_hcd [ 1844.180631][T12849] usb 10-1: Using ep0 maxpacket: 32 [ 1844.184709][T12849] usb 10-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 1844.184737][T12849] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1844.184776][T12849] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.00 [ 1844.184802][T12849] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.191924][T12849] usb 10-1: config 0 descriptor?? [ 1844.568814][T23988] 9p: Bad value for 'rq' [ 1844.940657][ T821] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1845.070635][ T821] usb 3-1: device descriptor read/64, error -71 [ 1845.310842][ T821] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1845.475769][ T821] usb 3-1: device descriptor read/64, error -71 [ 1845.487952][ T5739] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1845.535278][T12849] hid_parser_main: 10 callbacks suppressed [ 1845.535298][T12849] hid-generic 0000:0000:0000.005A: unknown main item tag 0x0 [ 1845.581070][ T821] usb usb3-port1: attempt power cycle [ 1845.592773][T12849] hid-generic 0000:0000:0000.005A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1845.667983][ T5739] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1845.668009][ T5739] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1845.668025][ T5739] usb 6-1: Product: syz [ 1845.668036][ T5739] usb 6-1: SerialNumber: syz [ 1845.709335][ T5739] usb 6-1: config 0 descriptor?? [ 1845.930911][ T821] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1845.951197][ T821] usb 3-1: device descriptor read/8, error -71 [ 1846.057181][T24026] binder: 24025:24026 ioctl 4018620d 0 returned -22 [ 1846.057830][T24026] binder: 24025:24026 ioctl c0306201 0 returned -14 [ 1846.075618][T24026] netlink: 'syz.0.4099': attribute type 12 has an invalid length. [ 1846.178873][T12849] usb 6-1: USB disconnect, device number 74 [ 1846.192560][ T821] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1846.211973][ T821] usb 3-1: device descriptor read/8, error -71 [ 1846.326824][ T821] usb usb3-port1: unable to enumerate USB device [ 1846.887772][T12964] usb 10-1: USB disconnect, device number 118 [ 1847.416064][T12964] usb 10-1: new high-speed USB device number 119 using dummy_hcd [ 1847.795108][T12964] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1847.807332][T12964] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1847.807437][T12964] usb 10-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1847.807469][T12964] usb 10-1: config 1 interface 0 has no altsetting 1 [ 1847.816474][T12964] usb 10-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 1847.816557][T12964] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.816624][T12964] usb 10-1: Product: syz [ 1847.816666][T12964] usb 10-1: Manufacturer: syz [ 1847.816709][T12964] usb 10-1: SerialNumber: syz [ 1848.047959][T12964] smsusb:smsusb_probe: board id=8, interface number 0 [ 1848.492965][T12964] smsusb:smsusb_probe: Device initialized with return code -19 [ 1849.226240][T12964] usb 10-1: USB disconnect, device number 119 [ 1850.507030][T13501] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1850.901481][ T5739] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1851.008511][T13501] usb 6-1: Using ep0 maxpacket: 32 [ 1851.035446][T13501] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1851.035476][T13501] usb 6-1: config 0 has no interface number 0 [ 1851.124292][ T5739] usb 3-1: Using ep0 maxpacket: 16 [ 1851.141361][T13501] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1851.141445][T13501] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.141467][T13501] usb 6-1: Product: syz [ 1851.141482][T13501] usb 6-1: Manufacturer: syz [ 1851.141498][T13501] usb 6-1: SerialNumber: syz [ 1851.239217][ T5739] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1851.239249][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1851.239272][ T5739] usb 3-1: Product: syz [ 1851.239285][ T5739] usb 3-1: Manufacturer: syz [ 1851.239300][ T5739] usb 3-1: SerialNumber: syz [ 1851.247507][T12849] usb 10-1: new full-speed USB device number 120 using dummy_hcd [ 1851.478292][T12849] usb 10-1: device descriptor read/64, error -71 [ 1851.530891][T13501] usb 6-1: config 0 descriptor?? [ 1851.705733][ T5739] usb 3-1: config 0 descriptor?? [ 1851.706287][T13501] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1851.750095][T12849] usb 10-1: new full-speed USB device number 121 using dummy_hcd [ 1851.827508][ T5739] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1851.870136][T12849] usb 10-1: device descriptor read/64, error -71 [ 1851.953876][T24095] nfs: Unknown parameter ' ' [ 1851.955839][ T5739] gspca_spca508: reg_read err -32 [ 1851.961247][ T5739] gspca_spca508: reg_read err -32 [ 1851.972649][ T5739] gspca_spca508: reg_read err -32 [ 1851.986068][T12849] usb usb10-port1: attempt power cycle [ 1852.328141][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1852.508245][ T5739] gspca_spca508: reg_read err -110 [ 1852.508692][ T5739] gspca_spca508: reg write: error -32 [ 1852.508795][ T5739] spca508 3-1:0.0: probe with driver spca508 failed with error -32 [ 1852.554054][T12849] usb 10-1: new full-speed USB device number 122 using dummy_hcd [ 1852.619781][T12849] usb 10-1: device descriptor read/8, error -71 [ 1852.826760][T13501] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1853.055285][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.173653][T13501] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1853.283647][T13501] usb 6-1: USB disconnect, device number 75 [ 1853.334020][T13501] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1853.414911][T13501] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1853.416086][T13501] quatech2 6-1:0.51: device disconnected [ 1853.767996][T24151] netlink: 176 bytes leftover after parsing attributes in process `syz.5.4112'. [ 1854.088883][T12849] usb 10-1: new high-speed USB device number 124 using dummy_hcd [ 1854.280063][T12849] usb 10-1: Using ep0 maxpacket: 8 [ 1854.295219][T12849] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1854.295253][T12849] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.295276][T12849] usb 10-1: Product: syz [ 1854.295291][T12849] usb 10-1: Manufacturer: syz [ 1854.295325][T12849] usb 10-1: SerialNumber: syz [ 1854.346701][T12849] usb 10-1: config 0 descriptor?? [ 1854.361176][T12849] gspca_main: se401-2.14.0 probing 047d:5003 [ 1854.443660][T13501] usb 3-1: USB disconnect, device number 81 [ 1854.612989][T24155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.616076][T24155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.629923][ T5739] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1854.663663][T24155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.665640][T24155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.809215][ T5739] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1854.809248][ T5739] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1854.809271][ T5739] usb 6-1: config 220 has no interface number 2 [ 1854.809345][ T5739] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1854.809377][ T5739] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1854.809398][ T5739] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1854.809418][ T5739] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1854.876814][T12849] gspca_se401: ExtraFeatures: 5 [ 1854.876833][T12849] gspca_se401: Too many frame sizes [ 1854.891454][ T5739] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1854.891535][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1854.891594][ T5739] usb 6-1: Product: syz [ 1854.891635][ T5739] usb 6-1: Manufacturer: syz [ 1854.891676][ T5739] usb 6-1: SerialNumber: syz [ 1855.081297][T12849] usb 10-1: USB disconnect, device number 124 [ 1855.183482][ T5739] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1855.183517][ T5739] uvcvideo 6-1:220.0: No valid video chain found. [ 1855.183577][ T5739] usb 6-1: selecting invalid altsetting 0 [ 1855.408351][ T5739] usb 6-1: selecting invalid altsetting 0 [ 1855.408390][ T5739] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1855.413950][ T5739] usb 6-1: USB disconnect, device number 76 [ 1856.179973][T24243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4121'. [ 1856.524505][T24255] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4124'. [ 1856.546869][T24255] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4124'. [ 1856.549159][T24255] netlink: 'syz.5.4124': attribute type 7 has an invalid length. [ 1856.570013][T24257] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4124'. [ 1856.570041][T24257] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4124'. [ 1857.036423][T24277] program syz.9.4128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1857.139855][T12849] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1857.319814][T12849] usb 3-1: Using ep0 maxpacket: 16 [ 1857.324795][T12849] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1857.324820][T12849] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1857.329451][T12849] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1857.329480][T12849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.329503][T12849] usb 3-1: Product: syz [ 1857.329519][T12849] usb 3-1: Manufacturer: syz [ 1857.329535][T12849] usb 3-1: SerialNumber: syz [ 1857.417723][T12849] usb 3-1: 0:2 : does not exist [ 1857.570310][ T5768] usb 10-1: new low-speed USB device number 125 using dummy_hcd [ 1857.663510][T12849] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1857.699922][ T5768] usb 10-1: device descriptor read/64, error -71 [ 1857.760573][T12849] usb 3-1: USB disconnect, device number 82 [ 1857.852914][T20646] udevd[20646]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1857.949864][ T5768] usb 10-1: new low-speed USB device number 126 using dummy_hcd [ 1858.099795][ T5768] usb 10-1: device descriptor read/64, error -71 [ 1858.211597][ T5768] usb usb10-port1: attempt power cycle [ 1858.259878][T12849] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1858.424246][T12849] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1858.424280][T12849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.432563][T12849] usb 6-1: config 0 descriptor?? [ 1858.462560][T12849] cp210x 6-1:0.0: cp210x converter detected [ 1858.559941][ T5768] usb 10-1: new low-speed USB device number 127 using dummy_hcd [ 1858.582565][ T5768] usb 10-1: device descriptor read/8, error -71 [ 1858.597751][T24329] Invalid argument reading file caps for ./file0 [ 1858.831163][ T5768] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 1858.851206][ T5768] usb 10-1: device descriptor read/8, error -71 [ 1858.867474][T12849] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1858.900880][T12849] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1858.960205][ T5768] usb usb10-port1: unable to enumerate USB device [ 1858.970489][ T1254] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 1858.991133][T19831] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1859.085855][ T5739] usb 6-1: USB disconnect, device number 77 [ 1859.112965][ T5739] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1859.136722][ T1254] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1859.137340][ T1254] usb 3-1: not running at top speed; connect to a high speed hub [ 1859.156142][ T1254] usb 3-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1859.156231][ T1254] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1859.182134][ T1254] usb 3-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 1859.182158][ T1254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.182173][ T1254] usb 3-1: Product: syz [ 1859.182184][ T1254] usb 3-1: Manufacturer: syz [ 1859.182195][ T1254] usb 3-1: SerialNumber: syz [ 1859.369923][ T5739] cp210x 6-1:0.0: device disconnected [ 1859.458581][ T1254] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input101 [ 1859.472489][ T4945] bcm5974 3-1:1.0: could not read from device [ 1859.523530][ T1254] usb 3-1: USB disconnect, device number 83 [ 1860.320817][ T1254] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 1860.408734][T24395] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4141'. [ 1860.482022][ T1254] usb 3-1: not running at top speed; connect to a high speed hub [ 1860.486094][ T1254] usb 3-1: config 1 has an invalid interface number: 167 but max is 0 [ 1860.486169][ T1254] usb 3-1: config 1 has no interface number 0 [ 1860.486289][ T1254] usb 3-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid maxpacket 1024, setting to 64 [ 1860.486350][ T1254] usb 3-1: config 1 interface 167 has no altsetting 0 [ 1860.528511][ T1254] usb 3-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 1860.528544][ T1254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.528567][ T1254] usb 3-1: Product: syz [ 1860.528584][ T1254] usb 3-1: Manufacturer: syz [ 1860.528600][ T1254] usb 3-1: SerialNumber: syz [ 1860.651102][T12849] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1860.779229][T24381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1860.795594][T24381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1860.814853][T12849] usb 6-1: Using ep0 maxpacket: 8 [ 1860.841391][T12849] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1860.841424][T12849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.841439][T12849] usb 6-1: Product: syz [ 1860.841449][T12849] usb 6-1: Manufacturer: syz [ 1860.841460][T12849] usb 6-1: SerialNumber: syz [ 1860.887754][ T1254] em28xx 3-1:1.167: New device syz syz @ 12 Mbps (1b80:e309, interface 167, class 167) [ 1860.887780][ T1254] em28xx 3-1:1.167: Device initialization failed. [ 1860.887790][ T1254] em28xx 3-1:1.167: Device must be connected to a high-speed USB 2.0 port. [ 1860.927068][T12849] usb 6-1: config 0 descriptor?? [ 1860.953650][T24407] netlink: 32 bytes leftover after parsing attributes in process `syz.9.4143'. [ 1860.953669][T24407] openvswitch: netlink: Flow key attr not present in new flow. [ 1860.986402][ T1254] usb 3-1: USB disconnect, device number 84 [ 1860.998293][T12849] gspca_main: se401-2.14.0 probing 047d:5003 [ 1861.378507][T24429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1861.395742][T24429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1861.505745][T12849] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 1861.505854][T12849] se401 6-1:0.0: probe with driver se401 failed with error -71 [ 1861.519232][ T5739] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 1861.556890][T12849] usb 6-1: USB disconnect, device number 78 [ 1861.597273][T24444] 9p: Bad value for 'wfdno' [ 1861.681016][T24450] sg_write: data in/out 32825/136 bytes for SCSI command 0x0-- guessing data in; [ 1861.681016][T24450] program syz.2.4148 not setting count and/or reply_len properly [ 1861.685566][T24450] sg_write: data in/out 32825/136 bytes for SCSI command 0x0-- guessing data in; [ 1861.685566][T24450] program syz.2.4148 not setting count and/or reply_len properly [ 1861.685994][T24450] sg_write: data in/out 32825/136 bytes for SCSI command 0x0-- guessing data in; [ 1861.685994][T24450] program syz.2.4148 not setting count and/or reply_len properly [ 1861.686551][T24450] sg_write: data in/out 32825/136 bytes for SCSI command 0x0-- guessing data in; [ 1861.686551][T24450] program syz.2.4148 not setting count and/or reply_len properly [ 1861.687685][T24450] sg_write: data in/out 32825/136 bytes for SCSI command 0x0-- guessing data in; [ 1861.687685][T24450] program syz.2.4148 not setting count and/or reply_len properly [ 1861.688159][T24450] sg_write: data in/out 32825/136 bytes for SCSI command 0x0-- guessing data in; [ 1861.688159][T24450] program syz.2.4148 not setting count and/or reply_len properly [ 1861.688642][T24450] sg_write: data in/out 32825/136 bytes for SCSI command 0x0-- guessing data in; [ 1861.688642][T24450] program syz.2.4148 not setting count and/or reply_len properly [ 1861.689084][T24450] sg_write: data in/out 32825/136 bytes for SCSI command 0x0-- guessing data in; [ 1861.689084][T24450] program syz.2.4148 not setting count and/or reply_len properly [ 1861.704432][ T5739] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 24312, setting to 64 [ 1861.709726][ T5739] usb 10-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 1861.709762][ T5739] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.709787][ T5739] usb 10-1: Product: syz [ 1861.709806][ T5739] usb 10-1: Manufacturer: syz [ 1861.709823][ T5739] usb 10-1: SerialNumber: syz [ 1861.722408][T24450] sg_write: data in/out 32825/136 bytes for SCSI command 0x0-- guessing data in; [ 1861.722408][T24450] program syz.2.4148 not setting count and/or reply_len properly [ 1861.729301][T24450] sg_write: data in/out 32825/136 bytes for SCSI command 0x0-- guessing data in; [ 1861.729301][T24450] program syz.2.4148 not setting count and/or reply_len properly [ 1861.917791][ T5739] usb 10-1: config 0 descriptor?? [ 1861.937395][T24424] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1861.941875][ T5739] hub 10-1:0.0: bad descriptor, ignoring hub [ 1861.941919][ T5739] hub 10-1:0.0: probe with driver hub failed with error -5 [ 1861.973623][ T5739] input: syz syz as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input102 [ 1862.195791][ C0] usbtouchscreen 10-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1862.358502][T24468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1862.359204][T24468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1862.414607][T18907] Bluetooth: hci3: unexpected event for opcode 0x200b [ 1862.590277][ C0] usbtouchscreen 10-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1862.922371][ T39] audit: type=1326 audit(2000001695.043:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24482 comm="syz.2.4152" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feef467de99 code=0x0 [ 1864.139420][ T5739] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1864.279463][T19285] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 1864.289922][ T5739] usb 6-1: Using ep0 maxpacket: 8 [ 1864.295172][ T5739] usb 6-1: config 0 has an invalid interface number: 200 but max is 0 [ 1864.295199][ T5739] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1864.295219][ T5739] usb 6-1: config 0 has no interface number 0 [ 1864.295262][ T5739] usb 6-1: config 0 interface 200 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1864.295292][ T5739] usb 6-1: config 0 interface 200 has no altsetting 0 [ 1864.361526][ T5739] usb 6-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 1864.361558][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.361581][ T5739] usb 6-1: Product: syz [ 1864.361596][ T5739] usb 6-1: Manufacturer: syz [ 1864.361613][ T5739] usb 6-1: SerialNumber: syz [ 1864.368838][ T5739] usb 6-1: config 0 descriptor?? [ 1864.399440][T13501] usb 10-1: USB disconnect, device number 3 [ 1864.458920][T19285] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1864.458966][T19285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.459044][T19285] usb 3-1: Product: syz [ 1864.459060][T19285] usb 3-1: Manufacturer: syz [ 1864.459077][T19285] usb 3-1: SerialNumber: syz [ 1864.583208][T19285] usb 3-1: config 0 descriptor?? [ 1864.626562][ T5739] usbhid 6-1:0.200: couldn't find an input interrupt endpoint [ 1864.646496][ T5739] usb 6-1: USB disconnect, device number 79 [ 1864.804019][T19285] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1865.361234][T18907] Bluetooth: hci1: command 0x0406 tx timeout [ 1865.552358][T24565] team_slave_0: entered promiscuous mode [ 1865.552384][T24565] team_slave_0: entered allmulticast mode [ 1865.569365][T12964] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1865.729392][T12964] usb 10-1: Using ep0 maxpacket: 32 [ 1865.735764][T12964] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1865.737280][T12964] usb 10-1: config 165 has an invalid interface number: 198 but max is 0 [ 1865.737309][T12964] usb 10-1: config 165 has an invalid descriptor of length 0, skipping remainder of the config [ 1865.737333][T12964] usb 10-1: config 165 has no interface number 0 [ 1865.737411][T12964] usb 10-1: config 165 interface 198 has no altsetting 0 [ 1865.776435][T12964] usb 10-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=e3.75 [ 1865.776459][T12964] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.776481][T12964] usb 10-1: Product: syz [ 1865.789401][ T1254] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1865.792233][T12964] usb 10-1: Manufacturer: syz [ 1865.792250][T12964] usb 10-1: SerialNumber: syz [ 1865.961003][ T1254] usb 6-1: Using ep0 maxpacket: 32 [ 1865.966935][ T1254] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1865.966976][ T1254] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1865.967000][ T1254] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1865.967024][ T1254] usb 6-1: config 1 has no interface number 0 [ 1865.967085][ T1254] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1865.967137][ T1254] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1865.967185][ T1254] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1865.967211][ T1254] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1866.087307][ T1254] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1866.127713][T12964] pl2303 10-1:165.198: required endpoints missing [ 1866.156399][T12964] usb 10-1: USB disconnect, device number 4 [ 1866.264288][T24501] netlink: 'syz.2.4156': attribute type 2 has an invalid length. [ 1866.266090][T24501] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 1866.266160][T24501] overlayfs: missing 'lowerdir' [ 1866.296049][ T1254] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1866.335184][T19285] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1866.353734][T19285] usb 3-1: USB disconnect, device number 85 [ 1866.501252][ T5601] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1866.550179][ T5601] Bluetooth: hci3: Injecting HCI hardware error event [ 1866.563946][T18907] Bluetooth: hci3: hardware error 0x00 [ 1866.692686][ T1254] usb 6-1: USB disconnect, device number 80 [ 1866.695589][ T1254] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1867.018331][ T5601] Bluetooth: hci4: Dropping invalid advertising data [ 1867.018368][ T5601] Bluetooth: hci4: Malformed LE Event: 0x02 [ 1867.170716][ T1254] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1867.335939][ T1254] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1867.344613][ T1254] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1867.344640][ T1254] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1867.344693][ T1254] usb 10-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1867.344755][ T1254] usb 10-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1867.344800][ T1254] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1867.344827][ T1254] usb 10-1: config 1 interface 1 has no altsetting 0 [ 1867.415305][ T1254] usb 10-1: string descriptor 0 read error: -22 [ 1867.415460][ T1254] usb 10-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1867.415487][ T1254] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.739234][T13501] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1867.889276][T13501] usb 6-1: Using ep0 maxpacket: 16 [ 1867.891880][T13501] usb 6-1: config 1 has an invalid interface number: 135 but max is 0 [ 1867.891907][T13501] usb 6-1: config 1 has no interface number 0 [ 1867.891941][T13501] usb 6-1: config 1 interface 135 has no altsetting 0 [ 1867.936382][T13501] usb 6-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=25.a5 [ 1867.936415][T13501] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.936436][T13501] usb 6-1: Product: syz [ 1867.936451][T13501] usb 6-1: Manufacturer: syz [ 1867.936466][T13501] usb 6-1: SerialNumber: syz [ 1868.437798][T13501] kalmia 6-1:1.135: probe with driver kalmia failed with error -22 [ 1868.448873][T13501] option 6-1:1.135: GSM modem (1-port) converter detected [ 1868.513759][T13501] usb 6-1: USB disconnect, device number 81 [ 1868.547150][T13501] option 6-1:1.135: device disconnected [ 1868.619524][ T5601] Bluetooth: hci1: adv larger than maximum supported [ 1868.619543][ T5601] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1868.627312][ T1254] usb 10-1: USB disconnect, device number 5 [ 1868.884630][T18907] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1869.356557][T24707] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4184'. [ 1869.519161][T12964] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1869.603944][T18907] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 1869.694442][T12964] usb 6-1: Using ep0 maxpacket: 16 [ 1869.697691][T12964] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1869.723126][T12964] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1869.723159][T12964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1869.723182][T12964] usb 6-1: Product: syz [ 1869.723198][T12964] usb 6-1: Manufacturer: syz [ 1869.723214][T12964] usb 6-1: SerialNumber: syz [ 1869.826569][T12964] usb 6-1: config 0 descriptor?? [ 1869.836303][T12964] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1869.860366][T12964] usb 6-1: Detected FT232R [ 1870.030574][T24733] kvm: vcpu 0: requested 272 ns lapic timer period limited to 200000 ns [ 1870.032533][T12964] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1870.033832][T12964] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1870.035553][T12964] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 1870.063919][ T5739] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1870.151508][T12964] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1870.219331][T12964] usb 6-1: USB disconnect, device number 82 [ 1870.235954][T12964] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1870.236831][T12964] ftdi_sio 6-1:0.0: device disconnected [ 1870.279056][ T5739] usb 10-1: Using ep0 maxpacket: 8 [ 1870.281025][ T5739] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1870.281088][ T5739] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1870.281118][ T5739] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1870.281139][ T5739] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1870.281159][ T5739] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1870.281181][ T5739] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1870.281202][ T5739] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1870.281249][ T5739] usb 10-1: config 168 interface 0 has no altsetting 0 [ 1870.286298][ T5739] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1870.286328][ T5739] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1870.286357][ T5739] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1870.286378][ T5739] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1870.286397][ T5739] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1870.286417][ T5739] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1870.286437][ T5739] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1870.286457][ T5739] usb 10-1: config 168 interface 0 has no altsetting 0 [ 1870.315693][ T5739] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 1870.315840][ T5739] usb 10-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1870.315980][ T5739] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1870.316090][ T5739] usb 10-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1870.316389][ T5739] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1870.316484][ T5739] usb 10-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1870.316595][ T5739] usb 10-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1870.316675][ T5739] usb 10-1: config 168 interface 0 has no altsetting 0 [ 1870.609251][ T5739] usb 10-1: string descriptor 0 read error: -22 [ 1870.609408][ T5739] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1870.609436][ T5739] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.734260][ T5739] adutux 10-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1870.876720][ T5764] usb 10-1: USB disconnect, device number 6 [ 1871.173407][T24783] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1871.186833][T24783] FAULT_INJECTION: forcing a failure. [ 1871.186833][T24783] name failslab, interval 1, probability 0, space 0, times 0 [ 1871.186879][T24783] CPU: 0 UID: 0 PID: 24783 Comm: syz.5.4193 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1871.186909][T24783] Tainted: [L]=SOFTLOCKUP [ 1871.186918][T24783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1871.186932][T24783] Call Trace: [ 1871.186941][T24783] [ 1871.186951][T24783] dump_stack_lvl+0xe8/0x150 [ 1871.186986][T24783] should_fail_ex+0x467/0x600 [ 1871.187020][T24783] should_failslab+0xa8/0x100 [ 1871.187044][T24783] __kmalloc_noprof+0xfb/0x790 [ 1871.187087][T24783] ? tomoyo_realpath_from_path+0xef/0x640 [ 1871.187121][T24783] ? tomoyo_realpath_from_path+0xef/0x640 [ 1871.187162][T24783] tomoyo_realpath_from_path+0xef/0x640 [ 1871.187207][T24783] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1871.187236][T24783] tomoyo_path_number_perm+0x246/0x5f0 [ 1871.187266][T24783] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1871.187296][T24783] ? do_raw_spin_lock+0x12b/0x2f0 [ 1871.187345][T24783] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1871.187370][T24783] ? lockdep_hardirqs_on+0x7a/0x110 [ 1871.187410][T24783] ? __fget_files+0x2a/0x420 [ 1871.187438][T24783] ? __fget_files+0x3a8/0x420 [ 1871.187460][T24783] ? __fget_files+0x2a/0x420 [ 1871.187488][T24783] security_file_ioctl+0xb9/0x260 [ 1871.187516][T24783] __se_sys_ioctl+0x47/0x170 [ 1871.187549][T24783] do_syscall_64+0x17b/0x530 [ 1871.187572][T24783] ? irqentry_exit+0x10f/0x8f0 [ 1871.187593][T24783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.187616][T24783] ? clear_bhb_loop+0x40/0x90 [ 1871.187644][T24783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.187668][T24783] RIP: 0033:0x7f826b40de99 [ 1871.187689][T24783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1871.187709][T24783] RSP: 002b:00007f8269666028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1871.187733][T24783] RAX: ffffffffffffffda RBX: 00007f826b695fa0 RCX: 00007f826b40de99 [ 1871.187749][T24783] RDX: 00002000000002c0 RSI: 0000000000003b8c RDI: 0000000000000003 [ 1871.187764][T24783] RBP: 00007f8269666090 R08: 0000000000000000 R09: 0000000000000000 [ 1871.187778][T24783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1871.187791][T24783] R13: 00007f826b696038 R14: 00007f826b695fa0 R15: 00007ffde0d4cb28 [ 1871.187826][T24783] [ 1871.188424][T24783] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1871.757475][T24803] sg_write: 23 callbacks suppressed [ 1871.757567][T24803] sg_write: data in/out 452058/40 bytes for SCSI command 0x0-- guessing data in; [ 1871.757567][T24803] program syz.2.4196 not setting count and/or reply_len properly [ 1871.779041][ T5764] usb 6-1: new full-speed USB device number 83 using dummy_hcd [ 1871.798222][T24803] sg_write: data in/out 565044094/4056 bytes for SCSI command 0x38-- guessing data in; [ 1871.798222][T24803] program syz.2.4196 not setting count and/or reply_len properly [ 1871.879187][T13501] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1871.941515][ T5764] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1871.942157][ T5764] usb 6-1: not running at top speed; connect to a high speed hub [ 1871.943482][ T5764] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 1871.943510][ T5764] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 1871.943533][ T5764] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 1871.943555][ T5764] usb 6-1: config 14 has no interface number 0 [ 1871.943573][ T5764] usb 6-1: config 14 has no interface number 1 [ 1871.943649][ T5764] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1871.943677][ T5764] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1871.943706][ T5764] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1871.943735][ T5764] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1871.943760][ T5764] usb 6-1: config 14 interface 57 has no altsetting 0 [ 1871.943780][ T5764] usb 6-1: config 14 interface 228 has no altsetting 0 [ 1871.946285][ T5764] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1871.946315][ T5764] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1871.946339][ T5764] usb 6-1: Product: syz [ 1871.946356][ T5764] usb 6-1: Manufacturer: syz [ 1871.946371][ T5764] usb 6-1: SerialNumber: syz [ 1872.098646][T13501] usb 10-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 1872.098675][T13501] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.175369][T13501] usb-storage 10-1:32.0: USB Mass Storage device detected [ 1872.226358][T13501] usb-storage 10-1:32.0: Quirks match for vid 057b pid 0000: 1 [ 1872.226390][T13501] usb-storage 10-1:32.0: This device (057b,0000,0000 S 00 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 1872.226390][T13501] Please send a copy of this message to and [ 1872.414984][T13501] usb 10-1: USB disconnect, device number 7 [ 1872.613756][ T5764] legousbtower 6-1:14.57: interrupt endpoints not found [ 1873.023833][ T5764] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 1873.039349][ T5764] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1873.093570][T24849] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1873.134583][T24849] FAULT_INJECTION: forcing a failure. [ 1873.134583][T24849] name failslab, interval 1, probability 0, space 0, times 0 [ 1873.134625][T24849] CPU: 1 UID: 0 PID: 24849 Comm: syz.9.4203 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1873.134655][T24849] Tainted: [L]=SOFTLOCKUP [ 1873.134663][T24849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1873.134677][T24849] Call Trace: [ 1873.134686][T24849] [ 1873.134695][T24849] dump_stack_lvl+0xe8/0x150 [ 1873.134730][T24849] should_fail_ex+0x467/0x600 [ 1873.134762][T24849] should_failslab+0xa8/0x100 [ 1873.134786][T24849] __kmalloc_noprof+0xfb/0x790 [ 1873.134817][T24849] ? tomoyo_encode+0x2ad/0x570 [ 1873.134848][T24849] ? tomoyo_encode+0x2ad/0x570 [ 1873.134887][T24849] tomoyo_encode+0x2ad/0x570 [ 1873.134924][T24849] tomoyo_realpath_from_path+0x5fa/0x640 [ 1873.134971][T24849] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1873.134998][T24849] tomoyo_path_number_perm+0x246/0x5f0 [ 1873.135029][T24849] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1873.135057][T24849] ? do_raw_spin_lock+0x12b/0x2f0 [ 1873.135137][T24849] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1873.135160][T24849] ? lockdep_hardirqs_on+0x7a/0x110 [ 1873.135199][T24849] ? __fget_files+0x2a/0x420 [ 1873.135227][T24849] ? __fget_files+0x3a8/0x420 [ 1873.135249][T24849] ? __fget_files+0x2a/0x420 [ 1873.135276][T24849] security_file_ioctl+0xb9/0x260 [ 1873.135304][T24849] __se_sys_ioctl+0x47/0x170 [ 1873.135345][T24849] do_syscall_64+0x17b/0x530 [ 1873.135368][T24849] ? irqentry_exit+0x10f/0x8f0 [ 1873.135389][T24849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1873.135411][T24849] ? clear_bhb_loop+0x40/0x90 [ 1873.135439][T24849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1873.135461][T24849] RIP: 0033:0x7f436cc0de99 [ 1873.135482][T24849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1873.135502][T24849] RSP: 002b:00007f436ae66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1873.135526][T24849] RAX: ffffffffffffffda RBX: 00007f436ce95fa0 RCX: 00007f436cc0de99 [ 1873.135543][T24849] RDX: 00002000000002c0 RSI: 0000000000003b8c RDI: 0000000000000003 [ 1873.135558][T24849] RBP: 00007f436ae66090 R08: 0000000000000000 R09: 0000000000000000 [ 1873.135573][T24849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1873.135586][T24849] R13: 00007f436ce96038 R14: 00007f436ce95fa0 R15: 00007ffdb6315c98 [ 1873.135622][T24849] [ 1873.144192][T24849] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1873.358162][T24790] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1873.809003][ T5688] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1873.809149][ T5688] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 1873.848954][ T5688] usb 1-1: USB disconnect, device number 36 [ 1874.368824][ T5688] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1874.532202][ T5688] usb 1-1: Using ep0 maxpacket: 16 [ 1874.557275][ T5688] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1874.557305][ T5688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.557325][ T5688] usb 1-1: Product: syz [ 1874.557340][ T5688] usb 1-1: Manufacturer: syz [ 1874.557355][ T5688] usb 1-1: SerialNumber: syz [ 1874.610312][ T5688] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1874.610339][ T5688] r8152-cfgselector 1-1: config 0 descriptor?? [ 1875.044401][T13501] usb 6-1: USB disconnect, device number 83 [ 1875.088775][ T5764] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1875.120889][ T5739] r8152-cfgselector 1-1: USB disconnect, device number 37 [ 1875.189783][T13501] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 1875.241745][ T5764] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 1875.241807][ T5764] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1875.241833][ T5764] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1875.246330][ T5764] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1875.246368][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1875.246391][ T5764] usb 3-1: Product: syz [ 1875.246406][ T5764] usb 3-1: Manufacturer: syz [ 1875.246423][ T5764] usb 3-1: SerialNumber: syz [ 1875.346486][ T5764] usb 3-1: config 0 descriptor?? [ 1875.366197][ T5764] hub 3-1:0.0: bad descriptor, ignoring hub [ 1875.366238][ T5764] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1875.392242][ T5764] usb 3-1: selecting invalid altsetting 0 [ 1875.637186][T24925] netlink: 44 bytes leftover after parsing attributes in process `syz.9.4210'. [ 1876.428870][ T5739] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1876.610573][ T5739] usb 1-1: device descriptor read/64, error -71 [ 1876.848767][ T5739] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1876.978767][ T5739] usb 1-1: device descriptor read/64, error -71 [ 1877.052524][T24959] binder: 24958:24959 ioctl 40085875 0 returned -22 [ 1877.076505][T24959] binder: 24958:24959 ioctl c0306201 2000000001c0 returned -14 [ 1877.077450][ T39] audit: type=1326 audit(2000001709.194:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24958 comm="syz.9.4216" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436cc0de99 code=0x7ffc0000 [ 1877.077633][ T39] audit: type=1326 audit(2000001709.194:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24958 comm="syz.9.4216" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436cc0de99 code=0x7ffc0000 [ 1877.077948][ T39] audit: type=1326 audit(2000001709.194:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24958 comm="syz.9.4216" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436cc0de99 code=0x7ffc0000 [ 1877.078168][ T39] audit: type=1326 audit(2000001709.194:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24958 comm="syz.9.4216" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436cc0de99 code=0x7ffc0000 [ 1877.078452][ T39] audit: type=1326 audit(2000001709.194:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24958 comm="syz.9.4216" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f436cc0de99 code=0x7ffc0000 [ 1877.090546][ T5739] usb usb1-port1: attempt power cycle [ 1877.155524][ T39] audit: type=1326 audit(2000001709.214:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24958 comm="syz.9.4216" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436cc0de99 code=0x7ffc0000 [ 1877.184053][ T39] audit: type=1326 audit(2000001709.304:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24958 comm="syz.9.4216" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436cc0de99 code=0x7ffc0000 [ 1877.193163][ T39] audit: type=1326 audit(2000001709.304:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24958 comm="syz.9.4216" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436cc0de99 code=0x7ffc0000 [ 1877.209392][ T39] audit: type=1326 audit(2000001709.214:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24958 comm="syz.9.4216" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436cc0de99 code=0x7ffc0000 [ 1877.209562][ T39] audit: type=1326 audit(2000001709.334:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=24958 comm="syz.9.4216" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f436cc0de99 code=0x7ffc0000 [ 1877.528672][ T5739] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1877.553223][ T5739] usb 1-1: device descriptor read/8, error -71 [ 1877.726238][ T5764] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1877.745113][ T5688] usb 3-1: USB disconnect, device number 86 [ 1877.791896][ T5739] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1877.809528][ T5739] usb 1-1: device descriptor read/8, error -71 [ 1877.883308][ T5764] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1877.883345][ T5764] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1877.883386][ T5764] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1877.883412][ T5764] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1877.922820][ T5739] usb usb1-port1: unable to enumerate USB device [ 1877.967063][ T5764] hub 10-1:4.0: USB hub found [ 1878.083979][T18907] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1878.174109][ T5764] hub 10-1:4.0: 2 ports detected [ 1878.174994][ T5764] usb 10-1: selecting invalid altsetting 1 [ 1878.175021][ T5764] hub 10-1:4.0: Using single TT (err -22) [ 1878.614032][T24966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1878.616452][T24966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1878.695482][ T5764] usb 10-1: USB disconnect, device number 8 [ 1878.989156][T13501] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1879.138671][T13501] usb 3-1: Using ep0 maxpacket: 32 [ 1879.152813][T13501] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1879.154102][T13501] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1879.179262][T13501] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1879.179359][T13501] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1879.179418][T13501] usb 3-1: Product: syz [ 1879.179461][T13501] usb 3-1: Manufacturer: syz [ 1879.179503][T13501] usb 3-1: SerialNumber: syz [ 1879.428792][T13501] usb 3-1: Invalid number of CPorts: 0 [ 1879.428868][T13501] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 1879.439676][T25023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1879.657467][T20132] usb 3-1: USB disconnect, device number 87 [ 1879.908859][ T5739] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1879.938534][T19285] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1880.058604][ T5739] usb 10-1: Using ep0 maxpacket: 32 [ 1880.060765][ T5739] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1880.060792][ T5739] usb 10-1: config 0 has no interface number 0 [ 1880.063235][ T5739] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 1880.063261][ T5739] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.063281][ T5739] usb 10-1: Product: syz [ 1880.063299][ T5739] usb 10-1: Manufacturer: syz [ 1880.063309][ T5739] usb 10-1: SerialNumber: syz [ 1880.100030][ T5739] usb 10-1: config 0 descriptor?? [ 1880.129332][T19285] usb 1-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 64 [ 1880.129370][T19285] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1880.129400][T19285] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1880.132534][T19285] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1880.132563][T19285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.132584][T19285] usb 1-1: Product: syz [ 1880.132599][T19285] usb 1-1: Manufacturer: syz [ 1880.132614][T19285] usb 1-1: SerialNumber: syz [ 1880.136544][ T5739] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1880.136562][ T5739] usb 10-1: selecting invalid altsetting 1 [ 1880.136574][ T5739] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1880.188691][T25042] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1880.311998][ T5739] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1880.312632][ T5739] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1880.312689][ T5739] usb 10-1: media controller created [ 1880.383773][T20132] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1880.419132][T25037] usb 10-1: dvb_usb_ce6230: I2C read not implemented [ 1880.476504][T19285] usb 1-1: USB disconnect, device number 42 [ 1880.479559][ T5739] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1880.529701][T20132] usb 6-1: device descriptor read/64, error -71 [ 1880.612143][ T5739] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1880.612184][ T5739] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1880.612586][ T5739] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1880.668587][ T5764] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1880.825036][ T5739] usb 10-1: USB disconnect, device number 9 [ 1880.872079][ T5764] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1880.872111][ T5764] usb 3-1: config 0 has no interface number 0 [ 1880.872167][ T5764] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1880.876422][ T5764] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1880.876453][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1880.876788][ T5764] usb 3-1: Product: syz [ 1880.876806][ T5764] usb 3-1: Manufacturer: syz [ 1880.876823][ T5764] usb 3-1: SerialNumber: syz [ 1880.908424][T20132] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1880.946962][ T5764] usb 3-1: config 0 descriptor?? [ 1881.004263][ T5764] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 1881.068527][T20132] usb 6-1: device descriptor read/64, error -71 [ 1881.122060][T25101] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1881.180170][T20132] usb usb6-port1: attempt power cycle [ 1881.478516][T12849] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1881.518613][T20132] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1881.519860][ C0] yurex 3-1:0.50: yurex_interrupt - overflow with length 8, actual length is 8 [ 1881.539225][T20132] usb 6-1: device descriptor read/8, error -71 [ 1881.636523][T12849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1881.636585][T12849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1881.636607][T12849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1881.636637][T12849] usb 1-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1881.636655][T12849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1881.661901][T12849] usb 1-1: config 0 descriptor?? [ 1881.821258][T20132] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1881.841500][T20132] usb 6-1: device descriptor read/8, error -71 [ 1881.939593][T25119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1881.942863][T25119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1881.967400][T20132] usb usb6-port1: unable to enumerate USB device [ 1882.006412][T25124] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1882.006831][T12849] hid-rmi 0003:0461:4E72.005B: hidraw0: USB HID vff.fc Device [HID 0461:4e72] on usb-dummy_hcd.0-1/input0 [ 1882.032696][T25124] FAULT_INJECTION: forcing a failure. [ 1882.032696][T25124] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1882.032735][T25124] CPU: 1 UID: 0 PID: 25124 Comm: syz.9.4232 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1882.032764][T25124] Tainted: [L]=SOFTLOCKUP [ 1882.032773][T25124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1882.032786][T25124] Call Trace: [ 1882.032795][T25124] [ 1882.032816][T25124] dump_stack_lvl+0xe8/0x150 [ 1882.032848][T25124] should_fail_ex+0x467/0x600 [ 1882.032900][T25124] _copy_to_user+0x31/0xb0 [ 1882.032924][T25124] simple_read_from_buffer+0xe1/0x170 [ 1882.032953][T25124] proc_fail_nth_read+0x1be/0x230 [ 1882.032981][T25124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1882.033009][T25124] ? rw_verify_area+0x250/0x4d0 [ 1882.033037][T25124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1882.033060][T25124] vfs_read+0x219/0xa90 [ 1882.033092][T25124] ? __pfx_vfs_read+0x10/0x10 [ 1882.033121][T25124] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1882.033144][T25124] ? lockdep_hardirqs_on+0x7a/0x110 [ 1882.033165][T25124] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1882.033189][T25124] ? mutex_lock_nested+0x152/0x1d0 [ 1882.033217][T25124] ? fdget_pos+0x252/0x320 [ 1882.033250][T25124] ksys_read+0x156/0x270 [ 1882.033278][T25124] ? __pfx_ksys_read+0x10/0x10 [ 1882.033302][T25124] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1882.033335][T25124] do_syscall_64+0x17b/0x530 [ 1882.033361][T25124] ? irqentry_exit+0x10f/0x8f0 [ 1882.033382][T25124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1882.033405][T25124] ? clear_bhb_loop+0x40/0x90 [ 1882.033433][T25124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1882.033455][T25124] RIP: 0033:0x7f436cbce6ce [ 1882.033476][T25124] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1882.033495][T25124] RSP: 002b:00007f436ae65fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1882.033518][T25124] RAX: ffffffffffffffda RBX: 00007f436ae666c0 RCX: 00007f436cbce6ce [ 1882.033535][T25124] RDX: 000000000000000f RSI: 00007f436ae660a0 RDI: 0000000000000004 [ 1882.033549][T25124] RBP: 00007f436ae66090 R08: 0000000000000000 R09: 0000000000000000 [ 1882.033562][T25124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1882.033575][T25124] R13: 00007f436ce96038 R14: 00007f436ce95fa0 R15: 00007ffdb6315c98 [ 1882.033609][T25124] [ 1882.311978][T12849] usb 1-1: USB disconnect, device number 43 [ 1882.416466][T25131] fido_id[25131]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 1882.848575][T20132] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1883.005752][T20132] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1883.005784][T20132] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1883.005823][T20132] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1883.005848][T20132] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1883.005889][T20132] usb 10-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1883.005914][T20132] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.075719][T20132] usb 10-1: config 0 descriptor?? [ 1883.294567][T20132] hdpvr 10-1:0.0: firmware version 0x0 dated [ 1883.294588][T20132] hdpvr 10-1:0.0: untested firmware, the driver might not work. [ 1883.478373][T12849] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1883.490317][ T5764] usb 3-1: USB disconnect, device number 88 [ 1883.610156][ T5764] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 1883.638275][T12849] usb 6-1: Using ep0 maxpacket: 16 [ 1883.641218][T12849] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1883.641246][T12849] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1883.692433][T12849] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1883.692464][T12849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.692485][T12849] usb 6-1: Product: syz [ 1883.692499][T12849] usb 6-1: Manufacturer: syz [ 1883.692515][T12849] usb 6-1: SerialNumber: syz [ 1883.807662][T25172] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1883.924533][T12849] usb 6-1: 0:2 : does not exist [ 1883.924625][T12849] usb 6-1: unit 6 not found! [ 1884.003174][T20132] hdpvr 10-1:0.0: Could not setup controls [ 1884.004046][T20132] hdpvr 10-1:0.0: registering videodev failed [ 1884.029277][T20132] hdpvr 10-1:0.0: probe with driver hdpvr failed with error -71 [ 1884.136498][T20132] usb 10-1: USB disconnect, device number 10 [ 1884.222822][T18907] Bluetooth: hci4: unexpected event for opcode 0x0407 [ 1884.285160][ T5739] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 1884.331449][ T5739] hid-generic 0000:0000:0000.005C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1884.635269][ T5739] usb 6-1: USB disconnect, device number 88 [ 1884.828242][T20132] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1884.981015][T20132] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1884.981065][T20132] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1884.981089][T20132] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1884.981133][T20132] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1884.981157][T20132] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.047711][T20132] usb 10-1: config 0 descriptor?? [ 1885.408880][ T5739] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1885.589013][T20132] plantronics 0003:047F:FFFF.005D: invalid report_size 869794296 [ 1885.589043][T20132] plantronics 0003:047F:FFFF.005D: item 0 4 1 7 parsing failed [ 1885.590059][T20132] plantronics 0003:047F:FFFF.005D: parse failed [ 1885.590298][T20132] plantronics 0003:047F:FFFF.005D: probe with driver plantronics failed with error -22 [ 1885.688945][ T5764] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1885.879820][ T5764] usb 3-1: Using ep0 maxpacket: 8 [ 1885.883332][ T5764] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1885.883386][ T5764] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1885.883409][ T5764] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1885.883436][ T5764] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1885.887643][ T5764] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1885.887673][ T5764] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.887695][ T5764] usb 3-1: Product: syz [ 1885.887712][ T5764] usb 3-1: Manufacturer: syz [ 1885.887729][ T5764] usb 3-1: SerialNumber: syz [ 1886.112287][ T5764] usb 3-1: config 0 descriptor?? [ 1886.180083][ T5764] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 1886.348160][T20132] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1886.476739][ T5764] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 1886.477046][ T5764] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 1886.494841][ T5764] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1886.512150][T20132] usb 6-1: Using ep0 maxpacket: 32 [ 1886.551274][T20132] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1886.551297][T20132] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.551312][T20132] usb 6-1: Product: syz [ 1886.551323][T20132] usb 6-1: Manufacturer: syz [ 1886.551334][T20132] usb 6-1: SerialNumber: syz [ 1886.595134][T20132] usb 6-1: config 0 descriptor?? [ 1886.618999][T20132] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1886.728358][ T5739] usb 1-1: device descriptor read/64, error -71 [ 1886.843883][T12964] usb 3-1: USB disconnect, device number 89 [ 1886.968333][ T5739] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1887.118990][ T5739] usb 1-1: Using ep0 maxpacket: 32 [ 1887.121439][ T5739] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1887.121469][ T5739] usb 1-1: config 0 has no interface number 0 [ 1887.124523][ T5739] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1887.124553][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.124616][ T5739] usb 1-1: Product: syz [ 1887.124628][ T5739] usb 1-1: Manufacturer: syz [ 1887.124639][ T5739] usb 1-1: SerialNumber: syz [ 1887.186176][ T5739] usb 1-1: config 0 descriptor?? [ 1887.206612][ T5739] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1887.443635][ T5739] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1887.491776][ T5739] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1887.722999][T12849] usb 10-1: USB disconnect, device number 11 [ 1887.843395][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1887.851888][ T1254] usb 1-1: USB disconnect, device number 45 [ 1887.914555][T25323] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4249'. [ 1887.916513][ T1254] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1887.956260][ T1254] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1887.957837][ T1254] quatech2 1-1:0.51: device disconnected [ 1888.039946][T25331] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1888.584949][T25361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4253'. [ 1888.841170][T20132] gspca_ov534_9: reg_r err -71 [ 1888.863649][T25368] 9pnet_fd: Insufficient options for proto=fd [ 1889.097950][T20132] gspca_ov534_9: Unknown sensor 0000 [ 1889.098054][T20132] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 1889.133892][T20132] usb 6-1: USB disconnect, device number 89 [ 1889.463939][T25390] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4259'. [ 1889.467157][T25390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4259'. [ 1889.582966][T25392] netlink: 'syz.0.4260': attribute type 10 has an invalid length. [ 1889.583138][T25392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1889.606711][T25392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1889.647964][ T1254] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1889.654828][T25392] bond0: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 1889.804233][ T1254] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1889.804271][ T1254] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1889.804294][ T1254] usb 3-1: Product: syz [ 1889.804310][ T1254] usb 3-1: Manufacturer: syz [ 1889.804326][ T1254] usb 3-1: SerialNumber: syz [ 1890.016037][T16424] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1890.344768][T25404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4263'. [ 1890.473969][T25384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1890.474690][T25384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1890.556194][ T1254] (unnamed net_device) (uninitialized): Assigned a random MAC address: 86:e1:eb:9b:0b:30 [ 1890.739376][ T1254] rtl8150 3-1:1.0: eth17: rtl8150 is detected [ 1890.768188][ T1254] usb 3-1: USB disconnect, device number 90 [ 1891.097411][T25411] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1891.568452][ T5739] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1891.697976][ T5739] usb 6-1: device descriptor read/64, error -71 [ 1891.740076][T25449] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4268'. [ 1891.938036][ T5739] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1892.067918][ T5739] usb 6-1: device descriptor read/64, error -71 [ 1892.178211][ T5739] usb usb6-port1: attempt power cycle [ 1892.351018][T25453] input: syz1 as /devices/virtual/input/input105 [ 1892.424792][T25456] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4269'. [ 1892.517945][ T5739] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1892.539706][ T5739] usb 6-1: device descriptor read/8, error -71 [ 1892.709611][T25465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4271'. [ 1892.709704][T25465] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4271'. [ 1892.797958][ T5739] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1892.819866][ T5739] usb 6-1: device descriptor read/8, error -71 [ 1892.930696][ T5739] usb usb6-port1: unable to enumerate USB device [ 1893.597816][ T5739] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1893.747734][ T5739] usb 3-1: Using ep0 maxpacket: 8 [ 1893.750476][ T5739] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1893.752983][ T5739] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1893.753013][ T5739] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1893.753039][ T5739] usb 3-1: Product: syz [ 1893.753049][ T5739] usb 3-1: Manufacturer: syz [ 1893.753061][ T5739] usb 3-1: SerialNumber: syz [ 1894.026204][ T5739] usb 3-1: Invalid connection information received from device [ 1894.570703][T25486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1894.572413][T25486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1895.787568][T12849] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 1895.937538][T12849] usb 6-1: Using ep0 maxpacket: 16 [ 1895.940396][T12849] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1895.940425][T12849] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1895.940450][T12849] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1895.940465][T12849] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1895.940491][T12849] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1895.940507][T12849] usb 6-1: config 0 has no interface number 0 [ 1895.940541][T12849] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1895.940562][T12849] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1895.940579][T12849] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1895.940604][T12849] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1895.940625][T12849] usb 6-1: config 0 interface 125 has no altsetting 0 [ 1895.943121][T12849] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1895.943148][T12849] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.943170][T12849] usb 6-1: Product: syz [ 1895.943186][T12849] usb 6-1: Manufacturer: syz [ 1895.943202][T12849] usb 6-1: SerialNumber: syz [ 1896.058467][T12849] usb 6-1: config 0 descriptor?? [ 1896.376669][T12964] usb 3-1: USB disconnect, device number 91 [ 1896.593992][T12849] usb 6-1: USB disconnect, device number 94 [ 1896.857582][T12964] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1897.007560][T12964] usb 3-1: Using ep0 maxpacket: 32 [ 1897.011587][T12964] usb 3-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 1897.011637][T12964] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 1897.011668][T12964] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1897.011701][T12964] usb 3-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 1897.011727][T12964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.061221][T12964] usb 3-1: config 0 descriptor?? [ 1897.608552][T12964] usbhid 3-1:0.0: can't add hid device: -71 [ 1897.608686][T12964] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1897.626563][T12964] usb 3-1: USB disconnect, device number 92 [ 1898.035431][T25544] binder_alloc: binder_alloc_mmap_handler: 25543 200000ffd000-200001000000 already mapped failed -16 [ 1898.036496][T25544] binder_alloc: 25543: binder_alloc_buf, no vma [ 1898.081383][T25544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1898.082048][T25544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1898.307533][ T1254] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1898.465116][ T1254] usb 6-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 1898.465147][ T1254] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.465173][ T1254] usb 6-1: Product: syz [ 1898.465185][ T1254] usb 6-1: Manufacturer: syz [ 1898.465202][ T1254] usb 6-1: SerialNumber: syz [ 1898.502694][T12964] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1898.520317][ T1254] usb 6-1: config 0 descriptor?? [ 1898.525924][ T1254] hub 6-1:0.0: bad descriptor, ignoring hub [ 1898.525966][ T1254] hub 6-1:0.0: probe with driver hub failed with error -5 [ 1898.545965][ T1254] f81232 6-1:0.0: f81534a converter detected [ 1898.667647][T12964] usb 3-1: Using ep0 maxpacket: 32 [ 1898.678190][T12964] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1898.678229][T12964] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1898.678267][T12964] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1898.678294][T12964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1898.698059][T12964] usb 3-1: config 0 descriptor?? [ 1898.749162][T25546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1898.755731][T25546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1898.786280][ T1254] usb 6-1: f81534a converter now attached to ttyUSB0 [ 1899.101708][ T1254] usb 6-1: USB disconnect, device number 95 [ 1899.126838][ T1254] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 1899.135954][ T1254] f81232 6-1:0.0: device disconnected [ 1899.159506][T25570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1899.164896][T25570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1899.580008][T12964] corsair-cpro 0003:1B1C:0C10.005E: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 1899.632860][T25605] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4282'. [ 1899.897428][ T5739] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1899.962125][T12964] corsair-cpro 0003:1B1C:0C10.005E: probe with driver corsair-cpro failed with error -71 [ 1899.973269][T12964] usb 3-1: USB disconnect, device number 93 [ 1900.047417][ T5739] usb 6-1: Using ep0 maxpacket: 8 [ 1900.055899][ T5739] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1900.070360][ T5739] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1900.070392][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.070413][ T5739] usb 6-1: Product: syz [ 1900.070433][ T5739] usb 6-1: Manufacturer: syz [ 1900.070445][ T5739] usb 6-1: SerialNumber: syz [ 1900.074339][ T5739] usb 6-1: config 0 descriptor?? [ 1900.121830][ T5739] streamzap 6-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1900.301182][ T1254] usb 6-1: USB disconnect, device number 96 [ 1900.879839][T25642] fuse: blksize only supported for fuseblk [ 1903.118250][T25644] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1903.119184][ T5601] Bluetooth: hci2: command 0x0406 tx timeout [ 1903.180057][T25644] Bluetooth: hci2: Opcode 0x0406 failed: -110 [ 1903.943592][T25644] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1903.943770][T25644] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1904.017175][T25644] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1904.017312][T25644] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1904.308290][T25663] overlayfs: failed lookup in lower (newroot/92, name='file2', err=-40): overlapping layers [ 1904.360298][T25663] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 1904.686099][T18907] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1904.763279][T18907] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1904.813990][T18907] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1904.860088][T18907] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1904.863667][T18907] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1904.917851][T25676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4290'. [ 1904.917882][T25676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4290'. [ 1905.105437][T25672] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1905.105840][T25672] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1905.105875][T25672] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1905.159609][T25672] UDF-fs: Scanning with blocksize 512 failed [ 1905.161012][T25672] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1905.161209][T25672] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1905.182890][T25672] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1905.182911][T25672] UDF-fs: Scanning with blocksize 1024 failed [ 1905.183834][T25672] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1905.184050][T25672] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1905.184070][T25672] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1905.184081][T25672] UDF-fs: Scanning with blocksize 2048 failed [ 1905.199848][T18907] Bluetooth: hci2: command 0x0406 tx timeout [ 1905.247363][T25672] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1905.247570][T25672] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1905.247593][T25672] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 1905.247609][T25672] UDF-fs: Scanning with blocksize 4096 failed [ 1905.247620][T25672] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 1905.282997][T18907] Bluetooth: hci1: command 0x0406 tx timeout [ 1905.978115][T25699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4293'. [ 1906.088829][ T5601] Bluetooth: hci4: command 0x040f tx timeout [ 1906.116812][T25702] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4294'. [ 1906.127721][T25702] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4294'. [ 1906.244176][T25710] overlayfs: failed to resolve '/G+5ƒÉwdÒâ 1 [ 1908.320851][T18907] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1908.333377][T18907] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1908.355136][T18907] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1908.386240][T18907] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1908.821528][T25668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1908.823752][T25668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1908.824093][T25668] bridge_slave_0: entered allmulticast mode [ 1908.923820][T25668] bridge_slave_0: entered promiscuous mode [ 1909.148026][T25668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1909.148323][T25668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1909.148562][T25668] bridge_slave_1: entered allmulticast mode [ 1909.182632][T25668] bridge_slave_1: entered promiscuous mode [ 1909.312862][T25668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1909.326627][T25668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1909.446993][T18907] Bluetooth: hci5: command tx timeout [ 1909.619157][T25668] team0: Port device team_slave_0 added [ 1909.625037][T25668] team0: Port device team_slave_1 added [ 1909.721355][T25668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1909.721377][T25668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1909.721413][T25668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1909.776016][T25668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1909.776034][T25668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1909.776063][T25668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1909.992028][T12849] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1909.992060][T12849] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1909.992358][T12849] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 1910.030316][T25668] hsr_slave_0: entered promiscuous mode [ 1910.052675][T25668] hsr_slave_1: entered promiscuous mode [ 1910.054868][T25668] debugfs: 'hsr0' already exists in 'hsr' [ 1910.054896][T25668] Cannot create hsr debugfs directory [ 1910.060297][T12849] usb 3-1: USB disconnect, device number 95 [ 1910.322331][T18907] Bluetooth: hci4: command 0x040f tx timeout [ 1910.735990][T26008] vxcan1: tx drop: invalid sa for name 0x0000000004000000 [ 1910.749849][T26009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1910.750629][T26009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1910.976848][ T5764] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1911.146867][ T5764] usb 3-1: device descriptor read/64, error -71 [ 1911.208891][T18907] Bluetooth: hci6: command tx timeout [ 1911.396766][ T5764] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1911.567421][ T5764] usb 3-1: device descriptor read/64, error -71 [ 1911.625146][T18907] Bluetooth: hci5: command tx timeout [ 1911.691284][ T5764] usb usb3-port1: attempt power cycle [ 1912.036750][ T5764] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1912.078420][ T5764] usb 3-1: device descriptor read/8, error -71 [ 1912.326842][ T5764] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1912.347332][ T5764] usb 3-1: device descriptor read/8, error -71 [ 1912.397023][T18907] Bluetooth: hci4: command 0x040f tx timeout [ 1912.554365][ T5764] usb usb3-port1: unable to enumerate USB device [ 1912.564783][T19285] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1912.696744][T19285] usb 6-1: device descriptor read/64, error -71 [ 1912.948722][T19285] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1913.096652][T19285] usb 6-1: device descriptor read/64, error -71 [ 1913.251851][T19285] usb usb6-port1: attempt power cycle [ 1913.276998][T18907] Bluetooth: hci6: command tx timeout [ 1913.602171][T19285] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1913.628165][T19285] usb 6-1: device descriptor read/8, error -71 [ 1913.680757][T18907] Bluetooth: hci5: command tx timeout [ 1913.999158][T19285] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1914.017533][T19285] usb 6-1: device descriptor read/8, error -71 [ 1914.127185][T19285] usb usb6-port1: unable to enumerate USB device [ 1914.489269][T18907] Bluetooth: hci4: command 0x040f tx timeout [ 1914.491004][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.819530][T25807] bridge0: port 1(bridge_slave_0) entered blocking state [ 1914.819990][T25807] bridge0: port 1(bridge_slave_0) entered disabled state [ 1914.820326][T25807] bridge_slave_0: entered allmulticast mode [ 1914.824145][T25807] bridge_slave_0: entered promiscuous mode [ 1914.839995][T25807] bridge0: port 2(bridge_slave_1) entered blocking state [ 1914.841238][T25807] bridge0: port 2(bridge_slave_1) entered disabled state [ 1914.842157][T25807] bridge_slave_1: entered allmulticast mode [ 1914.852276][T25807] bridge_slave_1: entered promiscuous mode [ 1914.856653][ T5739] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1915.009280][ T5739] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1915.010738][ T5739] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1915.010775][ T5739] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1915.014778][ T5739] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1915.014805][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.014826][ T5739] usb 3-1: Product: syz [ 1915.014841][ T5739] usb 3-1: Manufacturer: syz [ 1915.014856][ T5739] usb 3-1: SerialNumber: syz [ 1915.192126][ T5739] usb 3-1: selecting invalid altsetting 1 [ 1915.193046][ T5739] usb 3-1: unit 6 not found! [ 1915.310924][T25807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1915.339689][T25807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1915.360028][T18907] Bluetooth: hci6: command tx timeout [ 1915.651563][ T5739] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 1915.672976][T25807] team0: Port device team_slave_0 added [ 1915.707303][T25807] team0: Port device team_slave_1 added [ 1915.894183][ T5739] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1915.923594][ T5739] usb 3-1: USB disconnect, device number 100 [ 1916.025773][T19092] udevd[19092]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1916.493985][T25807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1916.494018][T25807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1916.494039][T25807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1916.505773][T25807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1916.505791][T25807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1916.505856][T25807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1916.517258][ T5739] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1916.648945][ T5739] usb 6-1: device descriptor read/64, error -71 [ 1916.710846][ T5764] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1916.838872][ T5764] usb 3-1: device descriptor read/64, error -71 [ 1916.887624][ T5739] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1916.918835][T25807] hsr_slave_0: entered promiscuous mode [ 1916.922077][T25807] hsr_slave_1: entered promiscuous mode [ 1916.924597][T25807] debugfs: 'hsr0' already exists in 'hsr' [ 1916.924625][T25807] Cannot create hsr debugfs directory [ 1917.026662][ T5739] usb 6-1: device descriptor read/64, error -71 [ 1917.091095][ T5764] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1917.150659][ T5739] usb usb6-port1: attempt power cycle [ 1917.240398][ T5764] usb 3-1: device descriptor read/64, error -71 [ 1917.346725][ T5764] usb usb3-port1: attempt power cycle [ 1917.436428][T18907] Bluetooth: hci6: command tx timeout [ 1917.499742][T25668] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1917.521881][ T5739] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1917.539521][ T5739] usb 6-1: device descriptor read/8, error -71 [ 1917.575347][T25668] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1917.619031][T25668] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1917.752679][T25668] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1917.779788][ T5764] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1917.789528][ T5739] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1917.809302][ T5739] usb 6-1: device descriptor read/8, error -71 [ 1917.810194][ T5764] usb 3-1: device descriptor read/8, error -71 [ 1917.857695][T25668] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1917.919158][ T5739] usb usb6-port1: unable to enumerate USB device [ 1917.922203][T25668] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1917.970369][T25668] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1918.013962][T25668] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1918.067929][ T5764] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1918.091889][ T5764] usb 3-1: device descriptor read/8, error -71 [ 1918.197138][ T5764] usb usb3-port1: unable to enumerate USB device [ 1919.160734][T25807] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1919.508561][T25668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1920.556421][T25807] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1920.749203][T25668] 8021q: adding VLAN 0 to HW filter on device team0 [ 1920.775946][T25565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1920.822638][T25565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1920.889835][T19822] bridge0: port 2(bridge_slave_1) entered blocking state [ 1920.890016][T19822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1921.041095][T16415] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1921.407247][T25807] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1922.204928][T25807] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1923.250515][T25668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1923.736609][T25668] veth0_vlan: entered promiscuous mode [ 1923.752777][T25807] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1923.795632][T25807] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1923.809194][T25807] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1923.894143][T25807] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1923.939414][T25807] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1923.996856][T25807] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1924.001144][T25807] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1924.074232][T25807] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1924.115389][T25668] veth1_vlan: entered promiscuous mode [ 1924.444967][T25668] veth0_macvtap: entered promiscuous mode [ 1924.509622][T25668] veth1_macvtap: entered promiscuous mode [ 1924.630771][T25668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1924.701773][T25668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1924.965178][T25807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1924.976989][T12112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1924.978805][T12112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1924.978925][T12112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1924.978966][T12112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1925.231895][T25807] 8021q: adding VLAN 0 to HW filter on device team0 [ 1925.714202][T25567] bridge0: port 1(bridge_slave_0) entered blocking state [ 1925.714383][T25567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1925.856709][T25565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1925.856904][T25565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1926.293219][ T1296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1926.293243][ T1296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1926.655952][T16423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1926.655976][T16423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1927.325894][T19285] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 1927.493736][T19285] usb 2-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice=d7.23 [ 1927.493769][T19285] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1927.493789][T19285] usb 2-1: Product: syz [ 1927.493800][T19285] usb 2-1: Manufacturer: syz [ 1927.493812][T19285] usb 2-1: SerialNumber: syz [ 1927.542504][T19285] usb 2-1: config 0 descriptor?? [ 1927.655178][T25807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1927.753932][T26604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1927.754636][T26604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1927.767387][T12849] usb 2-1: USB disconnect, device number 106 [ 1928.105502][T25807] veth0_vlan: entered promiscuous mode [ 1928.130762][T25807] veth1_vlan: entered promiscuous mode [ 1928.232410][T25807] veth0_macvtap: entered promiscuous mode [ 1928.253019][T25807] veth1_macvtap: entered promiscuous mode [ 1928.304299][T25807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1928.362387][T25807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1928.402007][T12112] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.404248][T12112] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.434536][T12112] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.435452][T12112] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1929.416168][ T1296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1929.416193][ T1296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1930.435992][T16423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1930.436008][T16423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1930.777999][T26645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1930.778858][T26645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1952.165805][T25562] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1975.921837][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 1983.191973][T25547] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2014.115527][T16415] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2029.190199][T18907] Bluetooth: hci5: command 0x0406 tx timeout [ 2034.400020][T18907] Bluetooth: hci6: command 0x0406 tx timeout [ 2037.354424][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.359136][ T40] INFO: task syz.9.4252:25357 blocked for more than 143 seconds. [ 2037.359164][ T40] Tainted: G L syzkaller #0 [ 2037.359177][ T40] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2037.359188][ T40] task:syz.9.4252 state:D stack:25584 pid:25357 tgid:25356 ppid:18927 task_flags:0x400140 flags:0x00090002 [ 2037.359285][ T40] Call Trace: [ 2037.359294][ T40] [ 2037.359310][ T40] __schedule+0x1709/0x5530 [ 2037.359351][ T40] ? __lock_acquire+0x6df/0x2e40 [ 2037.359399][ T40] ? __pfx___schedule+0x10/0x10 [ 2037.359432][ T40] ? lock_acquire+0x115/0x350 [ 2037.359771][ T40] ? schedule+0x90/0x2b0 [ 2037.359813][ T40] schedule+0x164/0x2b0 [ 2037.359849][ T40] cgroup_lock_and_drain_offline+0x51a/0x650 [ 2037.359900][ T40] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 2037.359937][ T40] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2037.359985][ T40] cgroup_kn_lock_live+0x120/0x230 [ 2037.360023][ T40] cgroup_subtree_control_write+0x4b5/0x1080 [ 2037.360071][ T40] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 2037.360106][ T40] ? kernfs_root+0x1c/0x230 [ 2037.360129][ T40] ? kernfs_root+0x1c/0x230 [ 2037.360154][ T40] ? kernfs_root+0x1ea/0x230 [ 2037.360181][ T40] ? __pfx_cgroup_subtree_control_write+0x10/0x10 [ 2037.360216][ T40] cgroup_file_write+0x331/0x8f0 [ 2037.360254][ T40] ? __pfx_cgroup_file_write+0x10/0x10 [ 2037.360287][ T40] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2037.360312][ T40] ? lockdep_hardirqs_on+0x7a/0x110 [ 2037.360345][ T40] ? __pfx_cgroup_file_write+0x10/0x10 [ 2037.360374][ T40] kernfs_fop_write_iter+0x3a5/0x540 [ 2037.360410][ T40] vfs_write+0x61e/0xbb0 [ 2037.360448][ T40] ? __pfx_vfs_write+0x10/0x10 [ 2037.360524][ T40] ? mutex_lock_nested+0x168/0x1d0 [ 2037.360552][ T40] ? __fget_files+0x2a/0x420 [ 2037.360585][ T40] ksys_write+0x156/0x270 [ 2037.360614][ T40] ? __pfx_ksys_write+0x10/0x10 [ 2037.360653][ T40] do_syscall_64+0x17b/0x530 [ 2037.360696][ T40] ? irqentry_exit+0x10f/0x8f0 [ 2037.360736][ T40] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2037.360760][ T40] ? clear_bhb_loop+0x40/0x90 [ 2037.360789][ T40] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2037.360812][ T40] RIP: 0033:0x7f436cc0de99 [ 2037.360845][ T40] RSP: 002b:00007f436ae66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2037.360870][ T40] RAX: ffffffffffffffda RBX: 00007f436ce95fa0 RCX: 00007f436cc0de99 [ 2037.360887][ T40] RDX: 0000000000000005 RSI: 0000200000000040 RDI: 0000000000000005 [ 2037.360902][ T40] RBP: 00007f436cca3eaf R08: 0000000000000000 R09: 0000000000000000 [ 2037.360916][ T40] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2037.360930][ T40] R13: 00007f436ce96038 R14: 00007f436ce95fa0 R15: 00007ffdb6315c98 [ 2037.360965][ T40] [ 2037.360977][ T40] INFO: task syz.0.4269:25453 blocked for more than 143 seconds. [ 2037.360998][ T40] Tainted: G L syzkaller #0 [ 2037.361010][ T40] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2037.361021][ T40] task:syz.0.4269 state:D stack:27712 pid:25453 tgid:25452 ppid:21994 task_flags:0x400140 flags:0x00080002 [ 2037.361104][ T40] Call Trace: [ 2037.361113][ T40] [ 2037.361127][ T40] __schedule+0x1709/0x5530 [ 2037.361163][ T40] ? __lock_acquire+0x6df/0x2e40 [ 2037.361211][ T40] ? __pfx___schedule+0x10/0x10 [ 2037.361243][ T40] ? lock_acquire+0x115/0x350 [ 2037.361288][ T40] ? schedule+0x90/0x2b0 [ 2037.361327][ T40] schedule+0x164/0x2b0 [ 2037.361364][ T40] cgroup_lock_and_drain_offline+0x51a/0x650 [ 2037.361443][ T40] ? __pfx_cgroup_lock_and_drain_offline+0x10/0x10 [ 2037.361489][ T40] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2037.361521][ T40] ? safesetid_security_capable+0xa9/0x1a0 [ 2037.361552][ T40] ? bpf_lsm_capable+0x9/0x20 [ 2037.361575][ T40] ? security_capable+0x74/0x280 [ 2037.361613][ T40] cgroup1_get_tree+0x9d/0x890 [ 2037.361642][ T40] ? cap_capable+0x123/0x460 [ 2037.361667][ T40] ? safesetid_security_capable+0xa9/0x1a0 [ 2037.361699][ T40] ? bpf_lsm_capable+0x9/0x20 [ 2037.361726][ T40] vfs_get_tree+0x92/0x2a0 [ 2037.361758][ T40] do_new_mount+0x319/0xdc0 [ 2037.361780][ T40] ? cap_capable+0x123/0x460 [ 2037.361809][ T40] ? __pfx_do_new_mount+0x10/0x10 [ 2037.361836][ T40] ? ns_capable+0x89/0xe0 [ 2037.361862][ T40] ? path_mount+0x647/0x1050 [ 2037.361887][ T40] ? user_path_at+0xd4/0x160 [ 2037.361917][ T40] __se_sys_mount+0x31d/0x420 [ 2037.361948][ T40] ? __pfx___se_sys_mount+0x10/0x10 [ 2037.361977][ T40] ? __x64_sys_mount+0x20/0xc0 [ 2037.362003][ T40] do_syscall_64+0x17b/0x530 [ 2037.362026][ T40] ? irqentry_exit+0x10f/0x8f0 [ 2037.362049][ T40] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2037.362074][ T40] ? clear_bhb_loop+0x40/0x90 [ 2037.362102][ T40] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2037.362126][ T40] RIP: 0033:0x7f1a45e9de99 [ 2037.362146][ T40] RSP: 002b:00007f1a440f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2037.362170][ T40] RAX: ffffffffffffffda RBX: 00007f1a46125fa0 RCX: 00007f1a45e9de99 [ 2037.362188][ T40] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 2037.362205][ T40] RBP: 00007f1a45f33eaf R08: 0000200000000380 R09: 0000000000000000 [ 2037.362220][ T40] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 2037.362235][ T40] R13: 00007f1a46126038 R14: 00007f1a46125fa0 R15: 00007ffc687f3788 [ 2037.362271][ T40] [ 2037.362324][ T40] [ 2037.362324][ T40] Showing all locks held in the system: [ 2037.362336][ T40] locks held by ktimers/0/16: 10, last CPU#0: [ 2037.362561][ T40] #0: ffffffff8e259320 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 2037.362706][ T40] #1: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 2037.362758][ T40] #2: ffff8880b8626260 (&base->expiry_lock){+...}-{3:3}, at: __run_timer_base+0x11a/0x9b0 [ 2037.362808][ T40] #3: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 2037.362865][ T40] #4: ffffc90000157a80 ((&ndev->rs_timer)){+...}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 2037.362918][ T40] #5: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x203/0x1650 [ 2037.362973][ T40] #6: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 2037.363023][ T40] #7: ffff8880347147e8 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa20 [ 2037.363081][ T40] #8: ffff8880b863dc18 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa20 [ 2037.363139][ T40] #9: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: rt_mutex_slowunlock+0xbf/0xa20 [ 2037.363202][ T40] locks held by khungtaskd/40: 1, last CPU#1: [ 2037.363219][ T40] #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2037.363285][ T40] locks held by aoe_tx0/1341: 1, last CPU#0: [ 2037.363301][ T40] #0: ffffffff8e3c3880 (rcu_read_lock){....}-{1:3}, at: __sprint_symbol+0xb9/0x400 [ 2037.363378][ T40] locks held by getty/5351: 2, on CPU#0: [ 2037.363395][ T40] #0: ffff888036c650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2037.363458][ T40] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 2037.363546][ T40] locks held by syz.9.4252/25357: 3, on CPU#0: [ 2037.363563][ T40] #0: ffff888061db6528 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 2037.363616][ T40] #1: ffff888040a4a510 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 2037.363676][ T40] #2: ffff88803b8f1478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 2037.363741][ T40] [ 2037.363747][ T40] ============================================= [ 2037.363747][ T40] [ 2037.363824][ T40] NMI backtrace for cpu 1 [ 2037.363844][ T40] CPU: 1 UID: 0 PID: 40 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2037.363898][ T40] Tainted: [L]=SOFTLOCKUP [ 2037.363907][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2037.363927][ T40] Call Trace: [ 2037.363937][ T40] [ 2037.363946][ T40] dump_stack_lvl+0xe8/0x150 [ 2037.363994][ T40] nmi_cpu_backtrace+0x274/0x2d0 [ 2037.364026][ T40] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2037.364060][ T40] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 2037.364095][ T40] sys_info+0x135/0x170 [ 2037.364122][ T40] watchdog+0xfd7/0x1030 [ 2037.364163][ T40] ? watchdog+0x1c7/0x1030 [ 2037.364203][ T40] kthread+0x388/0x470 [ 2037.364234][ T40] ? __pfx_watchdog+0x10/0x10 [ 2037.364268][ T40] ? __pfx_kthread+0x10/0x10 [ 2037.364298][ T40] ret_from_fork+0x514/0xb70 [ 2037.364333][ T40] ? __pfx_ret_from_fork+0x10/0x10 [ 2037.364363][ T40] ? __switch_to+0xc89/0x1420 [ 2037.364392][ T40] ? __pfx_kthread+0x10/0x10 [ 2037.364423][ T40] ret_from_fork_asm+0x1a/0x30 [ 2037.364471][ T40] [ 2037.364498][ T40] Sending NMI from CPU 1 to CPUs 0: [ 2037.364535][ C0] NMI backtrace for cpu 0 [ 2037.364560][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2037.364587][ C0] Tainted: [L]=SOFTLOCKUP [ 2037.364595][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2037.364606][ C0] RIP: 0010:ndisc_send_skb+0x4b8/0x1650 [ 2037.364632][ C0] Code: 57 0a 00 00 e8 d9 d8 c2 f7 e9 95 fe ff ff 48 89 44 24 70 48 8b 44 24 58 42 80 3c 28 00 74 08 48 89 df e8 9b 2f 2f f8 4c 8b 23 01 00 00 00 4c 89 e6 e8 0b de c2 f7 49 83 fc 02 0f 93 c3 49 83 [ 2037.364650][ C0] RSP: 0018:ffffc90000157760 EFLAGS: 00000246 [ 2037.364666][ C0] RAX: 1ffff1100e98620b RBX: ffff888074c31058 RCX: ffff88801daf8000 [ 2037.364681][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 2037.364694][ C0] RBP: ffffc90000157950 R08: 0000000000000000 R09: 0000000000000100 [ 2037.364707][ C0] R10: ffffc900001576e0 R11: fffff5200002aede R12: 0000000000000000 [ 2037.364720][ C0] R13: dffffc0000000000 R14: ffff888074c31010 R15: ffff88807675b0f8 [ 2037.364735][ C0] FS: 0000000000000000(0000) GS:ffff8881259f2000(0000) knlGS:0000000000000000 [ 2037.364751][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2037.364764][ C0] CR2: 000055c1e876d8e0 CR3: 000000000e1b0000 CR4: 00000000003526f0 [ 2037.364781][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 2037.364794][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2037.364807][ C0] Call Trace: [ 2037.364814][ C0] [ 2037.364826][ C0] ? ndisc_send_skb+0x203/0x1650 [ 2037.364853][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 2037.364875][ C0] ? ndisc_alloc_skb+0x1a6/0x480 [ 2037.364912][ C0] addrconf_rs_timer+0x2d2/0x6c0 [ 2037.364932][ C0] ? lock_acquire+0x115/0x350 [ 2037.364964][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 2037.364992][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2037.365023][ C0] call_timer_fn+0x192/0x5e0 [ 2037.365045][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 2037.365062][ C0] ? call_timer_fn+0xd4/0x5e0 [ 2037.365083][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 2037.365110][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2037.365129][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 2037.365148][ C0] __run_timer_base+0x67b/0x9b0 [ 2037.365175][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 2037.365197][ C0] ? lock_acquire+0x115/0x350 [ 2037.365231][ C0] run_timer_softirq+0xb7/0x170 [ 2037.365251][ C0] handle_softirqs+0x1d9/0x6c0 [ 2037.365277][ C0] run_ktimerd+0x69/0x100 [ 2037.365299][ C0] smpboot_thread_fn+0x57c/0xa80 [ 2037.365323][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 2037.365350][ C0] kthread+0x388/0x470 [ 2037.365375][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2037.365397][ C0] ? __pfx_kthread+0x10/0x10 [ 2037.365422][ C0] ret_from_fork+0x514/0xb70 [ 2037.365450][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2037.365475][ C0] ? __switch_to+0xc89/0x1420 [ 2037.365499][ C0] ? __pfx_kthread+0x10/0x10 [ 2037.365525][ C0] ret_from_fork_asm+0x1a/0x30 [ 2037.365562][ C0] [ 2037.366540][ T40] Kernel panic - not syncing: hung_task: blocked tasks [ 2037.366561][ T40] CPU: 1 UID: 0 PID: 40 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 2037.366590][ T40] Tainted: [L]=SOFTLOCKUP [ 2037.366599][ T40] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2037.366612][ T40] Call Trace: [ 2037.366622][ T40] [ 2037.366632][ T40] vpanic+0x56c/0xa60 [ 2037.366659][ T40] ? __pfx_vpanic+0x10/0x10 [ 2037.366692][ T40] panic+0xc5/0xd0 [ 2037.366713][ T40] ? __pfx_panic+0x10/0x10 [ 2037.366739][ T40] ? wq_watchdog_touch+0xf9/0x160 [ 2037.366794][ T40] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 2037.366831][ T40] watchdog+0x1030/0x1030 [ 2037.366884][ T40] ? watchdog+0x1c7/0x1030 [ 2037.366923][ T40] kthread+0x388/0x470 [ 2037.366953][ T40] ? __pfx_watchdog+0x10/0x10 [ 2037.366983][ T40] ? __pfx_kthread+0x10/0x10 [ 2037.367015][ T40] ret_from_fork+0x514/0xb70 [ 2037.367048][ T40] ? __pfx_ret_from_fork+0x10/0x10 [ 2037.367079][ T40] ? __switch_to+0xc89/0x1420 [ 2037.367108][ T40] ? __pfx_kthread+0x10/0x10 [ 2037.367139][ T40] ret_from_fork_asm+0x1a/0x30 [ 2037.367183][ T40] [ 2037.367810][ T40] Kernel Offset: disabled