last executing test programs: 53.624750564s ago: executing program 2 (id=174): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000000000000000, 0x101480) vmsplice(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="3c4685dded38e6488036ede35ded1bf2f576964a695c2be6f2f9d94564aad0f7b3765e87b6d7d2723a1770f05c8b6983c7f3439178c275ea175e8e6df1773ea875c8baff31652926ce7e30352d2c8d0dd66b416028f2a63bbc7d163301c2d1ac1b43c1d0d0f9f831f0c3b8baef75d4f36ad39c6388eb5a7ef213f0bbf3767afec5d2717249ddc82fa10f5ae0a45920b00550c76f7fa38a6b67608b8408", 0x9d}, {&(0x7f0000000100)="0faec8e4900e0d213521eb62e4de8a48cfc04c33557a2a8c1a66ccb554bf15d60fc9e02931c713865817ded7efe13cd13ea828893c5bf5d4e1678afebde6374bebeb2cfc110670e72151b062c700ac29f259b7fb504befae156e79b077a8", 0x5e}], 0x2, 0x3) (async) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$UHID_INPUT(r1, &(0x7f0000000200)={0x8, {"9515bbdb065f59ad6846b5e694237596c434568213d5fae70d016439b7106769a4084549ddd95f3363cc44f194a1ce6230439e2ef4515df7783cdcd8f702b9ae04b69754c6a27d0f2cac74e5fd79b2eb5fcb6423f6ecb8beb35378350baf87f70067743f1a97f8eeb299655dcd6da1ef1e2c1a29a08120c312c4043f6126d6622a10fb1fe0cfd34edf4812732614973cb10193d71d9898594de28027d864925f16ec434b2d9db9e33696276cc3fffbf08e53bfaaf3240dece059528dd2d940703fe98d0debdc7ac0aafe60c2bbf3bca78f5490bf5df27d112e198705524909c27098b6f58871eb9fb34396392d266fb891a924d06272587de97bf5e16fe49f6d5ca61b516c191678a08b9bf93231a856a338ce4e62168f68c144f7619fcd4f9ac6114c0c325b2560df2f51d703d69d1a2bfdaacc55bf2f01d19f13cace82d9b5abb17a8b11523f79e96eb27222615fe494f6b0709a2b4d4d07e022d26db451855e9ae2d414537722417a46bbc78372fde218c502ac0c0e37962861205cffd3cb16edab4b5eceaeaed1e92f469f8a187c9de78e1152e292a4fbfa8cd444f60d906ea2c44b910d0e6d4cb7b51d8b6050ecdd08ff3307211434e2fc6899df0dddc41f3063198a977d2d9de6aa1afd527ccadca7491891f33fae1ebaac28a64c02cac9c4757c2242d0075afddad439a7c4344e8aff82abdd310175c30c77625eee823fe9c002a85253954e27241d6bac3f95413d0da5502aff4ec48c76c7f64438183ec4897fb02a173b92b39eaf5cf0183e49db80c6bda903220073467e0ee0ec625428215684ec8148109907f49e0125365d9e307d283032faf8f4206112d1d8f4f94fd2b7d0f3d8b694bcc6b7f5e34b15b9b41cf6a90f3b8523a5b3fecc2fed16062761a3db0c407203db19f6c12b62030fb41ca09cbcc527eaadc1274859381d33353c54b4d0f2be516fe08a4ef6e16d5cd2c5bb374acbc1c0c4edc1cc1258515351481acaff10c7cd475a360781fcfcf13a5a049bab5a90f2a1250c40d3b5a7dbd7c62ae864411ff7312dd23d3e89b3cb5c9c9315ba9b1deada25b239cb06da2091d52d2064c067979d30d0775e4f7cd6fe94b426b53e34eea1b5f6f7ab1d7f7ece4af982caeaa94d244e32bbb2ebc76dce84e7722e3b455519b9f0f966b289d7ffd10938a948b76596ac74a57d997d0b78f983c8dc696ac4057b77d93e6e82dc79ef9d963ea9d38593ed5293ba287b2cc79d34cd5f5c99fa8c1e6684447e112706c14f51cf701ab4757db7d469491914b0f4b6620b0d111116a5e8789be00db58a3f2ef2db36af959d20e488a73dcd14e4a6d67f011ef99e73414e3e9f7b3f073fa7da0faf6d0d3c0680b4453f0f3b691954f427d937a7ef2f68b735da4c12e99c85b8d249592b7a21e7c5965950528f69e9190d7a093c1a830672c94bcff75690a72ea02327e8d59ff8b01389b7e4e31fc4dc4e3498a26400360fdd54226fad39181e4ba4e2dc1b99bcb2487376f926c8e7dcecc2790964fa4df57fbd7cb48ce34ba629423596422feef298bd9a0114d7827ce669aabe7b710e0fd39300d867cc7ba1d51c72b892e823e62319d3b0bfea1e40c8958d6e5ffb5ae496cbd3663fb6474e5ee59aee4d993b7a569d83c7eda7cd7ff955f1708efaf48b98c1cc9e41350678a3e4541daa190b43e99ed23eace607675e25d52ea3b5fe32b6609b361ce69c76ca58b7b2b6652a373189b535f4243551e94a3490b3f0044de333551562cabc3001674b3b8209262ae298de5cc7053c2275987144d83c49301ecf778488cbbd9ee9ff385aacfa0d5468aab82bc91c4bdf786ce5e7acc261c5c26bda0b362b398fdc5efb66eabe363d90d95113aa073db4c9a635d47d41a6fd86fd1a51d1edf3cf402ee2703b91cd8a340871481128766061c4601f7168e227bd9e97ba93e904a3e0a7d1425bab42856d2210d6d7fb80a2561451615a48df1a914098527f0ae3a10ab33edb92ad2e169681934035c49db97c9a2aef08068a34e108265bc7beb00628420c56063a6e9909313fd7163bb9cf550c4f19232590e4825821afb79b839da608f85bc2910892ecdedcc8feba1b69d526f2b23fd4cbae7caf9adc3cb67386205965e90630a7d9b62d4c69c657811f3c0e785c5227f29ec6c2a593e607342ffeac4806e2f920d1d75c9c8b682ea23d9f07f9d7ceed494bf4e4e9bf6a70f65b8ee67921ee2d76a604d2a744248a2061681405eb9553756c18ddec3bb030c010fe23d1b0f665063c57d650a9baba06014a4a6bfcf3420496d503ffc7d8b856178488ac35bf6918f5b175827ada58c653d7794a364292ba1fda8f92bd10ef1acc4739f06cfa16fb278d0739bf1b66e6d06384bca3d5dfa2add313361f23806ac7fbb2306d1ff6f922f17b0a3a32493a9770d30087c8154a412c0a09a7a492dd8fecc7c5e101460bb4fd5508e09ad6db4b32347657561d759e5dc0451b7f45087a4f70153f4b7a4f214cff77878309356ddb11c9f3e3fabc3f9b83cb8e9fcdcf2403902c22765d6bdc3d98015179ed6f9254d4dbebbce12bd7327393b97204a56c9656bab03df8257ad5a91adee3a0c1dfa6c3772d11f37a5ad95ae8090fe1bb21c8b34f88f5bb7d5804f63ab341ec5236a96f68aaec4095250cce5ad9757858ef0183a417f701966c418d2ec9e32498cf84697059f7212edb618c81b8a613e7a3b2d3e035f578d04bf82ca33dc54ea4e4727d0e6eada0138125a8580bac0e3627ff45f4f834a36ad6b5455b48489ae0cb8c5cd1a1d5011eb7c089369d2437ec1b3f41155c330a9bb7643de1e0a2253433a43d281f2ae1609cf596a887eb7d77e6fe7110090485330c20f1007ae01dff851479601d46d5af312a725a3e4634105eafe868d02e5294c571da5be2c9599c253152a94f480741ed345e47b8edfd8b169b4c2f9d7dc47318b60e3c91738d6e7b938809f98508a7a12a708556945726e1380bac7d5db8cc318726c3ae619000f7304010a1afe75a431ba98920ba751b51e2f1764aa30d116c81a85ac30717b6f8f7fa5a7205404d8b512a4c9939d97f27b5fe8a5f876ec733ad08d0a643c6754fb8b7bf75886be5e829e567536d855fa207432d05d3b4dd6a57765213c6b30f80716a42e83a38393fd9b50c33019fb264543992910bedf7cf2c430410f5eb8ac4958a7757eeee2a7647f7faf1d0bdf17c6d95a923362509eea42f55c3eed24edb6abb14e5e9a7330620571024fa4ae4fb3745e67f143ff7a0ac34ad8d8781cc8031b07031e57894c1d07a81ff75a6e888ecf734ab9553bb3f433d3fe28ec949be4a11a386baf363d1d8fb2abbd77c07beeba8c85474d42af3a0a1f70960c9c402f302fe907819f867b453b4637b31b503885c6386fe1ac398dc1cfb030e29087025bddd332bcfe443e01461ccc8ad834c4fb1ab986b2abb22356c093039fbb925ea2d2b9b5202c8a18d9612df87ffe83d020740b43106c3e9de6398a840c0bb081170ee194569d9e939b24fc78b1fa31003168239ead1a57acc087ef057996f36cec5938ab23ac9595badfcaa24dc8f3c9875bf6ccfbe3a22a2eb34bf4074a163f97b0457c44aa72e97fd3a02d124fa4d215fb44989537ee84c7c9f59bfdb15705709e7bc8133f6b829e2d2d2c4749d0bc1460ca33c8130f9feb15b2425a9da8dc615175e8cf6f0b0d5ebc52b6006af482f5a1aa80cee0083c2d8750ad9d7011c374cc60e2a23065466fbe03e3e702873ea5cd22ce20ddf694210367ebc1856e75631abab8d4008f8f724d5e800993fa3bc555a5af79ee79a521ca6d55a372817d558ab30a013cbe692bbc29d875fddf23097aa88541f3450c75145747087f6197e12a8ef9c8c4ade936884531e5c119dfa88ba922656d55b92937557df41179a0b5e89887a375cf7a519a1b8cad7c0253458241af87a6d77622c533f71992c47f457eb48d8b5a663080a3ea1459f16a8a72681d80ba1b4fea5e91000b5e1a56bb86348ee82c292589e58afa0f871406aa9ea9af2aa780223fb2ef3c7bd4e393395399dfb9266f778f0f9a22be11625482370384d8495e594df2aaeb3feaee11a03444004503ff520dad3fd7054bdd238621ecbdb4e22c4b389148868bf0bf059245b8db8a476ceafe4c30fab25a5a143df8add41ff497f4b35370664b149578ab460db154d5b70bf957cd87e5162f514bf9dad2005cb066c888ac423674b62d1f42e2723a24d87e9a37cb4c1a5268b7e75e299a70a602527fb8f6c927d26cc375ad7bbe6610b9ab670f3603d04638d664cb6f6f4b236599263ae49dab383fcab525ff4771cc11bfa0d750cdb3e5ad62e4e340b1d4e9b9f85c7a1b27f6100a828189640c641e58beeb1f4b19b1f58f2a8823b9d32c0283d5f601c49073967a70e2f3c744d2c73d25ed1f7d817a44d8bd1a855a66db9cc89996324b8e3a0827a1fc327c7fc982bc47c911a2c80d8f8fc027ab88ec957ce27419c7a2cbc4b6a2e294149db4d0e45daee955ce64ddc5d16b2a030feca39d56fcd603fe8345400326758f6e96938effa5536fa62666a619287e5cf09e7034ede32980b86b155527f2d6085acd7430b206d6768c803948fbf4c2dc75b0a3082b6c9f9d9fa70d9fb0ee1b0218e26e712581d4bd0776d2cbdc9888cb532b38449a5ecd217c8bb752c7a62bff8e697077e1ceb4d264cd03a90752d42fce848965111e34b52e97c6235735541f724a8aa997a32ee4bf4d0db739ea2b0d328671d17411d81264c90dc37f2fe070bc317691c20e37802d413dffa8ddc6654576dc89aea348a25374ab0d0948028949d7e22602f91a3a2c6fd82b72b214545ffd39e4c2a6966a11ae1617d64b565c2a6118cea27c6994c1a252d8cd4d813dc3c85c61169d51c8823a49c1690aceb3d2b9030304d60c6036bc94b7a4856d791446efe1d84da7fe5ae60154b7c96cc26d35926f86eb905967bda6e278be14b2c61faf907beaa81f0d0880e84e9e3a7bb7f0080ff319b8d08841f157b3eed6c8d638d70675d8e54523429b784477de968ca800ef4083b68ab961a1d6a4039006d18eb620eeaa575114ab41c9c626a5c6a208b961d3ab55fff148ea3edb4e837da9e2e08d0c075c25bde72f7a7aaf87a6cb98972b8cdb210e26450f46a9e3fb4feff764ec2af8392c2dd8897dca6df3b5bcb742ee494f8a9960076a487ffe3b434b2ec19c1e6f633562128fe2bdf44b7850b41b9293bdb5d183d3a3a5426e6f003f4673aca4988e2e354548dd59a0414882a68f9986f3acdf5a0c8f127e7390292abe55cbacab1857fe70c4cc5990c7d9f8edc99c39a16f4ac658659124ef64e5bef2b284e390b333252c7459d51cd2a26796f40d4f55406673dade525368914a685b8d5f0cc92db753dd91f48e297e355f79b7d6abc9489b7b99f8a490c2d4df350ceceed27a146ef5cec6c9d97a1bfac445bf7837b520d3d15de43dbe98f31b774500d4de7338f5a70ee89b1cf650ac501864160ed0c4639c80b2fc03037aeac1f3ed218a4a0c9d99dda7d6ecd5d379b9507f46badfcaade9318190c09e9dc24a461c540c7e04b921362ac17dc40dad8dc5d8594f4d4422727fc9c9cce9017dfec2858fa46bc02a9a91a712c522df1b41b5d845aadc28ab7f6334f1ab101586cf5f203e4ccfa5f053f509886a710cd9f10ce458c4c6e534b7d69c377e6df517d722c29c42c01b70f8ec704bdc7b4b8f56c7c154f15d3574e5780531a7565a967ac3f80a9aa11dd2a0bdac375d222c74037b6e923509396473f88", 0x1000}}, 0x1006) (async, rerun: 64) write$UHID_INPUT(r1, &(0x7f0000001240)={0x8, {"01443c7a3717ceeb06dfd853214c77c63ca62c38c1cacb14f87ee3cd20a73e63b52dfd42dec623622dbf914ab0b7f54f3fe8743c14798569c89f3bf26d5371ed9eef415e7a627f8f773e199f792c2e33db530d4b5ff3bb44bea8cdca4f87f815df10230ef493b0b57b776653fcaf3a7ffff627e05f20b7506000131b7907e42d4609b630209a1ea3469548fdd0695fe026ac579f67fa9d850f6c072bf12a692033de408568408d0ff5f9ed5c24e024d797dc75915f7be3d798695c44808c2a902c837fc575747b95a3bb9e645cbe2c5664a08a19f549c81b2aa3b8b7ac5ca6475fd7f8b6aca2e456ed1e8aeed4d0a5d7efe377077df2fd01abaed4b472259470b3d4d6127d538b4eee741b59b8045db9541738e9dfbe71e039fc2d34434c75c60048d95e8a880f6865c5a90a4790e81359093365808cab4999b6d338d0698de61cd1c3ea7aee99ce4c608390ea09d0dbaa3378f8171aedc89ba58b0df047fb1b5a7d99fda84b6058dc5f687a0fab7e7c91311e6123d2d68c9e0ba81dc84cbc8766338681504daa691fc50ad91cff48451a524ff0f82bcadfd47e43f51d0f3c7785c676303d41770b526da3a2c1f91ed4ce2f881f1980599a19ded5120086a6659e782808a5c227fbb3d8443521dd12be8500c5a7ed7110176334d37e518516269c21a234c20fbbf56e58956cd20ae000f42262afaddff2fe08ef77f6e4c7d389a4ea437c46cd8b83a9bb7c73c5416b21bc2228218fe7170334cdc699cbe52d22e555cf4778a7c22ea8edb523a0bf61c5dbd4a028b60bdb29decb6e10b6871091bd6be65e715b50211bbb7e14708752b037af680a290342026c068aab54e0c2d21fe7adaf10e605f4a874f8ad59670e38c187b55bc7735f58d7bf2d88214e0e33a98f74fc274734044b305659d5be9cfb6fdb6f9afad6b772085bb8782c8dece7345bb1ca5377bb421dee1ebc224b4218ca9312d624f88535b32038f32aba0ffde4f13d7cb2c935d5117f32d1c13b05a55cc55988285c1388fbc7f3bd3c060a58c83c30e5410c1557adab31a4e8b0663cd3f4c0092e5f94ca62758487963b2b13df35a7caef3aefe7f8f64b9cd7099e6b66197ba3f82aa523ec0600fd00f0d197a43ce79d960b7cbabfd3322257f73b92c2706ec49141c3edd160a4627f4706c19dd38a4ccb9a61c94868b943e05b5e0075347263506e5cfbd0ef70f03904f806840dc1e55eb5513076885f42b0b29916e958d08d6e81c73ef1d5a83bf9cf2d0f809be640e4d6dcc51d80c974190962673dddf4f588d390cebb1f6826c362a5b8cd33c5e98894a503d38ceca281fd69971aad53c9e4414057e7a9fb0e041d669c966490ba22845162951b9a489fa836a12f0352604f8955d4e0ba9dfb1e7ec26cd8e246a9d5d2c5334d06a110bc844b24ab172c29110bebead5f0a04eb32428eb034a24fd4aa66be73806184580b510f9426754c04a49d508c6cd084c227d6e3ce38e2120661f2659fc303b22da12ae569869e3d50fa723dfef925184a86e1ed8b364a430d44c37314566cd776c5f48fbe3ff83382cbd9969b8c05e9e0ab3e403eab9b1b831dcf106b74d633532a525b529ad2f51cc75b986fe3c212b27ded47f6cb9a0493430af6f2ca6f849fb5b9408e320c39c4bc000ba918c9080fb299b1fd3233b6650d8f4ac8a3933d8ad1613dc67353eefeccb9612095d37408244cf897ec85d64b0ea35e8cbdf565575125528234cbf572e81dd2821c2a4bc97aedcdf30a3ff7aa8848da004361472b9ba7a3248487d41808d45ce8e067fce9ea96b80805de280a1cc4e09d8f3adc29af53df27f152049f6d0dc1e0871f942008fb3f5eb7fe40689801ee788f89fca872822cb023c164a7d79a72120f0ed7728e56b7792c94f24e125fed08b203739340eaaf2cc746ed390691799a6c9ee64b3987327308ac973721ba5915f045c35a7a81e4a1c665ca9e3d600de0cb84a6426033dc9f1114ac55d49307859305f7923627096efda7e318af81d81d0d0087890021c32dc6e6c8f36ad8948224bcf71db5a2a105445878cd4add4c49cfa296ddda61d98ea291a9ca53efc0d9a699fe7f21c5bb9e14f55cbe5772827be741b5024a321d5c4098ca42e0a47faa8eb37bdc6f91619bd2599884d385248c06d5cd7d55f7247660d3205d62590195a7aa800cb0740862dd426c7c1e12335b2d302b1e00092d35710cf42ce4732713aa3b998ea3630e2f83de0338fdf54fea125f3bd484a95fbad49e6ec1d43adf528c200aafc740a178fbff26030cc0fd4c12c6fea5e5dfaae3cf171b879fb514f9fbf0f6e19c391b58e854b14bc47246b5f68507eb315e502d93e87c2c9092ffc0f47da2576d45ad533d4e65a6d80281f0baab407e7423b24fb940b537dc12963e89d4875d8d9fdff315fa6984ccf16420881e9da24c05d14ca05feb868c6b38c12ff305c12035b4645197be7125ec4fa4abc94c7c5c79cc77382998afc95e755ceb7be16abb9ab05f688a5d8642ec5d987396b33e76218e93cf88be96141e5dc81f3460aede83bda7da4fd1ed16d37997692bb2b459b91bf4f8a38d6b1f6caef15092977c43529b61f1768fdc4ab705434df605146c7166186f8b788b71d7f5935b697ad77c37cdd432a8b677963113bfba7909e5368f58a74713f942d7ed5e8c86eef09e09b4f7ac35d3b6889551a59c0980110fecdb97d35738bd495db2ead64fe32d8a7d5e1e83eef89043c702b50edfdbf030be24cec9f82f9c77f6b51b44042e4e9169234089869679bbc945ad02dd601fb0e4b002e8afbd219b4f161764665b79083430b7a7b26aee18e68a5c0445c63565f50cc4c5790dfd83043d71d2ba936b82a365e8ba2f1b323821a16b726d62f4f18c7eb87736217dc85ee77e82457aa478d11736c2ec4856096350681d7ab6123b10a8026049841a35ccd7ad2031679ae48a154720fa4561e4eda1e896430594d1ae60bedbfacbb96080ca618406b9d264a5de0d3861f8005c10a653fc6928d6d0cea0be3eb7530618d097c6cb6a4a85ca694ef235e9b39007551b388bcca20cf0a726fa68a939f09b0bbc755fc7a31ec462eafb2ba16a61bb3e9dad0d257bb7b223cd18e3125dba647e9665412eda7bb7815f9dbab92e329938f4012e0b02d4246104071f90a22e0970de4fa8f3d441bbfa0018fb3d5108f61d95dc0de97e46aa66945e4b902e977ebbe65b4081f82da2bb92500203eea4d595962e3c8e0b11dfa655a5920ae4531e5ac7dfe556e4c072816c71de71afb64ac9c31806a0e31cf07eb263d722c7ced274ac11881080774260c51c5407f7f540221c8c48f97dd3f75e469c7f5a82f52b3352fec4022460407c6eb0175658420c5cde52d52ab9e858963461dcc1209e146a6e6e7330c9c7b5548c48887e89402cec5a3f2fe72d0eef737543eae9772ebf74041c891e542e40534288fbdf29163b4200ffb345ccb78b35d9036aa729e5e3833420f866a05333e9f1915b9bc8c5509592562fba38cfb246d9f6d4deb2611a869770980cfb90ede968a03ce3472ab36b167a493914d42e8781d36023faaa56a9086c1be106f8b40875183d4420625e8160e52b2c7238dbc78a6c5831a056ab8aa0da325adc9c7af2f6df2c3874a01c5407caad456695b5328445118b933b0550d1377e5219fb5121366a263210e0b56cc0a0675e45f66c4f358a9561f58b097d93ff46ec54f0776d3700bb9a8ccb16cc9ec55c370725fccf34e5f648d420a0e3db60985fcf32c97fcd074e15173a0174c27be9294304e86d66ec820c98bf1cf4997a6097821188f4caa63e204b5c0c515c9a5f9ea325dcb1021e83b7989996f5a395067d28315d5933117562b775f689e7309a114d7111e4982048bea1e195e85c5dc07a4ff338f1390fe0886eb9c625cf133d3a09fc4804e3d15976e3e2267fd06631ec57d9471982ad84ca85b5e8f446159197a8b91c8121683a8afe84e0f4f6b21405a839ba3b6535257664399faf9bcee5353f010d8f0a167fce568e10fa93a0ce8197228fb54b7f82629489489b3cdf10ec98c451e57f81fa44d98f9c9bb811325f7bf8a20eaf379e7416cb109f9bc08d41fe24a6dd02d90bafed9b15ee9c842c410789a759310357a60f1eea73fbd2018b7ccfb18be3942a15e3f9aead865a8c69a08565ad79bae48a01d8e13980e273ee6b796fcf9139f0c125668f5f5010ac840ef3a23b712974ec0994f6754888bfb05570c791cb1fd2a5f0cbe064f85a7163e902d59e3d10aed20ecedde0278c34fd792f76be3513f957b71e2dca32482191685a4f8a9ddfb0728d1f24277f93bc0ea3d30f101cfd54beb069491d153e7c31eaeca31e227d03f3504f2a735b166c4cc55a7094323a03d7e78eb0372023dbe0c61cea663f46f9c6f919e92764ecd9d355b5ba1188ab937d0ceb32510748c027e55cdcd70dacc61ab738110d80d33da49857c02c6af7693edac255c179ce2b59de79279dbc2f01704009ff1db949c992d6bcbc3bae428efad1047fcbab7a342b76cde0e7e609d63af699567f5dfda8d2501cd4ab381f2cea050b467528c7cec8eee2d6a6c05cd48d8c3c331e24bc47a3a9fbb2d7216762490cba88c1e5e0d88ef32ef084990924f9dff240b2d0d183c468c1603c8abf2d37912bc3676a9813b70ef2243154734434a3b37f8a6491e6d4b7350b41a92197491c2414c7cc7600d430013c422192500c34b6f3205dbf5fc9b2fcc13b3e6b3ba5e4e63776c11b80bc400e5ba9a412c26281ada47f4a6d6de5dd1e21de3788bddda91f89c98da6d921bc9cdf3ccf0d762922e5df786698d078e0f1ddfe4f3837c4af982d07bf94d8e5de42832561807ddd787a61f1805ef36a5aebf821a42bfd680e510482ce77db60b56661f7ab20a5237429afacaacc66dcffd8b35069d04eafca93351e90805d24db021b73e2d68333b525aae245a619ccfd85bfe98fcbfcc228922adfa240fd4f2d4154e3da790d6157f72e84a3e77c454ea4aad428b32f08f38eafd70d6d4b3459de6ee9f77f492f0072554449de768f307ec1b57b553469ab2312df9b0115e5c869708c6b1e0da0ee02a96d508c3666550792f752043850d8151beb8adf1338cc889afe5bdd4d3a64b2d66f02f60909dbb6bc80bd9d7a7980bf77e6c77bfec6301c98cfbdf80b3afcdd47096d49b57d04bbbcfc2a13bc36926c02f4b6e2dacb55841ff07b433b8813ca0b882e2be1ae304ee6c56f6568555c38a182255c3fc98745422778adf2e671f778797f985b21266f87eaa34eadb20ea67ab6f56ae44c39ccafb10d3ffb05e7dba0b5f1de34e58c9b3e867b5c156df61ae714a070ffe84625136c18814c3ccc17bfd4297bd3d3fbe98d03366963ee75d7b2da0ed812e3032f8c90ddfeee25a259fe0dc4b64f9b412e89a6f914595e3a46f77e1c18a75562171582024fd2c0a5de41478be2a4cfe18b3091e3dd671a6b66c48f4e290b2995458c2c00870e085318c7fccd1e938bfa3cc525bd8914de56281a30f716bd07fbfff80103f1d21e3cf039dc78ae40b60b4b5e31e15531176f01a5137f6e1de57e410dee8e8a2fe0ed859c50a416ac9db826cf4e6ba6e9107e5b40cc93bed831ac8be88ad821d7fa0300b7ebff83321ce7a91389b0268bac060bb1061048ca07cdf5ac46e82977d097ee2ed14fc5d3d54e07caeee944f4aa9e04e3604acab403381fb09016e9398dd8681c7773a3db5ac44e56c79805f94a8dc0aa7e4bf4dc994a5dd12823db8ce81815745d9665b502bbb68ff6712ca", 0x1000}}, 0x1006) (rerun: 64) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000002280)=""/177) (async) sendmsg$nl_generic(r0, &(0x7f0000002700)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002380)={0x318, 0x30, 0x300, 0x70bd2a, 0x25dfdbfd, {0x8}, [@typed={0x14, 0x109, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @nested={0x4, 0x131}, @nested={0xe1, 0x33, 0x0, 0x1, [@typed={0x8, 0x3f, 0x0, 0x0, @u32=0x8}, @typed={0x14, 0xd, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x4, 0x13e}, @nested={0x4, 0x14b}, @generic="2acb8b3f8691ca62842ab68a98ae77f67ee5972297068d171bb6178795d051e4fc5b5dec38ae1c66a94500a3caad2e5b42a8139695e08462214dd187", @nested={0x4, 0xc}, @nested={0x4, 0xd4}, @nested={0x4, 0x149}, @nested={0x4, 0x84}, @generic="19d9b9e82cc69c88ab1eedf6b778d266c228684598d5a6cc2f767a5dbe30db882fa4e396af9d9ae241e2bd9fe9e09369a2bde231294d75f6c5d3dbb9e3995748eefa496c463fa5079ad71895ad0f7a3dd55324b8500a49ba9a3840bd4001fc0ee54d26c4829888cc6d318049c4"]}, @generic="b92875bc7825e7594401dbb96b6f95195ee87bd1ea", @typed={0xf7, 0x133, 0x0, 0x0, @binary="e10cde63e35c34349b5eb78d2a430874765ed75b17a7fb4a4a3e06a1097fa60e868e357602da89454cd87b24a26b2c2c07a1e60848c6dbb242fc16970508a853d9fd8fb86fc60b8495028ac73fd1b354b63c56620c0646e25703aa9ad41ed6941967e65e9b505c0550bb3a025f5e1370276f31c5a62e0aee3e8950920adeea22579bd641c3fac6ffff6aa4a50c22b16c09b77c9d82510c63f77667c09f6e210c2a645d26d8d897ee27a20b6361f2fe4b99ecd90e0cc3c05a79b9cc66d70f176f7ca0b220a60058c59380941421442860e09b4139ec676b440e0ae407d9c190cd8b795855dbe626bbe49f5419da6b5446bc2098"}, @generic="c035b38bcd5760aeb8156fe778cf49da9c22e1c8876f2563100a3404678a0ada2cc980dd94c55e7f2d241952f106d3b625943d058f367b22838c844fec1c1b3d0954102391cd1ecd8e904003a50d0a83568215c373b827b3700f02b5e3be9de9c6543c82cee5908802e1938dd7918568e8cd0c1fffd4612cc7dfdcdc81e87f9d5748511d15769a06f7c016c1018bf727eda6b63c4fdf8eec05c932836c0d5c95e0ef07c75af338b6a288946049e05184e4c8671793577d74c9077a620fadc1ef8eff02bc11b8b16bfd8e7a787e22efe69d4213d3f0e9d058a9674ea8511f45bb4af9667be46d91a67970e8061cdde6a2cd3bc090096673643a17f2"]}, 0x318}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) preadv2(r1, &(0x7f0000002800)=[{&(0x7f0000002740)}, {&(0x7f0000002780)=""/119, 0x77}], 0x2, 0x8, 0x9, 0xa) (async, rerun: 64) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000002840)) (async, rerun: 64) socket$rds(0x15, 0x5, 0x0) (async, rerun: 64) r2 = socket(0x3, 0xa, 0x80000001) (async, rerun: 64) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000002d80)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002d40)={&(0x7f00000028c0)={0x454, 0x3f4, 0x800, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x5, [0x4, 0x9, 0x9, 0x0, 0xb, 0x1, 0x7, 0x4, 0x3, 0x2, 0xffffffff, 0x7, 0x2, 0xff, 0x0, 0xfffffff9, 0x6, 0x3, 0x10001, 0x6, 0x1, 0xfffffffd, 0x8001, 0x101, 0x4, 0xb32, 0x10000, 0x401, 0x5, 0xd4, 0x7, 0x1, 0x1, 0x1ff, 0x6, 0x10000, 0x1, 0x9, 0xf, 0x8108, 0x4, 0x1, 0xffffffff, 0x2, 0x0, 0x7, 0x1ff, 0x7, 0x3412, 0x0, 0x2, 0x2, 0x9, 0x0, 0xffff, 0x3, 0x7, 0x7f, 0xffffffff, 0x8, 0x4, 0xfffffeff, 0x80000000], [0x80000001, 0x0, 0x9, 0x1, 0x4, 0x1, 0x0, 0x1ff, 0x40000000, 0x8cbd, 0x9, 0xffffffff, 0x23000000, 0xeb, 0x8, 0x1, 0x9, 0xf, 0x0, 0x7, 0x48, 0x8, 0x0, 0x8, 0xfffff000, 0x2, 0xc, 0xd, 0x16f, 0x723, 0x1, 0xe, 0xa78, 0x1, 0x6, 0xef5, 0x0, 0x68ce0e51, 0x51, 0x6, 0x5, 0x3ff, 0x8, 0x5b6f, 0x4, 0x9, 0x8, 0x90cf, 0x200, 0x1d64, 0x3, 0x2d, 0x8, 0xd4, 0xfffffffb, 0x0, 0x6, 0x5afc, 0x0, 0xffffff10, 0xe, 0xf, 0x0, 0x1000], [0x4, 0x6, 0x9, 0x8, 0xf, 0x5, 0xfffffff8, 0x7, 0x6, 0x0, 0x9, 0x1, 0x5, 0x892, 0x5, 0x5, 0xe, 0xfffffff3, 0x2052, 0x4, 0x7ff, 0xf0edf5d7, 0x0, 0x6, 0x400, 0x2, 0x2, 0x0, 0x3, 0x6, 0xff, 0x401, 0x517, 0x6, 0x8, 0x1, 0x9, 0x3, 0x6, 0x101, 0x0, 0x8, 0x3, 0x6, 0x4, 0x4, 0xda, 0x7fff, 0xffffb9b9, 0x8, 0x3, 0x1, 0x2, 0x2, 0x3, 0x0, 0x2, 0x8, 0xc, 0x692, 0x5, 0xaf4, 0x4, 0x1], [0x5, 0x7, 0x1, 0x3ff, 0x5, 0x3, 0x7, 0x5, 0x7, 0x11, 0xe, 0x83, 0x9, 0x3, 0xfffffff0, 0x2, 0x6, 0x40, 0x10, 0xd30, 0x3c6, 0x1, 0xfffffffb, 0x1, 0x4, 0x9, 0xc2, 0x5, 0xe, 0x9, 0x2, 0x6, 0x80000000, 0x7, 0x10001, 0x6, 0x7, 0xebc, 0x4, 0x401, 0x0, 0x8, 0x5, 0x7, 0x8, 0x0, 0x3, 0x2, 0xffff6ed1, 0xb5e0, 0x8e, 0xfffffffb, 0x3, 0x8000, 0x3, 0x4, 0x9, 0xfffffffe, 0x707, 0x0, 0xe, 0x373, 0x1, 0x9], 0x32, ['/dev/uhid\x00', '/dev/uhid\x00', '\x00', '/dev/uhid\x00', '#!}\x00', '!$@@\x00', '!&\xee)/\xaa%,*\x00']}, ["", "", "", "", ""]}, 0x454}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async) ioctl$HIDIOCSFEATURE(r0, 0xc0404806, &(0x7f0000002dc0)="145ad5dba54e90b3614c11657f35e1fac38b8f4467e39415c94a44c17980ad4c3ca3e1f3b9be90ca42c2f61f2d85e9a427e9bc3e7f0d585f2609bb44f096b9af41ca9881b25338bee7e39adf42abf5d2de82cd9b870cad9b1ad8564617feba8cf429d2c2f2945dfa842ee470b08a7f416f59c7028e70fd0c471fdbb6d4aa2b5229371e024a3ae34c26de4a82b6e174b51449f3ca879a390edcf28254c9b1d49082b09b4e40d4b5e00e5319b85cf6a392c78ed4acef2fe0699f7e27497a6ebd9ccf3d7daf72e1e793dfa8581920e5eddff338cacba0e39d3b644a12d4") r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000002ec0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) (async) recvfrom$ax25(r0, &(0x7f0000002f40), 0x0, 0x12140, &(0x7f0000002f80)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null]}, 0x48) (async) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f00000030c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x1000021}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x66}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x20040001) (async) ioctl$HIDIOCGFLAG(r3, 0x8004480e, &(0x7f0000003100)) (async) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000003140)=@req3={0x6, 0x2, 0x401, 0x10, 0xabf, 0x4, 0xd}, 0x1c) (async, rerun: 64) ioctl$KVM_CAP_PTP_KVM(r0, 0x4068aea3, &(0x7f0000003180)) (async, rerun: 64) r4 = accept4(r3, &(0x7f0000003200)=@phonet, &(0x7f0000003280)=0x80, 0x80000) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003300), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000033c0)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x20, r5, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4004044) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003440), r4) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f0000003500)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000034c0)={&(0x7f0000003480)={0x1c, r7, 0x8, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000003580)={0x0, &(0x7f0000003540)="61d0ee2ac49ef797b1892808639bf9fa6c225af47da32f69d0050e2071a81c10807cf57bb7b52bccaaf2bfed4ae2db0a81d84cd973cdcd9e772f69f6631a18", 0x3f}) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003600), r4) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000003700)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000036c0)={&(0x7f0000003640)={0x4c, r8, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa74}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xcfd}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4005) (async) mq_notify(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x24, 0x2, @tid=0xffffffffffffffff}) 53.49951514s ago: executing program 2 (id=175): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) (async) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fcntl$setpipe(r0, 0x407, 0x1) (async) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x5e) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101c02, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r3 = accept$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @rose}, [@bcast, @remote, @remote, @null, @rose, @rose, @default, @netrom]}, &(0x7f00000001c0)=0x48) (async) r4 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0105b08, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r6, 0xc0406400, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, &(0x7f0000001340)=""/4097, 0x0, 0x0}) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000200)={0x2, 'veth1_to_team\x00', {0x6}}) (async) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfdae}], 0x1) (async) r7 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r7, 0x2) (async) shutdown(r7, 0x2) write(r7, &(0x7f0000000040)="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", 0xfc) 53.456188141s ago: executing program 2 (id=176): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0x20007, 0x621}) 53.396242606s ago: executing program 2 (id=177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_REPLY={0x4, 0xf}]}, 0x68}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x43) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x1, 0x0, 0x4}, 0x1}, 0x18) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)={0x738, 0x0, 0x500, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xa4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x9a, 0x4, "0d971441d02c4584757087b5948bf71200d1987d694833dc212e176338c2f060da33ba281f7b355cdd521a74072daa4f7509a834d97da475b0145fa7f9bafcbd15400ca93836c761bde3899702109b7d572bc101b71939c6c85d52723fa06eb534feb311e6067c80c163e2815cdd26874ffaa74220ad14a01581519540a961984b546aa60f7ff7ac15c404920d3f5a462feccef7d535"}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xce7}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x608, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xff, 0x5, "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"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '+:/)+.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, 'net_prio.prioidx\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext2\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x43}]}]}, @ETHTOOL_A_BITSET_BITS={0x1c4, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '-&-{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/rnullb0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*%+\x17\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xb3&\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext2\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, 'net_prio.prioidx\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff7d7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'usrquota'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/rnullb0\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '.!!+*+\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, 'net_prio.prioidx\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'usrquota'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'lowerdir'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext2\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'usrquota'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'usrquota'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xd0, 0x5, "bd67a60197000c5150af54c5aacf84930f4f57af7ed303a65eecb70e9fe836d56eecc4638ce0a908e117f6ec85f9d8ca9cb4a8fdca968b931978249589711db02308834623fb37a1f19240c025a5adb87858f3fad4b7164004b974b31c72065cf9235790488824ca47c396e0d97077f5e1c5915dd17870ddbb3ef74b0b6c9aed7b67a53759a58ab61378932b31043800adc39544db51fbee8f0a219e41cbe4913ee9c4b1ee04cd9029073994115a8f1bb01283d907d64a5a89fa19703d5c78ad9f74ed56837ce8f00ad34873"}, @ETHTOOL_A_BITSET_BITS={0x124, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '*$\'\']@@*-\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/rnullb0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext2\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'workdir'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x95}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tmpfs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'tmpfs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'overlay\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'usrquota'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'ext2\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xd7, 0x5, "6b05b7afcf9cebe61d8c3b9979df2bcfa6b665b3a13ec9e49552745fe77bb2c74750400d50e4f7701204cf70c2b3874308690519c2ed8be8ef32d2c7c88cbbd8b404c0cdabe45fe98cf91092a1220930959a2b9b0f2259162826c7a3eef1757331abd4e4e60c670a29a298fa950508d9c7cde6331af2a8ffbcb7e4abdf5e175f41786925e5f72d9de6791522f1615f1a20fcc4fdb67043b63581450385789f15ce7cfc21bfb4f16fdcda8ff37e1ca9bd205ff2e71e1018091a04d0469347c58c7bdd116d2c9bc653ee333afabb967c1f81c99a"}]}]}, 0x738}, 0x1, 0x0, 0x0, 0x4000}, 0x40) chdir(&(0x7f00000003c0)='./bus\x00') r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) 53.266991912s ago: executing program 2 (id=178): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x2000, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x81040, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xdd) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000000080)) ioctl$RNDADDENTROPY(r3, 0x5207, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x34, r7, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xd5dd}]}, 0x34}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r8, r5, 0x0, 0x3) 52.363464664s ago: executing program 2 (id=180): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e20, 0x6b4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, 0x0, 0x0, 0xf5e1, 0x0, 0xce024d}, 0x9c) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r2, 0x92, 0x5, 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000003, 0x20010, r2, 0xf20dc000) fcntl$setflags(r2, 0x2, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x11}, 0x0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in=@local}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xcd}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {{@in=@dev, 0x1, 0x33}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x9}]}]}, 0x1fc}}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e8, &(0x7f0000000480)="68084e656688385578ff6e24565167104e06925709a6b4cd724417ba546db0eee20f3e71b763253c2a811b14daeeebf56be82c481267bf6779178b1e68c2528633dc82") (async) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e8, &(0x7f0000000480)="68084e656688385578ff6e24565167104e06925709a6b4cd724417ba546db0eee20f3e71b763253c2a811b14daeeebf56be82c481267bf6779178b1e68c2528633dc82") r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000100)={0x8000, 0x10000, 0xfffffffd}, 0xc) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000100)={0x8000, 0x10000, 0xfffffffd}, 0xc) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$KVM_SET_SREGS2(r6, 0x4140aecd, &(0x7f0000000280)={{0x33393000, 0x4, 0x10, 0x10, 0x9, 0xf, 0x8, 0x4, 0x9, 0x8, 0x1, 0x6}, {0x2, 0x4, 0x10, 0x2, 0x10, 0x9, 0x2, 0xc, 0xbf, 0x40, 0xb}, {0x8000000, 0x0, 0xf, 0xfb, 0xa, 0x2, 0xd, 0x1b, 0x7f, 0x5, 0x4}, {0x2000, 0x8000000, 0x8, 0x10, 0x9, 0x1, 0x0, 0x6, 0x81, 0x2, 0x6}, {0x4000, 0x3000, 0xa, 0x1, 0x0, 0x40, 0x81, 0x6, 0x10, 0x2, 0x7, 0x5}, {0x100000, 0x80a0000, 0x8, 0x3, 0x9, 0x1, 0x8, 0x5d, 0xb, 0x1, 0x2, 0x5}, {0x8080000, 0xeeee0000, 0x4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x6, 0x8, 0x2, 0x54}, {0x0, 0x80a0000, 0x0, 0x4, 0xfa, 0x9, 0x7, 0x2, 0x1, 0xd, 0x7, 0xfc}, {0xdddd1000, 0x2}, {0x10000, 0x3}, 0x80000001, 0x0, 0x81ac001, 0x4, 0x3, 0x6000, 0xf000, 0x0, [0xffffffffffffffff, 0x3, 0x200, 0xffffffff]}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={r1, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9268, 0x10}, 0x90) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000002", @ANYRES16=r7, @ANYBLOB="080026bd7000fddbdf25040000000600280002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004081}, 0x4000044) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000002", @ANYRES16=r7, @ANYBLOB="080026bd7000fddbdf25040000000600280002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004081}, 0x4000044) 36.826844207s ago: executing program 32 (id=180): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e20, 0x6b4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}}, 0x0, 0x0, 0xf5e1, 0x0, 0xce024d}, 0x9c) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r2, 0x92, 0x5, 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000003, 0x20010, r2, 0xf20dc000) fcntl$setflags(r2, 0x2, 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x11}, 0x0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in=@local}, {{@in=@remote, 0x0, 0x2b}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xcd}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {{@in=@dev, 0x1, 0x33}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x9}]}]}, 0x1fc}}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) (async) r4 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e8, &(0x7f0000000480)="68084e656688385578ff6e24565167104e06925709a6b4cd724417ba546db0eee20f3e71b763253c2a811b14daeeebf56be82c481267bf6779178b1e68c2528633dc82") (async) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e8, &(0x7f0000000480)="68084e656688385578ff6e24565167104e06925709a6b4cd724417ba546db0eee20f3e71b763253c2a811b14daeeebf56be82c481267bf6779178b1e68c2528633dc82") r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000100)={0x8000, 0x10000, 0xfffffffd}, 0xc) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r5, 0x0, 0x48a, &(0x7f0000000100)={0x8000, 0x10000, 0xfffffffd}, 0xc) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) (async) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$KVM_SET_SREGS2(r6, 0x4140aecd, &(0x7f0000000280)={{0x33393000, 0x4, 0x10, 0x10, 0x9, 0xf, 0x8, 0x4, 0x9, 0x8, 0x1, 0x6}, {0x2, 0x4, 0x10, 0x2, 0x10, 0x9, 0x2, 0xc, 0xbf, 0x40, 0xb}, {0x8000000, 0x0, 0xf, 0xfb, 0xa, 0x2, 0xd, 0x1b, 0x7f, 0x5, 0x4}, {0x2000, 0x8000000, 0x8, 0x10, 0x9, 0x1, 0x0, 0x6, 0x81, 0x2, 0x6}, {0x4000, 0x3000, 0xa, 0x1, 0x0, 0x40, 0x81, 0x6, 0x10, 0x2, 0x7, 0x5}, {0x100000, 0x80a0000, 0x8, 0x3, 0x9, 0x1, 0x8, 0x5d, 0xb, 0x1, 0x2, 0x5}, {0x8080000, 0xeeee0000, 0x4, 0x9, 0x0, 0x0, 0x0, 0x8, 0x6, 0x8, 0x2, 0x54}, {0x0, 0x80a0000, 0x0, 0x4, 0xfa, 0x9, 0x7, 0x2, 0x1, 0xd, 0x7, 0xfc}, {0xdddd1000, 0x2}, {0x10000, 0x3}, 0x80000001, 0x0, 0x81ac001, 0x4, 0x3, 0x6000, 0xf000, 0x0, [0xffffffffffffffff, 0x3, 0x200, 0xffffffff]}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={r1, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9268, 0x10}, 0x90) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000002", @ANYRES16=r7, @ANYBLOB="080026bd7000fddbdf25040000000600280002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004081}, 0x4000044) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000002", @ANYRES16=r7, @ANYBLOB="080026bd7000fddbdf25040000000600280002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004081}, 0x4000044) 27.723356552s ago: executing program 0 (id=313): r0 = fanotify_init(0x8, 0x1) fgetxattr(r0, &(0x7f0000000000)=@known='user.incfs.size\x00', &(0x7f0000000040)=""/7, 0x7) (async) futex(&(0x7f0000000080), 0xa, 0x2, &(0x7f00000000c0), &(0x7f0000000100), 0x2) (async, rerun: 32) r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800) (rerun: 32) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000180), &(0x7f00000001c0)=0x8) clock_settime(0x5, &(0x7f0000000200)) (async, rerun: 64) syz_emit_vhci(&(0x7f0000000240)=@HCI_VENDOR_PKT, 0x2) (async, rerun: 64) io_setup(0x400, &(0x7f0000000280)=0x0) io_getevents(r2, 0x5d00, 0x7, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000003c0)={0x0, 0x989680}) (async) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000480)={0x9, 0x80000001, {0x54, 0x40, 0x7, {0xafa8, 0x8bb}, {0x8, 0x9}, @ramp={0x4, 0x3, {0xcb, 0x100, 0x4, 0x546f}}}, {0x55, 0x14b3, 0x401, {0x8, 0x5}, {0x17b, 0x7}, @period={0x59, 0x0, 0x1, 0x4, 0xb, {0x4, 0x5, 0xce8d, 0x4}, 0x4, &(0x7f0000000440)=[0x400, 0x9, 0x8, 0x4]}}}) (async) pipe2(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x2c80) ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0) (async, rerun: 32) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000540)={[0x400, 0x590, 0xb, 0x8, 0x8, 0x9, 0x5, 0x200, 0x5, 0x200, 0x5, 0x1, 0x9, 0x8fe, 0xcd, 0x6], 0x6000, 0x1280}) (async, rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000600)={0xc}) (async) r6 = accept4(r1, &(0x7f0000000640)=@nl=@unspec, &(0x7f00000006c0)=0x80, 0x800) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000700)=0x2, 0x4) (async) clock_gettime(0x2, &(0x7f0000000740)) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000780)={0x0, 0x3, 0x0, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000b80)={r8, 0x7, 0x1, [0xffffffffffffff79, 0xd88, 0x6, 0x10, 0x3], [0x7fff, 0x40, 0x0, 0x81, 0x2, 0x0, 0x10001, 0x401, 0xfffffffff415ef6a, 0x80, 0x10, 0x4, 0x7, 0x0, 0xffff, 0x6, 0x45e, 0x7ff, 0xfffffffffffffff3, 0x3, 0x51cf, 0x5b76baf5, 0x1, 0x8, 0xfffffffffffffffc, 0x2, 0x6, 0x6, 0x80, 0x80000000, 0xb, 0x4, 0x4, 0x4, 0x9, 0x4, 0x1, 0x2, 0x2, 0xd, 0x9e8d, 0xa8, 0xffffffff80000000, 0x7, 0xf01, 0x5, 0xffff, 0x7, 0x0, 0x80, 0xffffffffffffffff, 0xfffffffffffffffb, 0x9, 0x8, 0x9, 0x8, 0x7fffffffffffffff, 0x40, 0x800, 0x3, 0x1, 0xb, 0x4, 0x8000000000000000, 0x9, 0x200, 0x6, 0x5, 0x6, 0x402dadf8, 0x10, 0x5, 0x6, 0x4, 0xf7c9, 0x539, 0x9, 0x10000, 0x3, 0x81, 0xec78, 0x1, 0x0, 0x6, 0x6, 0x336, 0x0, 0x2, 0x1, 0x4, 0x9, 0xffffffff00000000, 0x800, 0x5, 0x97, 0xf8, 0x8, 0x100, 0x7ab6, 0x37f1, 0x5, 0x1, 0x1f, 0x8000000000000001, 0x0, 0x9, 0x100, 0x8, 0x50, 0x4ff82e75, 0x1, 0xfffffffffffffffe, 0x486, 0x9, 0x8, 0x9, 0x3, 0x0, 0x1, 0x6, 0x5]}) getsockopt$SO_COOKIE(r6, 0x1, 0x39, &(0x7f0000000fc0), &(0x7f0000001000)=0x8) (async) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000001040)=0x2001002) (async) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000001080)) (async, rerun: 32) recvfrom$unix(r6, &(0x7f00000010c0)=""/252, 0xfc, 0x40002000, &(0x7f00000011c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) (async, rerun: 32) write$fb(r5, &(0x7f0000001240)="6a0e02166868f4501de836593e96f355f5cd51f26d0046382d0df485aace6ac23e498aee1464af735f267994f64dd5a003ac95bea224e114a12e1e7a73a8fc5f398eb4cccfc7c216666fe1e5d0bd9efc3501f3e4ee352c20c558e12b02532e6aa24162c5f7345e4d026ad4094ff11640b60b3aec8ca140ec7a26b6c3425940cb6e50188a2432f2e18788a71a66bed42b595b25c51d2223ed616421390cd8e82ed7239014d46c12d56f5845b28b219fdf141ff409e67ef8af42f8d3a5c55f", 0xbe) (async) write$binfmt_script(r4, &(0x7f0000001300)={'#! ', './file0', [{0x20, '/dev/uinput\x00'}], 0xa, "6c9af94e639be14af881b1e0f6eaa0f5853f179dd3513f0e3e4bdc893024c9484a5f0c2fcddcdbbd42739c84721b53e8aa6efeddd316d0d3c2956421e70758cf870c5f01a07b54c215db23c68190f54d337a9d0fe17eb5f085131d981aeea56968bd2ea538d4f1a43613f16e3e9ded7f16bbe8fccef07a0eaf1f3d1587bafe24c5e5595920ecbaff62c639f4fdc8a3724696d930f72c289b040e482b879062a1ecd36034df4e7db6c042bde3303565bfd9b74b0fb2d8102ad0df5cb96f54a2a41f49689d76fef0156730170dcb869df76e17b765213709a0231773a37d4e2d89d18b9904b9dfe8"}, 0xff) syz_open_dev$sg(&(0x7f0000001400), 0x8, 0x402) (async) socket$xdp(0x2c, 0x3, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000001680)={&(0x7f0000001440), 0xc, &(0x7f0000001640)={&(0x7f0000001480)={0x188, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x38000000, 0x7}}}}, [@NL80211_ATTR_SCAN_SSIDS={0x40, 0x2d, 0x0, 0x1, [{0x1c, 0x0, @random="00b313710c8727e6e380fb0417eeec01532fc6ef74769d56"}, {0x13, 0x0, @random="a45931b8dcc1478284b638fa965eae"}, {0xa, 0x0, @default_ap_ssid}]}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x128, 0x84, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0x17, 0x1, @random="fd0edc9f548a5fdac596ebd94d98363fec40d5"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="ba6dd77b8655"}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="0a8e2a4e6e34"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}]}, {0x68, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="55a01e49f3ec"}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x232}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_5GHZ={0x8, 0x1, 0xfc}, @NL80211_BAND_LC={0x8, 0x5, 0xa}]}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @from_mac=@broadcast}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x2}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x5}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x9}, @NL80211_BAND_LC={0x8, 0x5, 0x7}]}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x4}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x9}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}]}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 27.624683958s ago: executing program 0 (id=315): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x28}, 0x1, 0x0, 0x0, 0x404c004}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x20, 0x20, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0xc, 0x5, 0x0, 0x0, @u64=0x10000}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x100000d, 0x20010, 0xffffffffffffffff, 0x1263a000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x4b3, 0x3105, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x0, 0xd5, {0x9, 0x21, 0x2, 0x96, 0x1, {0x22, 0x8e7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x8, 0x9}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x4, 0x0, 0xd, 0xff, 0x5}, 0xdc, &(0x7f0000001400)={0x5, 0xf, 0xdc, 0x1, [@generic={0xd7, 0x10, 0x3, "b066e2d4c4098b6243534e9ec7019719027068b72ae265033cbdb37678df181fcfd5662b447e53325ac075235abe83e73d940db975b30efc8678d4b2ae64451564b44e6f0f07b682c76505c2a99d3af735f4d6f88ab3fc76f3d2913199bc3089cf67a8d7b97cf7114450c72b93c6aa8a5dc7835555b1465f7124fc45bd412d13aa4d9c07651d1c656f31e8843e289583432ac0a30f81a2ab0dea853ea4fa0438af9f79c3e5ad060d089497e1b4e565f97f70a2e8e421c641a3445d5b6930b6230e9cab782059ea30883b4f722187e263a239f4ff"}]}, 0x1, [{0xa2, &(0x7f0000001500)=@string={0xa2, 0x3, "20a33b3e63efe3563defd79ef57cf1c3a0830fc6b53868833e4c685be4e86ba25d7978467168114b3d9b73433c952a731c9f17b12dc4a0936ac52b6bbcbc9b5f7d51d6341d12713a569afb9db844996d20653fd9f7fbefc76d6a016645379f3c1bd6d30225c457267a2aa1f6a92e2d0193982560b6afa9c044904e3d300f615e15f98246b720d2f10c397920cd86260d1fcdeb1cc5848368379c045edc683ed1"}}]}) write(r4, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) 27.082293697s ago: executing program 0 (id=316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getrlimit(0x7, &(0x7f0000000040)) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) getrlimit(0x7, &(0x7f0000000000)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 27.011719874s ago: executing program 0 (id=317): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) sendto$l2tp(r0, &(0x7f0000000280)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000240)={0x2, 0x0, @loopback}, 0x10) recvmsg(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000008c0)=""/160, 0xa0}], 0x1}, 0x40) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) 27.010113612s ago: executing program 0 (id=318): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) gettid() (async) gettid() mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000286000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000240)="660fc737c4e219de3d00000100ea0070000066000f01cf660f388237f32e0f01f766baf80cb826fae98eef66bafc0c66b8369b66ef0fc798d4bee25a0f320fc7785b", 0x42}], 0x1, 0x66, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000286000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000240)="660fc737c4e219de3d00000100ea0070000066000f01cf660f388237f32e0f01f766baf80cb826fae98eef66bafc0c66b8369b66ef0fc798d4bee25a0f320fc7785b", 0x42}], 0x1, 0x66, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r6) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="93fb26bd07da4a03e28545"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000040) (async) sendmsg$DEVLINK_CMD_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="93fb26bd07da4a03e28545"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000040) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r8, 0xae9a) (async) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x7dd, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r8, 0xae80, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) socket(0x1e, 0x1, 0x0) (async) r9 = socket(0x1e, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x7c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x21b5}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x100) (async) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x7c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x21b5}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x90}, 0x100) connect$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) connect$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 26.451575183s ago: executing program 0 (id=321): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x400c810}, 0x40001) r3 = memfd_create(&(0x7f0000000680)='-&:\n-\xb2];\x0f\xb2\x86NV6&\xb8=\x94Z}\xfaW~\xae\x87\x88\xea\xde\xd9=-\x01\x00\x00\x80=\x1d\x8bl\xd5\xc3DE\xbb0\x8e\xac\xf2r#TZ>\xfb\xdf\xc1\xd4\xd1\xee\x88\xebI\xab\xf6\xab}\x85\x18 \x8a\x8aG:\xacD-\x99JD/~\xd6\xb5m\xac\x8d\x1d\x1c\xe9\xe5<\xfcP)E\xc1\x8e\xeb\xc9\x158Mq\x01\xe1\xf6-\xc3\xaa\x9a\x9be\xcd\xf2\xde\xccx\x1f\x0fne\xe8C\xe4Y\xc9\vR2fY\x8e\x9d\x97 \x00\x00\x00\x00\xe8W\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6JV\x80\xdd\x96F\xc90}SH\xe8\xd4RV\xb6\xc9h\xfb\xf3#\xcb\x14a\xab\b\x05\x7f\xaa\x92\x87#Yg\xef\xfb\x1fn.\x7f\xb1\xe26~$\xa9\v\x9b|>\xf5G\xb5\xac/\xc3n\x16\xee\xdf\xd0a', 0x0) r4 = fanotify_init(0x0, 0x1) fanotify_mark(r4, 0x1, 0x1b, r3, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) recvmmsg$unix(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/90, 0x5a}], 0x1}}], 0x1, 0x120, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x2, @loopback}, 0x80, 0x0}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x4) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r9, 0xc080aebe, &(0x7f0000000040)={{0x2, 0x0, 0x80, {0xeeef0000, 0xc4ccd000, 0x1}}, "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", "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"}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000002180)=ANY=[@ANYRES64=r4], 0x0) syz_usb_control_io$uac1(r10, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000020c0)=ANY=[@ANYBLOB="dc779cc2e899e84cf1f7179b2addbb1eaa010000005326aaa8b11672c148b958cd50b6489e5f9bbae75aef03a4e3b4bcf96487d4041e5fabf85a031043ba27fb86532200d65f7260e08b8b99"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 26.225279019s ago: executing program 1 (id=326): creat(&(0x7f0000000080)='./file0\x00', 0xac) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x30, r2, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3e}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 26.103651935s ago: executing program 1 (id=328): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x57789000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000120001002ebd7000fbdbdf2504722180040071801000bc800400c380080013803a48ad04"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) syz_open_procfs(0x0, &(0x7f00000002c0)='net/psched\x00') r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x4b) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0xaa, @empty, 0x4e24, 0x2, 'dh\x00', 0x22, 0x5, 0x13}, 0x2c) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 26.071589535s ago: executing program 1 (id=329): mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './cgroup\x00'}) symlinkat(&(0x7f0000000080)='./cgroup\x00', r0, &(0x7f0000000140)='./cgroup\x00') 25.914985842s ago: executing program 4 (id=333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000030a010200000000000000000a00000008000a400000000009000373797a30000000000900030073797a32000000000b00070066696c746572000008000a40000000040b00070066696c7465720000140000001100010000000000000000000500000a819820d031d3f5834ce8c426bb459e18df0e6bf53cae8276ef43a88b396aafd890b8cbd678041919e1fe6f58e2db4fa588d5cc05d689135d35b1738383729ab318537d544730e8a976e6044abb66bae2d3b93d85e874cd75ab52e2"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0xc041) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='erofs\x00', 0x200004, 0x0) 25.827555648s ago: executing program 4 (id=334): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x20, 0x2, 0xc6, {0xc6, 0x23, "b218e633a9a9ab3ae18031c160c064762d58db0a41e62684e11395c75cf96603129d0e6824c072fc9f1ebcac7262a41f69491291f7cc3173e72e66b83d411d570bd3d0f3b4b14bada1b1ee2fefffe3f03665c301700cdf20cbb12df23a234fe1214eb9aaf55fde6c64e274a9f71b78dcb7aa56d7fc8b46039d73cec8ca0abeba6a1f28a0ffa149989a9d72de0c52b944e3307be31969fab72a19d0badd178566506dc86a7fb4c95e68fb5fe20cf9c18c04d3a126ed731eb0a89a0772bead83f3b3584e7e"}}, &(0x7f00000001c0)={0x0, 0x3, 0x77, @string={0x77, 0x3, "c9f9bab369c573c64e46b9073c91e2b10aca4352bd2be2cf2924fba5016ce956ee3ce4d911c2c7097b06ab2885b72f8c35c70d0704c7df35b3bfe2007618ea550b7cc1155dd19080946eaf27b0e40a76d9f4b0923b7297a4b4f8e31138178203e501e9d075b7d4c740f0e3685bbe3a6dd70bd0237e"}}, &(0x7f0000000240)=ANY=[@ANYBLOB="000f19000000050f3200011410040584b0ef0f4194905e63edda0bdf788ba9"], &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x6993133c49f46790, 0x0, 0x8, "b8af96f4", "4c3aac17"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x8, 0xc, 0x20, 0x9, 0xb, 0x1}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000880)=ANY=[@ANYBLOB="40017d000000e4df7a5e884ecf5ff1064e7918699f390e012c66a92561c4c1b02cfad7f710ad7e0ba9409046702e6063d6f32b9ec85996e98313c332cd98172bb96b136c698effce0bbd7ca719d264146fefd61301545b379ad3165010a0e9b017b97fac8f8185dad36e1664628dbb0b76ef3b036e757443606c124d9d5df8be77ad13d3e4ea9228a49b9eaf1a3152c19efe"], &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x1e0, 0x0, [0xf000]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x7fff}, &(0x7f0000000540)={0x40, 0x9, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, '%\f'}, &(0x7f00000005c0)={0x40, 0xf, 0x2}, &(0x7f0000000600)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "a866"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x7eb}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x2}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 25.815677882s ago: executing program 1 (id=336): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2500, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2500, 0x0) dup(r2) (async) r3 = dup(r2) ioctl$KVM_SET_CPUID2(r3, 0xc008ae09, &(0x7f0000000280)=ANY=[@ANYRES8=r2]) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000080)=0x2d6) (async) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000080)=0x2d6) 25.687286328s ago: executing program 1 (id=337): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000007f80), 0x1, 0x0) write$FUSE_INTERRUPT(r1, &(0x7f000000a1c0)={0x10}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) writev(r2, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) poll(&(0x7f0000002100)=[{r2, 0x400}], 0x1, 0x2) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) 24.775678812s ago: executing program 1 (id=338): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x1d4) getdents64(r0, &(0x7f00000001c0)=""/36, 0x24) io_setup(0xe, &(0x7f0000000040)=0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x38, r0, &(0x7f0000000080)="c7985edbaa7f754dc3d22f5208eec3a6149d3dbd1663b83ec12e2afa7758cf24ddd0495441ecbf986961265b75f027aa62c0d5a3cdfe4a55708abe4f99d0c7843b41e3", 0x43, 0x4, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x8, 0x1000, r2, &(0x7f0000000340)="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", 0xfe, 0x2, 0x0, 0x2}]) getdents64(r0, 0xfffffffffffffffe, 0x29) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000280)=[@code={0xa, 0x84, {"c74424002a8f7974c74424026d250000c7442406000000000f01142466baf80cb80e397787ef66bafc0cec66b81a010f00d066b819010f00d065400fc7abbc590000c7442400cd202371c74424028c3ca546c7442406000000000f011c2466410f59220f086636450f1f400066ba4000b000ee"}}, @rdmsr={0x32, 0x18, {0x92b}}], 0x9c}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0xfffffffc, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) fadvise64(r6, 0x94, 0x6e, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r6, 0x2000) 22.790559524s ago: executing program 4 (id=339): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket(0x29, 0x1, 0x8) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$F2FS_IOC_FLUSH_DEVICE(r4, 0x4008f50a, &(0x7f0000000080)={0x3, 0x8}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi0\x00', 0xe2801, 0x0) writev(r5, &(0x7f0000000d40)=[{&(0x7f0000000b40)='*', 0x1}], 0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0xfea}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000600)=""/52, 0x0, 0x10000}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f0000000500)=""/88, &(0x7f0000000480)=""/49}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x2400, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 22.68616922s ago: executing program 4 (id=341): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f00000014c0)={0xf}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 21.747380134s ago: executing program 4 (id=342): mount(&(0x7f0000000040)=@rnullb, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x68182, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000014c0)=0x20000000) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x5, 0x4402) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r2, 0xc1004110, &(0x7f0000000280)={0x7, [0xb, 0x10000, 0x4], [{0xa, 0x80000000, 0x1, 0x0, 0x1, 0x1}, {0x9, 0xc, 0x0, 0x1, 0x0, 0x1}, {0x2bf9, 0x7, 0x0, 0x0, 0x1, 0x1}, {0x14000, 0x3e08, 0x1, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x1, 0x1, 0x1}, {0x7, 0x80000000, 0x1, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x5, 0xfff, 0x1, 0x1, 0x0, 0x1}, {0x8f, 0xccc00000, 0x0, 0x1}, {0x1, 0x4}, {0x1, 0x1, 0x0, 0x0, 0x0, 0x1}], 0x80}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), r4) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x24, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) getgroups(0x3, &(0x7f00000000c0)=[0x0, 0x0, 0xffffffffffffffff]) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r8) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="77192dbd7000fddbdf251d00000008000300", @ANYRES32=r9, @ANYBLOB="18002f80080002"], 0x34}, 0x1, 0x0, 0x0, 0x18001}, 0x40040) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r11, &(0x7f0000000480)="0c00433b8c0f3bedf6ba82cc8bce6eee4f00e360", 0xfffffffffffffeba, 0x814, &(0x7f0000000140)={0x2, 0x0, @private=0xa010101}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001180)='./cgroup\x00', 0x80) lchown(&(0x7f0000000080)='./cgroup\x00', r0, r10) 21.364078428s ago: executing program 3 (id=343): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xb48) listen(r1, 0x26) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000"]) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)=ANY=[], 0xa) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @mcast2, 0x6}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r3, 0x4068aea3, &(0x7f00000000c0)={0xa3, 0x0, &(0x7f0000000080)}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f0000000140), 0x0) pwritev(r7, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x1, 0xfffffffe) 21.315634867s ago: executing program 3 (id=344): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x40000, 0x0) syz_usb_connect$uac1(0x3, 0xb7, &(0x7f0000004880)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x3, 0x1, 0x9, 0x20, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x7}, [@extension_unit={0xa, 0x24, 0x8, 0x1, 0x5, 0x1, "01dced"}, @extension_unit={0x8, 0x24, 0x8, 0x3, 0x1, 0x3, 'Y'}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x307, 0x2, 0x6, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x303, 0x4, 0x3, 0x9}, @selector_unit={0x9, 0x24, 0x5, 0x2, 0x1, "4ec888ab"}, @selector_unit={0xa, 0x24, 0x5, 0x5, 0x6, "876ab77963"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0x5, 0x7, {0x7, 0x25, 0x1, 0x2, 0x81, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0xb}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x0, 0x4, 0x3, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xfd, 0x6, 0x3b, {0x7, 0x25, 0x1, 0x2, 0x6, 0x8}}}}}}}]}}, &(0x7f0000004cc0)={0x0, 0x0, 0x0, 0x0}) fadvise64(r0, 0x7, 0x1ff, 0x1) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 21.228251725s ago: executing program 4 (id=345): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$tun(r1, &(0x7f00000023c0)={@void, @void, @eth={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @val={@val={0x88a8, 0x5, 0x1, 0x2}, {0x8100, 0x5, 0x0, 0x3}}, {@llc={0x4, {@llc={0x4e, 0xdc, 'r', "f45745316bbb0a3a2c4c6d5f2b471c7387a2c74b3f1b3999b20cbc6d5287bcd496460d"}}}}}}, 0x3c) (async, rerun: 64) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x2ec05f, 0x0) (rerun: 64) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000100)=0x6) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, 0x0, &(0x7f000000e140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00001dc000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write(r2, &(0x7f0000002400)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d3a37e8f00093c12883115314745fab8ad2de40a6cf3b", 0x37) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0xfffffff9, 0x8001, {0xffffffffffffffff}, {0xee00}, 0x6, 0x400000000}) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x2, &(0x7f0000002300)={[{@workdir={'workdir', 0x3d, './file1'}}], [{@obj_user={'obj_user', 0x3d, '+\xb8(\\'}}, {@smackfsdef={'smackfsdef', 0x3d, '-}#!)\\ '}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x66, 0x35, 0x65, 0x39, 0x31, 0x33, 0x37], 0x2d, [0x31, 0x33, 0x62, 0x65], 0x2d, [0x62, 0x37, 0x35, 0x62], 0x2d, [0x30, 0x61, 0x36, 0x33], 0x2d, [0x32, 0x34, 0x63, 0x39, 0x35, 0x35, 0x64, 0x5]}}}, {@dont_hash}, {@euid_gt={'euid>', r8}}, {@euid_eq={'euid', 0x3d, r9}}, {@seclabel}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000202, r8, &(0x7f0000000100)='./cgroup\x00') 18.22349091s ago: executing program 3 (id=346): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66642, 0x0) fadvise64(r0, 0x94, 0x6e, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 18.204905636s ago: executing program 3 (id=347): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, 0x0, 0x8000) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c000000170a0102000000000000400002"], 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f00000000c0)=0x7, 0x4) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x2}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r4, 0xc0bc5310, &(0x7f0000000080)) setsockopt$inet_tcp_buf(r3, 0x6, 0x8, &(0x7f0000000040)="11a3a309", 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r5 = fcntl$dupfd(r0, 0x406, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x24004001}, 0x1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='adfs\x00', 0x2a00808, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000100), 0x4) 18.139054448s ago: executing program 3 (id=348): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)={0x20, 0x2, 0xc6, {0xc6, 0x23, "b218e633a9a9ab3ae18031c160c064762d58db0a41e62684e11395c75cf96603129d0e6824c072fc9f1ebcac7262a41f69491291f7cc3173e72e66b83d411d570bd3d0f3b4b14bada1b1ee2fefffe3f03665c301700cdf20cbb12df23a234fe1214eb9aaf55fde6c64e274a9f71b78dcb7aa56d7fc8b46039d73cec8ca0abeba6a1f28a0ffa149989a9d72de0c52b944e3307be31969fab72a19d0badd178566506dc86a7fb4c95e68fb5fe20cf9c18c04d3a126ed731eb0a89a0772bead83f3b3584e7e"}}, &(0x7f00000001c0)={0x0, 0x3, 0x77, @string={0x77, 0x3, "c9f9bab369c573c64e46b9073c91e2b10aca4352bd2be2cf2924fba5016ce956ee3ce4d911c2c7097b06ab2885b72f8c35c70d0704c7df35b3bfe2007618ea550b7cc1155dd19080946eaf27b0e40a76d9f4b0923b7297a4b4f8e31138178203e501e9d075b7d4c740f0e3685bbe3a6dd70bd0237e"}}, &(0x7f0000000240)=ANY=[@ANYBLOB="000f19000000050f3200011410040584b0ef0f4194905e63edda0bdf788ba9"], &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x6993133c49f46790, 0x0, 0x8, "b8af96f4", "4c3aac17"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x8, 0xc, 0x20, 0x9, 0xb, 0x1}}}, &(0x7f00000007c0)={0x84, &(0x7f0000000880)=ANY=[@ANYBLOB="40017d000000e4df7a5e884ecf5ff1064e7918699f390e012c66a92561c4c1b02cfad7f710ad7e0ba9409046702e6063d6f32b9ec85996e98313c332cd98172bb96b136c698effce0bbd7ca719d264146fefd61301545b379ad3165010a0e9b017b97fac8f8185dad36e1664628dbb0b76ef3b036e757443606c124d9d5df8be77ad13d3e4ea9228a49b9eaf1a3152c19efe"], &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f00000004c0)={0x20, 0x0, 0x8, {0x1e0, 0x0, [0xf000]}}, &(0x7f0000000500)={0x40, 0x7, 0x2, 0x7fff}, &(0x7f0000000540)={0x40, 0x9, 0x1}, &(0x7f0000000580)={0x40, 0xb, 0x2, '%\f'}, &(0x7f00000005c0)={0x40, 0xf, 0x2}, &(0x7f0000000600)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000640)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "a866"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x7eb}, &(0x7f0000000700)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x2}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 15.047446184s ago: executing program 3 (id=349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, r1, 0x731, 0x2000000, 0x0, {0x38}}, 0x14}, 0x1, 0x2}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='source', &(0x7f0000000200)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) setfsuid(r6) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000001000000000000000080001090224000100000000090400"], 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, &(0x7f0000000200)={0x6, 0x4, 0x4, 0x0, 0x6, {}, {0x2, 0x2, 0x5, 0xa8, 0x47, 0x0, "15d0ad39"}, 0xde5b, 0x4, {0xffffffffffffffff}, 0x8000, 0x0, r5}) quotactl_fd$Q_GETNEXTQUOTA(r7, 0xffffffff80000902, r6, &(0x7f0000000280)) openat2(r5, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x40, 0x0, 0x11}, 0x18) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000003880)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000003840)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000038c0)={0x16, 0x98, 0xfa00, {&(0x7f0000003800), 0x3, r9, 0x10, 0x1, @in6={0xa, 0x4e22, 0x0, @private1, 0x22}}}, 0xa0) r10 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) execveat$binfmt(0xffffffffffffff9c, r10, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r8, 0xa4717000) 11.027407956s ago: executing program 33 (id=321): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x400c810}, 0x40001) r3 = memfd_create(&(0x7f0000000680)='-&:\n-\xb2];\x0f\xb2\x86NV6&\xb8=\x94Z}\xfaW~\xae\x87\x88\xea\xde\xd9=-\x01\x00\x00\x80=\x1d\x8bl\xd5\xc3DE\xbb0\x8e\xac\xf2r#TZ>\xfb\xdf\xc1\xd4\xd1\xee\x88\xebI\xab\xf6\xab}\x85\x18 \x8a\x8aG:\xacD-\x99JD/~\xd6\xb5m\xac\x8d\x1d\x1c\xe9\xe5<\xfcP)E\xc1\x8e\xeb\xc9\x158Mq\x01\xe1\xf6-\xc3\xaa\x9a\x9be\xcd\xf2\xde\xccx\x1f\x0fne\xe8C\xe4Y\xc9\vR2fY\x8e\x9d\x97 \x00\x00\x00\x00\xe8W\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6JV\x80\xdd\x96F\xc90}SH\xe8\xd4RV\xb6\xc9h\xfb\xf3#\xcb\x14a\xab\b\x05\x7f\xaa\x92\x87#Yg\xef\xfb\x1fn.\x7f\xb1\xe26~$\xa9\v\x9b|>\xf5G\xb5\xac/\xc3n\x16\xee\xdf\xd0a', 0x0) r4 = fanotify_init(0x0, 0x1) fanotify_mark(r4, 0x1, 0x1b, r3, 0x0) fsetxattr$system_posix_acl(r3, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) recvmmsg$unix(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/90, 0x5a}], 0x1}}], 0x1, 0x120, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x2, @loopback}, 0x80, 0x0}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef029dd2b97576b11d210a"], 0x33fe0) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x4) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r9, 0xc080aebe, &(0x7f0000000040)={{0x2, 0x0, 0x80, {0xeeef0000, 0xc4ccd000, 0x1}}, "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", "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"}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000002180)=ANY=[@ANYRES64=r4], 0x0) syz_usb_control_io$uac1(r10, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000020c0)=ANY=[@ANYBLOB="dc779cc2e899e84cf1f7179b2addbb1eaa010000005326aaa8b11672c148b958cd50b6489e5f9bbae75aef03a4e3b4bcf96487d4041e5fabf85a031043ba27fb86532200d65f7260e08b8b99"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 9.000087646s ago: executing program 34 (id=338): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x1d4) getdents64(r0, &(0x7f00000001c0)=""/36, 0x24) io_setup(0xe, &(0x7f0000000040)=0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) io_submit(r1, 0x2, &(0x7f0000000540)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x38, r0, &(0x7f0000000080)="c7985edbaa7f754dc3d22f5208eec3a6149d3dbd1663b83ec12e2afa7758cf24ddd0495441ecbf986961265b75f027aa62c0d5a3cdfe4a55708abe4f99d0c7843b41e3", 0x43, 0x4, 0x0, 0x1}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x8, 0x1000, r2, &(0x7f0000000340)="df8732bf7e779db4c357e70920da67ed100be20f6c53898ffacfebd633e441ae400bad1a06bbce102a77ba0f0960f719eaeb1cf5dfbb46f5e6dab4190e078ff0f39b9d5ffe0629115ff094bc8080f86208b038e7f1174ef35c360cc5e738281af32a43935b5f2bcdd720cc5b76db69a3260d4a89087c9510b7dc41918446b43a33b068c25e13ed3b44afc3d6992165eb545dccd7a2da77c4df7b78af20a3a5e6da4e4e6807231162c199efec9b872c019f12a6003c102eab548442dcb49c22777bf80d7e9e775d49f647b687d6c1b4fd164a0dca9f037fe1ac614313afd7f6d73fe1e0b24dfc0e0c9c35cd4fd2309299b13999bf2b6cf06b3142fa39ebb3", 0xfe, 0x2, 0x0, 0x2}]) getdents64(r0, 0xfffffffffffffffe, 0x29) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000280)=[@code={0xa, 0x84, {"c74424002a8f7974c74424026d250000c7442406000000000f01142466baf80cb80e397787ef66bafc0cec66b81a010f00d066b819010f00d065400fc7abbc590000c7442400cd202371c74424028c3ca546c7442406000000000f011c2466410f59220f086636450f1f400066ba4000b000ee"}}, @rdmsr={0x32, 0x18, {0x92b}}], 0x9c}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0xfffffffc, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) fadvise64(r6, 0x94, 0x6e, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r6, 0x2000) 5.97633683s ago: executing program 35 (id=345): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$tun(r1, &(0x7f00000023c0)={@void, @void, @eth={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @val={@val={0x88a8, 0x5, 0x1, 0x2}, {0x8100, 0x5, 0x0, 0x3}}, {@llc={0x4, {@llc={0x4e, 0xdc, 'r', "f45745316bbb0a3a2c4c6d5f2b471c7387a2c74b3f1b3999b20cbc6d5287bcd496460d"}}}}}}, 0x3c) (async, rerun: 64) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x2ec05f, 0x0) (rerun: 64) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r5, 0x4004ae86, &(0x7f0000000100)=0x6) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_N2(r6, 0x103, 0x3, 0x0, &(0x7f000000e140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f00001dc000/0x4000)=nil, 0x4000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) write(r2, &(0x7f0000002400)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d3a37e8f00093c12883115314745fab8ad2de40a6cf3b", 0x37) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000000c0)={0xfffffff9, 0x8001, {0xffffffffffffffff}, {0xee00}, 0x6, 0x400000000}) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x2, &(0x7f0000002300)={[{@workdir={'workdir', 0x3d, './file1'}}], [{@obj_user={'obj_user', 0x3d, '+\xb8(\\'}}, {@smackfsdef={'smackfsdef', 0x3d, '-}#!)\\ '}}, {@fsuuid={'fsuuid', 0x3d, {[0x35, 0x66, 0x35, 0x65, 0x39, 0x31, 0x33, 0x37], 0x2d, [0x31, 0x33, 0x62, 0x65], 0x2d, [0x62, 0x37, 0x35, 0x62], 0x2d, [0x30, 0x61, 0x36, 0x33], 0x2d, [0x32, 0x34, 0x63, 0x39, 0x35, 0x35, 0x64, 0x5]}}}, {@dont_hash}, {@euid_gt={'euid>', r8}}, {@euid_eq={'euid', 0x3d, r9}}, {@seclabel}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000202, r8, &(0x7f0000000100)='./cgroup\x00') 0s ago: executing program 36 (id=349): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x14, r1, 0x731, 0x2000000, 0x0, {0x38}}, 0x14}, 0x1, 0x2}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = fsopen(&(0x7f0000000340)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000140)='source', &(0x7f0000000200)='#:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140x0}) setfsuid(r6) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000000001000000000000000080001090224000100000000090400"], 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, &(0x7f0000000200)={0x6, 0x4, 0x4, 0x0, 0x6, {}, {0x2, 0x2, 0x5, 0xa8, 0x47, 0x0, "15d0ad39"}, 0xde5b, 0x4, {0xffffffffffffffff}, 0x8000, 0x0, r5}) quotactl_fd$Q_GETNEXTQUOTA(r7, 0xffffffff80000902, r6, &(0x7f0000000280)) openat2(r5, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x40, 0x0, 0x11}, 0x18) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000003880)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000003840)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r5, &(0x7f00000038c0)={0x16, 0x98, 0xfa00, {&(0x7f0000003800), 0x3, r9, 0x10, 0x1, @in6={0xa, 0x4e22, 0x0, @private1, 0x22}}}, 0xa0) r10 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) execveat$binfmt(0xffffffffffffff9c, r10, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r8, 0xa4717000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts. [ 70.907722][ T5850] cgroup: Unknown subsys name 'net' [ 71.052264][ T5850] cgroup: Unknown subsys name 'cpuset' [ 71.060539][ T5850] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 72.102318][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.109556][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.240878][ T5850] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.147952][ T5861] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.160264][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.168739][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.177654][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.190884][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.211544][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.219274][ T5861] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.231315][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.250969][ T5868] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.270756][ T5868] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.283307][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.290937][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.300015][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.305464][ T5871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.315240][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.315754][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.333525][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.341506][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.349564][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.356679][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.496264][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 74.581591][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.588994][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.596887][ T5859] bridge_slave_0: entered allmulticast mode [ 74.604739][ T5859] bridge_slave_0: entered promiscuous mode [ 74.614814][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.622582][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.631998][ T5859] bridge_slave_1: entered allmulticast mode [ 74.639524][ T5859] bridge_slave_1: entered promiscuous mode [ 74.676504][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.711768][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.759306][ T5859] team0: Port device team_slave_0 added [ 74.786216][ T5859] team0: Port device team_slave_1 added [ 74.836445][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 74.848173][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.857107][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.885465][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.911958][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.919720][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.950852][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.967478][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 74.983469][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 75.063777][ T5859] hsr_slave_0: entered promiscuous mode [ 75.071674][ T5859] hsr_slave_1: entered promiscuous mode [ 75.089917][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.097956][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.106515][ T5863] bridge_slave_0: entered allmulticast mode [ 75.114019][ T5863] bridge_slave_0: entered promiscuous mode [ 75.122443][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.130963][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.138734][ T5863] bridge_slave_1: entered allmulticast mode [ 75.145951][ T5863] bridge_slave_1: entered promiscuous mode [ 75.200712][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.209100][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.217539][ T5866] bridge_slave_0: entered allmulticast mode [ 75.226237][ T5866] bridge_slave_0: entered promiscuous mode [ 75.240044][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.247862][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.255848][ T5862] bridge_slave_0: entered allmulticast mode [ 75.265091][ T5862] bridge_slave_0: entered promiscuous mode [ 75.278304][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.286515][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.294992][ T5866] bridge_slave_1: entered allmulticast mode [ 75.302255][ T5866] bridge_slave_1: entered promiscuous mode [ 75.312185][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.322878][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.330808][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.338718][ T5862] bridge_slave_1: entered allmulticast mode [ 75.345538][ T5862] bridge_slave_1: entered promiscuous mode [ 75.363865][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.392680][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.419619][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.438572][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.451794][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.475646][ T5863] team0: Port device team_slave_0 added [ 75.501995][ T5863] team0: Port device team_slave_1 added [ 75.510468][ T5866] team0: Port device team_slave_0 added [ 75.534068][ T5866] team0: Port device team_slave_1 added [ 75.542549][ T5862] team0: Port device team_slave_0 added [ 75.567866][ T5862] team0: Port device team_slave_1 added [ 75.578763][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.586900][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.615262][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.645964][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.654591][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.683440][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.698086][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.706716][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.736317][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.758573][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.766474][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.794501][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.809958][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.817190][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.845962][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.861401][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.868942][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.898759][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.967026][ T5862] hsr_slave_0: entered promiscuous mode [ 75.974842][ T5862] hsr_slave_1: entered promiscuous mode [ 75.982522][ T5862] debugfs: 'hsr0' already exists in 'hsr' [ 75.990571][ T5862] Cannot create hsr debugfs directory [ 76.000066][ T5863] hsr_slave_0: entered promiscuous mode [ 76.006455][ T5863] hsr_slave_1: entered promiscuous mode [ 76.012990][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 76.018833][ T5863] Cannot create hsr debugfs directory [ 76.056932][ T5866] hsr_slave_0: entered promiscuous mode [ 76.063995][ T5866] hsr_slave_1: entered promiscuous mode [ 76.070664][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 76.077036][ T5866] Cannot create hsr debugfs directory [ 76.089355][ T5859] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.114225][ T5859] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.123850][ T5859] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.152576][ T5859] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.263530][ T5861] Bluetooth: hci0: command tx timeout [ 76.323012][ T5863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.334637][ T5863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.350217][ T5863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.359376][ T5863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.415959][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.427502][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.435829][ T5861] Bluetooth: hci1: command tx timeout [ 76.435879][ T5865] Bluetooth: hci2: command tx timeout [ 76.443207][ T5188] Bluetooth: hci3: command tx timeout [ 76.458293][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.477336][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.491129][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.534674][ T5866] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.547318][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.559289][ T5866] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.577133][ T3021] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.585181][ T3021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.594895][ T5866] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.612099][ T5866] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.635335][ T3021] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.643663][ T3021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.709799][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.785838][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.804659][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.822696][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.831555][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.846475][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.854776][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.892409][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.907651][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.915979][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.937160][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.946173][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.976972][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.003965][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.031538][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.048803][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.057777][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.115695][ T5859] veth0_vlan: entered promiscuous mode [ 77.135476][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.145257][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.212746][ T5859] veth1_vlan: entered promiscuous mode [ 77.260074][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.291880][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.308627][ T5859] veth0_macvtap: entered promiscuous mode [ 77.339971][ T5859] veth1_macvtap: entered promiscuous mode [ 77.382709][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.397256][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.416659][ T5863] veth0_vlan: entered promiscuous mode [ 77.425586][ T5862] veth0_vlan: entered promiscuous mode [ 77.444425][ T2983] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.454925][ T2983] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.467187][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.484317][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.502658][ T5862] veth1_vlan: entered promiscuous mode [ 77.511693][ T5863] veth1_vlan: entered promiscuous mode [ 77.561490][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.580958][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.594666][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.598790][ T5862] veth0_macvtap: entered promiscuous mode [ 77.611246][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.614606][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.639151][ T5862] veth1_macvtap: entered promiscuous mode [ 77.663255][ T5863] veth0_macvtap: entered promiscuous mode [ 77.675104][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.686780][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.694203][ T5863] veth1_macvtap: entered promiscuous mode [ 77.724325][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.768372][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.779541][ T3021] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.791808][ T3021] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.802895][ T5866] veth0_vlan: entered promiscuous mode [ 77.815745][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.825307][ T3021] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.835723][ T3021] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.856849][ T5866] veth1_vlan: entered promiscuous mode [ 77.896653][ T3021] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.964819][ T3021] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.990414][ T3021] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.003072][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.017929][ T3021] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.028440][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.038558][ T5866] veth0_macvtap: entered promiscuous mode [ 78.066246][ T5866] veth1_macvtap: entered promiscuous mode [ 78.085413][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.111455][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.148503][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.171898][ T3021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.189872][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.203794][ T3021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.246663][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.269622][ T2983] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.283155][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.293175][ T2983] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.331657][ T2983] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.355680][ T2983] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.362054][ T5188] Bluetooth: hci0: command tx timeout [ 78.510193][ T5188] Bluetooth: hci2: command tx timeout [ 78.516256][ T5188] Bluetooth: hci3: command tx timeout [ 78.522936][ T5861] Bluetooth: hci1: command tx timeout [ 78.568280][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.626175][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.681260][ T5960] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.736830][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.763754][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.836134][ T5964] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7'. [ 78.911845][ T5968] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 79.005769][ T5973] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 79.284950][ T5987] nfs: Unknown parameter '/dev/net/tun' [ 79.786612][ T6010] /dev/rnullb0: Can't open blockdev [ 79.801878][ T6010] /dev/rnullb0: Can't open blockdev [ 79.816361][ T6010] /dev/rnullb0: Can't open blockdev [ 79.829173][ T6010] /dev/rnullb0: Can't open blockdev [ 79.844250][ T6010] /dev/rnullb0: Can't open blockdev [ 79.861135][ T6010] /dev/rnullb0: Can't open blockdev [ 79.871978][ T6010] /dev/rnullb0: Can't open blockdev [ 79.887247][ T6010] /dev/rnullb0: Can't open blockdev [ 79.900799][ T6010] /dev/rnullb0: Can't open blockdev [ 79.915169][ T6010] /dev/rnullb0: Can't open blockdev [ 79.928628][ T6010] /dev/rnullb0: Can't open blockdev [ 79.943262][ T6010] /dev/rnullb0: Can't open blockdev [ 79.955664][ T6010] /dev/rnullb0: Can't open blockdev [ 79.970676][ T6010] /dev/rnullb0: Can't open blockdev [ 79.985149][ T6010] /dev/rnullb0: Can't open blockdev [ 79.998700][ T6010] /dev/rnullb0: Can't open blockdev [ 80.013743][ T6010] /dev/rnullb0: Can't open blockdev [ 80.026542][ T6010] /dev/rnullb0: Can't open blockdev [ 80.041906][ T6010] /dev/rnullb0: Can't open blockdev [ 80.057731][ T6010] /dev/rnullb0: Can't open blockdev [ 80.068426][ T6010] /dev/rnullb0: Can't open blockdev [ 80.080769][ T6010] /dev/rnullb0: Can't open blockdev [ 80.094487][ T6010] /dev/rnullb0: Can't open blockdev [ 80.110810][ T6010] /dev/rnullb0: Can't open blockdev [ 80.124084][ T6010] /dev/rnullb0: Can't open blockdev [ 80.146492][ T6010] /dev/rnullb0: Can't open blockdev [ 80.158552][ T6010] /dev/rnullb0: Can't open blockdev [ 80.172009][ T6010] /dev/rnullb0: Can't open blockdev [ 80.185914][ T6010] /dev/rnullb0: Can't open blockdev [ 80.200442][ T6010] /dev/rnullb0: Can't open blockdev [ 80.216159][ T6010] /dev/rnullb0: Can't open blockdev [ 80.230681][ T6010] /dev/rnullb0: Can't open blockdev [ 80.248865][ T6010] /dev/rnullb0: Can't open blockdev [ 80.420417][ T5188] Bluetooth: hci0: command tx timeout [ 80.581598][ T5188] Bluetooth: hci2: command tx timeout [ 80.588192][ T5188] Bluetooth: hci3: command tx timeout [ 80.590335][ T5861] Bluetooth: hci1: command tx timeout [ 80.658593][ T6034] Zero length message leads to an empty skb [ 80.678140][ T6036] netlink: 'syz.3.17': attribute type 21 has an invalid length. [ 80.687619][ T6036] netlink: 128 bytes leftover after parsing attributes in process `syz.3.17'. [ 80.698861][ T6036] netlink: 'syz.3.17': attribute type 5 has an invalid length. [ 80.710499][ T6036] netlink: 3 bytes leftover after parsing attributes in process `syz.3.17'. [ 80.822329][ T6046] trusted_key: syz.2.20 sent an empty control message without MSG_MORE. [ 80.884014][ T6050] Context (ID=0x1) not attached to queue pair (handle=0xffffffff:0x2) [ 81.080191][ T43] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 81.194503][ T6055] netlink: 'syz.1.22': attribute type 21 has an invalid length. [ 81.204106][ T6055] netlink: 164 bytes leftover after parsing attributes in process `syz.1.22'. [ 81.390190][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 81.397131][ T43] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 81.407621][ T43] usb 3-1: config 0 has no interface number 0 [ 81.415878][ T43] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 81.440593][ T43] usb 3-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 81.454925][ T43] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 81.471499][ T43] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 81.472018][ T5905] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.501977][ T43] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 81.514614][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.534353][ T43] usb 3-1: Product: syz [ 81.538882][ T43] usb 3-1: Manufacturer: syz [ 81.545370][ T43] usb 3-1: SerialNumber: syz [ 81.563684][ T43] usb 3-1: config 0 descriptor?? [ 81.774923][ T43] iowarrior 3-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 81.790965][ T5905] usb 2-1: Using ep0 maxpacket: 32 [ 81.802639][ T5905] usb 2-1: unable to get BOS descriptor or descriptor too short [ 81.821494][ T5905] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 81.829882][ T5905] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 81.847466][ T5905] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 81.862647][ T5905] usb 2-1: config 128 has no interface number 0 [ 81.869539][ T5905] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 81.888892][ T5905] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 81.906304][ T5905] usb 2-1: config 128 interface 127 has no altsetting 0 [ 81.917137][ T5905] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 81.928119][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.937378][ T5905] usb 2-1: Product: syz [ 81.943049][ T5905] usb 2-1: Manufacturer: syz [ 81.948298][ T5905] usb 2-1: SerialNumber: syz [ 81.994451][ T6046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.003927][ T6046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.015209][ T6046] binder: BINDER_SET_CONTEXT_MGR already set [ 82.023113][ T6046] binder: 6044:6046 ioctl 4018620d 200000000040 returned -16 [ 82.031729][ T6046] binder: 6044:6046 unknown command 0 [ 82.038205][ T6046] binder: 6044:6046 ioctl c0306201 2000000001c0 returned -22 [ 82.048671][ T9] usb 3-1: USB disconnect, device number 2 [ 82.157988][ T6055] /dev/sg0: Can't lookup blockdev [ 82.180039][ T5905] usb 2-1: USB disconnect, device number 2 [ 82.194356][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.220377][ T5912] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 82.380383][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 82.386882][ T5912] usb 4-1: config 0 has an invalid interface number: 201 but max is 0 [ 82.395166][ T5912] usb 4-1: config 0 has no interface number 0 [ 82.403603][ T5912] usb 4-1: New USB device found, idVendor=10b8, idProduct=0bb9, bcdDevice=56.29 [ 82.413183][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.423709][ T5912] usb 4-1: Product: syz [ 82.427912][ T5912] usb 4-1: Manufacturer: syz [ 82.432681][ T5912] usb 4-1: SerialNumber: syz [ 82.438343][ T5912] usb 4-1: config 0 descriptor?? [ 82.510239][ T5865] Bluetooth: hci0: command tx timeout [ 82.581601][ T6066] capability: warning: `syz.2.24' uses deprecated v2 capabilities in a way that may be insecure [ 82.661691][ T5861] Bluetooth: hci2: command tx timeout [ 82.667781][ T5865] Bluetooth: hci1: command tx timeout [ 82.822089][ T6078] loop2: detected capacity change from 0 to 7 [ 82.830054][ T6078] Dev loop2: unable to read RDB block 7 [ 82.838275][ T6078] loop2: unable to read partition table [ 82.845718][ T6078] loop2: partition table beyond EOD, truncated [ 82.853693][ T6078] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 82.878672][ T5237] Dev loop2: unable to read RDB block 7 [ 82.890234][ T5237] loop2: unable to read partition table [ 82.896823][ T5237] loop2: partition table beyond EOD, truncated [ 82.906929][ T6083] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes. [ 82.942936][ T6083] /dev/rnullb0: Can't open blockdev [ 83.014371][ T6088] openvswitch: netlink: Missing key (keys=40, expected=100) [ 83.026986][ T6088] /dev/rnullb0: Can't open blockdev [ 83.163359][ T6100] /dev/rnullb0: Can't open blockdev [ 83.323852][ T6063] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.480977][ T6063] usb 2-1: Using ep0 maxpacket: 8 [ 83.491751][ T6063] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 83.533371][ T6063] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 83.573875][ T6063] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.613642][ T6063] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.660034][ T6063] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.689327][ T6063] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.937295][ T6063] usb 2-1: GET_CAPABILITIES returned 0 [ 83.953139][ T5912] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in warm state. [ 83.967202][ T6063] usbtmc 2-1:16.0: can't read capabilities [ 83.977602][ T5912] dvb-usb: bulk message failed: -22 (3/0) [ 84.025453][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 84.036971][ T5912] dvbdev: DVB: registering new adapter (DiBcom USB1.1 DVB-T reference design (MOD3000)) [ 84.051814][ T5912] usb 4-1: media controller created [ 84.064111][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 84.079187][ T5912] dvb-usb: bulk message failed: -22 (6/0) [ 84.086012][ T5912] dvb-usb: no frontend was attached by 'DiBcom USB1.1 DVB-T reference design (MOD3000)' [ 84.100506][ T5912] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 84.120900][ T5912] dvb-usb: schedule remote query interval to 150 msecs. [ 84.128882][ T5912] dvb-usb: bulk message failed: -22 (3/0) [ 84.168379][ T5912] dvb-usb: DiBcom USB1.1 DVB-T reference design (MOD3000) successfully initialized and connected. [ 84.201237][ T5912] usb 4-1: USB disconnect, device number 2 [ 84.233923][ T5919] usb 2-1: USB disconnect, device number 3 [ 84.259976][ T5912] dvb-usb: DiBcom USB1.1 DVB-T reference design (M successfully deinitialized and disconnected. [ 84.293202][ T6114] loop2: detected capacity change from 0 to 7 [ 84.307070][ T5866] Dev loop2: unable to read RDB block 7 [ 84.317262][ T5866] loop2: unable to read partition table [ 84.325446][ T5866] loop2: partition table beyond EOD, truncated [ 84.335351][ T6114] Dev loop2: unable to read RDB block 7 [ 84.341658][ T6114] loop2: unable to read partition table [ 84.349151][ T6114] loop2: partition table beyond EOD, truncated [ 84.356674][ T6114] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 84.528772][ T6125] /dev/rnullb0: Can't open blockdev [ 84.687287][ T6135] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.710943][ T5912] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 84.740261][ T5865] Bluetooth: hci2: command tx timeout [ 84.850215][ T5912] usb 3-1: device descriptor read/64, error -71 [ 84.864551][ T6143] hfs: can't find a HFS filesystem on dev rnullb0 [ 84.873751][ T6137] block nbd3: shutting down sockets [ 84.954464][ T6147] netlink: 140 bytes leftover after parsing attributes in process `syz.1.52'. [ 84.967249][ T6147] NILFS (rnullb0): couldn't find nilfs on the device [ 85.090378][ T5912] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.230584][ T5912] usb 3-1: device descriptor read/64, error -71 [ 85.270225][ T6063] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 85.342770][ T5912] usb usb3-port1: attempt power cycle [ 85.433891][ T6063] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 85.460439][ T6063] usb 2-1: config 0 has no interface number 0 [ 85.475200][ T6063] usb 2-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 85.487895][ T6063] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 85.501315][ T6063] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0xA has an invalid bInterval 255, changing to 11 [ 85.513786][ T6063] usb 2-1: config 0 interface 255 altsetting 0 endpoint 0xA has invalid maxpacket 59391, setting to 1024 [ 85.538902][ T6063] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 85.561584][ T6063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.573496][ T6063] usb 2-1: Product: syz [ 85.578440][ T6063] usb 2-1: Manufacturer: syz [ 85.587559][ T6063] usb 2-1: SerialNumber: syz [ 85.597921][ T6063] usb 2-1: config 0 descriptor?? [ 85.608198][ T6149] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 85.700615][ T5912] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 85.732469][ T5912] usb 3-1: device descriptor read/8, error -71 [ 85.980367][ T5912] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 86.002223][ T5912] usb 3-1: device descriptor read/8, error -71 [ 86.112356][ T5912] usb usb3-port1: unable to enumerate USB device [ 86.401660][ T6207] ======================================================= [ 86.401660][ T6207] WARNING: The mand mount option has been deprecated and [ 86.401660][ T6207] and is ignored by this kernel. Remove the mand [ 86.401660][ T6207] option from the mount to silence this warning. [ 86.401660][ T6207] ======================================================= [ 86.510786][ T6207] /dev/rnullb0: Can't open blockdev [ 86.574790][ T6211] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 86.634652][ T6211] /dev/rnullb0: Can't open blockdev [ 86.822111][ T5865] Bluetooth: hci2: command tx timeout [ 87.050179][ T43] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 87.203498][ T43] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 87.217473][ T43] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 87.231904][ T43] usb 4-1: config 150 has no interface number 0 [ 87.243319][ T43] usb 4-1: config 150 interface 204 has no altsetting 0 [ 87.254803][ T43] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 87.268049][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.278214][ T43] usb 4-1: Product: syz [ 87.286472][ T43] usb 4-1: Manufacturer: syz [ 87.299423][ T43] usb 4-1: SerialNumber: syz [ 87.390873][ T1218] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.448352][ T6231] netlink: 'syz.2.68': attribute type 10 has an invalid length. [ 87.465730][ T6231] team0: Port device netdevsim0 added [ 87.481008][ T30] audit: type=1326 audit(1756083819.720:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.2.68" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57c7f8ebe9 code=0x0 [ 87.519028][ T43] xr_serial 4-1:150.204: skipping garbage [ 87.525803][ T43] xr_serial 4-1:150.204: xr_serial converter detected [ 87.570281][ T1218] usb 1-1: Using ep0 maxpacket: 16 [ 87.585173][ T1218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.599896][ T1218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.616628][ T1218] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 87.632023][ T1218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.645603][ T1218] usb 1-1: config 0 descriptor?? [ 88.057757][ T6228] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.078061][ T1218] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 88.281042][ T5912] usb 1-1: USB disconnect, device number 2 [ 88.396816][ T43] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 88.404427][ T43] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 88.417562][ T43] usb 4-1: USB disconnect, device number 3 [ 88.427140][ T43] xr_serial 4-1:150.204: device disconnected [ 88.570389][ T5905] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 88.710431][ T5905] usb 3-1: device descriptor read/64, error -71 [ 88.971038][ T5905] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 89.120329][ T5905] usb 3-1: device descriptor read/64, error -71 [ 89.252785][ T5905] usb usb3-port1: attempt power cycle [ 89.610370][ T43] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.621545][ T5905] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 89.650981][ T5905] usb 3-1: device descriptor read/8, error -71 [ 89.730587][ T1211] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.763110][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.775925][ T43] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 89.785802][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.797518][ T43] usb 1-1: config 0 descriptor?? [ 89.900361][ T1211] usb 4-1: Using ep0 maxpacket: 32 [ 89.906801][ T5905] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 89.919469][ T1211] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 89.932710][ T1211] usb 4-1: config 0 has no interface number 0 [ 89.941734][ T5905] usb 3-1: device descriptor read/8, error -71 [ 89.952553][ T1211] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 89.963545][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.973412][ T1211] usb 4-1: Product: syz [ 89.979612][ T1211] usb 4-1: Manufacturer: syz [ 89.986747][ T1211] usb 4-1: SerialNumber: syz [ 89.995923][ T1211] usb 4-1: config 0 descriptor?? [ 90.005962][ T1211] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 90.016351][ T1211] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 90.062728][ T5905] usb usb3-port1: unable to enumerate USB device [ 90.204371][ T1211] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 90.209589][ T43] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 90.227099][ T1211] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 90.248732][ T43] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input8 [ 90.259786][ T1211] usb 4-1: USB disconnect, device number 4 [ 90.354600][ T43] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 90.729273][ T5920] usb 1-1: USB disconnect, device number 3 [ 90.969551][ T6260] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 91.300089][ T6278] /dev/rnullb0: Can't open blockdev [ 91.487836][ T6289] overlayfs: failed to decode file handle (len=4, type=248, flags=0, err=-22) [ 91.500044][ T6289] evm: overlay not supported [ 91.509840][ T6289] /dev/rnullb0: Can't open blockdev [ 91.569450][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 91.600359][ T43] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 91.740285][ T43] usb 4-1: device descriptor read/64, error -71 [ 91.980238][ T43] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 92.120220][ T43] usb 4-1: device descriptor read/64, error -71 [ 92.190214][ T5865] Bluetooth: hci0: command 0x0401 tx timeout [ 92.230403][ T43] usb usb4-port1: attempt power cycle [ 92.570349][ T43] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 92.642619][ T43] usb 4-1: device descriptor read/8, error -71 [ 92.817051][ T6306] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 92.828987][ T6307] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 92.837329][ T6306] /dev/rnullb0: Can't open blockdev [ 92.845985][ T6307] /dev/rnullb0: Can't open blockdev [ 92.882918][ T43] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 92.921717][ T43] usb 4-1: device descriptor read/8, error -71 [ 93.030438][ T43] usb usb4-port1: unable to enumerate USB device [ 93.221697][ T5920] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 93.380353][ T5920] usb 3-1: Using ep0 maxpacket: 8 [ 93.393720][ T5920] usb 3-1: unable to get BOS descriptor or descriptor too short [ 93.406067][ T5920] usb 3-1: config 4 has an invalid interface number: 30 but max is 0 [ 93.418164][ T5920] usb 3-1: config 4 has no interface number 0 [ 93.426184][ T5920] usb 3-1: config 4 interface 30 has no altsetting 0 [ 93.439833][ T5920] usb 3-1: string descriptor 0 read error: -22 [ 93.448038][ T5920] usb 3-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 93.460472][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.474233][ T5920] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 93.483676][ T5920] dw2102: su3000_power_ctrl: 1, initialized 0 [ 93.492126][ T5920] dvb-usb: bulk message failed: -22 (2/0) [ 93.502628][ T5920] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 93.514122][ T5920] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 93.522946][ T5920] usb 3-1: media controller created [ 93.530527][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 93.537294][ T5920] dw2102: i2c transfer failed. [ 93.543641][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 93.550330][ T5920] dw2102: i2c transfer failed. [ 93.555838][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 93.562935][ T5920] dw2102: i2c transfer failed. [ 93.567821][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 93.573694][ T5920] dw2102: i2c transfer failed. [ 93.578999][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 93.586126][ T5920] dw2102: i2c transfer failed. [ 93.591694][ T5920] dvb-usb: bulk message failed: -22 (6/0) [ 93.598047][ T5920] dw2102: i2c transfer failed. [ 93.604019][ T5920] dvb-usb: MAC address: 02:02:02:02:02:02 [ 93.622947][ T5920] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.644211][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 93.651826][ T5920] dw2102: command 0x0e transfer failed. [ 93.658525][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 93.665800][ T5920] dw2102: command 0x0e transfer failed. [ 93.675080][ T6313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.686693][ T6313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.830856][ T6316] syz.0.93 (6316): /proc/6315/oom_adj is deprecated, please use /proc/6315/oom_score_adj instead. [ 93.990223][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 93.997512][ T5920] dw2102: command 0x0e transfer failed. [ 94.003636][ T5920] dvb-usb: bulk message failed: -22 (3/0) [ 94.020357][ T5920] dw2102: command 0x0e transfer failed. [ 94.026486][ T5920] dvb-usb: bulk message failed: -22 (1/0) [ 94.036675][ T5920] dw2102: command 0x51 transfer failed. [ 94.046786][ T5920] dvb-usb: bulk message failed: -22 (5/0) [ 94.054357][ T5920] dw2102: i2c probe for address 0x68 failed. [ 94.070424][ T5920] dvb-usb: bulk message failed: -22 (5/0) [ 94.076945][ T5920] dw2102: i2c probe for address 0x69 failed. [ 94.107153][ T5920] dvb-usb: bulk message failed: -22 (5/0) [ 94.116884][ T5920] dw2102: i2c probe for address 0x6a failed. [ 94.131389][ T5920] dw2102: probing for demodulator failed. Is the external power switched on? [ 94.131420][ T6311] dvb-usb: bulk message failed: -22 (4/0) [ 94.146308][ T5920] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 94.179677][ T6311] dw2102: i2c transfer failed. [ 94.281691][ T5920] rc_core: IR keymap rc-tt-1500 not found [ 94.295167][ T5920] Registered IR keymap rc-empty [ 94.306186][ T5920] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 94.339559][ T5920] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input9 [ 94.371243][ T5920] dvb-usb: schedule remote query interval to 250 msecs. [ 94.413161][ T5920] dw2102: su3000_power_ctrl: 0, initialized 1 [ 94.438347][ T5920] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 94.458005][ T5920] usb 3-1: USB disconnect, device number 11 [ 94.516860][ T5920] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 94.925477][ T5905] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 95.030242][ T5920] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 95.110295][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 95.118848][ T5905] usb 4-1: config 0 has no interfaces? [ 95.135184][ T5905] usb 4-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 95.156402][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.180004][ T5905] usb 4-1: Product: syz [ 95.196851][ T5905] usb 4-1: Manufacturer: syz [ 95.200269][ T5920] usb 3-1: Using ep0 maxpacket: 32 [ 95.204821][ T5905] usb 4-1: SerialNumber: syz [ 95.220244][ T5905] usb 4-1: config 0 descriptor?? [ 95.232387][ T5920] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=30.46 [ 95.260178][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.296302][ T5920] usb 3-1: config 0 descriptor?? [ 95.450198][ T5905] usb 4-1: USB disconnect, device number 9 [ 95.528965][ T6351] warning: `syz.2.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.569316][ T43] usb 3-1: USB disconnect, device number 12 [ 96.045041][ T6375] delete_channel: no stack [ 96.071293][ T6377] NILFS (rnullb0): couldn't find nilfs on the device [ 96.202477][ T6381] netlink: 'syz.0.110': attribute type 1 has an invalid length. [ 96.223665][ T6381] netlink: 224 bytes leftover after parsing attributes in process `syz.0.110'. [ 96.351995][ T6391] /dev/rnullb0: Can't open blockdev [ 96.382882][ T6393] process 'syz.1.114' launched './file0' with NULL argv: empty string added [ 96.479929][ T6400] use of bytesused == 0 is deprecated and will be removed in the future, [ 96.490306][ T1218] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.503478][ T6400] use the actual size instead. [ 96.510243][ T5905] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 96.608591][ T6406] CUSE: info not properly terminated [ 96.660286][ T1218] usb 1-1: Using ep0 maxpacket: 16 [ 96.667905][ T1218] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 96.683143][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 96.683587][ T6410] /dev/rnullb0: Can't open blockdev [ 96.697610][ T1218] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.713711][ T5905] usb 3-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=dc.b6 [ 96.713736][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.726463][ T1218] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.751822][ T5905] usb 3-1: Product: syz [ 96.756755][ T5905] usb 3-1: Manufacturer: syz [ 96.761019][ T1218] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.763364][ T5905] usb 3-1: SerialNumber: syz [ 96.782222][ T1218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.794931][ T1218] usb 1-1: Product: syz [ 96.804054][ T5905] usb 3-1: config 0 descriptor?? [ 96.804715][ T1218] usb 1-1: Manufacturer: syz [ 96.849830][ T1218] usb 1-1: SerialNumber: syz [ 96.857522][ T6414] netlink: 'syz.1.122': attribute type 10 has an invalid length. [ 96.887614][ T6414] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 96.909077][ T6414] /dev/rnullb0: Can't open blockdev [ 97.080295][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 97.240442][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 97.248550][ T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.263170][ T9] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.263372][ T1218] usb 1-1: 0:2 : does not exist [ 97.280780][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.296060][ T9] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 97.309182][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.327319][ T9] usb 4-1: config 0 descriptor?? [ 97.702520][ T24] cfg80211: failed to load regulatory.db [ 97.748372][ T9] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 97.759300][ T9] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 97.768567][ T9] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 97.778417][ T9] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 97.786721][ T9] steelseries 0003:1038:1410.0003: unknown main item tag 0x0 [ 97.795709][ T9] steelseries 0003:1038:1410.0003: missing HID_OUTPUT_REPORT 0 [ 97.982552][ T24] usb 4-1: USB disconnect, device number 10 [ 98.640405][ T6427] /dev/rnullb0: Can't open blockdev [ 98.676735][ T5905] safe_serial 3-1:0.0: safe_serial converter detected [ 98.707768][ T6431] netlink: 'syz.3.128': attribute type 10 has an invalid length. [ 98.712104][ T5905] safe_serial 3-1:0.0: probe with driver safe_serial failed with error -22 [ 98.773048][ T5905] usb 3-1: USB disconnect, device number 13 [ 98.787476][ T6431] team0: Port device macvlan1 added [ 98.841864][ T1218] usb 1-1: USB disconnect, device number 4 [ 98.968960][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'. [ 99.270765][ T43] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 99.443274][ T43] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 99.452922][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.462633][ T43] usb 3-1: Product: syz [ 99.468597][ T43] usb 3-1: Manufacturer: syz [ 99.473736][ T43] usb 3-1: SerialNumber: syz [ 99.479869][ T43] usb 3-1: config 0 descriptor?? [ 99.550433][ T5905] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 99.699136][ T43] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 99.713208][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 99.725361][ T5905] usb 4-1: config 0 has an invalid interface number: 244 but max is 0 [ 99.743268][ T5905] usb 4-1: config 0 has no interface number 0 [ 99.753643][ T5905] usb 4-1: New USB device found, idVendor=0403, idProduct=7c90, bcdDevice=fe.71 [ 99.774799][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.789014][ T5905] usb 4-1: Product: syz [ 99.803867][ T5905] usb 4-1: Manufacturer: syz [ 99.808854][ T5905] usb 4-1: SerialNumber: syz [ 99.816889][ T5905] usb 4-1: config 0 descriptor?? [ 99.965945][ T6474] /dev/rnullb0: Can't open blockdev [ 100.475645][ T6484] /dev/rnullb0: Can't open blockdev [ 100.484556][ T6485] /dev/rnullb0: Can't open blockdev [ 101.382382][ T43] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 101.963032][ T6504] netlink: 60 bytes leftover after parsing attributes in process `syz.2.149'. [ 102.019083][ T6504] netlink: 60 bytes leftover after parsing attributes in process `syz.2.149'. [ 102.248723][ T5905] ftdi_sio 4-1:0.244: FTDI USB Serial Device converter detected [ 102.288278][ T5905] ftdi_sio ttyUSB0: unknown device type: 0xfe71 [ 102.320060][ T5905] usb 4-1: USB disconnect, device number 11 [ 102.338850][ T5905] ftdi_sio 4-1:0.244: device disconnected [ 102.556403][ T6514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.568107][ T6514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.670245][ T5905] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 102.726670][ T6521] No control pipe specified [ 102.846649][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.870181][ T5905] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 102.889793][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.910655][ T5905] usb 4-1: config 0 descriptor?? [ 103.234223][ T6528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.316119][ T6528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.328458][ T5905] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 103.387090][ T5905] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0004/input/input10 [ 103.510731][ T5905] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 103.572848][ C0] keyboard: can't emulate rawmode for keycode 240 [ 103.579943][ C0] keyboard: can't emulate rawmode for keycode 240 [ 103.586565][ C0] keyboard: can't emulate rawmode for keycode 240 [ 103.593140][ C0] keyboard: can't emulate rawmode for keycode 240 [ 103.599751][ C0] keyboard: can't emulate rawmode for keycode 240 [ 103.606472][ C0] keyboard: can't emulate rawmode for keycode 240 [ 103.613736][ C0] keyboard: can't emulate rawmode for keycode 240 [ 103.620874][ C0] keyboard: can't emulate rawmode for keycode 240 [ 103.628192][ C0] keyboard: can't emulate rawmode for keycode 240 [ 103.635281][ C0] keyboard: can't emulate rawmode for keycode 240 [ 103.796091][ T6535] /dev/rnullb0: Can't open blockdev [ 103.928963][ T43] usb 4-1: USB disconnect, device number 12 [ 104.023440][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 104.035138][ T6537] /dev/rnullb0: Can't open blockdev [ 104.131497][ T6540] netlink: 'syz.2.162': attribute type 12 has an invalid length. [ 104.141283][ T6540] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.162'. [ 104.258949][ T6543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.273692][ T6543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.286500][ T6543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.298721][ T6543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.376801][ T3021] tipc: Subscription rejected, illegal request [ 104.395491][ T6554] tipc: Started in network mode [ 104.402448][ T6554] tipc: Node identity 4, cluster identity 4711 [ 104.410283][ T6554] tipc: Node number set to 4 [ 104.429888][ T6554] /dev/rnullb0: Can't open blockdev [ 104.657935][ T6565] /dev/rnullb0: Can't open blockdev [ 104.796640][ T6569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.805653][ T1211] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 104.814324][ T6569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.993953][ T1211] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.013973][ T1211] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 105.026104][ T1211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.072242][ T1211] usb 1-1: config 0 descriptor?? [ 105.112188][ T6581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.124111][ T6581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.411288][ T6588] mkiss: ax0: crc mode is auto. [ 105.412398][ T6592] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 105.437336][ T6592] /dev/rnullb0: Can't open blockdev [ 106.179773][ T1211] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 106.191392][ T6063] iguanair 2-1:0.255: failed to get version [ 106.201356][ T6063] iguanair 2-1:0.255: probe with driver iguanair failed with error -110 [ 106.212951][ T1211] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0005/input/input11 [ 106.234502][ T6063] usb 2-1: USB disconnect, device number 4 [ 106.315145][ T1211] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 106.542064][ T1211] usb 1-1: USB disconnect, device number 5 [ 106.550542][ T6063] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 106.670456][ T24] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 106.710586][ T6063] usb 2-1: Using ep0 maxpacket: 8 [ 106.718153][ T6063] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 106.726145][ T6063] usb 2-1: can't read configurations, error -61 [ 106.822567][ T24] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 106.832305][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.843374][ T24] usb 4-1: config 0 descriptor?? [ 106.860518][ T6063] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 107.020241][ T6063] usb 2-1: Using ep0 maxpacket: 8 [ 107.027209][ T6063] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 107.035493][ T6063] usb 2-1: can't read configurations, error -61 [ 107.042469][ T6063] usb usb2-port1: attempt power cycle [ 107.122558][ T6640] /dev/rnullb0: Can't open blockdev [ 107.390368][ T6063] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 107.422417][ T6063] usb 2-1: Using ep0 maxpacket: 8 [ 107.434150][ T6063] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 107.444063][ T6063] usb 2-1: can't read configurations, error -61 [ 107.590359][ T6063] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 107.622318][ T6063] usb 2-1: Using ep0 maxpacket: 8 [ 107.629367][ T6063] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 107.638612][ T6063] usb 2-1: can't read configurations, error -61 [ 107.646360][ T6063] usb usb2-port1: unable to enumerate USB device [ 108.156963][ T6663] 9pnet_fd: p9_fd_create_unix (6663): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 108.204530][ T6663] /dev/rnullb0: Can't open blockdev [ 108.304808][ T6671] loop2: detected capacity change from 0 to 7 [ 108.313594][ T6091] loop2: [POWERTEC] p1 p2 p3 p4 p5 [ 108.319445][ T6091] loop2: p1 start 124387328 is beyond EOD, truncated [ 108.333707][ T6091] loop2: p2 start 1634533376 is beyond EOD, truncated [ 108.341460][ T6091] loop2: p3 start 1886744434 is beyond EOD, truncated [ 108.349164][ T6091] loop2: p4 start 8388608 is beyond EOD, truncated [ 108.349188][ T6091] loop2: p5 start 196608 is beyond EOD, truncated [ 108.350023][ T6671] loop2: [POWERTEC] p1 p2 p3 p4 p5 [ 108.359296][ T6671] loop2: p1 start 124387328 is beyond EOD, truncated [ 108.388274][ T6671] loop2: p2 start 1634533376 is beyond EOD, truncated [ 108.397457][ T6671] loop2: p3 start 1886744434 is beyond EOD, truncated [ 108.405193][ T6673] /dev/rnullb0: Can't open blockdev [ 108.405398][ T6671] loop2: p4 start 8388608 is beyond EOD, truncated [ 108.423118][ T6671] loop2: p5 start 196608 is beyond EOD, truncated [ 108.599652][ T6681] netlink: 'syz.0.195': attribute type 1 has an invalid length. [ 108.612837][ T6681] /dev/rnullb0: Can't open blockdev [ 108.681615][ T6683] /dev/rnullb0: Can't open blockdev [ 109.535226][ T6691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.199'. [ 109.552506][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'. [ 109.565018][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.199'. [ 109.589264][ T24] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 109.629656][ T24] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 109.659621][ T24] asix 4-1:0.0: probe with driver asix failed with error -71 [ 109.677072][ T24] usb 4-1: USB disconnect, device number 13 [ 109.874449][ T6699] loop2: detected capacity change from 0 to 7 [ 109.913025][ T6699] loop2: [POWERTEC] p1 p2 p3 p4 p5 [ 109.919819][ T6699] loop2: p1 start 124387328 is beyond EOD, truncated [ 109.945486][ T6699] loop2: p2 start 1634533376 is beyond EOD, truncated [ 109.964481][ T6699] loop2: p3 start 1886744434 is beyond EOD, truncated [ 109.990265][ T6699] loop2: p4 start 8388608 is beyond EOD, truncated [ 110.008631][ T6699] loop2: p5 start 196608 is beyond EOD, truncated [ 110.085624][ T6691] mmap: syz.1.199 (6691) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.708174][ T6709] /dev/rnullb0: Can't open blockdev [ 110.997584][ T6717] tmpfs: Group quota inode hardlimit too large. [ 111.005183][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.208'. [ 111.260259][ T1218] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 111.260259][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.410365][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 111.420416][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.420804][ T1218] usb 4-1: too many configurations: 56, using maximum allowed: 8 [ 111.432255][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 111.444136][ T1218] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 111.451872][ T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 111.451901][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.453281][ T9] usb 1-1: config 0 descriptor?? [ 111.477181][ T1218] usb 4-1: can't read configurations, error -61 [ 111.530347][ T6722] /dev/rnullb0: Can't open blockdev [ 111.620927][ T1218] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 111.780902][ T1218] usb 4-1: too many configurations: 56, using maximum allowed: 8 [ 111.795273][ T1218] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 111.804603][ T1218] usb 4-1: can't read configurations, error -61 [ 111.815281][ T1218] usb usb4-port1: attempt power cycle [ 112.160235][ T1218] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 112.194693][ T1218] usb 4-1: too many configurations: 56, using maximum allowed: 8 [ 112.208964][ T1218] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 112.221184][ T1218] usb 4-1: can't read configurations, error -61 [ 112.350233][ T1218] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 112.372560][ T1218] usb 4-1: too many configurations: 56, using maximum allowed: 8 [ 112.383333][ T1218] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 112.391940][ T1218] usb 4-1: can't read configurations, error -61 [ 112.399837][ T1218] usb usb4-port1: unable to enumerate USB device [ 112.950909][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 113.100254][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 113.107080][ T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.118221][ T9] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.128209][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 113.135020][ T9] usb 2-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00 [ 113.144159][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.154573][ T9] usb 2-1: config 0 descriptor?? [ 113.569310][ T9] ntrig 0003:1B96:0004.0006: unknown main item tag 0x0 [ 113.577214][ T9] ntrig 0003:1B96:0004.0006: unknown main item tag 0x0 [ 113.584344][ T9] ntrig 0003:1B96:0004.0006: unknown main item tag 0x0 [ 113.592720][ T9] ntrig 0003:1B96:0004.0006: unknown main item tag 0x0 [ 113.600224][ T9] ntrig 0003:1B96:0004.0006: unknown main item tag 0x0 [ 113.608957][ T9] ntrig 0003:1B96:0004.0006: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.1-1/input0 [ 113.832853][ T6736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.853649][ T9] usb 2-1: USB disconnect, device number 9 [ 114.043247][ T6063] usb 1-1: USB disconnect, device number 6 [ 114.186989][ T6749] block nbd0: Attempted send on invalid socket [ 114.193702][ T6749] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 114.203009][ T6749] (syz.0.216,6749,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 114.210872][ T6749] (syz.0.216,6749,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 114.218140][ T6749] (syz.0.216,6749,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 114.227040][ T6749] (syz.0.216,6749,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 114.390374][ T1218] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 114.544533][ T1218] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 114.554850][ T1218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.564983][ T1218] usb 4-1: config 0 descriptor?? [ 114.786149][ T1218] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 114.797648][ T1218] asix 4-1:0.0: probe with driver asix failed with error -32 [ 114.972703][ T6757] netlink: 20 bytes leftover after parsing attributes in process `syz.0.218'. [ 115.027815][ T6759] capability: warning: `syz.0.219' uses 32-bit capabilities (legacy support in use) [ 117.114366][ T9] usb 4-1: USB disconnect, device number 18 [ 117.622114][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 117.673878][ T6793] (syz.3.226,6793,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 117.700662][ T6793] (syz.3.226,6793,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 118.058097][ T6805] input: syz1 as /devices/virtual/input/input12 [ 118.570209][ T1218] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 118.620409][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 118.744327][ T1218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.749147][ T6825] /dev/rnullb0: Can't open blockdev [ 118.755652][ T1218] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 118.771430][ T1218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.782128][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 118.782673][ T1218] usb 1-1: config 0 descriptor?? [ 118.793002][ T9] usb 2-1: config 0 has an invalid interface number: 180 but max is 0 [ 118.809108][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.821819][ T6827] /dev/rnullb0: Can't open blockdev [ 118.827856][ T9] usb 2-1: config 0 has no interface number 0 [ 118.836150][ T9] usb 2-1: New USB device found, idVendor=0421, idProduct=0114, bcdDevice=11.72 [ 118.846725][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.855652][ T9] usb 2-1: Product: syz [ 118.859911][ T9] usb 2-1: Manufacturer: syz [ 118.864908][ T9] usb 2-1: SerialNumber: syz [ 118.877475][ T9] usb 2-1: config 0 descriptor?? [ 118.885468][ T6829] /dev/rnullb0: Can't open blockdev [ 118.885943][ T9] usb 2-1: bad CDC descriptors [ 118.935187][ T6831] Bluetooth: MGMT ver 1.23 [ 118.943605][ T6831] netlink: 'syz.3.240': attribute type 83 has an invalid length. [ 119.095311][ T6811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.104033][ T6811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.117907][ T6811] /dev/rnullb0: Can't open blockdev [ 119.124822][ T9] usb 2-1: USB disconnect, device number 10 [ 119.206157][ T1218] keytouch 0003:0926:3333.0007: fixing up Keytouch IEC report descriptor [ 119.216825][ T1218] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0007/input/input13 [ 119.295663][ T1218] keytouch 0003:0926:3333.0007: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 119.414655][ C1] kbd_keycode: 36 callbacks suppressed [ 119.414676][ C1] keyboard: can't emulate rawmode for keycode 240 [ 119.427011][ C1] keyboard: can't emulate rawmode for keycode 240 [ 119.434608][ C1] keyboard: can't emulate rawmode for keycode 240 [ 119.441657][ C1] keyboard: can't emulate rawmode for keycode 240 [ 119.448282][ C1] keyboard: can't emulate rawmode for keycode 240 [ 119.454946][ C1] keyboard: can't emulate rawmode for keycode 240 [ 119.461565][ C1] keyboard: can't emulate rawmode for keycode 240 [ 119.468529][ C1] keyboard: can't emulate rawmode for keycode 240 [ 119.475167][ C1] keyboard: can't emulate rawmode for keycode 240 [ 119.482244][ C1] keyboard: can't emulate rawmode for keycode 240 [ 119.657952][ T6834] /dev/rnullb0: Can't open blockdev [ 119.762338][ T6831] orangefs_mount: mount request failed with -4 [ 119.795519][ T24] usb 1-1: USB disconnect, device number 7 [ 119.814485][ T6838] mkiss: ax0: crc mode is auto. [ 119.874179][ T6838] debugfs: 'ttyS3' already exists in 'caif_serial' [ 119.930344][ T1218] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 120.090203][ T1218] usb 2-1: Using ep0 maxpacket: 32 [ 120.100767][ T1218] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.131374][ T1218] usb 2-1: config 0 interface 0 has no altsetting 0 [ 120.151423][ T1218] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 120.172193][ T1218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.189559][ T1218] usb 2-1: Product: syz [ 120.196711][ T1218] usb 2-1: Manufacturer: syz [ 120.204341][ T1218] usb 2-1: SerialNumber: syz [ 120.220791][ T1218] usb 2-1: config 0 descriptor?? [ 120.233243][ T1218] gs_usb 2-1:0.0: Required endpoints not found [ 120.459378][ T6870] /dev/rnullb0: Can't open blockdev [ 120.554841][ T6876] netlink: 'syz.0.247': attribute type 21 has an invalid length. [ 120.563725][ T6876] IPv6: NLM_F_CREATE should be specified when creating new route [ 120.575141][ T6876] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.582429][ T6876] IPv6: NLM_F_CREATE should be set when creating new route [ 120.589694][ T6876] IPv6: NLM_F_CREATE should be set when creating new route [ 120.596978][ T6876] IPv6: NLM_F_CREATE should be set when creating new route [ 120.681812][ T6889] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 121.715445][ T6920] /dev/rnullb0: Can't open blockdev [ 121.966786][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 121.976197][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 121.983947][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 121.991795][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 121.999822][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 122.152373][ T6925] chnl_net:caif_netlink_parms(): no params data found [ 122.161511][ T5905] usb 3-1: USB disconnect, device number 14 [ 122.217790][ T2983] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.256009][ T6925] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.267021][ T6925] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.274910][ T6925] bridge_slave_0: entered allmulticast mode [ 122.283745][ T6925] bridge_slave_0: entered promiscuous mode [ 122.298059][ T2983] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.317089][ T6925] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.325512][ T6925] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.335356][ T6925] bridge_slave_1: entered allmulticast mode [ 122.344804][ T6925] bridge_slave_1: entered promiscuous mode [ 122.377144][ T6925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.396262][ T2983] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.414196][ T6925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.448387][ T2983] team0: Port device netdevsim0 removed [ 122.455449][ T2983] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.469475][ T6925] team0: Port device team_slave_0 added [ 122.477848][ T6925] team0: Port device team_slave_1 added [ 122.511885][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.519550][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.545922][ T6925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.571219][ T6925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.578914][ T6925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.614064][ T6925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.655570][ T2983] bridge_slave_1: left allmulticast mode [ 122.661756][ T2983] bridge_slave_1: left promiscuous mode [ 122.667549][ T2983] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.677509][ T2983] bridge_slave_0: left allmulticast mode [ 122.684998][ T2983] bridge_slave_0: left promiscuous mode [ 122.693534][ T2983] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.869518][ T24] usb 2-1: USB disconnect, device number 11 [ 122.884685][ T2983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.922381][ T2983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.948191][ T2983] bond0 (unregistering): Released all slaves [ 122.959854][ T6941] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 123.128684][ T6925] hsr_slave_0: entered promiscuous mode [ 123.324784][ T6925] hsr_slave_1: entered promiscuous mode [ 123.383247][ T6968] /dev/rnullb0: Can't open blockdev [ 123.392566][ T6966] /dev/rnullb0: Can't open blockdev [ 123.468768][ T6925] debugfs: 'hsr0' already exists in 'hsr' [ 123.489216][ T6925] Cannot create hsr debugfs directory [ 123.615241][ T6974] /dev/rnullb0: Can't open blockdev [ 123.707297][ T6979] netlink: 'syz.3.264': attribute type 39 has an invalid length. [ 123.724283][ T1218] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 123.756464][ T6979] /dev/rnullb0: Can't open blockdev [ 123.890373][ T1218] usb 2-1: Using ep0 maxpacket: 16 [ 123.936040][ T1218] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 123.949630][ T2983] hsr_slave_0: left promiscuous mode [ 123.960800][ T1218] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.971578][ T1218] usb 2-1: config 0 has no interface number 0 [ 123.974011][ T6990] block nbd3: NBD_DISCONNECT [ 123.977938][ T1218] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 123.996120][ T2983] hsr_slave_1: left promiscuous mode [ 124.003086][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 124.014198][ T1218] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 124.015321][ T2983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.023519][ T5861] Bluetooth: hci3: command tx timeout [ 124.026407][ T1218] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 124.046268][ T1218] usb 2-1: Product: syz [ 124.049178][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 124.059497][ T2983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.061182][ T1218] usb 2-1: SerialNumber: syz [ 124.067031][ T6992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 124.074363][ T1218] usb 2-1: config 0 descriptor?? [ 124.089805][ T1218] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 124.098176][ T2983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.115941][ T2983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.132351][ T2983] veth1_macvtap: left promiscuous mode [ 124.137960][ T2983] veth0_macvtap: left promiscuous mode [ 124.143836][ T2983] veth1_vlan: left promiscuous mode [ 124.149247][ T2983] veth0_vlan: left promiscuous mode [ 124.206167][ T6994] block nbd3: Disconnected due to user request. [ 124.215035][ T6994] block nbd3: shutting down sockets [ 124.286615][ T2983] team0 (unregistering): Port device team_slave_1 removed [ 124.323296][ T2983] team0 (unregistering): Port device team_slave_0 removed [ 124.336229][ T5920] usb 2-1: USB disconnect, device number 12 [ 124.392625][ T6925] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 124.404231][ T6999] syzkaller1: entered promiscuous mode [ 124.409828][ T6999] syzkaller1: entered allmulticast mode [ 124.424548][ T6925] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 124.438263][ T6925] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 124.460689][ T6925] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 124.528230][ T6925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.553271][ T6925] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.581553][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.588699][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.614186][ T3021] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.621383][ T3021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.934385][ T6925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.412212][ T7069] cgroup: Need name or subsystem set [ 125.514968][ T6925] veth0_vlan: entered promiscuous mode [ 125.549316][ T6925] veth1_vlan: entered promiscuous mode [ 125.613031][ T6925] veth0_macvtap: entered promiscuous mode [ 125.757307][ T6925] veth1_macvtap: entered promiscuous mode [ 125.802434][ T6925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.825046][ T6925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.884861][ T3021] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.949633][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.969888][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.046670][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.101735][ T5861] Bluetooth: hci3: command tx timeout [ 126.140984][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.176815][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.222241][ T3021] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.234303][ T3021] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.260716][ T5905] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 126.409653][ T7099] loop2: detected capacity change from 0 to 7 [ 126.429875][ T7099] Dev loop2: unable to read RDB block 7 [ 126.435878][ T7099] loop2: unable to read partition table [ 126.442821][ T7099] loop2: partition table beyond EOD, truncated [ 126.449060][ T7099] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 126.451943][ T5905] usb 1-1: config 0 has an invalid interface number: 109 but max is 0 [ 126.483972][ T5905] usb 1-1: config 0 has no interface number 0 [ 126.499850][ T5905] usb 1-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 126.528392][ T5905] usb 1-1: config 0 interface 109 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 126.561254][ T5905] usb 1-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.592183][ T5905] usb 1-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 126.613041][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.632719][ T5905] usb 1-1: config 0 descriptor?? [ 126.640337][ T1211] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 126.651370][ T5905] cxacru 1-1:0.109: cxacru_bind: interface has incorrect endpoints [ 126.669637][ T5905] cxacru 1-1:0.109: usbatm_usb_probe: bind failed: -19! [ 126.833770][ T1211] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 126.859272][ T1211] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 126.892285][ T1211] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 126.902837][ T7091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.912320][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.932497][ T7101] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 126.939019][ T7091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.945935][ T1211] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 126.983883][ T5905] usb 1-1: USB disconnect, device number 8 [ 127.040605][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.187171][ T5920] usb 4-1: USB disconnect, device number 19 [ 127.305130][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 127.320192][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.328231][ T9] usb 5-1: Product: syz [ 127.332717][ T9] usb 5-1: Manufacturer: syz [ 127.337325][ T9] usb 5-1: SerialNumber: syz [ 127.510703][ T5905] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 127.630297][ T5920] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 127.671873][ T5905] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.686075][ T5905] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 127.695681][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.710928][ T5905] usb 1-1: config 0 descriptor?? [ 127.729580][ T7145] vxfs: WRONG superblock magic 00000000 at 1 [ 127.736173][ T7145] vxfs: WRONG superblock magic 00000000 at 8 [ 127.746449][ T7145] vxfs: can't find superblock. [ 127.771953][ T5920] usb 4-1: device descriptor read/64, error -71 [ 127.798300][ T7145] vxfs: WRONG superblock magic 00000000 at 1 [ 127.804501][ T7145] vxfs: WRONG superblock magic 00000000 at 8 [ 127.810882][ T7145] vxfs: can't find superblock. [ 128.021174][ T5920] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 128.110832][ T5912] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 128.121392][ T5905] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 128.132442][ T5905] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0008/input/input14 [ 128.150256][ T5920] usb 4-1: device descriptor read/64, error -71 [ 128.180300][ T5861] Bluetooth: hci3: command tx timeout [ 128.218502][ T5905] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 128.250194][ T5912] usb 2-1: device descriptor read/64, error -71 [ 128.261428][ T5920] usb usb4-port1: attempt power cycle [ 128.323777][ C0] kbd_keycode: 104 callbacks suppressed [ 128.323795][ C0] keyboard: can't emulate rawmode for keycode 240 [ 128.336230][ C0] keyboard: can't emulate rawmode for keycode 240 [ 128.343895][ C0] keyboard: can't emulate rawmode for keycode 240 [ 128.350731][ C0] keyboard: can't emulate rawmode for keycode 240 [ 128.357170][ C0] keyboard: can't emulate rawmode for keycode 240 [ 128.363617][ C0] keyboard: can't emulate rawmode for keycode 240 [ 128.370030][ C0] keyboard: can't emulate rawmode for keycode 240 [ 128.377059][ C0] keyboard: can't emulate rawmode for keycode 240 [ 128.383589][ C0] keyboard: can't emulate rawmode for keycode 240 [ 128.390502][ C0] keyboard: can't emulate rawmode for keycode 240 [ 128.550254][ T5912] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 128.591886][ T7115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.600459][ T5920] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 128.602204][ T7115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.620699][ T5920] usb 4-1: device descriptor read/8, error -71 [ 128.689908][ T24] usb 1-1: USB disconnect, device number 9 [ 128.700198][ T5912] usb 2-1: device descriptor read/64, error -71 [ 128.820376][ T5912] usb usb2-port1: attempt power cycle [ 128.827657][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 128.860299][ T5920] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 128.880640][ T5920] usb 4-1: device descriptor read/8, error -71 [ 128.990342][ T5920] usb usb4-port1: unable to enumerate USB device [ 129.180245][ T5912] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 129.210367][ T5912] usb 2-1: device descriptor read/8, error -71 [ 129.225279][ T7157] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 129.232018][ T7157] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 129.243258][ T7157] vhci_hcd vhci_hcd.0: Device attached [ 129.248889][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -EPROTO [ 129.263245][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 129.276286][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 129.287309][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 129.297678][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 129.318207][ T9] usb 5-1: USB disconnect, device number 2 [ 129.369983][ T7158] vhci_hcd: connection closed [ 129.372857][ T12] vhci_hcd: stop threads [ 129.389501][ T12] vhci_hcd: release socket [ 129.394487][ T12] vhci_hcd: disconnect device [ 129.420731][ T5920] vhci_hcd: vhci_device speed not set [ 129.460352][ T5912] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 129.491368][ T5912] usb 2-1: device descriptor read/8, error -71 [ 129.600668][ T5912] usb usb2-port1: unable to enumerate USB device [ 129.627467][ T1218] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 129.636562][ T1218] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 129.644893][ T1218] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 129.653511][ T1218] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 129.661347][ T1218] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 129.669123][ T1218] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 129.677136][ T1218] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 129.685052][ T1218] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 129.692903][ T1218] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 129.700895][ T1218] hid-generic 0000:007F:FFFFFFFE.0009: unknown main item tag 0x0 [ 129.709704][ T1218] hid-generic 0000:007F:FFFFFFFE.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 129.738546][ T7168] fido_id[7168]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 129.847523][ T7177] /dev/rnullb0: Can't open blockdev [ 129.856057][ T7177] /dev/rnullb0: Can't open blockdev [ 130.180797][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 130.260205][ T5861] Bluetooth: hci3: command tx timeout [ 130.292554][ T7203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.303'. [ 130.344892][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.356104][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 130.366207][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.375948][ T9] usb 5-1: config 0 descriptor?? [ 130.669502][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'. [ 130.788246][ T9] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor [ 130.791491][ T7226] netlink: 256 bytes leftover after parsing attributes in process `syz.0.312'. [ 130.805337][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000A/input/input15 [ 130.812801][ T7226] /dev/rnullb0: Can't open blockdev [ 130.903088][ T9] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 131.000339][ T5912] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 131.171800][ T5912] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 131.181013][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.190120][ T5912] usb 4-1: config 0 descriptor?? [ 131.197525][ T5912] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 131.260251][ T6063] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 131.288367][ T24] usb 5-1: USB disconnect, device number 3 [ 131.403224][ T5912] gspca_cpia1: usb_control_msg 05, error -71 [ 131.409590][ T5912] gspca_cpia1: usb_control_msg 01, error -71 [ 131.416362][ T5912] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 131.425378][ T6063] usb 2-1: config 4 has an invalid interface number: 110 but max is 0 [ 131.434663][ T5912] usb 4-1: USB disconnect, device number 24 [ 131.442143][ T6063] usb 2-1: config 4 has no interface number 0 [ 131.451253][ T6063] usb 2-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=73.f7 [ 131.460632][ T6063] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.468622][ T6063] usb 2-1: Product: syz [ 131.472869][ T6063] usb 2-1: Manufacturer: syz [ 131.477458][ T6063] usb 2-1: SerialNumber: syz [ 131.485878][ T6063] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state. [ 131.493600][ T6063] usb 2-1: setting power ON [ 131.498090][ T6063] dvb-usb: bulk message failed: -22 (2/0) [ 131.559668][ T7239] /dev/rnullb0: Can't open blockdev [ 131.640260][ T6063] dvb-usb: bulk message failed: -22 (1/0) [ 131.753087][ T6063] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 131.768397][ T6063] dvbdev: DVB: registering new adapter (Mygica D689 DMB-TH) [ 131.777084][ T6063] usb 2-1: media controller created [ 131.802573][ T6063] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.819719][ T6063] cxusb: set interface failed [ 131.837595][ T6063] dvb-usb: bulk message failed: -22 (3/0) [ 131.845386][ T6063] cxusb: clear tuner gpio failed [ 131.856146][ T6063] dvb-usb: no frontend was attached by 'Mygica D689 DMB-TH' [ 131.950158][ T6063] rc_core: IR keymap rc-d680-dmb not found [ 131.956016][ T6063] Registered IR keymap rc-empty [ 131.976278][ T6063] rc rc0: Mygica D689 DMB-TH as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 132.001467][ T6063] input: Mygica D689 DMB-TH as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input17 [ 132.014277][ T6063] dvb-usb: schedule remote query interval to 100 msecs. [ 132.022242][ T6063] usb 2-1: setting power OFF [ 132.026924][ T6063] dvb-usb: bulk message failed: -22 (2/0) [ 132.035100][ T6063] dvb-usb: Mygica D689 DMB-TH successfully initialized and connected. [ 132.046310][ T6063] usb 2-1: USB disconnect, device number 17 [ 132.141511][ T6063] dvb-usb: Mygica D689 DMB-TH successfully deinitialized and disconnected. [ 132.327669][ T7267] netlink: 'syz.1.325': attribute type 1 has an invalid length. [ 132.337737][ T7267] netlink: 216 bytes leftover after parsing attributes in process `syz.1.325'. [ 132.438614][ T7273] /dev/rnullb0: Can't open blockdev [ 132.442186][ T7275] syzkaller1: entered promiscuous mode [ 132.463814][ T7275] syzkaller1: entered allmulticast mode [ 132.570267][ T5920] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 132.599051][ T7286] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 132.659365][ T7291] /dev/rnullb0: Can't open blockdev [ 132.707065][ T7296] /dev/rnullb0: Can't open blockdev [ 132.720240][ T5920] usb 1-1: device descriptor read/64, error -71 [ 132.932119][ T7309] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 132.980394][ T5920] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 133.010308][ T5912] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 133.110214][ T5920] usb 1-1: device descriptor read/64, error -71 [ 133.180258][ T5912] usb 5-1: Using ep0 maxpacket: 16 [ 133.186591][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.196757][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.209654][ T5912] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 133.218710][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.220365][ T5920] usb usb1-port1: attempt power cycle [ 133.228068][ T5912] usb 5-1: config 0 descriptor?? [ 133.239411][ T5912] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 133.541660][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.548026][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.571241][ T5920] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 133.591705][ T5920] usb 1-1: device descriptor read/8, error -71 [ 133.830258][ T5920] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 133.850730][ T5920] usb 1-1: device descriptor read/8, error -71 [ 133.970417][ T5920] usb usb1-port1: unable to enumerate USB device [ 135.799690][ T5920] usb 5-1: USB disconnect, device number 4 [ 136.090255][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 136.253212][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 136.270185][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.288322][ T24] usb 4-1: Product: syz [ 136.297293][ T24] usb 4-1: Manufacturer: syz [ 136.307449][ T24] usb 4-1: SerialNumber: syz [ 136.727464][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 136.753250][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 136.776751][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 136.846741][ T7329] /dev/rnullb0: Can't open blockdev [ 140.428772][ T7399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.347'. [ 140.442524][ T7399] /dev/rnullb0: Can't open blockdev [ 147.805302][ T5865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 147.812632][ T5865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 147.819857][ T5865] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 147.829554][ T5865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 147.837060][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.992711][ T7407] chnl_net:caif_netlink_parms(): no params data found [ 149.804217][ T5861] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.811824][ T5861] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.819018][ T5861] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.828032][ T5861] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.835749][ T5861] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.862111][ T5861] Bluetooth: hci4: command tx timeout [ 151.861219][ T5861] Bluetooth: hci5: command tx timeout [ 151.940827][ T5861] Bluetooth: hci4: command tx timeout [ 152.817639][ T5865] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 152.825038][ T5865] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 152.832608][ T5865] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 152.843524][ T5865] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 152.851139][ T5865] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 153.940266][ T5865] Bluetooth: hci5: command tx timeout [ 154.020551][ T5865] Bluetooth: hci4: command tx timeout [ 154.900217][ T5865] Bluetooth: hci6: command tx timeout [ 156.022702][ T5865] Bluetooth: hci5: command tx timeout [ 156.100212][ T5865] Bluetooth: hci4: command tx timeout [ 156.980389][ T5865] Bluetooth: hci6: command tx timeout [ 158.100193][ T5865] Bluetooth: hci5: command tx timeout [ 158.643906][ T1304] ================================================================== [ 158.652020][ T1304] BUG: KASAN: slab-use-after-free in handle_tx+0x1ec/0x610 [ 158.659334][ T1304] Read of size 8 at addr ffff88807f15e020 by task aoe_tx0/1304 [ 158.666880][ T1304] [ 158.669225][ T1304] CPU: 0 UID: 0 PID: 1304 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 158.669246][ T1304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 158.669261][ T1304] Call Trace: [ 158.669268][ T1304] [ 158.669275][ T1304] dump_stack_lvl+0x189/0x250 [ 158.669300][ T1304] ? __virt_addr_valid+0x1c8/0x5c0 [ 158.669319][ T1304] ? rcu_is_watching+0x15/0xb0 [ 158.669335][ T1304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.669354][ T1304] ? rcu_is_watching+0x15/0xb0 [ 158.669368][ T1304] ? lock_release+0x4b/0x3e0 [ 158.669381][ T1304] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 158.669401][ T1304] ? __virt_addr_valid+0x1c8/0x5c0 [ 158.669419][ T1304] ? __virt_addr_valid+0x4a5/0x5c0 [ 158.669438][ T1304] print_report+0xca/0x240 [ 158.669454][ T1304] ? handle_tx+0x1ec/0x610 [ 158.669469][ T1304] kasan_report+0x118/0x150 [ 158.669485][ T1304] ? handle_tx+0x1ec/0x610 [ 158.669502][ T1304] handle_tx+0x1ec/0x610 [ 158.669522][ T1304] dev_hard_start_xmit+0x2d7/0x830 [ 158.669544][ T1304] __dev_queue_xmit+0x1b8d/0x3b50 [ 158.669563][ T1304] ? __dev_queue_xmit+0x27b/0x3b50 [ 158.669578][ T1304] ? __pv_queued_spin_lock_slowpath+0xa05/0xb60 [ 158.669604][ T1304] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 158.669625][ T1304] ? __pfx___dev_queue_xmit+0x10/0x10 [ 158.669643][ T1304] ? do_raw_spin_lock+0x121/0x290 [ 158.669664][ T1304] ? rcu_is_watching+0x15/0xb0 [ 158.669682][ T1304] ? do_raw_spin_unlock+0x122/0x240 [ 158.669703][ T1304] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 158.669723][ T1304] ? rcu_is_watching+0x15/0xb0 [ 158.669740][ T1304] ? rcu_is_watching+0x15/0xb0 [ 158.669758][ T1304] tx+0x6b/0x190 [ 158.669777][ T1304] ? __pfx_tx+0x10/0x10 [ 158.669796][ T1304] kthread+0x1cd/0x3e0 [ 158.669817][ T1304] ? __pfx_kthread+0x10/0x10 [ 158.669835][ T1304] ? __pfx_default_wake_function+0x10/0x10 [ 158.669851][ T1304] ? __kthread_parkme+0x7b/0x200 [ 158.669868][ T1304] ? __kthread_parkme+0x1a1/0x200 [ 158.669888][ T1304] kthread+0x711/0x8a0 [ 158.669908][ T1304] ? __pfx_kthread+0x10/0x10 [ 158.669925][ T1304] ? __pfx_kthread+0x10/0x10 [ 158.669944][ T1304] ? rcu_is_watching+0x15/0xb0 [ 158.669961][ T1304] ? __pfx_kthread+0x10/0x10 [ 158.669980][ T1304] ret_from_fork+0x47c/0x820 [ 158.669998][ T1304] ? __pfx_ret_from_fork+0x10/0x10 [ 158.670017][ T1304] ? __switch_to_asm+0x39/0x70 [ 158.670032][ T1304] ? __switch_to_asm+0x33/0x70 [ 158.670047][ T1304] ? __pfx_kthread+0x10/0x10 [ 158.670067][ T1304] ret_from_fork_asm+0x1a/0x30 [ 158.670086][ T1304] [ 158.670092][ T1304] [ 158.913437][ T1304] Allocated by task 6171: [ 158.917748][ T1304] kasan_save_track+0x3e/0x80 [ 158.922424][ T1304] __kasan_kmalloc+0x93/0xb0 [ 158.927092][ T1304] __kmalloc_cache_noprof+0x21c/0x3a0 [ 158.932465][ T1304] alloc_tty_struct+0xa6/0x780 [ 158.937212][ T1304] tty_init_dev+0x59/0x4d0 [ 158.941612][ T1304] tty_open+0x5ab/0xd10 [ 158.945752][ T1304] chrdev_open+0x4cc/0x5e0 [ 158.950183][ T1304] do_dentry_open+0x950/0x13f0 [ 158.954939][ T1304] vfs_open+0x3b/0x340 [ 158.959134][ T1304] path_openat+0x2ee5/0x3830 [ 158.963812][ T1304] do_filp_open+0x1fa/0x410 [ 158.968310][ T1304] do_sys_openat2+0x121/0x1c0 [ 158.972996][ T1304] __x64_sys_openat+0x138/0x170 [ 158.977892][ T1304] do_syscall_64+0xfa/0xfa0 [ 158.982402][ T1304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.988297][ T1304] [ 158.990628][ T1304] Freed by task 5920: [ 158.994605][ T1304] kasan_save_track+0x3e/0x80 [ 158.999270][ T1304] __kasan_save_free_info+0x46/0x50 [ 159.004454][ T1304] __kasan_slab_free+0x5b/0x80 [ 159.009205][ T1304] kfree+0x18e/0x440 [ 159.013092][ T1304] process_scheduled_works+0xae1/0x17b0 [ 159.018622][ T1304] worker_thread+0x8a0/0xda0 [ 159.023222][ T1304] kthread+0x711/0x8a0 [ 159.027291][ T1304] ret_from_fork+0x47c/0x820 [ 159.032045][ T1304] ret_from_fork_asm+0x1a/0x30 [ 159.036802][ T1304] [ 159.039122][ T1304] Last potentially related work creation: [ 159.044832][ T1304] kasan_save_stack+0x3e/0x60 [ 159.049499][ T1304] kasan_record_aux_stack+0xbd/0xd0 [ 159.054686][ T1304] insert_work+0x3d/0x330 [ 159.059001][ T1304] __queue_work+0xcd2/0xfb0 [ 159.063491][ T1304] queue_work_on+0x181/0x270 [ 159.068074][ T1304] tty_release_struct+0xb8/0xd0 [ 159.072908][ T1304] tty_release+0xcb0/0x1640 [ 159.077392][ T1304] __fput+0x449/0xa70 [ 159.081372][ T1304] task_work_run+0x1d4/0x260 [ 159.085965][ T1304] do_exit+0x6b5/0x2300 [ 159.090110][ T1304] do_group_exit+0x21c/0x2d0 [ 159.094717][ T1304] get_signal+0x1286/0x1340 [ 159.099225][ T1304] arch_do_signal_or_restart+0x9a/0x750 [ 159.104756][ T1304] exit_to_user_mode_loop+0x75/0x130 [ 159.110076][ T1304] do_syscall_64+0x2bd/0xfa0 [ 159.114704][ T1304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.120591][ T1304] [ 159.122908][ T1304] The buggy address belongs to the object at ffff88807f15e000 [ 159.122908][ T1304] which belongs to the cache kmalloc-cg-2k of size 2048 [ 159.137217][ T1304] The buggy address is located 32 bytes inside of [ 159.137217][ T1304] freed 2048-byte region [ffff88807f15e000, ffff88807f15e800) [ 159.151008][ T1304] [ 159.153322][ T1304] The buggy address belongs to the physical page: [ 159.159732][ T1304] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807f158000 pfn:0x7f158 [ 159.169814][ T1304] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 159.178305][ T1304] memcg:ffff888032aaae01 [ 159.182615][ T1304] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 159.191109][ T1304] page_type: f5(slab) [ 159.195108][ T1304] raw: 00fff00000000240 ffff88801a84b3c0 ffffea0001fb5e10 ffffea0001588c10 [ 159.203679][ T1304] raw: ffff88807f158000 0000000000080006 00000000f5000000 ffff888032aaae01 [ 159.212250][ T1304] head: 00fff00000000240 ffff88801a84b3c0 ffffea0001fb5e10 ffffea0001588c10 [ 159.220907][ T1304] head: ffff88807f158000 0000000000080006 00000000f5000000 ffff888032aaae01 [ 159.229649][ T1304] head: 00fff00000000003 ffffea0001fc5601 00000000ffffffff 00000000ffffffff [ 159.238485][ T1304] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 159.247136][ T1304] page dumped because: kasan: bad access detected [ 159.253555][ T1304] page_owner tracks the page as allocated [ 159.259272][ T1304] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5863, tgid 5863 (syz-executor), ts 76302384156, free_ts 75435415786 [ 159.280657][ T1304] post_alloc_hook+0x240/0x2a0 [ 159.285422][ T1304] get_page_from_freelist+0x21e4/0x22c0 [ 159.290953][ T1304] __alloc_frozen_pages_noprof+0x181/0x370 [ 159.296744][ T1304] alloc_pages_mpol+0x232/0x4a0 [ 159.301575][ T1304] allocate_slab+0x8a/0x330 [ 159.306063][ T1304] ___slab_alloc+0xbd1/0x13e0 [ 159.310723][ T1304] __kmalloc_node_track_caller_noprof+0x2e4/0x4a0 [ 159.317129][ T1304] kmemdup_noprof+0x2b/0x70 [ 159.321618][ T1304] neigh_sysctl_register+0x9f/0xa80 [ 159.326804][ T1304] addrconf_sysctl_register+0xb3/0x1c0 [ 159.332277][ T1304] ipv6_add_dev+0xd46/0x1370 [ 159.336869][ T1304] addrconf_notify+0x794/0x1010 [ 159.341718][ T1304] notifier_call_chain+0x1b3/0x3e0 [ 159.346910][ T1304] register_netdevice+0x1608/0x1ae0 [ 159.352096][ T1304] nsim_create+0xae8/0xf10 [ 159.356502][ T1304] __nsim_dev_port_add+0x6b6/0xb10 [ 159.361592][ T1304] page last free pid 5863 tgid 5863 stack trace: [ 159.367901][ T1304] __free_frozen_pages+0xbc4/0xd30 [ 159.373001][ T1304] __put_partials+0x146/0x170 [ 159.377661][ T1304] put_cpu_partial+0x17c/0x250 [ 159.382410][ T1304] __slab_free+0x2b9/0x390 [ 159.386810][ T1304] qlist_free_all+0x97/0x140 [ 159.391386][ T1304] kasan_quarantine_reduce+0x148/0x160 [ 159.396835][ T1304] __kasan_slab_alloc+0x22/0x80 [ 159.401675][ T1304] __kmalloc_cache_noprof+0x1aa/0x3a0 [ 159.407036][ T1304] ref_tracker_alloc+0x133/0x460 [ 159.411962][ T1304] netdev_queue_update_kobjects+0x1d1/0x6c0 [ 159.417926][ T1304] netdev_register_kobject+0x258/0x310 [ 159.423377][ T1304] register_netdevice+0x126c/0x1ae0 [ 159.428561][ T1304] veth_newlink+0x5cc/0xa50 [ 159.433056][ T1304] rtnl_newlink_create+0x30d/0xb00 [ 159.438154][ T1304] rtnl_newlink+0x16d6/0x1c70 [ 159.442916][ T1304] rtnetlink_rcv_msg+0x7cc/0xb70 [ 159.447841][ T1304] [ 159.450157][ T1304] Memory state around the buggy address: [ 159.455767][ T1304] ffff88807f15df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 159.463815][ T1304] ffff88807f15df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 159.471870][ T1304] >ffff88807f15e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 159.479926][ T1304] ^ [ 159.485052][ T1304] ffff88807f15e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 159.493111][ T1304] ffff88807f15e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 159.501160][ T1304] ================================================================== [ 159.509303][ T1304] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 159.516589][ T1304] CPU: 0 UID: 0 PID: 1304 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 159.525635][ T1304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.535687][ T1304] Call Trace: [ 159.538967][ T1304] [ 159.541896][ T1304] dump_stack_lvl+0x99/0x250 [ 159.546503][ T1304] ? __asan_memcpy+0x40/0x70 [ 159.551108][ T1304] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.556375][ T1304] ? __pfx__printk+0x10/0x10 [ 159.560967][ T1304] vpanic+0x281/0x750 [ 159.564942][ T1304] ? __pfx_vpanic+0x10/0x10 [ 159.569455][ T1304] ? rcu_is_watching+0x15/0xb0 [ 159.574215][ T1304] panic+0xb9/0xc0 [ 159.577931][ T1304] ? __pfx_panic+0x10/0x10 [ 159.582354][ T1304] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 159.588255][ T1304] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 159.594161][ T1304] ? is_module_address+0x17/0xf0 [ 159.599093][ T1304] ? handle_tx+0x1ec/0x610 [ 159.603517][ T1304] check_panic_on_warn+0x89/0xb0 [ 159.608457][ T1304] ? handle_tx+0x1ec/0x610 [ 159.612869][ T1304] end_report+0x78/0x160 [ 159.617100][ T1304] kasan_report+0x129/0x150 [ 159.621587][ T1304] ? handle_tx+0x1ec/0x610 [ 159.626012][ T1304] handle_tx+0x1ec/0x610 [ 159.630265][ T1304] dev_hard_start_xmit+0x2d7/0x830 [ 159.635369][ T1304] __dev_queue_xmit+0x1b8d/0x3b50 [ 159.640390][ T1304] ? __dev_queue_xmit+0x27b/0x3b50 [ 159.645487][ T1304] ? __pv_queued_spin_lock_slowpath+0xa05/0xb60 [ 159.651725][ T1304] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 159.658311][ T1304] ? __pfx___dev_queue_xmit+0x10/0x10 [ 159.663683][ T1304] ? do_raw_spin_lock+0x121/0x290 [ 159.668714][ T1304] ? rcu_is_watching+0x15/0xb0 [ 159.673481][ T1304] ? do_raw_spin_unlock+0x122/0x240 [ 159.678702][ T1304] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 159.684684][ T1304] ? rcu_is_watching+0x15/0xb0 [ 159.689439][ T1304] ? rcu_is_watching+0x15/0xb0 [ 159.694207][ T1304] tx+0x6b/0x190 [ 159.697746][ T1304] ? __pfx_tx+0x10/0x10 [ 159.701890][ T1304] kthread+0x1cd/0x3e0 [ 159.706041][ T1304] ? __pfx_kthread+0x10/0x10 [ 159.711160][ T1304] ? __pfx_default_wake_function+0x10/0x10 [ 159.716961][ T1304] ? __kthread_parkme+0x7b/0x200 [ 159.721907][ T1304] ? __kthread_parkme+0x1a1/0x200 [ 159.726922][ T1304] kthread+0x711/0x8a0 [ 159.730988][ T1304] ? __pfx_kthread+0x10/0x10 [ 159.735569][ T1304] ? __pfx_kthread+0x10/0x10 [ 159.740149][ T1304] ? rcu_is_watching+0x15/0xb0 [ 159.744905][ T1304] ? __pfx_kthread+0x10/0x10 [ 159.749485][ T1304] ret_from_fork+0x47c/0x820 [ 159.754076][ T1304] ? __pfx_ret_from_fork+0x10/0x10 [ 159.759185][ T1304] ? __switch_to_asm+0x39/0x70 [ 159.764113][ T1304] ? __switch_to_asm+0x33/0x70 [ 159.768865][ T1304] ? __pfx_kthread+0x10/0x10 [ 159.773448][ T1304] ret_from_fork_asm+0x1a/0x30 [ 159.778204][ T1304] [ 159.781489][ T1304] Kernel Offset: disabled [ 159.785802][ T1304] Rebooting in 86400 seconds..