last executing test programs: 13m8.838600787s ago: executing program 0 (id=341): r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604110, &(0x7f0000000380)={0x0, [[0x6, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x8], [0x2000005, 0xfffffffc, 0x0, 0xfffffffc], [0x8006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]], '\x00', [{0x0, 0x610cfd08}, {0x3, 0xfffeffff}, {0x0, 0x1efb660a}], '\x00', 0x600, 0x0, 0x0, 0x700}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x20, 0x1411, 0x1, 0x70bd2d, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0x24040800) 13m8.687695317s ago: executing program 0 (id=342): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r1, 0x9}, 0x8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x40) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000100)={{0x0, 0xf, 0xa, 0x327, 0x5, 0x2, 0x9, 0xfff, 0x80, 0x14df7546, 0x5, 0x45683b2d, 0x2, 0x6, 0x3}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x2f, 0x36, 0x2, 0x5, 0xa, @private1, @private1, 0x80, 0x7, 0xfffffffe, 0xc24}}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xb4, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x98, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xae78, 0x40, 0x1, 0x6}, {0x7c, 0x0, 0x0, 0x9}, {0x5, 0x5, 0x23, 0x9}, {0x8, 0x9, 0x7}, {0x3, 0x1, 0x3, 0x10000}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x48000) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x14800, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r5, 0x80083314, &(0x7f0000000440)) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000480)={r1, 0x401, 0x2, 0x2, 0xe60, 0x8000, 0x101, 0x100, {r1, @in={{0x2, 0x4e24, @loopback}}, 0x6, 0xa0c9, 0x5, 0x4, 0x1}}, &(0x7f0000000540)=0xb0) lseek(r3, 0x0, 0x3) read(r5, &(0x7f0000000580)=""/102, 0x66) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000600)={r6, @in6={{0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}}}}, 0x84) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r3) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, r7, 0x100, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0xc000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r3) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x68, r8, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40004}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r9 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_UNIMAPCLR(r9, 0x4b68, &(0x7f0000000980)={0xbff, 0x6, 0x7}) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000009c0), &(0x7f0000000a00)=0x4) r11 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0xa) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000a40), 0x200, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r12, 0x8004550f, &(0x7f0000000a80)=0x1) socket$nl_generic(0x10, 0x3, 0x10) 13m8.636450915s ago: executing program 0 (id=343): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a001540", 0x20}], 0x1}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x7f) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x0, "0097ec0000206f0000a2263397400000060000000000400000aeb2e1e13d00"}}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x9, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x14) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="d8000000210081044e81f7d28344b904020000", 0x13}], 0x1}, 0x84) r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc038563b, &(0x7f0000000000)={0x5}) r4 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) accept$phonet_pipe(r4, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a001540", 0x20}], 0x1}, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) (async) ioctl$I2C_PEC(r0, 0x708, 0x7f) (async) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x1, &(0x7f0000000000)={0x0, "0097ec0000206f0000a2263397400000060000000000400000aeb2e1e13d00"}}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x9, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x14) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="d8000000210081044e81f7d28344b904020000", 0x13}], 0x1}, 0x84) (async) syz_open_dev$video4linux(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc038563b, &(0x7f0000000000)={0x5}) (async) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) (async) accept$phonet_pipe(r4, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) (async) 13m8.444153921s ago: executing program 0 (id=345): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000c9d6eeff6fde42ea7742778cfac803cfaff72a0e49e6baca4f53bc02df41724936803f32c421607f3c43b49b5a6b1d34a2c80f8af20078b3731abb1ffb0a903a6fb7764b73959ffbfd405900184da529d051307a059b5e0a7e7c9e53c32bc993eda8628e1c384317f24fadd3b2", @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf25010000000800030001000000"], 0x1c}}, 0x4801) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x2, 0x10010, r0, 0xf9d96000) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) close(r2) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r3, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x2, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x0, 0x2, 0x0, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0xffffffff, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r3, 0x0) getdents64(r3, &(0x7f00000006c0)=""/4123, 0xffffffffffffff71) 13m8.4223943s ago: executing program 0 (id=346): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_VOLTAGE(r1, 0x6f43, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'macsec0\x00', &(0x7f0000000100)=@ethtool_cmd={0x26, 0x488, 0x6ec8, 0x2, 0x4, 0x8, 0xd, 0x6, 0x4, 0x8, 0x7, 0xfff, 0x101, 0xff, 0x3, 0x10, [0x0, 0x99]}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r3) syz_usb_connect$cdc_ecm(0x1, 0x75, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x1, 0xff, 0x80, 0x40, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xd5, {{0x7, 0x24, 0x6, 0x0, 0x0, "d8d1"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x6, 0x6, 0x1}, [@ncm={0x6, 0x24, 0x1a, 0x800, 0x3d}, @network_terminal={0x7, 0x24, 0xa, 0x6, 0x9, 0x1, 0x8}, @acm={0x4, 0x24, 0x2, 0xd}, @mdlm={0x15, 0x24, 0x12, 0xf}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x80, 0x8, 0xf5}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x0, 0x20, 0x40}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xc, 0x81, 0x5c, 0x10, 0x7}, 0xef, &(0x7f0000000100)={0x5, 0xf, 0xef, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x7, 0x5, 0x6}, @generic={0xe0, 0x10, 0x4, "6f3f04ff9cb4442a1bfac50c4275fb0b5cbe1d052dead6210eb8e9cd8d6ab75a67cabc769666bbe5b054cd831d1f8b4c61ef6dc533b43c1a62fd12bbfebecef66d2c23bc5068eb15f09c143d5e36e064761071b23044f9865cf5782b2a7d6f90e61575910f0ea9c8c7de7b6858c2fb9f7d590a6d7244335497906de5867a8344b7da13672353aca0f333a4b1af77dba1e42d3238bc5612f2424aca71ac6045eb7bc266d36bd0b77aa0c7310b5c6667296c309eb58c2d913dbe1a78ea76fdbc82f2b941c958d5dd17e588642dc10a8f4d920bb44f57c4bf39df19e09e92"}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x41c}}, {0x4a, &(0x7f0000000240)=@string={0x4a, 0x3, "664e12590c164b11703d377efb4dcea42361557b1cfeb5c3eb3d76dfec8fbe0bab501533d6f681bf155d2bc44ebba4cf356322ecb2fe4b70d5374e2bd11972c3c1e0738ecf14d317"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x430}}]}) syz_usb_connect$uac1(0x1, 0x0, 0x0, 0x0) 13m6.722991288s ago: executing program 0 (id=352): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000740)="a195b3240ec39173a323be91f18473a770ce46a29efd3ce571d826ca2e9a8d504612fa3e700184c29a7e94efb9909b30f42838a86c56e81149ab93355af5c29a56eeff04d4feef014fc594b4a66ff84a5b8fc7d96c7d384e66e12db269104f8b383abc0c03198efa698e70077685cedd2b5b796089d38dbb52812a9ac9", 0x7d) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)="c4e4ebadc9b086f45b76faa7723028e99aba57c461160f161e7f9638fd411d1317f39c149a34ec0fa6bdb2090f2bdbc82d7433ecb85292e78d9e6beedbb873007ec16519dd1ed60ed402ef2c5a2a435b4958905b8ecd05a4cb3a5dc27a2588a180f657b2ca8ff49bc8a3f89d6a6abe3e2906b7f068ed2d126474b8d098a4416ae0687b6687b938fc9a5b8be224c7739002a176ce4066173ebab0855d79e5f1bd8288cef28e4a084781a831f056417ecbbed64f8e0843afe95c683e62a4eadfddf1c6413f2538008dc895083d618ba241314cfba9115960e56ef6043d05e3ec4b82f9c4bd6b870c382c1e9f", 0xeb}, {&(0x7f00000002c0)="669b7e797aefb81598ca46e63137fc3d978e97990bad46a03cd76dc49164ad6a3c3c83a5cfac02eea3fa8442c44dbd4670e46a8514640e1db17abb02ad872747239703c96efc2c2beb39127ba7f68ad0fa681499622b77a6cb685e0e03dd2890ae7003a89e072440cf338d414b5bdb40cf8d627a5045d2c2ba9581e13d3232b9505a21ed409f56fec567b0e6bda7bedb6b7d70e4118afd1596fff7037e842d4b1dcc38224998ebd604ac974710d4ab4bd217497cb22f7502378acb0c4727f716dc", 0xc1}], 0x2, &(0x7f00000003c0)=[{0x30, 0x0, 0x5, "2e16971f6d7601ffadea8fe4d65ec0aff90133b83da747402c33"}, {0x100, 0x110, 0x5, "1599704b0a594d9c4cfe9232569db4b91fd7b6051afda0dbd803852f881c360551169e2032b58e4cbffb05fc931e4dc66d38386155922dc4b5cacedbbaab153deb825e0ed7687187e9b78e3b1d44907ac97c4ae2ffe8d3da2e9574524848787538297051d459a48d18220bddd4fa8fd9bbd63d48e14332ec5c6c5d1b3f674e2f7c7255ef5668b7aa352aa987e8bd8c03296a48ba3fb15be1d8d81518193a744fcd684dbe02dad4430d6b2463efcdd299a398f2a4d1cadd8ffd239d62f2593ca04b9c8d9d3c27b6c1e4d8af86736bffefa71b6fdad740fd7aa603c528cfc24c80b85da193e05032a160f1608ab79981"}], 0x130}, 0x24000104) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xa800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xe) r5 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000080)=0x1, 0x4) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, 0x0, &(0x7f0000000040)) ioctl$TCFLSH(r4, 0x540b, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x14, r3, 0x301, 0x0, 0x0, {0x34}}, 0x14}}, 0x15) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r7, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffda0, 0x82}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x128, r7, 0x4, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x128}, 0x1, 0x0, 0x0, 0x860}, 0x20008004) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=unix,', {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'trans=unix,'}}]}}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x80, 0xa5, 0x54, 0x40, 0x5a9, 0x8065, 0x4196, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6f, 0x0, 0x0, 0xbc, 0x86, 0x82}}]}}]}}, 0x0) syz_usb_control_io$lan78xx(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$rtl8150(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r8, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000100)={0x0, 0x13}, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x40, 0xa0, 0x4, 0x62}, &(0x7f0000000300)={0xc0, 0xa2, 0x2f, "34c439e36742577c26bef53664e63ba735ba158bef2d1d20289a5db712f4d9eea48b5475306d97ea1ad9cfe91adfad"}}) 12m50.936837875s ago: executing program 32 (id=352): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000000740)="a195b3240ec39173a323be91f18473a770ce46a29efd3ce571d826ca2e9a8d504612fa3e700184c29a7e94efb9909b30f42838a86c56e81149ab93355af5c29a56eeff04d4feef014fc594b4a66ff84a5b8fc7d96c7d384e66e12db269104f8b383abc0c03198efa698e70077685cedd2b5b796089d38dbb52812a9ac9", 0x7d) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000140)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, &(0x7f0000000000)=[{&(0x7f00000001c0)="c4e4ebadc9b086f45b76faa7723028e99aba57c461160f161e7f9638fd411d1317f39c149a34ec0fa6bdb2090f2bdbc82d7433ecb85292e78d9e6beedbb873007ec16519dd1ed60ed402ef2c5a2a435b4958905b8ecd05a4cb3a5dc27a2588a180f657b2ca8ff49bc8a3f89d6a6abe3e2906b7f068ed2d126474b8d098a4416ae0687b6687b938fc9a5b8be224c7739002a176ce4066173ebab0855d79e5f1bd8288cef28e4a084781a831f056417ecbbed64f8e0843afe95c683e62a4eadfddf1c6413f2538008dc895083d618ba241314cfba9115960e56ef6043d05e3ec4b82f9c4bd6b870c382c1e9f", 0xeb}, {&(0x7f00000002c0)="669b7e797aefb81598ca46e63137fc3d978e97990bad46a03cd76dc49164ad6a3c3c83a5cfac02eea3fa8442c44dbd4670e46a8514640e1db17abb02ad872747239703c96efc2c2beb39127ba7f68ad0fa681499622b77a6cb685e0e03dd2890ae7003a89e072440cf338d414b5bdb40cf8d627a5045d2c2ba9581e13d3232b9505a21ed409f56fec567b0e6bda7bedb6b7d70e4118afd1596fff7037e842d4b1dcc38224998ebd604ac974710d4ab4bd217497cb22f7502378acb0c4727f716dc", 0xc1}], 0x2, &(0x7f00000003c0)=[{0x30, 0x0, 0x5, "2e16971f6d7601ffadea8fe4d65ec0aff90133b83da747402c33"}, {0x100, 0x110, 0x5, "1599704b0a594d9c4cfe9232569db4b91fd7b6051afda0dbd803852f881c360551169e2032b58e4cbffb05fc931e4dc66d38386155922dc4b5cacedbbaab153deb825e0ed7687187e9b78e3b1d44907ac97c4ae2ffe8d3da2e9574524848787538297051d459a48d18220bddd4fa8fd9bbd63d48e14332ec5c6c5d1b3f674e2f7c7255ef5668b7aa352aa987e8bd8c03296a48ba3fb15be1d8d81518193a744fcd684dbe02dad4430d6b2463efcdd299a398f2a4d1cadd8ffd239d62f2593ca04b9c8d9d3c27b6c1e4d8af86736bffefa71b6fdad740fd7aa603c528cfc24c80b85da193e05032a160f1608ab79981"}], 0x130}, 0x24000104) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xa800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xe) r5 = socket$unix(0x1, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000080)=0x1, 0x4) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, 0x0, &(0x7f0000000040)) ioctl$TCFLSH(r4, 0x540b, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x14, r3, 0x301, 0x0, 0x0, {0x34}}, 0x14}}, 0x15) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r7, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffffffffffda0, 0x82}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x128, r7, 0x4, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x128}, 0x1, 0x0, 0x0, 0x860}, 0x20008004) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=unix,', {[], [{@smackfstransmute={'smackfstransmute', 0x3d, 'trans=unix,'}}]}}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x80, 0xa5, 0x54, 0x40, 0x5a9, 0x8065, 0x4196, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6f, 0x0, 0x0, 0xbc, 0x86, 0x82}}]}}]}}, 0x0) syz_usb_control_io$lan78xx(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$rtl8150(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)={0x0, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r8, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r8, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000100)={0x0, 0x13}, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x40, 0xa0, 0x4, 0x62}, &(0x7f0000000300)={0xc0, 0xa2, 0x2f, "34c439e36742577c26bef53664e63ba735ba158bef2d1d20289a5db712f4d9eea48b5475306d97ea1ad9cfe91adfad"}}) 12m12.158142343s ago: executing program 2 (id=612): futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb1003fff) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000100)={0x400000000000027d, &(0x7f0000000000)=[{}]}) 12m12.053292839s ago: executing program 2 (id=613): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000a98000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x2000, 0xd000, 0xc, 0x0, 0x7, 0xee, 0x11, 0xfe, 0x0, 0x0, 0x8, 0xeb}, {0x4000, 0xeeef0000, 0xa, 0x7, 0x5, 0x7, 0x4, 0x14, 0x0, 0x38, 0x8, 0x3}, {0xffff1000, 0x2000, 0xb, 0xc, 0x26, 0x8, 0x81, 0x3, 0x80, 0x4, 0x1, 0x70}, {0xa000, 0x5000, 0xc, 0xfe, 0x29, 0x5, 0xc3, 0xfb, 0x0, 0x2, 0x0, 0xe}, {0xb000, 0x80a0000, 0x8, 0xff, 0xf, 0x9, 0x6, 0x7, 0x5, 0x6, 0x28, 0xfc}, {0x4, 0x10000, 0x9, 0xb9, 0x3, 0x6, 0x42, 0x7, 0xb0, 0x1, 0xfa, 0x10}, {0x100000, 0x0, 0xe, 0x1, 0xc, 0x8, 0x2, 0x62, 0xe4, 0x1, 0x17, 0x5}, {0x1, 0x4000, 0x0, 0x21, 0xc, 0x8, 0x9, 0x9, 0x6, 0x8, 0x43, 0x3}, {0x54000, 0x5}, {0xeeee0000, 0xa}, 0x60000000, 0x0, 0xeeef0002, 0x200, 0x2, 0x901, 0xeeee0c00, [0x1, 0x1003, 0xd, 0x9]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4000000040000100f1ff0700040000d2e15bbecfe336219964e076ff09fe870001f8070000000000000001801800108014000880100012800c00d93405000000"], 0x40}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file2\x00', 0x1) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f0000000000)={0x7, 'veth0_to_team\x00', {0xf}, 0x6}) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="dc010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d42b000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001c96000000000000000480001"], 0x1dc}}, 0x0) 12m11.787831034s ago: executing program 2 (id=614): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xf) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x11c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASK={0xec, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0xfe}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0xfffffffffffffdad, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_MASK={0x10, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x4}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000100)=0x9) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, &(0x7f00000000c0)=0x8) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 12m11.689485279s ago: executing program 2 (id=615): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x4, 0x114e51ea1ec33d17) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000040)={0x0, @aes128}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$nfc_llcp(r1, &(0x7f0000001380)={&(0x7f0000000100)={0x27, r2, 0xffffffffffffffff, 0x2, 0x6, 0x0, "456086fe252d60c60a169eb0aff5556c5108ceb53af8c5ac0daa429c76acef551dc065c5f7d9ea6e12fd833f7977c8ad9888777cdb672032cab540d857a2bd", 0x34}, 0x60, &(0x7f0000001240)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="1dac541718ca7741b98bf27d6342233256920d18d3ac5bcb8b72ce7a2595483855f047cc2e1a53d882aa639b7fb98584491c7907061a33cdcf69700919aa3d64bb3a8ab0f797ebf7a47937194598debca66d35822a8e1433f5c4c1b1b13d5cfb3f4b9c74031624b9c96c4e7ed282e0891e49ff16e29a42305e56ec5d59b484002a7a525765c533ed139317dc055f54990cd2bae120721d5a", 0x98}], 0x2, &(0x7f0000001280)={0xc8, 0x1, 0x3, "6dd56b058adb44b1866e48f8f0286c34c9f5bb2e801aafa853ef64cbf829e85e0f924f4a81b83f77237bd1733406307b68798c5bd162963868827875cdfaddb7bf2d639d2e1cd88c8d07f168266b19445482a1c0038702f3adfd37c0191ccc47bbf8f7b009fab35f6f8d01713ff521ee16f82a093db53cadffc1cd496fad289c751f21880f7de04c201d0b79218012f11a1aaa70ba647c891d3d40c844cf61610d5e74f31074eec1743956f8537b7834382a"}, 0xc8, 0x8190}, 0x20080050) (async) ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f00000013c0)) (async) pipe(&(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_BLKSECTGET(r3, 0x1267, &(0x7f0000001440)) (async) r5 = fsmount(r4, 0x1, 0x4) ioctl$SCSI_IOCTL_STOP_UNIT(r3, 0x6) (async) r6 = syz_open_dev$sg(&(0x7f0000001480), 0x81, 0x0) ioctl$SG_EMULATED_HOST(r6, 0x2203, &(0x7f00000014c0)) (async) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000001500)=0x9) r7 = socket$phonet(0x23, 0x2, 0x1) sendmsg(r7, &(0x7f0000002900)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x2, 0x3}}, 0x80, &(0x7f0000001840)=[{&(0x7f00000015c0)="ffb21dcf1d9296817ff9a99acdcb002afb903f7ef44ad4594a8a772cf57922404aa2e25f25218e6aae072724d6b9758d61af6c24", 0x34}, {&(0x7f0000001600)}, {&(0x7f0000001640)="f784326c7b3fecaffd063fa6712135dd4a98e2734f021340996dd51fbe603c5038083946c2327bba265a92e5ab106c46f075f1b6194bfd130bbc9cd41c071cfc155d10c1c4ff85f56bcff984aef382cabd24493a4298f8ab681a368ec6d5042b284cc383348ad6627b2e6719e0ddb2bf76885e175d9d089b865791746a81dd661ce67468fc6c6c8cbc0f3241cfca497dedc0c45feff0d8567705df8f", 0x9c}, {&(0x7f0000001700)="9eb4471721327418afef7553b652d42ea702e491e96215f1ae04f9f1024439547de6201d4490fe73c0a446430305c7bcd346038ea3056a79b0398b181683bfedb3c29f55fc4b1ad9a3e32fe2bf42fe42a99a0a7b40fada80c2c55d319955949a2970a1b0318bd8239917ee9d8eb86a5d0e5b25e7d09b9817793c05f7a8ccdc3b7931cd39a377d70507ed96a49539db2d840b3100ea4fbce6db2ab35b0324a0315a5de8a0faf4ce87ab13cc8ae643c92fb972357e99d141", 0xb7}, {&(0x7f00000017c0)="88db73a62e0673e5d7cfbaf4a71482c8a55afed396", 0x15}, {&(0x7f0000001800)="87c1b793a97997d7b484606d5c56e6f7a1af2cb22f8592e1c86680bdba3b6fea6bdcfac85d8f03304f7559967f3495447e9fc1d9e1d36e43", 0x38}], 0x6, &(0x7f00000018c0)=[{0x1010, 0x115, 0x5, "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"}], 0x1010}, 0x81) (async) r8 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000029c0)={'syztnl2\x00', &(0x7f0000002940)={'syztnl1\x00', 0x0, 0x29, 0xf, 0xbe, 0x7, 0x15, @ipv4={'\x00', '\xff\xff', @loopback}, @empty, 0x7, 0x700, 0x8, 0x15a5}}) (rerun: 64) connect$packet(r8, &(0x7f0000002a00)={0x11, 0x1b, r9, 0x1, 0x9, 0x6, @random="461cef4a5943"}, 0x14) (async) ioctl$sock_inet_SIOCGIFADDR(r7, 0x8915, &(0x7f0000002a40)={'nr0\x00'}) write$RDMA_USER_CM_CMD_REJECT(r3, &(0x7f0000002a80)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x9, "dff27f", "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"}}, 0x110) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, &(0x7f0000002bc0)={0x2780000000000000, 0x2000, 0x5, 0xd, 0x2}) (async) unshare(0x10010200) (async) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000002c00), 0x4) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000002c40)={0x0, @in={{0x2, 0x4e24, @local}}, 0x4, 0x3, 0x4, 0x7, 0x80, 0x0, 0x80}, &(0x7f0000002d00)=0x9c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000002d40)={0x6, 0x81, 0x6, 0x8, 0x9, 0x2, 0x6, 0x9, r10}, &(0x7f0000002d80)=0x20) unshare(0x10000) (async) setsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000002dc0)=@int=0x3, 0x4) (async, rerun: 32) writev(r7, &(0x7f0000002f80)=[{&(0x7f0000002e00)="0e1a0621995b0b10246c3807e0efd5bd577ff5da11a3319b5cdb6e16e32616d977530e9f6623da8ac7a44f700420176c75b9875970153e969b89813871992311f307cd2b3be1bcbe50ba23eae629aac38ec5b49c48d02f34dd3daa067a8dffc9f902116ab7fe8aedf3d55273ea937484fa91c4b9ae498084bf49b66679254986c56f9e08050e373339feb3ce13", 0x8d}, {&(0x7f0000002ec0)="66043845a0f000e76500d86131fec17407fb3e4c1d117c9c01706f2b0528b6147525fff4ee454354a6a17864ddcc9efc653109fc5c0e9aefe4b012a0ae3f30935c9dff7f7519000ff2bca6fc23b881fb84039f4248fef7c28f3d63a306e0ac0722cab0c717176d5994d9321daa4885ca333e9653abbd9d7fa8a2d23cc88824a1874a4535c9ad983b4bdd492f6e260593b85eafe814848dc1135371f6c87f1d53567bbcb12bf4a5", 0xa7}], 0x2) (async, rerun: 32) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000003000)={0x4, &(0x7f0000002fc0)=[{0x8, 0x10, 0x0, 0x37}, {0x3, 0x1, 0x3, 0x5}, {0xff, 0xf7, 0xb8, 0x9}, {0x0, 0xf8, 0x4, 0x40}]}) getsockopt$bt_sco_SCO_CONNINFO(0xffffffffffffffff, 0x11, 0x2, &(0x7f0000003040)=""/200, &(0x7f0000003140)=0xc8) 12m11.524049819s ago: executing program 2 (id=616): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x48a82, 0x0) write$sysctl(r1, &(0x7f0000000100)='0\x00', 0x2) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0x5, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000380)="b44cd15403e78faa8518a721d21061352e9c0a0431a923795e87778792edada8dcdcee9596f8b17f5a1b02496402a811b31a9dd8c29d31a0a9d6bd2b591803532fea1cfffffeff0a4c302d05742d998e0000eecfff03b36b8c926578cd83bb1bda90b6532b85ee2a17dc662016d6592dce62eb8d897308960db85af207d95c318606f95db17d4cf72cb1c2cc9b9d3141b307eccaf2edfa69bf5a4033f7b4570ba9bed05008f04959", 0xa8, 0x4000, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x80000000}, @timestamp, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @window={0x3, 0xc, 0x4}, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405668, &(0x7f0000000040)={0x0, 0x0, 0x5, "bc14aeda40bf0077cbe19aaf0d01000003000000000000000000001800"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@flushpolicy={0x38, 0x12, 0x105, 0x4, 0x25dfdbff, "", [@address_filter={0x28, 0x1a, {@in=@local, @in=@private=0xa010100, 0x2, 0x6, 0x10}}]}, 0x38}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 12m11.224086624s ago: executing program 2 (id=617): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x346e, 0x40000060, 0x100007f, 0x1b, "9f940b3491d052d172e0e573229ac6de50806c"}) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}], [{@fsuuid={'fsuuid', 0x3d, {[0x30, 0x33, 0x64, 0x39, 0x65, 0x36, 0x7, 0x33], 0x2d, [0x30, 0x65, 0x37, 0x61], 0x2d, [0x36, 0x64, 0x66, 0x34], 0x2d, [0x31, 0x0, 0x35, 0x65], 0x2d, [0x0, 0x32, 0x35, 0x5b, 0x65, 0x63, 0x63, 0x38]}}}, {@permit_directio}, {@pcr}]}}) 11m56.26707309s ago: executing program 33 (id=617): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000000c0)={0x0, 0x346e, 0x40000060, 0x100007f, 0x1b, "9f940b3491d052d172e0e573229ac6de50806c"}) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_u}], [{@fsuuid={'fsuuid', 0x3d, {[0x30, 0x33, 0x64, 0x39, 0x65, 0x36, 0x7, 0x33], 0x2d, [0x30, 0x65, 0x37, 0x61], 0x2d, [0x36, 0x64, 0x66, 0x34], 0x2d, [0x31, 0x0, 0x35, 0x65], 0x2d, [0x0, 0x32, 0x35, 0x5b, 0x65, 0x63, 0x63, 0x38]}}}, {@permit_directio}, {@pcr}]}}) 11m53.894467502s ago: executing program 3 (id=679): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x1000010000, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000000)={0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) tee(r1, r1, 0x100000001, 0x6) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x1000, 0x7, @value=0x3}) 11m53.598785512s ago: executing program 3 (id=680): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d14"], 0x200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a00", 0x3c}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, 0x0, &(0x7f0000005280)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000008c0)="e8700e444d50a969ff67347c780b0000ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1eceb18fd6c97f67a4208b01d94a792e9ead346463000000000000157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060000000000000000", 0xdc}], 0x3, &(0x7f0000000cc0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x80, 0x117, 0x2, 0x69, "8213c7c24f78a9aa8fe341897ba4ffac8b2e56f426062aea32e5a1c92377e6a059468f8b0d3a04a4814363892c6969fe346c6b717d7fd3408b76d1342f7e3fe2f138bbf35cd181f1b2c4fd1fe0fe478dbfe8be04b50e9f88d57dd3b9d061d804d90ce6688aed1d6654"}, @iv={0xb0, 0x117, 0x2, 0x98, "cff155374b6b1b9b42827f3fb37def2f59f2a06daff3c986aca4a5c407a53a8516f6ee16ab69bd3541a0453d6def3b4d74dcda6130438e04b991b30e2641d78f4d5adf065c1ec604c6de2a6486ff6a81fac7aa96f822c6f2dcd1aeae275899eab81bae1cabd16c83f84e964d73f6f1e4e6c84dbeb44dda47b7887907dea8cd6a0a8d7c694881b2531499f5213bca9bc80bb58ae36bff008e"}, @op={0x18, 0x117, 0x3, 0x1}], 0x178}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000600)=""/96, 0x60}], 0x2}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="0013ef0000008d6b9b89e9d4255f6d454c9efba5f05d0cbe0808fe039463fba8044a8f794870af289649c74f4cc052a1b424ba04f85f7addfd25b62b5036ae0c7056101ba50070a3de1f0e5733302dce0eed7e8d5107000000b1f26dcc1de74895d50309a06239f75e6e1b41054b6861007b186ca5ea18ef19a51d8b99abb628732536f176cd591319ccc9c2fa3046621255a440df12ab438c8425e45cdb236e1868209f8c7eb3d849e9a856ea47e890dbddd126c324d567d0ccb1f4ad2ba2f24df03c4c358b972d23d61221d46ad499560900000000000000506aa5933a7e647a2d5d6a35008c8807d6"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000200)=ANY=[@ANYBLOB="2034a6501e38efb6a231ae0757f443fe0beee37234d02932e3bf68e562672000"/45], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 11m50.977244075s ago: executing program 3 (id=687): r0 = syz_usb_connect(0x3, 0x5d6, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0xf1, 0xd0, 0x63, 0x40, 0x16d8, 0x7003, 0xd89, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c4, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x68, 0x8b, 0xa, 0xce, 0x74, 0x35, 0x14, [@uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x8, 0x1, 0x5, 0xf, "7849a899"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x622, 0xb29, 0x5, "096ffeb1c08009ad6c"}]}, @generic={0xea, 0x4, "50db079671f9d30004aecfbdabd5befb3a3161211091ea6ee88a114867e04003a895699a8fc2758233743ae45613edd2b5df65b809042f5ef85e1e67ceefa7fe1016f69843d68ad0698b006f23a68c360db4fe9c64b6430e745d088d47b2151c28bf655ec652b5bc34dc97affc72d777bb016f49abf5e04f4ebb0c2fb937a1c4427d8179c1ee521adfaa92445723bf302940109073af59f5b16dca768f8f76ac69c8e4a09eec99d1228f55bda2eb9adec5f58f3afb855f9e85fca778a38fb8601557a3a78c5f93b94b99ad62ff3fa1cf92c03e746a48834569a42681c34834eae40c18679ab802bf"}], [{{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x2, 0x45, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0x6}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0xa6, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7f}]}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0x7, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x180, 0x7, 0x8000}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x6, 0x6, 0x5, [@generic={0x2f, 0x30, "ac6eececa671bbd71c091258b57c0cf0353879ba553c81e68de9d887bfbad9d570a910cdbcc1b06a0d708ad5b2"}, @generic={0x6d, 0x10, "907e86ca3887b435160064ef38ba50d29364b843d7eda85bf1d7cc059a5312166fbebe9d8f6865038e7929e703595839548fe5655ed4868114a6f1bbfcde24cd24b78953ee6434bf3ed745679a89f6a360863f370eb382b416d3a3f0f258d39954e577ebac4c7e76a9e3c7"}]}}, {{0x9, 0x5, 0xf, 0x3, 0x65c, 0x40, 0x10, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x10, 0x8}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x1, 0x1, 0xf0, [@generic={0x8d, 0x22, "6fcc0585302c380e5f7fe46f9aa48a3df2bda20f2984fd5657e96bff1fd7a05afd51c8ad95e3c5f2cd6bd71fb1a142ec5040c7162be27fc84890d6a7eaa4b6f30e0179d94239b6cc5c4096d871b4f5ba661532f81e63a4d0cc8e8fb8ebf2a02892c75e142750a6672f2f6626a7138e5bb0d5b1ac68aa23e35ece3541f8620405cb6803e41c331e2893e67e"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfd, 0xa}]}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0xe1, 0x0, 0x9}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x3, 0x4, 0x8}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0x5, 0x7, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xb, 0xc1c}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x5}]}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x2, 0x0, 0x2, [@generic={0xf1, 0xa, "a819227eb3a88dcbb2a4632c36357c7c19a57bd3fd20592e564f29ec05d5fbeb15f39b82a43e9df2b2f739147add5b4b799c5dad991d9d11b0d90d80cb9f8712b726995893388ae7c2680f131b191f07d55d1b47dcb8105fd5f30024c3e7f8944b09ded46bd199992e4d1c25485164e97ddca6f0fbc72cd6a888ecbb9bf0ca2cc6ac8c284e8250f37868df478a232ab98367d9796200f80581540d69588b86d3dce2fe439b36c23bccaeff698d1813d0a97c14300d4baaded3eeec33d613246245482c6f422481457e8240beb4680e74ef043a8bc5719d237d2c01a6c0b3afb565d92d847c4709bef4e2f935af9cc9"}, @generic={0xe9, 0xf, "a8c31da920c84e5339486236f4f999993d37187bdde294827853a6deac48c2b4f0ec75dc4a366b741ee0c03eea9f02a58a5b8e5d886be94495909f308d40474ec676b04e90fde5dc7b231af75aff61cb32f476cbdbeba2be39b3f912ea995b4fb5c9423057a3f2c009ac8b502a48569253988cc05c645ac06a4941c444ea9ec9b7fdd21ee9b4d70950dc1d0539b85adb54274eef1ceb0217723f54073dfe002eb89d9b4c3e15c065231c876ca4e266e41438a07da150d767d1f313be677732d6962f0bf3f7753e415f91341907d662df8bdad38effda34b518651aa84a8b755d12df5e72dbf2ca"}]}}]}}, {{0x9, 0x4, 0x36, 0x4, 0x2, 0xff, 0x6, 0x17, 0x3, [], [{{0x9, 0x5, 0x0, 0x1, 0x400, 0x9, 0x0, 0x3, [@generic={0x101, 0xc, "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"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x4, 0x0, 0x5}}]}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x44, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459d") syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r2, 0x550c, 0x0) syz_usb_control_io(r3, 0x0, 0x0) 11m48.534461276s ago: executing program 3 (id=698): r0 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x84000, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000b40)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109025c000201fe007d0904000001020d0000052406000105240000000d240f0102000000080000000006241a00200009058145"], 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)="5c00000014006b03c84e21008bf32c19021800f80200000044000200caa8def8489a407592ad90531c9aa5ac14140a50c40a1da444ea138a2e6b5f3705251e6182949a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f4d4c8a0c87337", 0x5d}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 11m47.171447373s ago: executing program 3 (id=700): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000034c0)={0x2020}, 0xcac) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x80c, 0x3, 0x1c, 0x7, 0x0, 0x10, 0x3, 0x8, 0x1, 0x9, 0xc, 0x2}, {0x6, 0x6, 0xa, 0xc1, 0x3, 0x1, 0x47, 0xf1, 0x7, 0xb, 0x44, 0x3, 0x3fffffffffe}, {0x7fffffff, 0x4, 0x1, 0x2, 0x5a, 0x9, 0x8, 0xf8, 0x80, 0x6, 0x3, 0x3, 0x4}], 0x800000}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44100010203010902bf0002010650000900000000020d001b052401082400a9b30d2d0f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) dup3(r1, r1, 0x80000) 11m46.811913293s ago: executing program 3 (id=701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000000010104000000000000000002000200240001801400018008000100e000000108000200e00000010c0002800500010000000000100005800a0001"], 0x48}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES8, @ANYRESDEC, @ANYRES32=0x0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) 11m46.332000698s ago: executing program 34 (id=701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000000010104000000000000000002000200240001801400018008000100e000000108000200e00000010c0002800500010000000000100005800a0001"], 0x48}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES8, @ANYRESDEC, @ANYRES32=0x0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) 11m16.059724931s ago: executing program 1 (id=827): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) (async) r1 = dup(r0) ioctl$TCSETS(r1, 0x5402, &(0x7f00000002c0)={0x4, 0x9, 0x101, 0x7ffffffd, 0xd, "1f05c76fc264ee98dd8a626b5e55c33b902e6c"}) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)={0x24, 0x2c, 0x107, 0x70bd28, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x2400c810) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)={0x24, 0x2c, 0x107, 0x70bd28, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x2400c810) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x4c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x230}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xff}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x24046890) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x5f) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020100030e000000fcffffff0400000005000600000000000a00000000000000fc01ff80000000000000000000000000000000000000000005000500000000000a0000002efcb098950a0ec00000000000000000000000aa0000000000000000020013"], 0x70}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='cramfs\x00', 0x208000, 0x0) (async) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='cramfs\x00', 0x208000, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) shutdown(r1, 0x1) (async) shutdown(r1, 0x1) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006) 11m16.008104772s ago: executing program 1 (id=829): read$dsp(0xffffffffffffffff, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x90009427, &(0x7f0000000180)) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000100)) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f023}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0000120000000000000063b9e7a900480000fc020000000000000000000000000001ff02000000000000000000000000000133080000000000000738000000000c"], 0x7e) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a24010100000000000824050503"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) 11m12.837143768s ago: executing program 1 (id=841): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r0) ptrace$poke(0x420f, r0, 0x0, 0x40) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) prlimit64(r0, 0x6, &(0x7f0000000000)={0x8, 0xab}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x8) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 11m12.647116543s ago: executing program 1 (id=842): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x0, 0x0, 0x7e03d424}) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r1, 0x8b2c, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00', 0x0}) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4000000000000103, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000400)={0x1, @pix_mp={0x0, 0x0, 0x33524742}}) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f0000000040)=0x2000) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="4c00088048000080200004000a004e2100000002000000000000000000000000000000010000000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c"], 0x68}, 0x1, 0x0, 0x0, 0x4009041}, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x22) prctl$PR_SCHED_CORE(0x3f, 0x1, 0x0, 0x2, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7, 0x0, 0x0, 0x7e03d424}) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) ioctl(r1, 0x8b2c, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg2\x00'}) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x4000000000000103, 0x2) (async) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000400)={0x1, @pix_mp={0x0, 0x0, 0x33524742}}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f0000000040)=0x2000) (async) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="4c00088048000080200004000a004e2100000002000000000000000000000000000000010000000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c"], 0x68}, 0x1, 0x0, 0x0, 0x4009041}, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x22) (async) prctl$PR_SCHED_CORE(0x3f, 0x1, 0x0, 0x2, 0x0) (async) umount2(&(0x7f0000000000)='./file0\x00', 0x4) (async) 11m12.502388797s ago: executing program 1 (id=844): r0 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x1, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x400, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24048000}, 0x40014) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f0000000180)={{0xa, 0x4e24, 0x6, @local, 0x3}, {0xa, 0x4e23, 0xd, @local, 0xa1e0}, 0x0, {[0x1, 0x4, 0xfc2a, 0xb, 0x9, 0x1ff, 0x9, 0x5]}}, 0x5c) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000200)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000240)) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000280), &(0x7f00000002c0), 0x2, 0x1) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000300)=0xfff, 0x4) r4 = accept4$rose(0xffffffffffffffff, &(0x7f0000000340)=@full={0xb, @dev, @netrom, 0x0, [@bcast, @rose, @default, @rose, @bcast, @bcast]}, &(0x7f0000000380)=0x40, 0x80000) ioctl$sock_rose_SIOCDELRT(r4, 0x890c, &(0x7f00000003c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x800, @default, @bpq0, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440), 0x8000) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r5, 0x4068aea3, &(0x7f0000000480)) sendto$inet6(r3, &(0x7f0000000500)="6ef368e7a462d035481c89b2442ff82b1635359e4cb2b9eb94ffcde8352785fd8e781b01616410710ec7ba33f212821af15902ef7318b1cc38c2002ed27c8014e58219ad5db77b08351a324474d715f7df8dfe0c76abcc1a61cfe4b97efdeab78e3edef85935e856bee5017a90fd2a5cc157acf418d00cb9205999aee261f9c87d9d3af2c6456d87bd4a7d5cced0a7f37ab88b4644b3bea74e588da3773f1728c192b8e6edfe799f8633489ab4430812b9743f", 0xb3, 0x20000000, &(0x7f00000005c0)={0xa, 0x4e23, 0x7, @empty, 0x8}, 0x1c) ioctl$KVM_RESET_DIRTY_RINGS(r5, 0xaec7) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000600)='/dev/comedi5\x00', 0x100, 0x0) recvfrom(r1, &(0x7f0000000640)=""/82, 0x52, 0x40000000, &(0x7f00000006c0)=@ieee802154={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x80) fremovexattr(0xffffffffffffffff, &(0x7f0000000740)=@known='trusted.syz\x00') ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000780)={0x3, 0xffffffff00000001, 0x7, 0x9, 0x1, 0x0, [{0x7, 0x5, 0xfffffffffffffffc, '\x00', 0x1}]}) ioctl$PPPIOCATTACH(r5, 0x4004743d, &(0x7f0000000800)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000880), r1) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f0000000c00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000008c0)={0x2dc, r8, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xbaf}]}, @TIPC_NLA_BEARER={0xf4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @mcast2, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}}, {0x20, 0x2, @in6={0xa, 0x65, 0x6, @local, 0x4}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xee}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xba3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc985}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x89}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_NODE={0xa8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1c, 0x3, "aefc4658f429fd86f21e7279bf7da61d5fd4cda82528fb75"}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "759599b9e8517fcd64b92cf226f805916c4ddb468c1e0cba11be8db7ca"}}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "7ad131543fb846fe2b8afb1c256d5b9a84ece3fcb5e38367"}}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff81}]}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3782}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x68d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x20004004}, 0xc081) ioctl$PPPIOCSCOMPRESS(r6, 0x4010744d) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000c40), 0xcb3fd82380337ec7) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r9, 0xc0a85320, &(0x7f0000000c80)={{0xe, 0x6}, 'port1\x00', 0x60, 0x40000, 0x7, 0x7f, 0x4, 0x5, 0x10001, 0x0, 0x4, 0x4}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), r7) sendmsg$TIPC_CMD_RESET_LINK_STATS(r7, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x30, r2, 0x300, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) sendmsg$NFC_CMD_DEV_DOWN(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) 11m11.530323231s ago: executing program 1 (id=845): ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r0, 0x8b598a4c6d8f8fc9, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r3 = socket$inet(0x2, 0x3, 0x2f) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x800, &(0x7f0000000f00)={0x2, 0x4e24, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48881}, 0x40) 11m11.152308286s ago: executing program 35 (id=845): ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r0, 0x8b598a4c6d8f8fc9, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r3 = socket$inet(0x2, 0x3, 0x2f) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x800, &(0x7f0000000f00)={0x2, 0x4e24, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r2, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48881}, 0x40) 6m45.840681505s ago: executing program 5 (id=2086): syz_usb_connect(0x0, 0x2f6, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xcc, 0x17, 0x5d, 0x8, 0x1b3d, 0x100, 0x3f6a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2e4, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa6, 0x0, 0x10, 0x72, 0x8, 0x6b, 0x0, [], [{{0x9, 0x5, 0x0, 0xc, 0x3ff, 0xf9, 0x7, 0x2}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x9, 0x0, 0xe}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0xf6, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x4}, @generic={0x2f, 0x4, "695c8a8ec8865d75423bf20fac43057bc59098a76dc4a24c189e8925f9b1504eb5b9d9d9989bb7d1a26f86b9ef"}]}}, {{0x9, 0x5, 0xc, 0x7, 0x200, 0xf, 0x3, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xff, 0xfffe}]}}, {{0x9, 0x5, 0x6, 0x8, 0x400, 0x7, 0x6}}, {{0x9, 0x5, 0x8, 0x4, 0x3ff, 0x5, 0xbc, 0x5}}, {{0x9, 0x5, 0x9, 0x0, 0x0, 0x9e, 0x80, 0x10, [@generic={0x71, 0xd, "e5cd45fa556d6396ba27ff2910c47df214bc322fc314e061fae9efa7057de73189a10c2546e437fed4d9aa325417c9abac3e0c40f375338f8297261231222246a0a132ccb93091840ca75888508382ad0614ac5c18b18252dfa71f42868e755ef48b7f66a4cb9294c49756502d947c"}]}}, {{0x9, 0x5, 0x5b7aab391be957ef, 0x10, 0xa6b9cb3383fc62b7, 0xd, 0x2d, 0x7}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x2, 0x7, 0x4}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x9, 0x2, 0x9}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x40, 0xfd, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x181, 0x2, 0x8}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x5, 0x7, 0x3, [@generic={0xa8, 0xf, "dfd18b912ce77d8c73ebfa8a3ff9e33bb2862193554ee10100580f297f96c28a56e09352ef0415b49a1381637b96574e729bf4d1eceab4cc56064f8c9a1d4238454c6cbb471a1fdb6a783652cdd66967b58fd387f9f8b90bb4bd0eb78c2f76a1e24c27bf968159e58559d2c064ac33fe4ce372b41f929b270e59086b4469befb43c748c1b678363f07eb86ac09498d83cd5fe438bb4726519a5e1ac98feec0578a0e969ba527"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x6, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x8000}, @generic={0xd7, 0x23, "056090ceccd015ed06b5794bf2d3de1cefcf47ae66810bca049f42d6d99dc635bc10ad740b97975a8fd298ca3bae6b699119431642d24b499dc6544286221d82e6357fa6f3e7c2720ef12d9facaa2669eddf34dfb5a3350235d00f37911ed5797313b0987e12dad273134329e6110f49ddc2f800e8cca780217189478e9ad48fc2f61c63c0f071f1c444113c2302c5a3d32ac3a6a22a32cdfed03b9144c51810188557c37dd063d0c9810f82c742237d67e8820a2545064d6d5b9be56ba44c0bf5c006792e758d95b02af67253c451ffbe72b7a96f"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x8, 0x4, 0x0, 0x2}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x6, 0x25, 0x4}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0xe, 0x7, 0x36, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x5}]}}]}}]}}]}}, 0x0) 6m45.184022794s ago: executing program 5 (id=2088): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f7b01acfe2222d", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xfffffffffffffeda, &(0x7f0000000740)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x0, 0x117, 0x3, 0x1}, @assoc={0x0, 0x117, 0x4, 0x4}], 0x30, 0x44}, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 6m45.111505045s ago: executing program 5 (id=2089): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000000c0)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x80}, 0x1, 0x7}, 0x4008081) 6m44.998561245s ago: executing program 5 (id=2091): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a60000000060a090400000000000000000200000034000480300001800e000100636f6e6e6c696d69740000001c000280080002400000000008000140fffff82408000240000000020900010073797a30000000000900020073797a32"], 0x88}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x19}}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x7}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x24004040) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSBRK(r5, 0x5427) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x1403, 0xf72c1c349d520077, 0x70bd26, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'hsr0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20088049}, 0x800) 6m44.822094631s ago: executing program 5 (id=2092): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x71) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000180)=0x9) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) (async) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000580)={0x0, 0x5, 0x1, {0xa, @raw_data="6d14610dfd30a74fe3b78e024184e4445939547ded0fdd1cd48ea83e06b3f9f9ca2ed9714abbeda901e196ac9163388168d67da8c2b20765e9332541ea5125e7f65b4ebdb2ea015b3499f8275f875e4ff4c6aa5d6548240de4b0312e0a41220762b49254c5a49ac78bc50ff43adfe77c4f629cf7e3b3203dd6c5dc0bb3816190c14ec0ae695502a6f3ba41fa55120f9bf94ab597f3a9c9af0c4b473fa3122a90650d581ed4563f3760d8df6907d47c3c6e8747fc280733f97e4432318b096699480ab4fda870ff47"}}) (async) pwritev(r2, &(0x7f0000000c80)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x9cecffd6a0c8846, &(0x7f00000003c0)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000100)={r5, 0x0, r4, 0x0, 0x80000}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000001c0)={r5, 0x0, r6, 0x7}) ioctl$NBD_DO_IT(r1, 0x127d) (async) syz_usb_connect(0x0, 0x61, &(0x7f0000000100)=ANY=[@ANYBLOB="120110010a41a140c4106289a1290102030109024f0002e00510080904550601b8501aff0905020410000d03770904ba68d5334e101000020706080b90799122627309050a0000040602068fd365db92b1762a"], 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x8, &(0x7f0000000040)=0x8, &(0x7f00000000c0)=0x4) ioctl$SIOCAX25NOUID(r2, 0x89e3, &(0x7f0000000380)=0x1) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640feffffffffffffffb94dcf5cc061c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) (async) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbca313a181002d000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) (async) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000480), 0x4) (async) ioctl$KVM_CREATE_PIT2(r10, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT(r10, 0xc048ae65, &(0x7f00000000c0)) (async) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x8, 0x80000, r1}) ioctl$HDIO_GETGEO(r12, 0x301, &(0x7f0000000080)) 6m44.175002462s ago: executing program 5 (id=2095): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r0, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x40010100, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) 6m29.441639771s ago: executing program 36 (id=2095): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r0, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x40010100, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) 44.867921636s ago: executing program 8 (id=3998): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0xf0, 0x1f, 0x0}) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'pim6reg1\x00'}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x8031, 0xffffffffffffffff, 0xc294d000) r2 = semget$private(0x0, 0x4000, 0x0) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000280)=""/237) r3 = syz_open_dev$hidraw(&(0x7f0000000340), 0x0, 0x2) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$vsock_stream(0x28, 0x1, 0x0) 44.442190288s ago: executing program 8 (id=4000): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x18, 0x0, 0x0) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) write(r1, &(0x7f0000000000)="b52f812c74aff617dd23c2046136e18d7de67af17752e3d374c3659ffa7bdfa6b8b910960ad21f1643392359a81caf0560760427473fe8067b5f3ba8a14fe8ddcedc52f4fb7cfdb94daef4596920b45333795520ccb17662a3f03d71e0bd9dedaf40893afffe48d7313b7ea5639efbfe985d26fb9d2bf311b6d2ada1647953015c045d595f3ea40b9fbc3befc9530cb26986d06338be3e426a63", 0x9a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005"], 0x60}}, 0x0) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x1, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r3, 0x2, &(0x7f00000002c0)={0x3}, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in=@dev={0xac, 0x14, 0x14, 0x21}, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4e20, 0xfffd, 0x4e22, 0x0, 0x1dfd53d30f2a1e90, 0x0, 0x20, 0x5e, r5, r6}, {0x500000000000000, 0x2, 0x7, 0x5, 0xfff, 0xc5f, 0xfffffffffffff801, 0xa5c}, {0x4e, 0x8, 0x9, 0x4}, 0x8, 0x0, 0x2, 0x1, 0x0, 0x1}, {{@in=@remote, 0x4d2, 0x2b}, 0xa, @in=@local, 0x3501, 0x3, 0x3, 0xb, 0xfffffffb, 0x3, 0xf4}}, 0xe8) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f00000008c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="cc050000", @ANYRES16=0x0, @ANYBLOB="20002dbd7000fcdbdf2589000000080003003bf5baaa576ef89c8509342e6e9456fb8da8ecbfaf3aabea5df44538a346725668033f88231a8f0bd3eb21f062f91fcbe905d3de986500537afd36e54ea3e958a60f1e1f8ea4369f9fbddae7f0dede6b1a2f37d1a9445442fde4624bcf4887ed4743a0d7a2f387c74547775197fa1aeef7e8239bdc4770004cab83", @ANYRES32=r4, @ANYBLOB="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"], 0x5cc}, 0x1, 0x0, 0x0, 0x4040810}, 0x24008081) 44.228030968s ago: executing program 8 (id=4002): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x10012, r0, 0x0) r1 = socket(0x22, 0x2, 0x24) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x101, 0x5, 0x1, 0x9}, 0x14) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000012c35b400304106098c60e0000010902120001000000000904"], 0x0) 43.596939168s ago: executing program 8 (id=4010): times(&(0x7f0000000000)) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0x1, 0xa000200000a958, 0x2000000009, 0x3, 0xf8, 0x48cd, 0xfffffffffffffffc, 0xfff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0xa8) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0xc) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x1010, r1, 0x9c000) times(&(0x7f0000000000)) (async) mkdir(&(0x7f0000000080)='./file1\x00', 0x8) (async) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') (async) chdir(&(0x7f0000000140)='./file1\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) (async) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x0, 0x1, 0xa000200000a958, 0x2000000009, 0x3, 0xf8, 0x48cd, 0xfffffffffffffffc, 0xfff}) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0xa8) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0xc) (async) mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000a80)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) fcntl$setlease(r0, 0x400, 0x1) (async) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) (async) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd, 0x1010, r1, 0x9c000) (async) 43.42277839s ago: executing program 8 (id=4012): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xa, 0x1) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0xa, 0x1) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0xc3}, 0x0, 0x0) (async) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0xc3}, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) (async) r2 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x18) setreuid(0xffffffffffffffff, 0xee01) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') (async) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) (async) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r4, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) recvfrom(r0, &(0x7f0000000040)=""/60, 0x3c, 0x102, 0x0, 0x0) 42.974112026s ago: executing program 8 (id=4016): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b", @ANYBLOB], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x8097, 0x8000000}) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x265, {0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r3, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r4, 0x401870c8, &(0x7f0000000000)) 42.710831369s ago: executing program 37 (id=4016): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b", @ANYBLOB], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r2, 0x0, 0x8097, 0x8000000}) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x265, {0x3, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r3, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r4, 0x401870c8, &(0x7f0000000000)) 7.447483449s ago: executing program 9 (id=4263): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04330a9cffffffffff03000000000000000c7bf8bf7ac00460448d16bca1df11391d1d5ffbd591f38d5d9d5d8940ff2fce5b8197915da015314fe582c5a89600ec826e8b757234bfb25f4ccc6c98a93abaf5bb50f3d7ee806abfb27886a5341fddb4458bb05af715a33d5a84f18160847bb85ed06fbd52b4290cb1e0fbd97ea8e923840f93b901c581da3136d58074017a376b6fff2b638fa205e60e59627d843f22aa40951864a893df3ff91a9edaa8135717c074f2d86fd496783455915395ca84b252dcdd6a08c7564497fdf9fbfa1067fc77fae6d162025a66c7b41952"], 0xd) ioctl$TCFLSH(r1, 0x400455c8, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x200000, 0x2, 0x0, 0x0, 0x96, 0x6}, 0x20) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 7.323702358s ago: executing program 9 (id=4266): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008ac75220cf106380d2d10102030109022400010000100009048800023e3f5c0009050a02200002000009058202", @ANYRES32], 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x8, 0x0, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x80000}) r2 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r1}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x74001, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'caif0\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f00000004c0)={r6, 0x3, 0x6, @broadcast}, 0x10) r7 = syz_io_uring_setup(0x3087, &(0x7f0000000540)={0x0, 0x7562, 0x1000, 0x3, 0x862f8, 0x0, r4}, &(0x7f0000000080), &(0x7f00000000c0)) close(0x3) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r8, &(0x7f0000000400)={&(0x7f0000000080)={0xa, 0x4e23, 0x1000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000140)='~', 0x1}], 0x1}, 0x40040) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) read$FUSE(r4, &(0x7f0000001740)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x80, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000300)={r3}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000000c0)={r3}) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents64(r9, &(0x7f0000000040)=""/27, 0x1b) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) 5.712206361s ago: executing program 4 (id=4281): ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x3, 0xffff, 0x80000082}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) syz_clone(0xa04000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)=""/88, 0x58}, {&(0x7f0000000100)=""/63, 0x3f}, {&(0x7f0000000140)=""/86, 0x56}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/68, 0x44}], 0x5, &(0x7f0000001580)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x1b}, {&(0x7f0000001300)=""/169, 0xa9}, &(0x7f00000014c0)=[{&(0x7f00000013c0)=""/11, 0xb}, {&(0x7f0000001400)=""/159, 0x9f}], 0x2, 0x24, 0x2}}, @mask_cswp={0x58, 0x114, 0x9, {{0x8001, 0x6}, &(0x7f0000001500)=0x100000000, &(0x7f0000001540), 0x8001, 0xf, 0x8, 0xfffffffffffffc41, 0x3c, 0x4}}], 0xa0, 0x4000804}, 0x4000) 5.420173509s ago: executing program 4 (id=4286): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, &(0x7f0000000080)) ioctl$TCXONC(r0, 0x4b3a, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aae0000002000000ee5b000000000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000010000100000000000000000000000a"], 0xf8}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x2}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7ee643bd1282d893}}}, 0xf8}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r4 = openat$vcsu(0xffffff9c, &(0x7f0000001700), 0x2000, 0x0) lseek(r4, 0x7b, 0x2) getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) getsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, &(0x7f0000000080)) (async) ioctl$TCXONC(r0, 0x4b3a, 0x2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aae0000002000000ee5b000000000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000010000100000000000000000000000a"], 0xf8}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x2}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7ee643bd1282d893}}}, 0xf8}}, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) (async) openat$vcsu(0xffffff9c, &(0x7f0000001700), 0x2000, 0x0) (async) lseek(r4, 0x7b, 0x2) (async) getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 5.185070796s ago: executing program 9 (id=4287): r0 = syz_usb_connect$uac1(0x2, 0x9c, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x86, 0x40, 0x46, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x3c}, [@mixer_unit={0x6, 0x24, 0x4, 0x1, 0x6, "17"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x304, 0x5, 0x5, 0x2}, @processing_unit={0x7, 0x24, 0x7, 0x1, 0x2, 0x2}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x2, "93"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x2, 0x4, 0x4, {0x7, 0x25, 0x1, 0x1, 0xed, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x27, 0x1, 0x0, 0x81}, @as_header={0x7, 0x24, 0x1, 0x0, 0x0, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0x5, 0xe5, {0x7, 0x25, 0x1, 0x83, 0x2, 0x64}}}}}}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x40, 0xf, 0xfc, {0xfc, 0x1, "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"}}, 0xfffffffffffffffe, &(0x7f0000000240)={0x0, 0xf, 0x49, {0x5, 0xf, 0x49, 0x5, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "3c0c1615db451dff4fd2977733a207d8"}, @generic={0x12, 0x10, 0x1, "d6775250937ea59970c83ee471e84c"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x5, 0x9, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0xbf, 0x2, 0x9, 0xf00, 0xb, [0x3f00, 0xff00f0]}]}}, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x10, 0x0, 0x5, "9a8d8923", "7106e104"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xac, 0x0, 0x8, 0xff, 0x3, 0x3, 0x3}}}, &(0x7f0000000840)={0x84, &(0x7f0000000380)={0x40, 0x16, 0xe8, "dd93dea68518edf933c8170a69db2991dc6b8a8a03f629269cf92f888433f06959ce242462f84bdfe46f8fa728dee39d74029abf652c5a286ceb8be036b0d2049b0adbb0050955b0609c4cb30a7ca22c5db6b8c9969d49a1a255deb21b418ffffa6cefa7f97ad92330c1aecc57f3c001c94c1c88ae9da90f5a2ba440fb824d54e6f856d33c9432cb08fdb9b4c89993771a909f08a66a0f9aebce297dbf9c267245a2167d0fc805bcde57d8fd3b1aa5f4f9816c728c681feb301dcfa575ed7799f35b7c043d316831646fffbc3a9af13d43ecc5df451feb025e1c9d72b11ea2eef1eb15b76fb404be"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x40}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x2c}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000540)={0x20, 0x0, 0x4, {0x8, 0x2}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x8}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0xf1}, &(0x7f0000000600)={0x40, 0xb, 0x2, 'A\r'}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000680)={0x40, 0x13, 0x6, @remote}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="2c945331fe58"}, &(0x7f0000000700)={0x40, 0x19, 0x2, "35b5"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x2b}}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x58, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x26}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "d3f1"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x20, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x58}}, 0x24000800) r3 = syz_open_dev$evdev(&(0x7f0000000900), 0xffffffffffffff7f, 0x440) ioctl$EVIOCSKEYCODE(r3, 0x40084504, &(0x7f0000000940)=[0xb, 0xc8]) 5.183038499s ago: executing program 4 (id=4291): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x0, 0x74, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3]}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}, {&(0x7f00000000c0)="efb11f0c274dde00bd1882c55825e68bd7eccf5a41c9bd7c8cc02847c67f558661642ee892386fe23f3ad5242bd87972577407fb1748c7608f0d895b98c3eb44d85d0529f430da671717de3607803b4fe23375cbe573708904ef2099bfca2c23", 0x60}, {&(0x7f0000000640)="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", 0x1000}], 0x3}, 0x0) 5.120168043s ago: executing program 4 (id=4293): openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) preadv(0xffffffffffffffff, &(0x7f0000001540)=[{0x0}], 0x1, 0x0, 0x10) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000340)=0x14) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f00000030c0)={0x40003, 0x0, {[0xfffffffffffffffc, 0x7, 0x1ff, 0x5, 0x4, 0x3, 0x214, 0x87d]}}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000000c0)="0f4a8705000f20c06635100000000f22c0baf80c66b82c05358366efbafc0cedf2af64f33ef466b9130a00000f32baf80c66b8a491078666efbafc0cedba2100b89600ef0f01c3650f09", 0x4a}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200000505000100070000000eeaa81eea2a2ee90b25b1eee79b5ab6df1d78c62a12a56400cddb7ca8"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 4.128281592s ago: executing program 4 (id=4296): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) getpeername$packet(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000500)="e7216f983693aa736f71d4", 0xb) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac008000200070002000600020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f60a84c9f4d4938037e786a6d00010", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000040)={0x0, 0xf, 0x3, "fbf037"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_control_io(r3, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000000b00)={0x20, 0x16, 0x2, "e49f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2082"], 0x0, 0x0, 0x0}) r5 = syz_io_uring_complete(0x0) write$cgroup_subtree(r5, &(0x7f0000000280)={[{0x0, 'cpuset'}]}, 0x8) r6 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0x4}]}, 0x54}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.386059315s ago: executing program 9 (id=4303): ptrace(0x10, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x240404, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) ptrace(0x10, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000300)={0x8, &(0x7f0000000280)=[{0x5, 0x80, 0x4, 0x5}, {0x3ff, 0x8, 0x7, 0xd}, {0x5, 0x4, 0x3, 0x5}, {0x4, 0x81, 0x6b, 0xfffffffd}, {0x5, 0xc8, 0x0, 0xc735}, {0x8000, 0x6, 0x44, 0x9}, {0x7ff, 0x6, 0xd, 0x4}, {0x7, 0x8, 0x9, 0xffffffff}]}) tkill(0x0, 0x3a) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000140)=0x100000001, 0x2) connect$inet6(r2, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="27dd10dd2e4fad0b886bf6fa04ebf2429908d64cae5251434ccd62257f7fb616adff427dbe9d76b910be7f92f93c3d499eb3065a0d58cc0124b0b7423e1d3eb4757839b4bb564fdc2af3"], 0x48}}, 0x0) r4 = fcntl$dupfd(r2, 0x0, r3) connect$unix(r4, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e22}, 0x6e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2b) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0xa32, 0x0, 0x1}]}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0041, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x4010001b) accept4(r7, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) 2.633964009s ago: executing program 7 (id=4308): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)={0x28, 0x11, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0x13, 0x0, 0x0, 0x0, @str='/dev/dri/card#\x00'}]}]}, 0x28}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000), 0x4) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r5, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x1000}, 0x8) ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000040)={0xc, 0x0, 0x1, 0x204}) socket$kcm(0x29, 0x7, 0x0) shutdown(r0, 0x1) 2.484230739s ago: executing program 9 (id=4309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e4ed, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x1, 0x6000006, 0x1c02, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x21c}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xa00}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x7f}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x374, &(0x7f0000000580)=ANY=[@ANYBLOB="d700004efb5c76d7445f9a8e05b7cdbb7fc9a0466a4766ea34ccccc08337b3a0218561b323ea79095d94ced08bb03f7320b00f1cb195af8387823c178cc1ada44ef65b8bc6957177dde2db2766b5aca76660297f2b0b130132bc4999be51959ece9ca37f9df3466abe385314d6fba25589586362a9fc9f93a95a2263bd2ce3c50e1ac3a414c56781daffac85cc25283a5c1a040772e1cb96446fafe7e46de79313d6cdd8c5d94776b780c3a7c06fc1a896ae8bba845d7f4ef6a2b9348d6fd7371c225ed2e549a82f36a46a8698709e05f72673604d96267b8a16e6000500004e"]) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) lseek(r0, 0x1ff, 0x3) 2.334377195s ago: executing program 6 (id=4310): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101200, 0x0) (async) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x88a, 0x0, 0x8}]}) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) (async) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x30000, 0x2, '\x00', 0x654}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.311813322s ago: executing program 7 (id=4311): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x7c, 0x6, 0x31, 0x20, 0x77d, 0x410, 0x3afa, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x5a, 0x0, 0x1, 0x84, 0xda, 0x28, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000ac0)={0x14, &(0x7f0000000980)={0x20, 0x22, 0x100, {0x100, 0xe, "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"}}, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42b}}}, &(0x7f0000000cc0)={0x34, &(0x7f0000000b00)={0x0, 0x7, 0x5b, "b703319962eecfbf7c1446f94952efb4311c72ee407f38de8db87fd484a04a7fdc3aab92be9e0aa15e68972496bbcde5c76ee24f2ec5ed82fe126754827305c7dbf51679d3c2bf086ae80fbc835a091c7394c43bc78a5614d34ae2"}, &(0x7f0000000b80)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000bc0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000c00)={0xc0, 0xa1, 0x4, 0x8}, &(0x7f0000000c40)={0x40, 0xa0, 0x4, 0x3}, &(0x7f0000000c80)={0xc0, 0xa2, 0x2f, "5561785ad1c5b135637f8a65e591fac58dc75449cbdf3887eadc5c6a157753c67bb06feb87838b98976a329e86ba90"}}) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) (async) listen(r1, 0x1) (async) shutdown(r1, 0x1) (async) syz_usb_connect(0x0, 0x202, &(0x7f0000000200)={{0x12, 0x1, 0x50, 0xf6, 0xb5, 0xdd, 0x10, 0x257a, 0x1604, 0x85b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f0, 0x1, 0x13, 0x80, 0xa0, 0x9e, [{{0x9, 0x4, 0x87, 0xe, 0xc, 0x8a, 0xa2, 0x66, 0xd, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "cce71d4f89"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0x0, 0x2}, {0x6, 0x24, 0x1a, 0x0, 0x1}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x2, 0x1}, @country_functional={0x8, 0x24, 0x7, 0x8, 0x1, [0x7]}]}, @uac_as={[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x18, 0x3, 0x1, 0x1, "", "d9b7"}]}], [{{0x9, 0x5, 0x1, 0xc, 0x3ff, 0x2, 0x8c, 0xd2, [@generic={0x7, 0x8, "024db70ff3"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x3, 0x4, 0x8}}, {{0x9, 0x5, 0xf, 0xc, 0x0, 0x75, 0x8, 0x7}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x7, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x3d70}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3bf, 0xff, 0x8, 0x6}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0x2, 0xec, 0x8}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0x2, 0x5, 0x81}}, {{0x9, 0x5, 0xe, 0x12, 0x8, 0x4, 0x0, 0x8}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x8, 0x5, 0x10, [@generic={0xda, 0x30, "426b02b9bfe251e9a5fd098e2576c5f676a6b5b919488853cf325f4d5f14dd3658c4ceac881f7c89c84dd8f0f3ed22cfc6acad4438dfb341a24dc9fe71d422c79239b0b7c1f13c8cd2478b441303749ec08ac57cfda8aba2974ef310504785b8420fda6c8819f13c1358e8f077803851ccb5580fa9df2f0ce8452490af4b941a0f93a1288b9e3828e984f180674bd6dfbfee408fa381243d0e684d51d417d2e4c18787f1e40e731961706aea471f4f19f46548bc7c4c661e8c73307dfc5437c129f6cc342c5da7ea4504a23e45781566d59d78157f026059"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x400, 0x6, 0x5, 0x9}}, {{0x9, 0x5, 0xa, 0x1, 0x20, 0xb, 0x2, 0x4}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x8, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0xfffb}, @generic={0x47, 0x5, "4a872898c8ed14c3b563ae52b58e5a5dbc79c3a25e83a3b41019d7e178144d13c7068e393e6471ec6e3f832d73421695e0f7498b420afe01143cb0c9891d075cd0109e23d7"}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0xff, 0x4, 0x7, 0x40, 0x3}, 0x5, &(0x7f0000000440)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1007}}, {0x18, &(0x7f0000000180)=@string={0x18, 0x3, "371687c8219013af82b44f759260a39f424fb08d1c5f"}}]}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000e00)={0x14, &(0x7f0000000d00)={0x40, 0x3, 0x7e, {0x7e, 0x10, "4b9d2a533e09b196d07978613cfbbfa4fd7daf9e4288a66797ae5422dc65185ee42dc1450ac3a79bc209eea2343a7d9f843a209aeefe449b515c9cef8aed9eef79ab9ebeabfb8ba727bc95f468d11d5a5ff86a0b0c494e640321480d324351b7eac81492445c280397453796e5b2b6aea0ebe3a67f5f9e45afa303f7"}}, &(0x7f0000000dc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}}, &(0x7f0000001300)={0x1c, &(0x7f0000000e40)={0x40, 0x6, 0x23, "92da50b445c5ba0f9e9f8a895a671c0eb04ce58c4c15f910defc7a857925e41b0e5d00"}, &(0x7f0000000e80)={0xa1, 0x1, 0x400, "afa925a7f0812bfead60572467b9be3b379435849cfac314f11447f757ebc6c41d68848122bab963ee0dce4953d8078a1036a4597d9468c9d09e4a3364de1cb992c5ad4abbc6259d8e38e824ebd3298eda4f326aba614ce10e0bc48e228ef6d5d1e7fa0c19d284f90d7b89834f89ce779ede4cdcb9a9a668e82815289dc490f0979b264cde47be04d0e6ebb95e2b0891ef1a4420886ea962e272ae72c0a5b66170e843a095e6814f6c903fdb17813711f84645ee8f681c340433f1ea004872c8ce4747036227854aa1a2e6d718c18c146e20173d1c19d7481bef1c4920e450a39d336eb2a66ba7811494cd86e273e3cf5c6d0636ae1f153402d61f2e35ba11027c0ef163cf08ed2babf60474794996324a1991356373dc341a21f51b5f2e4415500ade177ebc999bfe9ab91ce472817b251eca5ac4e028684b84b8fa9fb550615bd6e7d9bdfd1eceae61980fc12b32668571fd343497228fb3058caf9f9c4215165edacb012593ea68c99c1225fbcaca0479ebbb5b5668fe5f99b8b0fd3e539f36a776d9e72ea374c28b5c8bd15371a9f10fb816e2dd8a8ad86e7413f35377a4a058e4c77136b9468d36b0b82357752fdad2243f6039e4feff0ad2c7817f18e5661a22aa07ed4c49f6493db4929b0b7cb7707c828001abbf6a3b90e41cb313e8b05eaa05dc0c9282e7d99a18d4c70b0c38919b3fd000caa0eb20a017d44776051869a04a88660add49941b7c573952573a12f4a31a7da9d80e52756312bff93a36413c61b9bcda9935f15399eccaedeacb83ddc51eb551502ed9ea6e62aa2d9119c5a854b52bfc3619986a4547b4af614057506d53e3e13add0c620fe3346de20fab18eeb65f95d0f00a2af3685ed87aaa4be376c5c53a85ffb0c1f3feecc0e73288fa0e7514ba570c2ee30c8805c864d6db01f46d50f773120dbfc069ed0d036f9e5a73dd087a19c3c09260e61de152f4d3c39f28bd18c85252c5d2471a2c4717d5de3e11e432f17a888d225150f7b7c4b2f6dc54ae5635720b71db79238ca218ddbc5bca3f057ca656f5ef1024450302f57e3373856f75f5964b5bbd8a297bf47c323026525036312bfbb8980c586e4b5d582fb2a59a0e113a7f1bc4c902209f821556ca9fc84a7af4298d259ed3685a4e7f587b9005f589513a737d3c6d8b1d39358330c63666e4fb5fcce1467989ff20fb5774ca60ff0d39c69f0059b72b7032bb2075400e8c30e180dc587a67b8fba1e07b629294aff1e5268922ac732884886361335f61381fb9cda6668067e606fde3bfee9e7d06dbc42982c1d967233abdb5bff18c1ea6d5ab1d81ec9c5492746dd38e0aff972e1e4f6f32fc2932f8b1ce9fc5c4bca88092ee64ebce11e431c10390399579e3928b33388b60a5f02e5f3b8cde0bf72219c1cf96432feacc7db1d0f49f3854caddea1a6ae84387c9e5"}, &(0x7f00000012c0)={0x21, 0x0, 0x2, 'i-'}}) (async) r2 = socket$inet6(0xa, 0x1, 0x6) syz_usb_connect$uac1(0x1, 0x8b, &(0x7f0000000480)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x3, 0x1, 0x6, 0xa0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7f, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x4b, 0x2, 0xf7, 0x8a, '\t'}, @as_header={0x7, 0x24, 0x1, 0x7, 0x9, 0x3}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x81, 0x2, 0xa0, 0x4, "", "d5c1"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x0, 0x0, {0x7, 0x25, 0x1, 0x2, 0x0, 0x13}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6c, 0x0, 0x2, {0x7, 0x25, 0x1, 0x80, 0x9}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x5e, 0xf7, 0xe, 0x10, 0x3}, 0xf7, &(0x7f0000000580)=ANY=[@ANYBLOB="050ff700050b10010204000800690b03d61004c798db5640d663f8b97fbb364e7d700bbd1f929ff1f747aee03a7cff2d141da14915e1a4347c4fd41670d90a36e504d985f9dce151624e51b3a66a4f8c25d9570943980fb7f41b9976fdd20e3d76e130413b4046853932b0f3ae50dbfff0a7b27c3a6d60aa9acb120161ee509652fbc670323fb443db2845dbb0a1be75894910eac45e95ab3ffd0310cc81c55995d57e41e3402552f5f96603e39bd0574162de51d1ce25b730317208e6715861d5e87c0d0bc47fbbeaae2e3302e57e599b6e37a8862703100b03100b0b10010c00000006010002"], 0x9, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x419}}, {0x10, &(0x7f0000000100)=@string={0x10, 0x3, "f90f3daa40e82e14b053f884751f"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x48, &(0x7f0000000700)=@string={0x48, 0x3, "4f129a840790bb28d5fd97ebd5c8f98bdb183d86db772be7b3f553c3fbedf5d874957954a452f721b55bf5b58defa6953fa45fc0b6117c3f4d94e1c7a8ae0267965197b63f50"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x40f}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x41f}}, {0x49, &(0x7f0000000840)=@string={0x49, 0x3, "19cb0bda21aeca92b8e977f9fd81264ebd19104e1377e819b991aab3d65c60c5a72db8693701c062442b9ee64fded7c0296b332a10220f6b849936fa1302ef6dcc300dd958f62f"}}]}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000001380)={&(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000013c0)={0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000001440)={0x3, 0x0, &(0x7f0000001400)=[0x0, 0x0, 0x0]}) (async) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x4000000000000005}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r6, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r7}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r7], &(0x7f00000003c0)=[0x2], &(0x7f0000000100)=[r8], &(0x7f0000000180)=[0x31], 0x0, 0x8000000000009}) (async) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r9, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r10}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r9, 0xc01064ab, &(0x7f0000000040)={0x2f, r11, r10}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000001580)={0x401, 0x4, &(0x7f0000001480)=[r3, r4, r5, 0x0], &(0x7f00000014c0)=[0x80000000, 0x1000, 0x6bd], &(0x7f0000001500)=[r8, r11], &(0x7f0000001540)=[0x9, 0x3, 0x0, 0x1, 0x9, 0x4], 0x0, 0x7eba}) 2.171511498s ago: executing program 6 (id=4312): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000140)=0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x402c5342, &(0x7f00000000c0)) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0) 2.026150409s ago: executing program 7 (id=4313): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) shutdown(r0, 0x1) shutdown(r0, 0x1) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000240)={"c1d39f7f2bb46010ada0eecac4cedc2b", 0x0, 0x0, {0x6, 0x4}, {0x27, 0xd3}, 0x80, [0x6, 0x7, 0x7, 0xffffffffffffffff, 0xc968, 0x0, 0x80, 0x3, 0x9a2c, 0x8000000000000000, 0x1214d1e5, 0xfffffffffffffffd, 0xd, 0x7fffffffffffffff, 0x7, 0x5]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000380)={{r0}, r2, 0x0, @inherit={0x68, &(0x7f0000000100)={0x0, 0x4, 0x7, 0xc, {0xe, 0x8, 0x4, 0x5, 0x91a}, [0x9, 0x8, 0x5, 0x9]}}, @subvolid}) 1.925665544s ago: executing program 7 (id=4314): madvise(&(0x7f00004fc000/0x3000)=nil, 0x3000, 0x16) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x6000) syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x12510421, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x40000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x9, {0x101, 0xb, 0x0, {0x1, 0x0, 0x7f00, 0x400, 0x10000, 0x5, 0x9d1f, 0x4, 0x8, 0x4000, 0x7, 0x0, 0xffffffffffffffff, 0x7ffffff7, 0xc877}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$incfs_metadata(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="0203000909000000000000000000000003973e4b7b00060000000e0002010000e00000090000000000000000070014000800000003000000e000000100000000000007000000073d210000000000000000"], 0x48}}, 0x20000000) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000240)={0x7, "0000060000000000000000006f0de3856c0600a30002000000006e002000", 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000038000000160a0101000b000000000000010000000900020073797a3000000000b6f8896373797a3000000000040003800800074004000000140000001000010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000e86000)="002204", 0x7f8) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x300}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x0, &(0x7f00000003c0)}) getsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f00000002c0), &(0x7f0000000300)=0x8) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00'}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd2000100000004000000060"], 0xffe) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='lazytime\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x5, 0x7fffbfef}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 1.392328125s ago: executing program 6 (id=4315): r0 = socket(0x2c, 0x2, 0xfffffffc) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000080)=@ethtool_regs={0x4, 0x400, 0xc5, "fb93fa3d380518013df157d04e71515efd79614aeebc5deccf28a612d3ede040ab2a8a1267a403ec20e2c1edd8025224c51f395be1508bc2a0a2b383737463f1ca2281c8fd1ba386b8de1568b5504252b68c38076e49e791650fe67aaac3341092bfabc434018ab7c51db8cd1bcdcf94ae4a907fd759dd0df47bd2f49b192f54298ba7adf9fc140f30c193b391b453784495fc69e04744cef60c2363eb14d2918b1516a5608a02362411f8e833e9511e1ecc75193eb762914c89a8c621a590a4522f91bfe2"}}) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000300)=0x9, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r4 = signalfd(0xffffffffffffffff, &(0x7f00000002c0), 0x8) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f00000004c0)=""/201, &(0x7f0000000340)=0xc9) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x2, @remote, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB='\x00\\', @ANYRES32=r6, @ANYBLOB="0a000600d6ca5e9c9ebe0000"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x4000800) r8 = landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) r9 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0x101040, 0x0) ioctl$UFFDIO_API(r9, 0x5460, 0x0) r10 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f00000063c0)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}], 0x1, 0x800) recvmsg(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000380)=""/4, 0x4}], 0x1}, 0x40000000) setsockopt$inet6_int(r10, 0x29, 0xe, &(0x7f0000000040)=0x1, 0x4) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 1.3045875s ago: executing program 4 (id=4316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffd, 0x1, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f00000000c0)='C', 0x0, 0xfffffffd, 0x0, 0x2, 0x0}) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x80200, 0x8, 0x18}, 0x18) getdents(r2, &(0x7f00000001c0)=""/133, 0x85) (async) syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000000000765be00000001090224000100000003093cbfd5d77d7c2f4c170ae407681f776a2cda476126a5ac9dad52e8170d737c1a7066de7dfb42b7da4c4bbe26d5849f83a5e9686b80f0000000000000000000", @ANYRESDEC=0x0, @ANYRESDEC=0x0], 0x0) 924.792353ms ago: executing program 7 (id=4317): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x208080, 0x0) write$P9_RREADLINK(r0, &(0x7f00000001c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_bt_hci(r5, 0x800448d5, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', r4, 0x0, 0x7c7, 0x3, 0x7fffffff, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @multicast2, @local}}}}) syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb02080002020509050412"], 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000180), 0x208080, 0x0) (async) write$P9_RREADLINK(r0, &(0x7f00000001c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1000}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, 0x0, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00'}) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$sock_bt_hci(r5, 0x800448d5, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl1\x00', r4, 0x0, 0x7c7, 0x3, 0x7fffffff, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x4, 0x0, @multicast2, @local}}}}) (async) syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109022400010509401909047b07022d51d5980905eb02080002020509050412"], 0x0) (async) 499.965627ms ago: executing program 9 (id=4318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r1, 0xc1007c00, &(0x7f0000000100)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000380)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440), r3) r5 = socket$inet_icmp(0x2, 0x2, 0x1) sendto$inet(r5, 0x0, 0xfffffffffffffce2, 0x200008c0, &(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000100), 0x4) r7 = socket$key(0xf, 0x3, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x6}, 0x8) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x70}}, 0x0) bind$inet(r7, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'ip6gre0\x00', @broadcast}) read$sequencer(0xffffffffffffffff, &(0x7f0000000300)=""/91, 0x5b) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3) r11 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmmsg$inet(r11, &(0x7f00000073c0)=[{{&(0x7f0000002740)={0x2, 0xfff9, @rand_addr=0x64010101}, 0x10, 0x0}}], 0x1, 0x4) sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="f22ed9bff575cdc2829566c3d3c0149dc802000096d5aa2317d7336feb5b988eff010000ac681d6b68711e5038cf20d71c69680fa546a5f0e1008681b591dab16e071e6898ec766bcf90d0ff009b82fb8f639a85279c8af3dfdf58c99992c33817c02ff17623c665584f4d50f112c3bd18d5aa38e5f137ca069c05ba4de1d2335416446e01f153b21a710ae7bfa11a0de3c4634ce505a1e5f5aaf194f2b5a095b313ed2437ec2e210abab597941ab5ff07cc585ae4233d1366c5e01b157672563708d25d6d7c7c53d7aeda78659e888ed7c149e3a2d3a5c3e81649367bffb3a02cc7c4499be717b2233cd28aa710747ffbd6dd1409f640ea73605f996e03efa6f25f41e8c4236c90ecb8b3e6c8dcd1cc96971ab73d3dfb82235e83d3be505ac292179897f9a79966f55ce16059e5aeb76b3bf49f4ec267862803457205b015e29c90dd78eecdc0cb9cec527001cf6a8c44addaccf625cc3cda119f56b221c498e7bd2b03595e90ded92dfe46c12d8a06be11b83d2807f07d62ce291c112d8fa86feda8d572b4f22686bebd9d355cc59ae0b7f6b1f31b5650a61a3568b76e1def00002facab19106431e6f1bf5b6990ae7b8e301ab334a5a2bb6fc0ce43293e0af50e2d8c12d732ae43aea6251b440da1ad7d16f50404821a955a22c377314b9b643fedb94f9b30cc7cd4c899f484a437cc10b0f0e38b9a389c3ccb669263544c775a6f94d52a71edf3ee546e14c164be227b331c21a758bef309e278c0fef7b5cfe5f3bc5dcfb11f4f06c37ae851919f30430bc4ddc0064948471379397d713ff17e967c0cfa37a1fb59c2a4bbfc70086aa92174ab7635eefd2d43069ff9316a2a4e134c5c40395768bd3f715e8e911a0ab2d818721909293ccdcce9490a2d448954f25d48b63a2b", @ANYRES16=r10, @ANYBLOB="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"], 0x2c8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000140)="448b7cff000000000000108a15df0953fdd7b0a35041b9ff1f", 0x19}], 0x2) syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2"], 0x0) 364.764012ms ago: executing program 6 (id=4319): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000131401"], 0x18}, 0x1, 0x0, 0x0, 0x20000800}, 0xc4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x28, r3, 0x1, 0x70bd25, 0x25dfdbfa, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40880) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x1) 363.130565ms ago: executing program 7 (id=4320): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x4, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)={0x40, 0xb, 0x23, {0x23, 0xd, "2d3fe10433f0dc0150926f37adf6e76f679dc08e90b7ae57639761a1cd428c09ab"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000002140)={0x0, 0x0, 0x0}, 0x0) r3 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) sendto$inet(r3, &(0x7f0000000280)="1b1753a94adba1b164ed2cb0480fbba43084c319f791241a6a4698457b6bce2f794eb0e3a30d5508d708a16ba172e2d4f0461a68db0fb9b6c81bd6f36d1b5b1b14fda1c36dbb31f7456f7fb4b3f4718d5a54b58d06d6be96579d88e43cb6cbc4dd148a6f8f4897b3d7fab7c45ee0ddb21f7a81143ebe85529adddc09f95da24283bdc7325517311fe83d8e61c25abd7480ed967f2e0edc19d8fb3edfeed14e54", 0xa0, 0x40080c0, &(0x7f00000001c0)={0x2, 0x4e24, @remote}, 0x10) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r4, 0xc008ae05, &(0x7f0000000340)={0x1e, 0x0, [{0x40000001, 0x5, 0x2, 0xffff3418, 0x10, 0xc813, 0x5}, {0x80000000, 0x8, 0x1, 0x0, 0x5, 0x2, 0x97c}, {0xb, 0x1, 0x5, 0x0, 0xb71e, 0x8000, 0x5}, {0x40000001, 0xffff8001, 0x1, 0x5, 0xfffffff7, 0x9, 0x4}, {0x80000001, 0x5, 0x7, 0x93e6, 0x6060, 0x3, 0x8}]}) connect$unix(r2, &(0x7f0000002840)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r5, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 156.812647ms ago: executing program 6 (id=4321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000380)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @mcast1, 0x3}}, 0x24) (async) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) setreuid(0xee01, 0xee01) socket(0x1a, 0x2, 0x6) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18010000060a0b0400000000000000000200000034000480300001800a0001006d617463680000002000028008000240000000030b000100736f636b6574000005000300d60000000900010073797a30000000000900020073797a32"], 0x140}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014) 0s ago: executing program 6 (id=4322): r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x5, 0x2) r1 = openat$ptp0(0xffffff9c, &(0x7f0000000080), 0x82, 0x0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000100)={{0xf7, 0xfffffffb}, {0xffffffffffffffff, 0xffffffff}, 0x529, 0x1}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_features={{0xb, 0xb}, {0x0, 0xc9, "125db59d34f33c0c"}}}, 0xe) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x14, 0x4) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) r5 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r7, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) r8 = socket$rds(0x15, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r8, {0x800}}, './file0\x00'}) bind$rds(r8, &(0x7f0000000100)={0xa, 0x0, @local}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x1) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000001280)={r9, 0x200, {0x2a12, 0x80010000, 0x0, 0x3, 0x20000000000006, 0x0, 0x0, 0x7, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7ca64c6a4b4e00d9683dda1af1ea80000000000000000000000deff1200100000000000000000000000000800", "2809a9000000038948224ad54afac11d875375bdb2420000b420a1a93c7540f4767f9e01177d3dd40600000061ac000000800800", "90be8b1c55f96400", [0x5, 0x4]}}) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$UI_SET_FFBIT(r9, 0x4004556b, 0x6d) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x104, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 856.546670][ T42] usb 5-1: config 0 has no interface number 0 [ 856.566564][ T42] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 856.578565][ T42] usb 5-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 856.604026][ T42] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 856.630996][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.648067][ T42] usb 5-1: Product: syz [ 856.654693][ T42] usb 5-1: Manufacturer: syz [ 856.659777][ T42] usb 5-1: SerialNumber: syz [ 856.669784][ T42] usb 5-1: config 0 descriptor?? [ 856.677167][T25049] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 856.690066][ T42] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 856.964940][ T29] audit: type=1326 audit(2000000752.851:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25006 comm="syz.8.3682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee939bf79 code=0x7fc00000 [ 857.115742][T25049] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3692'. [ 857.407194][T25103] Invalid/unusable pipe [ 857.767871][T25110] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3701'. [ 857.838735][ T5828] usb 5-1: USB disconnect, device number 68 [ 858.146017][T25132] netlink: 'syz.8.3703': attribute type 11 has an invalid length. [ 858.163341][T25132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 858.239394][T25132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 858.307059][T25132] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 858.568761][T25135] 9p: Bad value for 'rfdno' [ 858.661049][T25139] mkiss: ax0: crc mode is auto. [ 858.669599][T25139] comedi comedi3: comedi_config --init_data is deprecated [ 858.936691][T25160] TCP: TCP_TX_DELAY enabled [ 859.007643][ T42] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 859.110431][T25171] netlink: 'syz.8.3713': attribute type 4 has an invalid length. [ 859.190176][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 859.200687][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 859.212735][ T42] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 859.222467][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.230593][ T42] usb 5-1: Product: syz [ 859.234792][ T42] usb 5-1: Manufacturer: syz [ 859.239542][ T42] usb 5-1: SerialNumber: syz [ 859.246594][ T42] usb 5-1: config 0 descriptor?? [ 859.258432][ T42] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 859.438088][ T5911] usb 9-1: new high-speed USB device number 122 using dummy_hcd [ 859.588872][ T5911] usb 9-1: device descriptor read/64, error -71 [ 859.695594][T25197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 859.749465][ T5891] usb 5-1: USB disconnect, device number 69 [ 859.837141][ T5911] usb 9-1: new high-speed USB device number 123 using dummy_hcd [ 859.977092][ T5911] usb 9-1: device descriptor read/64, error -71 [ 860.087767][ T5911] usb usb9-port1: attempt power cycle [ 860.321485][ T29] audit: type=1800 audit(2000001012.209:193): pid=25239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3721" name="nullb0" dev="tmpfs" ino=839 res=0 errno=0 [ 860.427139][ T5911] usb 9-1: new high-speed USB device number 124 using dummy_hcd [ 860.460053][ T5911] usb 9-1: device descriptor read/8, error -71 [ 860.607694][ T5947] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 860.707151][ T5911] usb 9-1: new high-speed USB device number 125 using dummy_hcd [ 860.727811][ T5911] usb 9-1: device descriptor read/8, error -71 [ 860.737136][ T5947] usb 5-1: device descriptor read/64, error -71 [ 860.837534][ T5911] usb usb9-port1: unable to enumerate USB device [ 860.977140][ T5947] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 861.107064][ T5947] usb 5-1: device descriptor read/64, error -71 [ 861.217478][ T5947] usb usb5-port1: attempt power cycle [ 861.557137][ T5947] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 861.577949][ T5947] usb 5-1: device descriptor read/8, error -71 [ 861.817153][ T5947] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 861.839676][ T5947] usb 5-1: device descriptor read/8, error -71 [ 861.949774][ T5947] usb usb5-port1: unable to enumerate USB device [ 862.587109][ T5911] usb 9-1: new high-speed USB device number 126 using dummy_hcd [ 862.750502][ T5911] usb 9-1: config 0 has an invalid interface number: 182 but max is 1 [ 862.759527][ T5911] usb 9-1: config 0 has no interface number 1 [ 862.765675][ T5911] usb 9-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 862.774997][ T5911] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.786262][ T5911] usb 9-1: config 0 descriptor?? [ 863.002718][T25273] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 863.094235][T25273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 863.108703][T25273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 863.150024][ T5947] usb 9-1: USB disconnect, device number 126 [ 863.777780][ T5947] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 863.948057][ T5947] usb 5-1: Using ep0 maxpacket: 16 [ 863.958059][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 863.975031][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 863.989776][ T5947] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 864.003183][ T5947] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 864.014020][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.033790][ T5947] usb 5-1: config 0 descriptor?? [ 864.285850][T25351] tmpfs: Unknown parameter '' [ 864.368058][T25357] tmpfs: Unknown parameter 'nr' [ 864.461716][ T5947] megaworld 0003:07B5:0312.0030: item fetching failed at offset 5/7 [ 864.488028][ T5947] megaworld 0003:07B5:0312.0030: parse failed [ 864.494331][ T5947] megaworld 0003:07B5:0312.0030: probe with driver megaworld failed with error -22 [ 864.661962][ T5947] usb 5-1: USB disconnect, device number 74 [ 865.097080][ T5947] usb 9-1: new high-speed USB device number 127 using dummy_hcd [ 865.247406][ T5947] usb 9-1: Using ep0 maxpacket: 16 [ 865.261373][ T5947] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 52, changing to 7 [ 865.287044][ T5947] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9272, setting to 1024 [ 865.311495][ T5947] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.91 [ 865.322638][ T5947] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.333593][ T5947] usb 9-1: Product: syz [ 865.339805][ T5947] usb 9-1: Manufacturer: syz [ 865.344790][ T5947] usb 9-1: SerialNumber: syz [ 865.358951][ T5947] usb 9-1: config 0 descriptor?? [ 865.373816][ T5947] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 865.383752][ T5947] em28xx 9-1:0.0: DVB interface 0 found: isoc [ 865.570779][T25393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.580974][T25393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.620235][T25393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.631683][T25393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.639656][ T42] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 865.650127][T25393] netlink: 196 bytes leftover after parsing attributes in process `syz.8.3752'. [ 865.717560][ T5947] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 865.781903][ T5947] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 865.790156][ T5947] em28xx 9-1:0.0: board has no eeprom [ 865.818705][ T42] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 865.827885][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 865.839957][ T42] usb 5-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 865.849982][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.857318][ T5947] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 865.868440][ T42] usb 5-1: config 0 descriptor?? [ 865.874444][T25407] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 865.882562][ T5947] em28xx 9-1:0.0: dvb set to isoc mode. [ 865.889965][ T5828] em28xx 9-1:0.0: Binding DVB extension [ 865.911424][ T5947] usb 9-1: USB disconnect, device number 127 [ 865.925033][ T42] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input96 [ 865.977396][ T5947] em28xx 9-1:0.0: Disconnecting em28xx [ 866.025800][ T5828] em28xx 9-1:0.0: Registering input extension [ 866.033581][ T5947] em28xx 9-1:0.0: Closing input extension [ 866.054611][T25432] overlayfs: failed to clone upperpath [ 866.072005][ T5947] em28xx 9-1:0.0: Freeing device [ 866.113744][ T5177] bcm5974 5-1:0.0: could not read from device [ 866.145976][ T5177] bcm5974 5-1:0.0: could not read from device [ 866.158111][ T42] usb 5-1: USB disconnect, device number 75 [ 866.175243][ T5177] bcm5974 5-1:0.0: could not read from device [ 866.199612][T25451] tipc: Enabling of bearer rejected, failed to enable media [ 866.211904][T25451] netlink: 'syz.6.3757': attribute type 1 has an invalid length. [ 866.220952][T25451] netlink: 'syz.6.3757': attribute type 4 has an invalid length. [ 866.238242][T25451] netlink: 15294 bytes leftover after parsing attributes in process `syz.6.3757'. [ 866.273580][T25451] tipc: Started in network mode [ 866.278984][T25451] tipc: Node identity ac14142f, cluster identity 4711 [ 866.286193][T25451] tipc: New replicast peer: 0.0.0.0 [ 866.293627][T25451] tipc: Enabled bearer , priority 10 [ 866.308242][T25451] tipc: New replicast peer: 172.30.1.7 [ 866.347665][T25461] openvswitch: netlink: IP tunnel dst address not specified [ 866.361916][T25462] netlink: 128 bytes leftover after parsing attributes in process `syz.8.3758'. [ 866.380691][T25461] (syz.8.3758,25461,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 866.389840][T25461] (syz.8.3758,25461,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 866.695516][T25474] infiniband: Added to hash: ib_dev=ffff888025e68000 (0)() ndev=ffff88803368c000 (24)(wg2) [ 866.707002][T25474] siw: device registration error -23 [ 866.712453][T25474] infiniband: Removed from hash: ib_dev=ffff888025e68000 (0)() ndev=ffff88803368c000 (24)(wg2) [ 866.737197][ T5911] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 866.890731][ T5911] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 866.900501][ T5911] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 866.913705][ T5911] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 866.923098][ T5911] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.931393][ T5831] Bluetooth: hci5: command 0x0406 tx timeout [ 866.945632][ T5911] usb 9-1: Product: syz [ 866.949951][ T5911] usb 9-1: Manufacturer: syz [ 866.955085][ T5911] usb 9-1: SerialNumber: syz [ 866.962280][ T5911] usb 9-1: config 0 descriptor?? [ 866.972339][ T5911] usb 9-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 867.087165][ T5947] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 867.257447][ T5947] usb 5-1: Using ep0 maxpacket: 32 [ 867.269353][ T5947] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 867.291828][ T5947] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 867.310578][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.329276][ T5947] usb 5-1: Product: 讉ଏ붻ꌧࢆ衿ᠶ鞃ㇷ똽὏䃓葧捉尐നຐ慇㑖殀递Ż⎅ꒇ뉅肈ǹ냂ﶦ뽺㻿㋲ᣀآ൳糟䂲厺臑冡ﲥߺݷ佋쉾獢Ỉ⏇塶뺱ૼ [ 867.362492][ T5947] usb 5-1: Manufacturer: 瀼⭫껂㘱璔᧟䑘㕴ꇌ飙ತ䗡삮攴ﳞ麃थ杌秥鰈髑Ꮬ卵뽟ߧ˧籧র瞏§騴㐁ℝ坕치茸乜죔撱ꌘ蠞蓥崆嶬⡸翱滬秧ᢩ狲鱊峙ퟌ얶⤔罿ᜅ驇兾⡤釙䊟鐟෋⪺䴾犅⸞㇕䀆僐沙泹븺ꋉ⮢篳쒑춐矝㯠贻瀈죔鱝 [ 867.393605][ T5911] usb 9-1: USB disconnect, device number 2 [ 867.400974][ T5947] usb 5-1: SerialNumber: ꅯ컪凫ᯬ亰퐚ㄣßỗ졄㖡䑢ⶺ羈᳒濎葶㤜観᠟熵鈏 [ 867.411451][T21579] tipc: Node number set to 2886997039 [ 867.634310][T25527] nbd: must specify at least one socket [ 867.847305][ T5947] cdc_ncm 5-1:1.0: bind() failure [ 867.872844][ T5947] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 867.897473][ T5947] cdc_ncm 5-1:1.1: bind() failure [ 867.915947][ T5947] usb 5-1: USB disconnect, device number 76 [ 868.528761][ T42] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 868.757252][ T42] usb 9-1: device descriptor read/64, error -71 [ 868.935867][T25560] netlink: 'syz.6.3771': attribute type 10 has an invalid length. [ 868.944801][T25560] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3771'. [ 868.956878][T25560] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 868.964265][T25560] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 868.976089][T25560] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 868.992100][ T5828] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 868.999913][ T42] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 869.137124][ T42] usb 9-1: device descriptor read/64, error -71 [ 869.157058][ T5828] usb 5-1: Using ep0 maxpacket: 8 [ 869.163806][ T5828] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 869.172307][ T5828] usb 5-1: config 0 has no interface number 1 [ 869.179150][ T5828] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 869.190195][ T5828] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 869.202111][ T5828] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 869.213731][ T5828] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 869.224431][ T5828] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 869.237831][ T5828] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 869.249453][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 869.260495][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 869.274004][ T5828] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 869.281332][ T42] usb usb9-port1: attempt power cycle [ 869.284632][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.296547][ T5828] usb 5-1: Product: syz [ 869.300824][ T5828] usb 5-1: Manufacturer: syz [ 869.305431][ T5828] usb 5-1: SerialNumber: syz [ 869.313484][ T5828] usb 5-1: config 0 descriptor?? [ 869.320470][T25562] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 869.337365][ T5828] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 869.349221][ T5828] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 869.535233][T25562] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3772'. [ 869.551526][ T5828] usb 5-1: USB disconnect, device number 77 [ 869.627708][ T42] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 869.660263][ T42] usb 9-1: device descriptor read/8, error -71 [ 869.762773][T25621] syz.6.3775 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 869.908722][ T42] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 869.938706][ T42] usb 9-1: device descriptor read/8, error -71 [ 869.949007][T25626] netlink: 'syz.6.3777': attribute type 21 has an invalid length. [ 869.974997][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.048144][ T42] usb usb9-port1: unable to enumerate USB device [ 870.387191][ T5828] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 870.539273][ T5828] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.549835][ T5828] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 870.563008][ T5828] usb 5-1: config 0 interface 0 has no altsetting 0 [ 870.572176][ T5828] usb 5-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.00 [ 870.582456][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.604359][ T5828] usb 5-1: config 0 descriptor?? [ 870.713913][T25650] netlink: 'syz.6.3783': attribute type 3 has an invalid length. [ 870.722234][T25650] netlink: 766 bytes leftover after parsing attributes in process `syz.6.3783'. [ 870.735375][T25651] netlink: 'syz.6.3783': attribute type 3 has an invalid length. [ 870.744488][T25651] netlink: 766 bytes leftover after parsing attributes in process `syz.6.3783'. [ 871.059112][ T5828] hid_parser_main: 52 callbacks suppressed [ 871.059135][ T5828] hid_mf 0003:0079:1843.0031: unknown main item tag 0x2 [ 871.075421][ T5828] hid_mf 0003:0079:1843.0031: item fetching failed at offset 4/5 [ 871.084206][ T5828] hid_mf 0003:0079:1843.0031: HID parse failed. [ 871.090962][ T5828] hid_mf 0003:0079:1843.0031: probe with driver hid_mf failed with error -22 [ 871.278069][ T5891] usb 5-1: USB disconnect, device number 78 [ 871.357134][ T5947] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 871.507135][ T5947] usb 9-1: Using ep0 maxpacket: 32 [ 871.514399][ T5947] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 871.522714][ T5947] usb 9-1: config 0 has no interface number 0 [ 871.530813][ T5947] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 871.540143][ T5947] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.548267][ T5947] usb 9-1: Product: syz [ 871.552469][ T5947] usb 9-1: Manufacturer: syz [ 871.557525][ T5947] usb 9-1: SerialNumber: syz [ 871.565008][ T5947] usb 9-1: config 0 descriptor?? [ 871.574184][ T5947] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 871.742007][ T29] audit: type=1326 audit(2000001023.629:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25688 comm="syz.6.3790" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f016019bf79 code=0x0 [ 871.776346][ T5947] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 871.794166][ T5947] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 871.979618][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 872.107179][ T5891] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 872.193458][T25670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.203882][T25670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.216889][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 872.219497][ T24] usb 9-1: USB disconnect, device number 7 [ 872.243084][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 872.265557][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 872.282924][ T5891] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 872.293110][ T24] quatech2 9-1:0.51: device disconnected [ 872.299243][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.326007][ T5891] usb 5-1: config 0 descriptor?? [ 872.335283][ T5891] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 872.941552][ T5891] gspca_cpia1: usb_control_msg 01, error -71 [ 872.948160][ T5891] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 872.960019][ T5891] usb 5-1: USB disconnect, device number 79 [ 873.027417][T21619] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 873.180634][T21619] usb 9-1: config 0 has an invalid descriptor of length 119, skipping remainder of the config [ 873.191195][T21619] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 873.200284][T21619] usb 9-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 873.209761][T21619] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.220611][T21619] usb 9-1: config 0 descriptor?? [ 873.428801][T25728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.439347][T25728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.449564][T25728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.459909][T25728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.485210][T25728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.497861][T25728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.535416][T25753] netlink: 'syz.4.3795': attribute type 1 has an invalid length. [ 873.542240][T21619] usb 9-1: USB disconnect, device number 8 [ 873.543798][T25753] netlink: 'syz.4.3795': attribute type 1 has an invalid length. [ 873.565144][T25758] netlink: 'syz.4.3795': attribute type 1 has an invalid length. [ 873.580323][T25758] netlink: 'syz.4.3795': attribute type 1 has an invalid length. [ 873.887848][ T5947] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 873.997312][T21619] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 874.037067][ T5947] usb 5-1: Using ep0 maxpacket: 16 [ 874.046475][ T5947] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 874.055781][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.064215][ T5947] usb 5-1: Product: syz [ 874.068826][ T5947] usb 5-1: Manufacturer: syz [ 874.073474][ T5947] usb 5-1: SerialNumber: syz [ 874.083530][ T5947] r8152-cfgselector 5-1: Unknown version 0x0000 [ 874.090404][ T5947] r8152-cfgselector 5-1: config 0 descriptor?? [ 874.157102][T21619] usb 9-1: Using ep0 maxpacket: 16 [ 874.164399][T21619] usb 9-1: config 1 has an invalid interface number: 19 but max is 0 [ 874.173114][T21619] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 874.183534][T21619] usb 9-1: config 1 has no interface number 0 [ 874.189834][T21619] usb 9-1: config 1 interface 19 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 874.203413][T21619] usb 9-1: config 1 interface 19 has no altsetting 0 [ 874.213569][T21619] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 7.c9 [ 874.222943][T21619] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.231384][T21619] usb 9-1: Product: syz [ 874.235768][T21619] usb 9-1: Manufacturer: syz [ 874.240979][T21619] usb 9-1: SerialNumber: syz [ 874.262183][T21619] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 874.510847][T25765] cgroup: Invalid name [ 874.516213][ T24] r8152-cfgselector 5-1: USB disconnect, device number 80 [ 875.096678][T25830] netlink: 'syz.6.3806': attribute type 10 has an invalid length. [ 875.108062][T25830] netlink: 55 bytes leftover after parsing attributes in process `syz.6.3806'. [ 875.140781][ T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888085f74000 (25)(veth1_virt_wifi) start [ 875.199934][ T49] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888085f74000 (17)(veth1_virt_wifi) end [ 875.260184][ T3492] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88802903c000 (16)(virt_wifi0) start [ 875.286494][ T3492] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88802903c000 (15)(virt_wifi0) end [ 875.335291][ T3492] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888033c42000 (15)(veth0_virt_wifi) start [ 875.355942][ T3492] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888033c42000 (8)(veth0_virt_wifi) end [ 876.528027][ T128] usb 9-1: Failed to read usb control message: -110 [ 876.535252][ T128] usb 9-1: Unable to read the bmi data from the device: -110 [ 876.543721][ T128] usb 9-1: unable to get target info from device [ 876.551151][ T128] usb 9-1: could not get target info (-110) [ 876.557352][ T128] usb 9-1: could not probe fw (-110) [ 876.641661][ T5891] usb 9-1: USB disconnect, device number 9 [ 876.777189][ T42] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 876.939037][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.950137][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 876.959989][ T42] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 876.969171][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.986357][ T42] usb 5-1: config 0 descriptor?? [ 877.057152][ T5891] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 877.208932][ T5891] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.219857][ T5891] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 877.229130][ T5891] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.239973][ T5891] usb 9-1: config 0 descriptor?? [ 877.255352][ T5891] pwc: Askey VC010 type 2 USB webcam detected. [ 877.402607][ T42] cp2112 0003:10C4:EA90.0032: unknown main item tag 0x0 [ 877.417823][ T42] cp2112 0003:10C4:EA90.0032: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 877.651489][ T5891] pwc: recv_control_msg error -32 req 02 val 2b00 [ 877.670965][ T42] cp2112 0003:10C4:EA90.0032: Part Number: 0x09 Device Version: 0x69 [ 877.880245][ T5891] pwc: recv_control_msg error -32 req 02 val 2c00 [ 877.899456][T25885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.940190][T25885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.979301][ T5891] pwc: recv_control_msg error -71 req 04 val 1000 [ 877.996658][ T5891] pwc: recv_control_msg error -71 req 04 val 1300 [ 878.006064][ T5891] pwc: recv_control_msg error -71 req 04 val 1400 [ 878.015519][ T5891] pwc: recv_control_msg error -71 req 02 val 2000 [ 878.023024][ T5891] pwc: recv_control_msg error -71 req 02 val 2100 [ 878.032030][ T5891] pwc: recv_control_msg error -71 req 04 val 1500 [ 878.040377][ T5891] pwc: recv_control_msg error -71 req 02 val 2500 [ 878.048015][ T5891] pwc: recv_control_msg error -71 req 02 val 2400 [ 878.055350][ T5891] pwc: recv_control_msg error -71 req 02 val 2600 [ 878.063472][ T5891] pwc: recv_control_msg error -71 req 02 val 2900 [ 878.082711][ T5891] pwc: recv_control_msg error -71 req 02 val 2800 [ 878.097854][ T5891] pwc: recv_control_msg error -71 req 04 val 1100 [ 878.126858][ T5891] pwc: recv_control_msg error -71 req 04 val 1200 [ 878.165717][ T5891] pwc: Registered as video103. [ 878.187267][ T5891] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input98 [ 878.228957][ T5891] usb 9-1: USB disconnect, device number 10 [ 878.881988][T25970] netlink: 140 bytes leftover after parsing attributes in process `syz.8.3824'. [ 879.289585][T25976] overlay: ./file1 is not a directory [ 879.350938][T25982] netlink: 512 bytes leftover after parsing attributes in process `syz.6.3827'. [ 879.557486][ T42] cp2112 0003:10C4:EA90.0032: error requesting SMBus config [ 879.578204][ T42] cp2112 0003:10C4:EA90.0032: probe with driver cp2112 failed with error -71 [ 879.610261][ T42] usb 5-1: USB disconnect, device number 81 [ 880.327072][ T5891] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 880.477183][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 880.487674][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 880.498531][ T5891] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 880.511254][ T5891] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 880.523024][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 880.533061][ T5891] usb 5-1: Product: syz [ 880.537399][ T5891] usb 5-1: Manufacturer: syz [ 880.542217][ T5891] usb 5-1: SerialNumber: syz [ 880.553204][ T5891] usb 5-1: config 0 descriptor?? [ 880.572513][ T29] audit: type=1326 audit(2000001032.459:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26050 comm="syz.6.3840" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f016019bf79 code=0x0 [ 880.660079][T26055] netlink: 'syz.6.3841': attribute type 29 has an invalid length. [ 880.764121][ T5891] usb 5-1: USB disconnect, device number 82 [ 881.157143][T21619] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 881.334343][T21619] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 881.346106][T21619] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.354911][T21619] usb 9-1: Product: syz [ 881.359246][T21619] usb 9-1: Manufacturer: syz [ 881.363887][T21619] usb 9-1: SerialNumber: syz [ 881.757600][ T5911] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 881.839859][T26119] QAT: Device 56 not found [ 881.929384][ T5911] usb 5-1: Using ep0 maxpacket: 8 [ 881.958820][ T5911] usb 5-1: unable to get BOS descriptor or descriptor too short [ 881.977799][ T5911] usb 5-1: config 7 has an invalid interface number: 96 but max is 0 [ 882.003882][ T5911] usb 5-1: config 7 has no interface number 0 [ 882.003917][T21619] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 882.017175][ T5911] usb 5-1: config 7 interface 96 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 882.052956][T21619] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 882.061393][ T5911] usb 5-1: string descriptor 0 read error: -22 [ 882.069105][T21619] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 882.069574][ T5911] usb 5-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=29.f9 [ 882.088782][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.107410][T21619] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 882.125304][ T5911] io_ti 5-1:7.96: required endpoints missing [ 882.145795][T21619] usb 9-1: USB disconnect, device number 11 [ 882.204685][T26148] netlink: 'syz.8.3856': attribute type 58 has an invalid length. [ 882.219651][T26148] netlink: 'syz.8.3856': attribute type 58 has an invalid length. [ 882.331613][ T5891] usb 5-1: USB disconnect, device number 83 [ 882.577361][T21619] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 882.670339][T26177] netlink: 'syz.6.3861': attribute type 13 has an invalid length. [ 882.680733][T26177] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3861'. [ 882.691078][T26177] erspan0: refused to change device tx_queue_len [ 882.738949][T21619] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 882.755068][T21619] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 882.770004][T21619] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 882.779896][T21619] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.788238][T21619] usb 9-1: Product: syz [ 882.792536][T21619] usb 9-1: Manufacturer: syz [ 882.797579][T21619] usb 9-1: SerialNumber: syz [ 882.824435][T21619] usb 9-1: config 0 descriptor?? [ 882.839313][T21619] usb 9-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 883.053552][T26199] netlink: 'syz.7.3867': attribute type 3 has an invalid length. [ 883.077710][T26199] netlink: 'syz.7.3867': attribute type 3 has an invalid length. [ 883.086316][T26199] netlink: 'syz.7.3867': attribute type 3 has an invalid length. [ 883.096293][T26199] netlink: 'syz.7.3867': attribute type 3 has an invalid length. [ 883.105706][T26199] netlink: 'syz.7.3867': attribute type 3 has an invalid length. [ 883.114727][T26199] netlink: 'syz.7.3867': attribute type 3 has an invalid length. [ 883.197972][ T5891] usb 5-1: new low-speed USB device number 84 using dummy_hcd [ 883.231145][ T5911] Process accounting resumed [ 883.322119][T26209] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3869'. [ 883.333221][ T128] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888025f7e000 (14)(dummy0) start [ 883.353516][ T128] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888025f7e000 (8)(dummy0) end [ 883.377182][ T5891] usb 5-1: unable to get BOS descriptor or descriptor too short [ 883.385358][ T5891] usb 5-1: too many configurations: 129, using maximum allowed: 8 [ 883.395267][ T5891] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 883.405818][ T5891] usb 5-1: config 4 has an invalid descriptor of length 122, skipping remainder of the config [ 883.420927][ T5891] usb 5-1: config 4 has no interface number 0 [ 883.427265][ T5891] usb 5-1: config 4 interface 147 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 883.446247][ T5891] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 883.455113][ T5891] usb 5-1: config 4 has an invalid descriptor of length 122, skipping remainder of the config [ 883.466727][ T5891] usb 5-1: config 4 has no interface number 0 [ 883.473004][ T5891] usb 5-1: config 4 interface 147 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 883.488923][ T5891] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 883.497593][ T5891] usb 5-1: config 4 has an invalid descriptor of length 122, skipping remainder of the config [ 883.509042][ T5891] usb 5-1: config 4 has no interface number 0 [ 883.515426][ T5891] usb 5-1: config 4 interface 147 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 883.530781][ T5891] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 883.569318][ T5891] usb 5-1: config 4 has an invalid descriptor of length 122, skipping remainder of the config [ 883.592406][ T5891] usb 5-1: config 4 has no interface number 0 [ 883.605918][ T5891] usb 5-1: config 4 interface 147 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 883.623718][T26217] tmpfs: Cannot change global quota limit on remount [ 883.677750][ T5891] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 883.691592][ T5891] usb 5-1: config 4 has an invalid descriptor of length 122, skipping remainder of the config [ 883.712535][ T5891] usb 5-1: config 4 has no interface number 0 [ 883.719832][ T5891] usb 5-1: config 4 interface 147 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 883.734969][ T5891] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 883.744548][ T5891] usb 5-1: config 4 has an invalid descriptor of length 122, skipping remainder of the config [ 883.769062][ T5891] usb 5-1: config 4 has no interface number 0 [ 883.794073][ T5891] usb 5-1: config 4 interface 147 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 883.812145][ T5891] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 883.829763][ T5891] usb 5-1: config 4 has an invalid descriptor of length 122, skipping remainder of the config [ 883.843476][ T5891] usb 5-1: config 4 has no interface number 0 [ 883.852945][ T5891] usb 5-1: config 4 interface 147 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 883.870076][ T5891] usb 5-1: config 4 has an invalid interface number: 147 but max is 0 [ 883.880586][ T5891] usb 5-1: config 4 has an invalid descriptor of length 122, skipping remainder of the config [ 883.898861][ T5891] usb 5-1: config 4 has no interface number 0 [ 883.905130][ T5891] usb 5-1: config 4 interface 147 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 885.112004][ T29] audit: type=1326 audit(2000001036.999:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26233 comm="syz.6.3876" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f016019bf79 code=0x0 [ 885.438395][T21619] usb 9-1: USB disconnect, device number 12 [ 885.470189][T26248] MTD: Attempt to mount non-MTD device "/dev/nbd8" [ 885.491286][T26248] cramfs: wrong magic [ 885.514546][T12872] udevd[12872]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 885.538118][T12872] udevd[12872]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 885.976570][ T5891] usb 5-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 885.989564][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.007697][ T5891] usb 5-1: can't set config #4, error -71 [ 886.024216][ T5891] usb 5-1: USB disconnect, device number 84 [ 886.077098][ T24] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 886.227092][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 886.234955][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 886.245346][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 886.258536][ T24] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 886.268254][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.276373][ T24] usb 9-1: Product: syz [ 886.280753][ T24] usb 9-1: Manufacturer: syz [ 886.285452][ T24] usb 9-1: SerialNumber: syz [ 886.502371][ T24] usb 9-1: 0:2 : does not exist [ 886.521016][ T24] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 886.575590][ T24] usb 9-1: USB disconnect, device number 13 [ 886.613333][T12561] udevd[12561]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 886.861293][T26278] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 886.876142][T26278] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 886.906320][T26278] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 886.912956][T26278] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 886.921463][T26278] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 886.929535][T26278] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 886.940031][T26278] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 887.361608][T26341] validate_nla: 28 callbacks suppressed [ 887.361628][T26341] netlink: 'syz.4.3889': attribute type 21 has an invalid length. [ 887.396109][T26341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3889'. [ 887.647149][ T5947] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 887.707111][ T24] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 887.799041][ T5947] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 887.812044][ T5947] usb 9-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 887.822990][ T5947] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.831336][ T5947] usb 9-1: Product: syz [ 887.835736][ T5947] usb 9-1: Manufacturer: syz [ 887.840457][ T5947] usb 9-1: SerialNumber: syz [ 887.853207][ T5947] usb 9-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 887.867104][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 887.875692][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 887.886473][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 887.897069][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 887.906843][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 887.922308][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 887.933410][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 887.942632][ T24] usb 5-1: Manufacturer: syz [ 887.952082][ T24] usb 5-1: config 0 descriptor?? [ 888.127228][ T5840] Bluetooth: hci6: command 0x0406 tx timeout [ 888.161962][ T24] usb 5-1: USB disconnect, device number 85 [ 888.265868][ T5947] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 888.285761][ T5947] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 888.305323][ T5947] usb 9-1: media controller created [ 888.328527][ T5947] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 888.462297][T26387] netlink: 14593 bytes leftover after parsing attributes in process `syz.6.3895'. [ 888.558533][ T5947] usb 9-1: USB disconnect, device number 14 [ 888.927085][ T5840] Bluetooth: hci4: command 0x041b tx timeout [ 888.929084][ T5831] Bluetooth: hci5: command 0x0406 tx timeout [ 888.997080][ T24] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 889.148489][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 889.159509][ T24] usb 5-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 889.170265][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.179498][ T24] usb 5-1: Product: syz [ 889.183806][ T24] usb 5-1: Manufacturer: syz [ 889.188941][ T24] usb 5-1: SerialNumber: syz [ 889.196118][ T24] usb 5-1: config 0 descriptor?? [ 889.367125][ T5947] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 889.405897][ T24] usb 5-1: ignoring: not an USB2CAN converter [ 889.518848][ T5947] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.530837][ T5947] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.540954][ T5947] usb 9-1: config 0 interface 0 has no altsetting 0 [ 889.547735][ T5947] usb 9-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 889.556800][ T5947] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.567928][ T5947] usb 9-1: config 0 descriptor?? [ 889.615994][ T5828] usb 5-1: USB disconnect, device number 86 [ 889.778630][T26440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.788382][T26440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.822363][ T5947] usbhid 9-1:0.0: can't add hid device: -71 [ 889.841829][ T5947] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 889.877839][ T5947] usb 9-1: USB disconnect, device number 15 [ 890.180388][ T5947] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 890.207641][ T5831] Bluetooth: hci6: command 0x0406 tx timeout [ 890.291724][T26468] netlink: 'syz.4.3907': attribute type 10 has an invalid length. [ 890.305108][T26469] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3906'. [ 890.315763][T26469] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3906'. [ 890.325033][ T5947] usb 9-1: device descriptor read/64, error -71 [ 890.337126][T26469] netlink: 'syz.6.3906': attribute type 2 has an invalid length. [ 890.349114][T26469] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3906'. [ 890.567478][ T5947] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 890.697210][ T5947] usb 9-1: device descriptor read/64, error -71 [ 890.757092][ T5891] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 890.807351][ T5947] usb usb9-port1: attempt power cycle [ 890.907065][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 890.914026][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 890.926302][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 890.941015][ T5891] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 890.950566][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.958673][ T5891] usb 5-1: Product: syz [ 890.963106][ T5891] usb 5-1: Manufacturer: syz [ 890.967870][ T5891] usb 5-1: SerialNumber: syz [ 890.984240][ T5891] usb 5-1: config 0 descriptor?? [ 890.993998][ T5891] hub 5-1:0.0: bad descriptor, ignoring hub [ 891.005524][ T5891] hub 5-1:0.0: probe with driver hub failed with error -5 [ 891.013234][ T5831] Bluetooth: hci4: command 0x041b tx timeout [ 891.013245][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 891.147106][ T5947] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 891.178881][ T5947] usb 9-1: device descriptor read/8, error -71 [ 891.337424][ T5891] usb 5-1: USB disconnect, device number 87 [ 891.437202][ T5947] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 891.457628][ T5947] usb 9-1: device descriptor read/8, error -71 [ 891.567937][ T5947] usb usb9-port1: unable to enumerate USB device [ 892.027095][ T5891] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 892.189571][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.200795][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.215174][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 892.228232][ T5891] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 892.237457][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.250108][ T5891] usb 5-1: config 0 descriptor?? [ 892.663762][ T5891] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 892.671520][ T5891] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 892.679093][ T5891] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 892.687444][ T5891] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 892.694893][ T5891] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 892.703078][ T5891] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 892.710581][ T5891] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 892.718316][ T5891] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 892.725751][ T5891] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 892.733431][ T5891] plantronics 0003:047F:FFFF.0033: unknown main item tag 0x0 [ 892.757029][ T5891] plantronics 0003:047F:FFFF.0033: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 892.939441][T26507] netlink: 'syz.4.3913': attribute type 21 has an invalid length. [ 893.022247][ T5911] usb 5-1: USB disconnect, device number 88 [ 893.097196][ T5831] Bluetooth: hci4: command 0x041b tx timeout [ 893.164630][T26555] befs: (nullb0): invalid magic header [ 893.321590][T26564] hma(sha224): entered promiscuous mode [ 893.457403][T26578] overlayfs: failed to clone lowerpath [ 893.467570][T26578] /dev/nullb0: Can't lookup blockdev [ 893.573105][T26584] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 893.677114][ T5911] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 893.827926][ T5911] usb 9-1: device descriptor read/64, error -71 [ 894.077072][ T5911] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 894.207611][ T5911] usb 9-1: device descriptor read/64, error -71 [ 894.317356][ T5911] usb usb9-port1: attempt power cycle [ 894.654016][T26626] netlink: 'syz.6.3936': attribute type 21 has an invalid length. [ 894.662083][ T5911] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 894.663811][T26626] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3936'. [ 894.700415][ T5911] usb 9-1: device descriptor read/8, error -71 [ 894.757131][ T42] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 894.919184][ T42] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 894.928546][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.939698][ T42] usb 5-1: config 0 descriptor?? [ 894.949572][ T42] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 894.958078][ T5911] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 894.978662][ T5911] usb 9-1: device descriptor read/8, error -71 [ 895.089527][ T5911] usb usb9-port1: unable to enumerate USB device [ 895.149877][ T42] gp8psk: usb in 128 operation failed. [ 895.157557][ T42] gp8psk: usb in 137 operation failed. [ 895.163213][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 895.173603][ T42] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 895.182442][ T42] usb 5-1: media controller created [ 895.197413][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 895.220459][ T42] gp8psk_fe: Frontend attached [ 895.225341][ T42] usb 5-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 895.234740][ T42] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 895.483265][T26620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3935'. [ 895.512319][T26620] : entered promiscuous mode [ 895.520738][ T42] gp8psk: usb in 137 operation failed. [ 895.528195][ T42] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 895.539847][ T42] gp8psk: found Genpix USB device pID = 203 (hex) [ 895.550432][ T42] usb 5-1: USB disconnect, device number 89 [ 895.628735][ T42] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 896.847047][ T24] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 897.007965][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 897.014702][ T24] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 897.025365][ T24] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 897.038275][ T24] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 897.048129][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.056135][ T24] usb 9-1: Product: syz [ 897.061230][ T24] usb 9-1: Manufacturer: syz [ 897.065872][ T24] usb 9-1: SerialNumber: syz [ 897.228219][ T42] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 897.284975][T26684] tmpfs: Unknown parameter 'quot+srquota_inode_hardlim' [ 897.393086][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 897.405114][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 897.431332][ T42] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 897.431372][T26719] overlayfs: missing 'lowerdir' [ 897.441169][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.453761][ T42] usb 5-1: Product: syz [ 897.458128][ T42] usb 5-1: Manufacturer: syz [ 897.462801][ T42] usb 5-1: SerialNumber: syz [ 897.473652][ T42] usb 5-1: config 0 descriptor?? [ 897.504345][T26725] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3953'. [ 897.530088][ T24] usb 9-1: 0:2 : does not exist [ 897.585724][ T42] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 897.612820][ T24] usb 9-1: USB disconnect, device number 24 [ 898.115144][T26749] fuse: Bad value for 'group_id' [ 898.121003][T26749] fuse: Bad value for 'group_id' [ 898.384156][T26761] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 899.238787][T26783] cgroup: subsys name conflicts with all [ 899.254298][T26783] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3964'. [ 900.074256][ T42] usb 5-1: USB disconnect, device number 90 [ 900.106063][T12561] udevd[12561]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 900.173949][T25590] udevd[25590]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 900.223344][T26822] input: syz1 as /devices/virtual/input/input99 [ 900.427150][ T24] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 900.557871][ T24] usb 9-1: device descriptor read/64, error -71 [ 900.637050][ T42] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 900.778692][T26852] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3972'. [ 900.792340][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888023acc000 (12)(syzkaller1) start [ 900.817410][ T24] usb 9-1: new full-speed USB device number 26 using dummy_hcd [ 900.824291][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888023acc000 (3)(syzkaller1) end [ 900.833213][ T42] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 900.857059][ T42] usb 5-1: config 0 has no interface number 0 [ 900.863316][ T42] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.875362][ T42] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.886411][ T42] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 900.899901][ T42] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 900.909431][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.921086][ T42] usb 5-1: config 0 descriptor?? [ 900.997087][ T24] usb 9-1: device descriptor read/64, error -71 [ 901.117783][ T24] usb usb9-port1: attempt power cycle [ 901.409727][ T5831] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 901.467055][ T24] usb 9-1: new full-speed USB device number 27 using dummy_hcd [ 901.621171][ T42] uclogic 0003:28BD:0042.0034: failed retrieving string descriptor #100: -71 [ 901.635407][ T42] uclogic 0003:28BD:0042.0034: failed retrieving pen parameters: -71 [ 901.643648][ T42] uclogic 0003:28BD:0042.0034: pen probing failed: -71 [ 901.651244][ T42] uclogic 0003:28BD:0042.0034: failed probing parameters: -71 [ 901.659473][ T42] uclogic 0003:28BD:0042.0034: probe with driver uclogic failed with error -71 [ 901.687316][ T42] usb 5-1: USB disconnect, device number 91 [ 901.697010][ T24] usb 9-1: device not accepting address 27, error -71 [ 902.066393][T26924] input: syz0 as /devices/virtual/input/input100 [ 902.572019][T26966] overlayfs: failed to clone upperpath [ 902.797044][ T24] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 902.959983][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 902.969853][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 902.982258][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 902.991800][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.000561][ T24] usb 5-1: Product: syz [ 903.004808][ T24] usb 5-1: Manufacturer: syz [ 903.010673][ T24] usb 5-1: SerialNumber: syz [ 903.018245][ T24] usb 5-1: config 0 descriptor?? [ 903.029073][ T24] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 903.437098][ T5911] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 903.587060][ T5911] usb 9-1: Using ep0 maxpacket: 16 [ 903.596197][ T5911] usb 9-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 903.605771][ T5911] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.614591][ T5911] usb 9-1: Product: syz [ 903.619103][ T5911] usb 9-1: Manufacturer: syz [ 903.623788][ T5911] usb 9-1: SerialNumber: syz [ 903.632557][ T5911] usb 9-1: config 0 descriptor?? [ 903.750751][T26990] sctp: [Deprecated]: syz.6.3995 (pid 26990) Use of struct sctp_assoc_value in delayed_ack socket option. [ 903.750751][T26990] Use struct sctp_sack_info instead [ 903.856300][ T5911] speedtch 9-1:0.0: speedtch_bind: wrong device class 68 [ 903.863818][ T5911] speedtch 9-1:0.0: usbatm_usb_probe: bind failed: -19! [ 904.061799][ T5911] usb 9-1: USB disconnect, device number 29 [ 904.577364][ T5831] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 904.663597][T27004] binder: 27002:27004 ioctl c0306201 2000000001c0 returned -14 [ 904.675404][ T5911] hid_parser_main: 5 callbacks suppressed [ 904.675426][ T5911] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 904.706368][ T5911] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 905.133356][T27021] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4000'. [ 905.349077][T27030] delete_channel: no stack [ 905.561461][ T29] audit: type=1326 audit(2000001057.449:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27038 comm="syz.6.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016019bf79 code=0x50000 [ 905.584608][ T29] audit: type=1326 audit(2000001057.449:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27038 comm="syz.6.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016019bf79 code=0x50000 [ 905.627037][ T29] audit: type=1326 audit(2000001057.449:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27038 comm="syz.6.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016019bf79 code=0x50000 [ 905.680825][ T29] audit: type=1326 audit(2000001057.449:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27038 comm="syz.6.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016019bf79 code=0x50000 [ 905.726788][ T24] usb 5-1: USB disconnect, device number 92 [ 905.733026][ T29] audit: type=1326 audit(2000001057.449:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27038 comm="syz.6.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016019bf79 code=0x50000 [ 905.808880][ T29] audit: type=1326 audit(2000001057.449:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27038 comm="syz.6.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016019bf79 code=0x50000 [ 905.855295][ T29] audit: type=1326 audit(2000001057.449:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27038 comm="syz.6.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016019bf79 code=0x50000 [ 905.913550][ T29] audit: type=1326 audit(2000001057.449:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27038 comm="syz.6.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016019bf79 code=0x50000 [ 905.935888][ T29] audit: type=1326 audit(2000001057.459:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27038 comm="syz.6.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016019bf79 code=0x50000 [ 905.991569][ T29] audit: type=1326 audit(2000001057.459:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27038 comm="syz.6.4007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f016019bf79 code=0x50000 [ 906.080234][T27085] PKCS7: Unknown OID: [4] 5.25.373.87(bad) [ 906.091718][T27085] PKCS7: Only support pkcs7_signedData type [ 906.217037][ T24] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 906.314582][T15820] bridge0: port 3(syz_tun) entered disabled state [ 906.355529][T25841] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88803cee0000 (29)(syz_tun) start [ 906.375341][T15820] syz_tun (unregistering): left allmulticast mode [ 906.382811][T25841] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88803cee0000 (28)(syz_tun) end [ 906.400271][T15820] syz_tun (unregistering): left promiscuous mode [ 906.408445][T15820] bridge0: port 3(syz_tun) entered disabled state [ 906.416739][ T24] usb 5-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 906.432576][ T24] usb 5-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 906.445953][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 906.458130][ T24] usb 5-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 906.472496][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.486133][ T24] usb 5-1: config 0 descriptor?? [ 906.492176][T27051] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 906.750029][T27097] netlink: 212 bytes leftover after parsing attributes in process `syz.6.4015'. [ 906.953367][ T24] uclogic 0003:28BD:0042.0036: interface is invalid, ignoring [ 907.000336][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 907.011304][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 907.022349][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 907.032703][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 907.042808][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 907.157347][T27117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.166595][T27117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.219895][T21579] usb 5-1: USB disconnect, device number 93 [ 907.311467][T27107] hsr0 speed is unknown, defaulting to 1000 [ 907.320010][T27107] wlan1 speed is unknown, defaulting to 1000 [ 907.622221][T27107] chnl_net:caif_netlink_parms(): no params data found [ 907.872662][T27107] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.881665][T27107] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.892329][T27107] bridge_slave_0: entered allmulticast mode [ 907.902813][T27107] bridge_slave_0: entered promiscuous mode [ 907.912774][T27107] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.934932][T27107] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.953315][T27107] bridge_slave_1: entered allmulticast mode [ 907.966674][T27107] bridge_slave_1: entered promiscuous mode [ 908.063762][T27107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.077487][ T24] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 908.091228][T27107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.152623][T27107] team0: Port device team_slave_0 added [ 908.164802][T27107] team0: Port device team_slave_1 added [ 908.217107][T27107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 908.224378][T27107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.253640][T27107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 908.265861][ T24] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 908.277726][T27107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.284815][T27107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.297225][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 194, changing to 11 [ 908.330225][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 51071, setting to 1024 [ 908.345344][ T24] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 908.359277][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 908.367817][T27107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 908.380016][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.418846][T27249] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 908.469631][T27107] hsr_slave_0: entered promiscuous mode [ 908.478733][T27107] hsr_slave_1: entered promiscuous mode [ 908.486600][T27107] debugfs: 'hsr0' already exists in 'hsr' [ 908.492983][T27107] Cannot create hsr debugfs directory [ 908.685580][T27384] overlayfs: failed to clone upperpath [ 908.798499][ T24] usb 5-1: string descriptor 0 read error: -71 [ 908.827407][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 908.840136][ T24] usb 5-1: invalid MIDI out EP 0 [ 909.090078][ T5831] Bluetooth: hci2: command tx timeout [ 909.115284][T27107] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 909.123595][ T24] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 909.152511][T27107] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 909.179665][ T24] usb 5-1: USB disconnect, device number 94 [ 909.201785][T27107] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 909.226004][T27107] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 909.333817][T27479] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4026'. [ 909.376177][ T128] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (21)(ipvlan0) cookie=ffff88807d5f8000 (21)(dummy0) start [ 909.404313][ T128] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (21)(ipvlan0) cookie=ffff88807d5f8000 (15)(dummy0) end [ 909.528742][ T24] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 909.563492][T27107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 909.613801][T27107] 8021q: adding VLAN 0 to HW filter on device team0 [ 909.632641][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 909.639901][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 909.688826][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.696128][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 909.718455][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 909.726338][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 909.736366][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 909.747466][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 909.764193][ T24] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 909.779473][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.797178][ T24] usb 5-1: Product: syz [ 909.801425][ T24] usb 5-1: Manufacturer: syz [ 909.813305][ T24] usb 5-1: SerialNumber: syz [ 909.825512][ T24] usb 5-1: config 0 descriptor?? [ 909.992542][T27466] hsr0 speed is unknown, defaulting to 1000 [ 910.016693][T27466] wlan1 speed is unknown, defaulting to 1000 [ 910.069399][T21619] usb 5-1: USB disconnect, device number 95 [ 910.252463][T27107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 910.322321][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888032a64000 (11)(erspan0) start [ 910.365574][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888032a64000 (4)(erspan0) end [ 910.396838][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff8880846ec000 (4)(gretap0) start [ 910.437734][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff8880846ec000 (3)(gretap0) end [ 910.886568][T27107] veth0_vlan: entered promiscuous mode [ 910.912464][T27107] veth1_vlan: entered promiscuous mode [ 911.003325][T27107] veth0_macvtap: entered promiscuous mode [ 911.035834][T27107] veth1_macvtap: entered promiscuous mode [ 911.083856][T27107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 911.126735][T27107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 911.169903][ T5831] Bluetooth: hci2: command tx timeout [ 911.179904][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.188943][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.218600][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.228724][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.367710][T27562] netlink: 'syz.4.4033': attribute type 1 has an invalid length. [ 911.393258][T27562] netlink: 'syz.4.4033': attribute type 2 has an invalid length. [ 911.405953][T27573] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 911.413372][T27573] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 911.458851][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.466735][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.565381][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 911.591876][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.657886][T27594] netlink: 'syz.6.4038': attribute type 6 has an invalid length. [ 911.808279][ T5828] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 911.899789][T27611] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4042'. [ 911.910764][T27611] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4042'. [ 911.987926][ T5828] usb 5-1: Using ep0 maxpacket: 16 [ 912.000365][T27606] ./file0: Can't open blockdev [ 912.006157][ T5828] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 82, changing to 10 [ 912.019683][ T5828] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 912.032768][ T5828] usb 5-1: config 1 interface 0 has no altsetting 0 [ 912.051951][ T5828] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.40 [ 912.065703][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.074314][ T5828] usb 5-1: Product: syz [ 912.079732][ T5828] usb 5-1: Manufacturer: syz [ 912.084484][ T5828] usb 5-1: SerialNumber: syz [ 912.315855][ T5828] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input101 [ 912.392134][ T5828] usb 5-1: USB disconnect, device number 96 [ 912.455358][ T5828] appletouch 5-1:1.0: input: appletouch disconnected [ 912.761125][T27675] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 912.777186][ T5911] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 912.903797][T27684] netlink: 'syz.6.4052': attribute type 27 has an invalid length. [ 912.939743][ T5911] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.959297][ T5911] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 912.969522][ T5911] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.985245][ T5911] usb 10-1: config 0 descriptor?? [ 912.994769][ T5911] pwc: Askey VC010 type 2 USB webcam detected. [ 913.247152][ T5831] Bluetooth: hci2: command tx timeout [ 913.277141][ T24] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 913.400650][ T5911] pwc: recv_control_msg error -32 req 02 val 2b00 [ 913.447095][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 913.454318][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 913.463857][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 913.473685][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.486199][ T24] usb 5-1: config 0 descriptor?? [ 913.611330][ T5911] pwc: recv_control_msg error -32 req 02 val 2c00 [ 913.819816][ T5911] pwc: recv_control_msg error -71 req 04 val 1300 [ 913.831547][ T5911] pwc: recv_control_msg error -71 req 04 val 1400 [ 913.847935][ T5911] pwc: recv_control_msg error -71 req 02 val 2000 [ 913.856609][ T5911] pwc: recv_control_msg error -71 req 02 val 2100 [ 913.870429][ T5911] pwc: recv_control_msg error -71 req 04 val 1500 [ 913.873145][T27707] netlink: 180 bytes leftover after parsing attributes in process `syz.6.4058'. [ 913.881739][ T5911] pwc: recv_control_msg error -71 req 02 val 2500 [ 913.894734][ T5911] pwc: recv_control_msg error -71 req 02 val 2400 [ 913.901715][ T5911] pwc: recv_control_msg error -71 req 02 val 2600 [ 913.908710][ T5911] pwc: recv_control_msg error -71 req 02 val 2900 [ 913.915467][ T5911] pwc: recv_control_msg error -71 req 02 val 2800 [ 913.923975][ T5911] pwc: recv_control_msg error -71 req 04 val 1100 [ 913.930890][ T5911] pwc: recv_control_msg error -71 req 04 val 1200 [ 913.939524][ T5911] pwc: Registered as video103. [ 913.949279][ T5911] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input102 [ 914.000081][ T5911] usb 10-1: USB disconnect, device number 2 [ 914.480260][T27732] 9pnet_fd: p9_fd_create_tcp (27732): problem connecting socket to 127.0.0.1 [ 914.530586][T27740] tmpfs: Unknown parameter 'context' [ 914.707629][ T5828] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 914.877132][ T5828] usb 10-1: Using ep0 maxpacket: 16 [ 914.898813][ T5828] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 914.909987][ T5828] usb 10-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 914.919290][ T5828] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 914.930381][ T5828] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 914.940386][ T5828] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 914.956629][ T5828] usb 10-1: config 1 interface 1 has no altsetting 0 [ 914.979061][ T5828] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 914.996473][ T5828] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.007787][ T5828] usb 10-1: Product: syz [ 915.012173][ T5828] usb 10-1: Manufacturer: syz [ 915.017121][ T5828] usb 10-1: SerialNumber: syz [ 915.134480][T27756] cgroup: Invalid name [ 915.242009][T27734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 915.256207][T27734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 915.283618][ T5828] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor [ 915.299750][ T5828] usb 10-1: 2:1 : format type 9 is not supported yet [ 915.327405][ T5831] Bluetooth: hci2: command tx timeout [ 915.427364][ T5828] usb 10-1: USB disconnect, device number 3 [ 915.870123][T27802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 915.981354][ T5828] usb 5-1: USB disconnect, device number 97 [ 916.023618][T27810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 916.225638][T27817] fuse: Bad value for 'fd' [ 916.357287][T27829] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 916.363953][T27829] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 916.373260][T27829] vhci_hcd vhci_hcd.0: Device attached [ 916.389247][T27829] overlayfs: failed lookup in lower (newroot/303, name='file0', err=-40): overlapping layers [ 916.473697][T27836] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4077'. [ 916.637122][ T24] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 916.651613][T27850] syzkaller1: entered promiscuous mode [ 916.659805][T27850] syzkaller1: entered allmulticast mode [ 917.204363][T27830] vhci_hcd: connection reset by peer [ 917.211574][ T77] vhci_hcd vhci_hcd.4: stop threads [ 917.217708][ T77] vhci_hcd vhci_hcd.4: release socket [ 917.226668][ T77] vhci_hcd vhci_hcd.4: disconnect device [ 917.527323][T27862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 917.624006][T27870] netlink: 188 bytes leftover after parsing attributes in process `syz.9.4085'. [ 917.725851][T27874] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4086'. [ 917.735764][T27874] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4086'. [ 917.763161][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888057396000 (22)(vlan0) start [ 917.782374][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (20)(ipvlan0) cookie=ffff888057396000 (20)(vlan0) end [ 918.059307][T27898] mmap: syz.9.4089 (27898): VmData 37855232 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data. [ 918.196495][T27915] netlink: 'syz.9.4091': attribute type 1 has an invalid length. [ 918.237060][ T5828] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 918.348822][T27922] kvm: user requested TSC rate below hardware speed [ 918.377307][ T5828] usb 5-1: device descriptor read/64, error -71 [ 918.590395][T27939] 9pnet_fd: Insufficient options for proto=fd [ 918.638584][ T5828] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 918.687983][ T5840] Bluetooth: hci2: command 0x0405 tx timeout [ 918.697235][ T5947] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 918.787313][ T5828] usb 5-1: device descriptor read/64, error -71 [ 918.847070][ T5947] usb 10-1: Using ep0 maxpacket: 16 [ 918.853954][ T5947] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 918.863089][ T5947] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 918.873728][ T5947] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 918.884759][ T5947] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 918.894800][ T5947] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.903947][ T5828] usb usb5-port1: attempt power cycle [ 918.909579][ T5947] usb 10-1: Product: syz [ 918.913844][ T5947] usb 10-1: Manufacturer: syz [ 918.920051][ T5947] usb 10-1: SerialNumber: syz [ 919.257177][ T5828] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 919.288133][ T5828] usb 5-1: device descriptor read/8, error -71 [ 919.335681][ T5947] usb 10-1: 0:2 : does not exist [ 919.527309][ T5828] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 919.548489][ T5828] usb 5-1: device descriptor read/8, error -71 [ 919.660076][ T5828] usb usb5-port1: unable to enumerate USB device [ 920.280666][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 920.290725][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 920.297455][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 920.303593][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 920.330858][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 920.337390][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 920.561382][T27927] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4094'. [ 920.569073][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 920.570982][T27927] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4094'. [ 920.587367][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 920.598221][ T5828] libceph: connect (1)[c::]:6789 error -101 [ 920.604300][ T5828] libceph: mon0 (1)[c::]:6789 connect error [ 920.618707][ T5947] usb 10-1: 1:0: failed to get current value for ch 0 (-22) [ 920.674207][ T5947] usb 10-1: USB disconnect, device number 4 [ 920.707860][T12561] udevd[12561]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 921.097380][T21619] libceph: connect (1)[c::]:6789 error -101 [ 921.103684][T21619] libceph: mon0 (1)[c::]:6789 connect error [ 921.104163][T27978] ceph: No mds server is up or the cluster is laggy [ 921.116777][T27982] ceph: No mds server is up or the cluster is laggy [ 921.118776][T21619] libceph: connect (1)[c::]:6789 error -101 [ 921.131142][T21619] libceph: mon0 (1)[c::]:6789 connect error [ 921.354515][T28023] tmpfs: Unknown parameter 'grpquimit' [ 921.357309][ T5947] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 921.369359][T28023] netlink: 'syz.9.4110': attribute type 29 has an invalid length. [ 921.381924][T28023] trusted_key: syz.9.4110 sent an empty control message without MSG_MORE. [ 921.518799][ T5947] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 921.528083][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.539451][ T5947] usb 5-1: config 0 descriptor?? [ 921.549783][ T5947] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 921.658913][T28031] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4111'. [ 921.726675][T28035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 921.748951][T28035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 921.799680][ T24] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 921.948594][ T5947] gspca_sunplus: reg_w_riv err -71 [ 921.961008][ T5947] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 921.983985][ T5947] usb 5-1: USB disconnect, device number 102 [ 922.246179][T28072] input: syz0 as /devices/virtual/input/input103 [ 922.432659][T28081] netlink: 822 bytes leftover after parsing attributes in process `syz.6.4117'. [ 922.529132][ T5947] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 922.688915][ T5947] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 922.698383][ T5947] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.712363][ T5947] usb 10-1: config 0 descriptor?? [ 922.720842][ T5947] cp210x 10-1:0.0: cp210x converter detected [ 922.797063][T21619] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 922.960244][T21619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.972333][T21619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.983818][T21619] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 922.994520][T21619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.008643][T21619] usb 5-1: config 0 descriptor?? [ 923.424122][T21619] petalynx 0003:18B1:0037.0037: item fetching failed at offset 5/7 [ 923.446853][T21619] petalynx 0003:18B1:0037.0037: parse failed [ 923.454415][T21619] petalynx 0003:18B1:0037.0037: probe with driver petalynx failed with error -22 [ 923.472116][T21619] usb 5-1: USB disconnect, device number 103 [ 923.640806][ T5947] cp210x 10-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 923.654210][ T5947] cp210x 10-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 923.677615][ T5947] cp210x 10-1:0.0: GPIO initialisation failed: -71 [ 923.724542][ T5947] usb 10-1: cp210x converter now attached to ttyUSB0 [ 923.755780][ T5947] usb 10-1: USB disconnect, device number 5 [ 923.783089][ T5947] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 923.793941][ T5947] cp210x 10-1:0.0: device disconnected [ 923.857357][T21619] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 924.019151][T21619] usb 5-1: unable to get BOS descriptor or descriptor too short [ 924.029433][T21619] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 924.055334][T21619] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 924.064817][T21619] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 924.076879][T21619] usb 5-1: config 129 has no interface number 0 [ 924.083520][T21619] usb 5-1: config 129 has no interface number 1 [ 924.090614][T21619] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 924.104824][T21619] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 924.116192][T21619] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 924.135827][T21619] usb 5-1: config 129 interface 135 has no altsetting 0 [ 924.143139][T21619] usb 5-1: config 129 interface 5 has no altsetting 0 [ 924.153720][T21619] usb 5-1: string descriptor 0 read error: -22 [ 924.160253][T21619] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 924.169545][T21619] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.202426][T21619] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 924.212124][T21619] usb 5-1: MIDIStreaming interface descriptor not found [ 924.393685][T28114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.409291][T28114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.421895][T28114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.434267][T28114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.444771][T28183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 924.456193][T28183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.470406][T21619] usb 5-1: USB disconnect, device number 104 [ 924.578763][ T5891] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 924.737190][ T5891] usb 10-1: Invalid ep0 maxpacket: 32 [ 924.877029][ T5891] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 925.057540][ T5891] usb 10-1: Invalid ep0 maxpacket: 32 [ 925.085565][ T5891] usb usb10-port1: attempt power cycle [ 925.403042][T28236] overlayfs: upper fs does not support file handles, falling back to index=off. [ 925.449764][ T5891] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 925.499465][ T5891] usb 10-1: Invalid ep0 maxpacket: 32 [ 925.651357][ T5891] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 925.677821][ T5891] usb 10-1: Invalid ep0 maxpacket: 32 [ 925.683763][ T5891] usb usb10-port1: unable to enumerate USB device [ 925.757108][T21619] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 925.919040][T21619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.946488][T21619] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.958839][T21619] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 925.976328][T21619] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 926.009777][T21619] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.036205][T21619] usb 5-1: config 0 descriptor?? [ 926.481290][T21619] plantronics 0003:047F:FFFF.0038: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 926.664410][T28238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.676077][T28238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.687423][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 926.687441][ T29] audit: type=1326 audit(2000001078.579:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28237 comm="syz.4.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752659bf79 code=0x7ffc0000 [ 926.718609][ T29] audit: type=1326 audit(2000001078.609:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28237 comm="syz.4.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f752659bf79 code=0x7ffc0000 [ 926.742644][ T29] audit: type=1326 audit(2000001078.609:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28237 comm="syz.4.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f752659bf79 code=0x7ffc0000 [ 926.767821][ T29] audit: type=1326 audit(2000001078.609:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28237 comm="syz.4.4140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f752659bf79 code=0x7ffc0000 [ 927.089213][ T5840] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 927.149555][T28291] overlayfs: failed to clone upperpath [ 927.405718][T28305] netlink: 'syz.9.4150': attribute type 21 has an invalid length. [ 927.414450][T28305] netlink: 164 bytes leftover after parsing attributes in process `syz.9.4150'. [ 927.665428][T28295] hsr0 speed is unknown, defaulting to 1000 [ 927.673918][T28295] wlan1 speed is unknown, defaulting to 1000 [ 927.728824][ T5947] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 927.815858][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff8880530e2000 (11)(erspan0) start [ 927.857132][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff8880530e2000 (3)(erspan0) end [ 927.873903][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88807a76c000 (3)(gretap0) start [ 927.891314][ T5947] usb 10-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 927.891347][ T5947] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.916164][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88807a76c000 (3)(gretap0) end [ 927.939577][ T5947] pwc: Logitech/Cisco VT Camera webcam detected. [ 928.097032][ T5891] usb 5-1: reset high-speed USB device number 105 using dummy_hcd [ 928.117772][T28335] netlink: 'syz.9.4150': attribute type 21 has an invalid length. [ 928.125725][T28335] netlink: 164 bytes leftover after parsing attributes in process `syz.9.4150'. [ 928.146823][T28336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 928.192935][T28336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 928.238825][ T5891] usb 5-1: device descriptor read/64, error -32 [ 928.254330][ T5947] pwc: Failed to set LED on/off time (-71) [ 928.274502][ T5947] pwc: send_video_command error -71 [ 928.292043][ T5947] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 928.317029][ T5947] Philips webcam 10-1:127.0: probe with driver Philips webcam failed with error -71 [ 928.353129][ T5947] usb 10-1: USB disconnect, device number 10 [ 928.487059][ T5891] usb 5-1: reset high-speed USB device number 105 using dummy_hcd [ 928.659648][ T5891] usb 5-1: device descriptor read/64, error -32 [ 928.871080][T28368] netlink: 'syz.9.4154': attribute type 1 has an invalid length. [ 928.881319][T28368] netlink: 'syz.9.4154': attribute type 2 has an invalid length. [ 928.917112][ T5891] usb 5-1: reset high-speed USB device number 105 using dummy_hcd [ 928.957264][ T5891] usb 5-1: device descriptor read/8, error -32 [ 929.227269][T28394] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 929.233896][T28394] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 929.242356][T28394] vhci_hcd vhci_hcd.0: Device attached [ 929.303486][T28397] vhci_hcd: connection closed [ 929.311261][ T77] vhci_hcd vhci_hcd.7: stop threads [ 929.321662][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88807b70c000 (7)(syzkaller1) start [ 929.347396][ T77] vhci_hcd vhci_hcd.7: release socket [ 929.356228][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88807b70c000 (7)(syzkaller1) end [ 929.382616][ T77] vhci_hcd vhci_hcd.7: disconnect device [ 929.437071][T21579] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 929.574061][T28422] netlink: 'syz.7.4161': attribute type 46 has an invalid length. [ 929.668283][T28431] infiniband: Added to hash: ib_dev=ffff888032e88000 (0)() ndev=ffff888053578000 (11)(syzkaller0) [ 929.681780][T28431] siw: device registration error -23 [ 929.694161][T28431] infiniband: Removed from hash: ib_dev=ffff888032e88000 (0)() ndev=ffff888053578000 (11)(syzkaller0) [ 930.147678][ T5891] usb 5-1: reset high-speed USB device number 105 using dummy_hcd [ 930.182095][ T5891] usb 5-1: device reset changed ep0 maxpacket size! [ 930.191785][ T5911] usb 5-1: USB disconnect, device number 105 [ 930.267173][ T5947] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 930.347110][ T5911] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 930.417087][ T5947] usb 10-1: Using ep0 maxpacket: 8 [ 930.424218][ T5947] usb 10-1: config 0 has an invalid interface number: 186 but max is 0 [ 930.433008][ T5947] usb 10-1: config 0 has no interface number 0 [ 930.439342][ T5947] usb 10-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 930.450927][ T5947] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 930.462429][ T5947] usb 10-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 930.474935][ T5947] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 930.486286][ T5947] usb 10-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 930.496610][ T5947] usb 10-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 930.512659][ T5947] usb 10-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 930.522204][ T5947] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.531317][ T5911] usb 5-1: Using ep0 maxpacket: 32 [ 930.533130][ T5947] usb 10-1: Product: syz [ 930.544292][ T5911] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 930.547814][ T5947] usb 10-1: Manufacturer: syz [ 930.557125][ T5911] usb 5-1: config 0 has no interface number 0 [ 930.563202][ T5911] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 930.567303][ T5947] usb 10-1: SerialNumber: syz [ 930.575526][ T5911] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.586446][ T5911] usb 5-1: Product: syz [ 930.591035][ T5911] usb 5-1: Manufacturer: syz [ 930.595693][ T5911] usb 5-1: SerialNumber: syz [ 930.603565][ T5947] usb 10-1: config 0 descriptor?? [ 930.609059][ T5911] usb 5-1: config 0 descriptor?? [ 930.626212][ T5911] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 930.677324][T28484] netlink: 'syz.6.4172': attribute type 39 has an invalid length. [ 930.822751][ T5911] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 930.834076][ T5947] iowarrior 10-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 930.878704][ T5911] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 930.930966][T28501] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4175'. [ 931.032409][ T5947] usb 10-1: USB disconnect, device number 11 [ 931.043855][T28505] netlink: 'syz.6.4176': attribute type 21 has an invalid length. [ 931.059340][T28505] netlink: 388 bytes leftover after parsing attributes in process `syz.6.4176'. [ 931.415372][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.732379][T28526] kAFS: unparsable volume name [ 931.947394][T28540] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4183'. [ 931.958019][T28540] netlink: 'syz.6.4183': attribute type 10 has an invalid length. [ 931.966120][T28540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 931.996556][T28540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 932.015422][T28541] IPVS: ip_vs_add_dest(): server weight less than zero [ 932.023729][T21619] IPVS: starting estimator thread 0... [ 932.040265][T28540] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 932.057798][ T5947] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 932.117052][T28542] IPVS: using max 31 ests per chain, 74400 per kthread [ 932.167259][T28526] hsr0 speed is unknown, defaulting to 1000 [ 932.175838][T28526] wlan1 speed is unknown, defaulting to 1000 [ 932.231732][ T5947] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 932.240950][ T5947] usb 10-1: config 0 has no interface number 0 [ 932.247725][ T5947] usb 10-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 932.257046][ T5947] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.269539][ T5947] usb 10-1: config 0 descriptor?? [ 932.291261][ T5947] usb 10-1: selecting invalid altsetting 1 [ 932.306772][ T5947] dvb_ttusb_budget: ttusb_init_controller: error [ 932.315396][ T5947] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 932.436724][ T5947] DVB: Unable to find symbol cx22700_attach() [ 932.501787][ T5947] DVB: Unable to find symbol tda10046_attach() [ 932.508162][ T5947] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 932.616204][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 932.638010][ T5947] usb 5-1: USB disconnect, device number 106 [ 932.662234][ T5947] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 932.685992][ T5947] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 932.712100][ T5947] quatech2 5-1:0.51: device disconnected [ 933.037452][ T5947] usb 10-1: USB disconnect, device number 12 [ 933.247064][T21579] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 933.411199][T21579] usb 5-1: Using ep0 maxpacket: 8 [ 933.428970][T21579] usb 5-1: unable to get BOS descriptor or descriptor too short [ 933.449232][T21579] usb 5-1: config 9 has an invalid interface number: 164 but max is 0 [ 933.459424][T21579] usb 5-1: config 9 has no interface number 0 [ 933.466634][T21579] usb 5-1: config 9 interface 164 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 933.497068][T21579] usb 5-1: config 9 interface 164 has no altsetting 0 [ 933.508931][T21579] usb 5-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 4.9a [ 933.521845][T21579] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.541960][T21579] usb 5-1: Product: syz [ 933.546211][T21579] usb 5-1: Manufacturer: syz [ 933.572527][T21579] usb 5-1: SerialNumber: syz [ 933.595947][T28629] pimreg: entered allmulticast mode [ 933.614448][T28629] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4192'. [ 933.639728][T28637] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.794788][T28598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.808108][T28598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.851110][T21579] appletouch 5-1:9.164: Could not find int-in endpoint [ 933.877821][T21579] appletouch 5-1:9.164: probe with driver appletouch failed with error -5 [ 933.902559][T21579] usbhid 5-1:9.164: couldn't find an input interrupt endpoint [ 933.932744][T21579] usb 5-1: USB disconnect, device number 107 [ 933.947068][ T5947] usb 10-1: new full-speed USB device number 13 using dummy_hcd [ 933.963072][T28659] loop8: detected capacity change from 0 to 1 [ 933.989104][T28659] Dev loop8: unable to read RDB block 1 [ 933.994766][T28659] loop8: unable to read partition table [ 934.027333][T28659] loop8: partition table beyond EOD, truncated [ 934.033607][T28659] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 934.097141][ T5947] usb 10-1: device descriptor read/64, error -71 [ 934.313967][T28671] netlink: 'syz.7.4198': attribute type 27 has an invalid length. [ 934.337309][ T5947] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 934.477405][ T5947] usb 10-1: device descriptor read/64, error -71 [ 934.597515][ T5947] usb usb10-port1: attempt power cycle [ 934.771112][ T3492] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88807eea4000 (11)(erspan0) start [ 934.799224][ T3492] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88807eea4000 (4)(erspan0) end [ 934.825116][ T3492] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88803cf76000 (4)(gretap0) start [ 934.845217][ T3492] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88803cf76000 (4)(gretap0) end [ 934.950262][ T5947] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 934.977966][ T5947] usb 10-1: device descriptor read/8, error -71 [ 935.047156][T28688] netlink: 'syz.6.4199': attribute type 1 has an invalid length. [ 935.167121][ T5891] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 935.217865][ T5947] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 935.237738][ T5947] usb 10-1: device descriptor read/8, error -71 [ 935.337056][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 935.350034][ T5947] usb usb10-port1: unable to enumerate USB device [ 935.360846][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 935.372268][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 935.384011][ T5891] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice= 1.00 [ 935.394326][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.414332][ T5891] usb 5-1: config 0 descriptor?? [ 935.436748][ T5891] xbox_remote_probe: endpoint_in message size==0? [ 935.595441][T28688] hsr0 speed is unknown, defaulting to 1000 [ 935.604086][T28688] wlan1 speed is unknown, defaulting to 1000 [ 935.636200][ T5891] usbhid 5-1:0.0: can't add hid device: -71 [ 935.658607][ T5891] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 935.679491][ T5891] usb 5-1: USB disconnect, device number 108 [ 935.745830][ T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88802d7da000 (4)(erspan0) start [ 935.765985][ T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88802d7da000 (4)(erspan0) end [ 935.784304][ T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88805be18000 (10)(gretap0) start [ 935.803410][ T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88805be18000 (4)(gretap0) end [ 936.205061][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff8880682b0000 (12)(wlan0) start [ 936.251819][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff8880682b0000 (3)(wlan0) end [ 936.399268][T28769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 936.445535][T28772] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 936.797133][ T5891] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 936.980490][ T5891] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 936.991310][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.004668][ T5891] usb 5-1: Product: syz [ 937.009805][ T5891] usb 5-1: Manufacturer: syz [ 937.014544][ T5891] usb 5-1: SerialNumber: syz [ 937.047099][ T5878] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 937.209185][ T5878] usb 10-1: config 255 has an invalid interface number: 13 but max is 0 [ 937.217911][ T5878] usb 10-1: config 255 has no interface number 0 [ 937.224373][ T5878] usb 10-1: config 255 interface 13 has no altsetting 0 [ 937.235578][ T5878] usb 10-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=96.3e [ 937.245104][ T5878] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 937.253427][ T5878] usb 10-1: Product: syz [ 937.258261][ T5878] usb 10-1: Manufacturer: syz [ 937.263055][ T5878] usb 10-1: SerialNumber: syz [ 937.276689][ T5878] quatech2 10-1:255.13: Quatech 2nd gen USB to Serial Driver converter detected [ 937.478464][ T5878] usb 10-1: qt2_attach - failed to power on unit: -71 [ 937.490322][ T5878] quatech2 10-1:255.13: probe with driver quatech2 failed with error -71 [ 937.509049][ T5878] usb 10-1: USB disconnect, device number 17 [ 938.037594][ T5891] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 938.052882][ T5891] cdc_ncm 5-1:1.0: setting rx_max = 16384 [ 938.100358][T28838] syzkaller1: entered allmulticast mode [ 938.413854][T28859] x_tables: duplicate entry at hook 2 [ 938.641189][T28781] comedi comedi0: Minor 48 is invalid! [ 938.655909][ T5891] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 938.715404][ T5891] usb 5-1: USB disconnect, device number 109 [ 938.727525][ T5891] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 938.738234][ T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888041d94000 (10)(usb0) start [ 938.771544][ T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888041d94000 (5)(usb0) end [ 939.037093][ T5947] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 939.199050][ T5947] usb 10-1: config 0 has an invalid interface number: 255 but max is 1 [ 939.227389][ T5947] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 939.258138][ T5947] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 939.277183][ T5947] usb 10-1: config 0 has no interface number 0 [ 939.287783][ T5947] usb 10-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 939.300936][ T5947] usb 10-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 939.315412][ T5947] usb 10-1: config 0 interface 255 has no altsetting 0 [ 939.331229][ T5947] usb 10-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 939.340866][ T5947] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.350562][ T5947] usb 10-1: Product: syz [ 939.355501][ T5947] usb 10-1: Manufacturer: syz [ 939.366076][ T5947] usb 10-1: SerialNumber: syz [ 939.375083][ T5947] usb 10-1: config 0 descriptor?? [ 939.617514][ T5947] usb 10-1: USB disconnect, device number 18 [ 939.928639][T28948] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4245'. [ 940.107077][ T5947] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 940.261493][ T5947] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 940.271179][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=25 [ 940.279938][ T5947] usb 5-1: Product: syz [ 940.284413][ T5947] usb 5-1: Manufacturer: syz [ 940.289933][ T5947] usb 5-1: SerialNumber: syz [ 940.301052][ T5947] usb 5-1: config 0 descriptor?? [ 940.516446][T28940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.538049][T28940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.170478][T28940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.179448][T28940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.189877][ T5947] usb 5-1: Firmware version (0.0) predates our first public release. [ 941.210731][ T5947] usb 5-1: Please update to version 0.2 or newer [ 941.285869][ T5947] usb 5-1: USB disconnect, device number 110 [ 941.997349][ T24] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 942.185828][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 942.207646][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 942.220640][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 942.238649][ T24] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 942.248845][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.259514][ T24] usb 5-1: Product: syz [ 942.265097][ T24] usb 5-1: Manufacturer: syz [ 942.272796][ T24] usb 5-1: SerialNumber: syz [ 942.280516][ T24] usb 5-1: config 0 descriptor?? [ 942.286602][T29012] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 942.297687][T29012] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 942.306446][ T24] usb 5-1: ucan: probing device on interface #0 [ 942.577110][ T5891] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 942.713731][T29072] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4270'. [ 942.762325][ T5891] usb 10-1: Using ep0 maxpacket: 32 [ 942.770811][ T5891] usb 10-1: config 0 has an invalid interface number: 136 but max is 0 [ 942.787061][ T5891] usb 10-1: config 0 has no interface number 0 [ 942.793369][ T5891] usb 10-1: config 0 interface 136 altsetting 0 bulk endpoint 0xA has invalid maxpacket 32 [ 942.824336][T29077] netlink: 16146 bytes leftover after parsing attributes in process `syz.6.4269'. [ 942.828732][ T5891] usb 10-1: config 0 interface 136 altsetting 0 endpoint 0x82 has invalid maxpacket 65535, setting to 1024 [ 942.855957][ T5891] usb 10-1: config 0 interface 136 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 942.871482][ T5891] usb 10-1: New USB device found, idVendor=10cf, idProduct=8063, bcdDevice=d1.d2 [ 942.883185][ T5891] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.893591][ T5891] usb 10-1: Product: syz [ 942.898521][ T5891] usb 10-1: Manufacturer: syz [ 942.903409][ T5891] usb 10-1: SerialNumber: syz [ 942.915377][ T5891] usb 10-1: config 0 descriptor?? [ 942.940067][T29053] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 942.955524][T29053] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 942.964927][ T24] ucan 5-1:0.0 can0: registered device [ 943.008564][ T5891] comedi comedi4: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 943.091069][T29096] overlayfs: missing 'lowerdir' [ 943.096806][T29097] overlayfs: missing 'lowerdir' [ 943.128161][ T128] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88803a18c000 (12)(rose0) start [ 943.148734][ T128] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88803a18c000 (7)(rose0) end [ 943.193694][ T24] ucan 5-1:0.0 can0: firmware string: unknown [ 943.207861][ T5947] usb 10-1: USB disconnect, device number 19 [ 943.209673][ T24] usb 5-1: USB disconnect, device number 111 [ 943.393145][T29125] tmpfs: Unknown parameter 'usrquota_inode_hardlit' [ 943.594549][T29131] overlayfs: failed to clone upperpath [ 943.605426][T29131] overlay: ./file0 is not a directory [ 943.950326][T29147] netlink: 'syz.6.4284': attribute type 27 has an invalid length. [ 943.966537][T29147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 944.258638][T29164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 944.312437][T29168] pim6reg: entered allmulticast mode [ 944.475372][ T5911] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 944.668112][ T5911] usb 10-1: unable to get BOS descriptor or descriptor too short [ 944.677852][ T5911] usb 10-1: not running at top speed; connect to a high speed hub [ 944.811869][ T5911] usb 10-1: config 1 interface 1 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 944.854009][ T5911] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 944.885624][ T5911] usb 10-1: config 1 interface 1 has no altsetting 0 [ 944.901342][ T5911] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 944.912238][ T5911] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.921354][ T5911] usb 10-1: Product: syz [ 944.925828][ T5911] usb 10-1: Manufacturer: syz [ 945.279815][ T5911] usb 10-1: SerialNumber: syz [ 945.455105][T29189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4296'. [ 945.475492][T29189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4296'. [ 945.518629][ T29] audit: type=1800 audit(2000001097.399:279): pid=29190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.6.4295" name="/newroot/479/file0" dev="tmpfs" ino=2580 res=0 errno=0 [ 945.527689][ T5911] usb 10-1: 2:1 : unsupported format bits 0x40 [ 945.551140][T29189] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4296'. [ 945.572719][T29189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4296'. [ 945.589997][T29189] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4296'. [ 945.644726][ T5911] hub 10-1:1.1: Invalid hub with more than one config or interface [ 945.678201][ T5911] hub 10-1:1.1: probe with driver hub failed with error -22 [ 945.713715][ T5911] usb 10-1: USB disconnect, device number 20 [ 945.733992][T29213] overlayfs: failed to clone upperpath [ 945.907349][ T5878] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 946.095255][ T29] audit: type=1326 audit(2000001097.979:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29243 comm="syz.9.4303" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b02d9bf79 code=0x0 [ 946.103321][ T5878] usb 5-1: unable to get BOS descriptor or descriptor too short [ 946.129554][ T5878] usb 5-1: not running at top speed; connect to a high speed hub [ 946.144337][ T5878] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 946.161582][ T5878] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 946.177566][ T5878] usb 5-1: string descriptor 0 read error: -22 [ 946.183897][ T5878] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 946.193308][ T5878] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.215621][ T5878] usb 5-1: 0:2 : does not exist [ 946.784242][T29257] netlink: 512 bytes leftover after parsing attributes in process `syz.7.4307'. [ 946.912056][ T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888034260000 (16)(netdevsim3) start [ 946.935944][ T128] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.955244][T29259] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4308'. [ 946.977506][ T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888034260000 (5)(netdevsim3) end [ 947.151051][ T7434] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88807b250000 (13)(netdevsim2) start [ 947.171278][ T128] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.197665][ T7434] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88807b250000 (7)(netdevsim2) end [ 947.352319][ T128] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.367768][ T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888077f78000 (8)(netdevsim1) start [ 947.426163][ T77] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888077f78000 (5)(netdevsim1) end [ 947.518634][ T24] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 947.613527][ T5878] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 947.632544][T29289] fuse: Bad value for 'fd' [ 947.643392][T29289] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4314'. [ 947.653874][ T3492] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888029640000 (11)(netdevsim0) start [ 947.658546][ T128] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.673863][ T3492] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888029640000 (8)(netdevsim0) end [ 947.700641][ T5878] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 947.717337][ T5878] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 947.740575][T21579] libceph: connect (1)[c::]:6789 error -101 [ 947.760537][T21579] libceph: mon0 (1)[c::]:6789 connect error [ 947.781324][ T24] usb 10-1: too many configurations: 237, using maximum allowed: 8 [ 947.811515][ T5878] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 947.851480][ T24] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 947.882723][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.903099][ T24] usb 10-1: Product: syz [ 947.917000][ T24] usb 10-1: Manufacturer: syz [ 947.921766][ T24] usb 10-1: SerialNumber: syz [ 947.938947][ T5878] usb 5-1: USB disconnect, device number 112 [ 947.972325][ T24] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 948.024983][ T797] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 948.033629][T21579] libceph: connect (1)[c::]:6789 error -101 [ 948.065985][T21579] libceph: mon0 (1)[c::]:6789 connect error [ 948.106848][ T128] bridge_slave_1: left allmulticast mode [ 948.136054][ T128] bridge_slave_1: left promiscuous mode [ 948.146019][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.172581][ T128] bridge_slave_0: left allmulticast mode [ 948.187050][ T128] bridge_slave_0: left promiscuous mode [ 948.204564][ T128] bridge0: port 1(bridge_slave_0) entered disabled state [ 948.236145][T29329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4316'. [ 948.356659][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888033652000 (15)(ip6gretap0) start [ 948.398796][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888033652000 (5)(ip6gretap0) end [ 948.462344][T29289] ceph: No mds server is up or the cluster is laggy [ 948.482448][ T5911] usb 10-1: USB disconnect, device number 21 [ 948.517123][ T5878] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 948.607318][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88802cb32000 (7)(erspan0) start [ 948.642905][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88802cb32000 (5)(erspan0) end [ 948.657609][ T5878] usb 5-1: device descriptor read/64, error -71 [ 948.685365][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888036e68000 (12)(gretap0) start [ 948.704479][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888036e68000 (7)(gretap0) end [ 948.734029][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88805c5b2000 (15)(geneve1) start [ 948.753328][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88805c5b2000 (7)(geneve1) end [ 948.771408][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff8880337be000 (7)(geneve0) start [ 948.795819][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff8880337be000 (7)(geneve0) end [ 948.814540][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888076698000 (12)(bridge0) start [ 948.832125][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888076698000 (12)(bridge0) end [ 948.874019][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88807db4c000 (17)(bond0) start [ 948.891994][ T128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.907692][ T128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.909260][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff88807db4c000 (14)(bond0) end [ 948.936519][ T128] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 948.957326][ T5878] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 948.973350][ T128] bond0 (unregistering): Released all slaves [ 949.030339][ T24] wlan1 speed is unknown, defaulting to 1000 [ 949.037324][T29345] wlan1 speed is unknown, defaulting to 1000 [ 949.106422][ T797] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 949.114699][ T5878] usb 5-1: device descriptor read/64, error -71 [ 949.126685][ T797] ath9k_htc: Failed to initialize the device [ 949.144582][ T5911] usb 10-1: ath9k_htc: USB layer deinitialized [ 949.200981][T29364] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4319'. [ 949.239258][ T5878] usb usb5-port1: attempt power cycle [ 949.246009][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888098c00000 (4)(wlan3) start [ 949.264412][T29364] 9p: Bad value for 'rfdno' [ 949.304142][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888098c00000 (4)(wlan3) end [ 949.344519][T29371] tipc: Started in network mode [ 949.359436][T29371] tipc: Node identity 0ac044047872, cluster identity 4711 [ 949.367115][T29371] tipc: Enabled bearer , priority 0 [ 949.374832][T29372] ip6gre0: entered promiscuous mode [ 949.381271][T29372] ip6gre0: entered allmulticast mode [ 949.426195][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff8880371c8000 (9)(wlan2) start [ 949.470517][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff8880371c8000 (3)(wlan2) end [ 949.579731][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888086230000 (13)(wlan1) start [ 949.580511][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba30000 (7)(yz2) start [ 949.599102][ T12] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff888056180000 (13)(syz1) rdma_ndev=ffff88803482a000 (19)(ipvlan0) cookie=ffff888086230000 (11)(wlan1) end [ 949.625532][ T5878] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 949.637221][ T5947] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 949.649618][ T5878] usb 5-1: device descriptor read/8, error -71 [ 949.686816][ T7433] infiniband: Removed from hash: ib_dev=ffff88807ba30000 (0)(yz2) ndev=ffff888086230000 (3)(wlan1) [ 949.690072][T29386] ================================================================== [ 949.705842][T29386] BUG: KASAN: slab-use-after-free in __list_add_valid_or_report+0x4e/0x130 [ 949.714472][T29386] Read of size 8 at addr ffff88802b131400 by task syz.6.4322/29386 [ 949.722418][T29386] [ 949.724795][T29386] CPU: 0 UID: 0 PID: 29386 Comm: syz.6.4322 Tainted: G L syzkaller #0 PREEMPT(full) [ 949.724829][T29386] Tainted: [L]=SOFTLOCKUP [ 949.724838][T29386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 949.724852][T29386] Call Trace: [ 949.724861][T29386] [ 949.724871][T29386] dump_stack_lvl+0xe8/0x150 [ 949.724905][T29386] print_report+0xba/0x230 [ 949.724928][T29386] ? __list_add_valid_or_report+0x4e/0x130 [ 949.724948][T29386] kasan_report+0x117/0x150 [ 949.724990][T29386] ? __list_add_valid_or_report+0x4e/0x130 [ 949.725014][T29386] __list_add_valid_or_report+0x4e/0x130 [ 949.725037][T29386] clone_mnt+0x447/0x9a0 [ 949.725063][T29386] copy_tree+0xde/0x930 [ 949.725087][T29386] ? __do_loopback+0x1a9/0x3f0 [ 949.725108][T29386] open_detached_copy+0x229/0x540 [ 949.725129][T29386] ? do_getname+0x151/0x250 [ 949.725156][T29386] vfs_open_tree+0x361/0x3d0 [ 949.725176][T29386] ? __pfx_vfs_open_tree+0x10/0x10 [ 949.725200][T29386] __x64_sys_open_tree+0x96/0x110 [ 949.725227][T29386] do_syscall_64+0x14d/0xf80 [ 949.725251][T29386] ? trace_irq_disable+0x3b/0x150 [ 949.725278][T29386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.725299][T29386] ? clear_bhb_loop+0x40/0x90 [ 949.725321][T29386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.725340][T29386] RIP: 0033:0x7f016019bf79 [ 949.725360][T29386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.725378][T29386] RSP: 002b:00007f0161131028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 949.725401][T29386] RAX: ffffffffffffffda RBX: 00007f0160415fa0 RCX: 00007f016019bf79 [ 949.725417][T29386] RDX: 0000000000089901 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 949.725431][T29386] RBP: 00007f01602327e0 R08: 0000000000000000 R09: 0000000000000000 [ 949.725444][T29386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 949.725457][T29386] R13: 00007f0160416038 R14: 00007f0160415fa0 R15: 00007fffb367f658 [ 949.725480][T29386] [ 949.725488][T29386] [ 949.727744][ T7433] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807ba30000 (0)(yz2) end [ 949.736444][T29386] Allocated by task 29338: [ 949.736464][T29386] kasan_save_track+0x3e/0x80 [ 949.736488][T29386] __kasan_slab_alloc+0x6c/0x80 [ 949.736507][T29386] kmem_cache_alloc_noprof+0x2bc/0x650 [ 949.958626][T29386] mas_alloc_nodes+0x291/0x350 [ 949.963430][T29386] mas_preallocate+0x2d6/0x640 [ 949.968224][T29386] vma_link+0x123/0x470 [ 949.972407][T29386] insert_vm_struct+0x199/0x260 [ 949.977368][T29386] create_init_stack_vma+0x304/0x670 [ 949.982699][T29386] alloc_bprm+0x495/0x5c0 [ 949.987052][T29386] do_execveat_common+0x175/0x690 [ 949.992097][T29386] __x64_sys_execve+0x97/0xc0 [ 949.996799][T29386] do_syscall_64+0x14d/0xf80 [ 950.001417][T29386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.007348][T29386] [ 950.009706][T29386] Freed by task 7434: [ 950.013712][T29386] kasan_save_track+0x3e/0x80 [ 950.018416][T29386] kasan_save_free_info+0x46/0x50 [ 950.023484][T29386] __kasan_slab_free+0x5c/0x80 [ 950.028271][T29386] __rcu_free_sheaf_prepare+0x129/0x290 [ 950.033843][T29386] rcu_free_sheaf+0x31/0x200 [ 950.038453][T29386] rcu_core+0x7cd/0x1070 [ 950.042720][T29386] handle_softirqs+0x22a/0x870 [ 950.047505][T29386] __irq_exit_rcu+0x5f/0x150 [ 950.052115][T29386] irq_exit_rcu+0x9/0x30 [ 950.056376][T29386] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 950.062025][T29386] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 950.068029][T29386] [ 950.070380][T29386] The buggy address belongs to the object at ffff88802b131400 [ 950.070380][T29386] which belongs to the cache maple_node of size 256 [ 950.084368][T29386] The buggy address is located 0 bytes inside of [ 950.084368][T29386] freed 256-byte region [ffff88802b131400, ffff88802b131500) [ 950.098011][T29386] [ 950.100361][T29386] The buggy address belongs to the physical page: [ 950.106821][T29386] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b130 [ 950.115618][T29386] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 950.124136][T29386] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 950.131708][T29386] page_type: f5(slab) [ 950.135731][T29386] raw: 00fff00000000040 ffff88813ff39c80 dead000000000100 dead000000000122 [ 950.144337][T29386] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 950.152957][T29386] head: 00fff00000000040 ffff88813ff39c80 dead000000000100 dead000000000122 [ 950.161681][T29386] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 950.170380][T29386] head: 00fff00000000001 ffffea0000ac4c01 00000000ffffffff 00000000ffffffff [ 950.179068][T29386] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 950.187751][T29386] page dumped because: kasan: bad access detected [ 950.194180][T29386] page_owner tracks the page as allocated [ 950.199911][T29386] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 29267, tgid 29267 (syz.6.4310), ts 947263293095, free_ts 947195128147 [ 950.221647][T29386] post_alloc_hook+0x231/0x280 [ 950.226463][T29386] get_page_from_freelist+0x24dc/0x2580 [ 950.232048][T29386] __alloc_frozen_pages_noprof+0x18d/0x380 [ 950.237885][T29386] allocate_slab+0x77/0x660 [ 950.242417][T29386] refill_objects+0x331/0x3c0 [ 950.247121][T29386] kmem_cache_prefill_sheaf+0x2d4/0x530 [ 950.252782][T29386] mas_alloc_nodes+0x1c2/0x350 [ 950.257564][T29386] mas_preallocate+0x2d6/0x640 [ 950.262348][T29386] __split_vma+0x318/0xa40 [ 950.266793][T29386] vma_modify+0x91b/0x2060 [ 950.271319][T29386] vma_modify_flags+0x24b/0x330 [ 950.276191][T29386] mprotect_fixup+0x47a/0xa80 [ 950.280888][T29386] do_mprotect_pkey+0x8ab/0xcd0 [ 950.285758][T29386] __x64_sys_mprotect+0x80/0x90 [ 950.290630][T29386] do_syscall_64+0x14d/0xf80 [ 950.295245][T29386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.301160][T29386] page last free pid 29258 tgid 29258 stack trace: [ 950.307682][T29386] __free_frozen_pages+0xc2b/0xdb0 [ 950.312814][T29386] __mmdrop+0xb5/0x750 [ 950.316911][T29386] exit_mm+0x168/0x220 [ 950.321008][T29386] do_exit+0x62e/0x2320 [ 950.325191][T29386] do_group_exit+0x21b/0x2d0 [ 950.329804][T29386] __x64_sys_exit_group+0x3f/0x40 [ 950.334849][T29386] x64_sys_call+0x221a/0x2240 [ 950.339559][T29386] do_syscall_64+0x14d/0xf80 [ 950.344178][T29386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.350179][T29386] [ 950.352561][T29386] Memory state around the buggy address: [ 950.358320][T29386] ffff88802b131300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 950.366405][T29386] ffff88802b131380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 950.374485][T29386] >ffff88802b131400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 950.382581][T29386] ^ [ 950.386669][T29386] ffff88802b131480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 950.394746][T29386] ffff88802b131500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 950.402841][T29386] ================================================================== [ 950.427706][T21619] tipc: Node number set to 1924285444 [ 950.460234][T29386] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 950.467771][T29386] CPU: 0 UID: 0 PID: 29386 Comm: syz.6.4322 Tainted: G L syzkaller #0 PREEMPT(full) [ 950.478756][T29386] Tainted: [L]=SOFTLOCKUP [ 950.483117][T29386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 950.493212][T29386] Call Trace: [ 950.496528][T29386] [ 950.499491][T29386] vpanic+0x56c/0xa60 [ 950.503528][T29386] ? __pfx_vpanic+0x10/0x10 [ 950.508081][T29386] ? __pfx___schedule+0x10/0x10 [ 950.512986][T29386] panic+0xc5/0xd0 [ 950.516764][T29386] ? __pfx_panic+0x10/0x10 [ 950.521229][T29386] ? preempt_schedule_thunk+0x16/0x30 [ 950.526660][T29386] ? __list_add_valid_or_report+0x4e/0x130 [ 950.532511][T29386] check_panic_on_warn+0x89/0xb0 [ 950.537483][T29386] ? __list_add_valid_or_report+0x4e/0x130 [ 950.543317][T29386] end_report+0x73/0x180 [ 950.547585][T29386] ? __list_add_valid_or_report+0x4e/0x130 [ 950.553424][T29386] kasan_report+0x128/0x150 [ 950.557968][T29386] ? __list_add_valid_or_report+0x4e/0x130 [ 950.563824][T29386] __list_add_valid_or_report+0x4e/0x130 [ 950.569503][T29386] clone_mnt+0x447/0x9a0 [ 950.573787][T29386] copy_tree+0xde/0x930 [ 950.577971][T29386] ? __do_loopback+0x1a9/0x3f0 [ 950.582766][T29386] open_detached_copy+0x229/0x540 [ 950.587818][T29386] ? do_getname+0x151/0x250 [ 950.592354][T29386] vfs_open_tree+0x361/0x3d0 [ 950.596963][T29386] ? __pfx_vfs_open_tree+0x10/0x10 [ 950.602108][T29386] __x64_sys_open_tree+0x96/0x110 [ 950.607166][T29386] do_syscall_64+0x14d/0xf80 [ 950.611804][T29386] ? trace_irq_disable+0x3b/0x150 [ 950.616956][T29386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.623061][T29386] ? clear_bhb_loop+0x40/0x90 [ 950.627782][T29386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.633709][T29386] RIP: 0033:0x7f016019bf79 [ 950.638235][T29386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 950.657954][T29386] RSP: 002b:00007f0161131028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 950.666407][T29386] RAX: ffffffffffffffda RBX: 00007f0160415fa0 RCX: 00007f016019bf79 [ 950.674399][T29386] RDX: 0000000000089901 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 950.682391][T29386] RBP: 00007f01602327e0 R08: 0000000000000000 R09: 0000000000000000 [ 950.690429][T29386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 950.698427][T29386] R13: 00007f0160416038 R14: 00007f0160415fa0 R15: 00007fffb367f658 [ 950.706433][T29386] [ 950.710080][T29386] Kernel Offset: disabled [ 950.714419][T29386] Rebooting in 86400 seconds..