last executing test programs: 22m58.561578986s ago: executing program 32 (id=85): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) finit_module(r0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000080)="817bb97cdac2f8f819447aa4a50c293af36b43cab2641b7753", 0x19}], 0x2}, 0x24040050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) creat(&(0x7f0000000080)='./file0\x00', 0x2) r2 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="140100002e0001000000000000000000080100800c0000000800000000000000140001"], 0x114}], 0x1}, 0x0) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) finit_module(r0, 0x0, 0x0) (async) sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000080)="817bb97cdac2f8f819447aa4a50c293af36b43cab2641b7753", 0x19}], 0x2}, 0x24040050) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) (async) creat(&(0x7f0000000080)='./file0\x00', 0x2) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="140100002e0001000000000000000000080100800c0000000800000000000000140001"], 0x114}], 0x1}, 0x0) (async) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) (async) 20m47.474967103s ago: executing program 33 (id=867): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) vmsplice(r0, &(0x7f0000000180), 0x0, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000dd0100"]) r6 = dup(r2) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) (async) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',cache=f']) (async) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB=',cache=f']) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 20m36.774983836s ago: executing program 34 (id=1011): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010829bd700000000000070000000500130009000000140008df7f16a184b614bc000000000000000000cbbb366885bb3b2ae23da4f16ebbc57e26649abc60f4f2bf90b1ab44e0992ad01b40d75a3ed30897fa215946da27ba54954010570e1eeeb58a77"], 0x30}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) brk(0x1ff) (async, rerun: 32) syz_usb_control_io(r5, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 18m47.843706945s ago: executing program 35 (id=1695): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x4, &(0x7f0000000200)={0x0, 0x7, 0xfffc, 0x35e}, 0xfffffffffffffe1d, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='ufs\x00', 0xa50002, 0x0) 14m44.487412136s ago: executing program 5 (id=3681): pipe2(&(0x7f0000000000), 0x0) (async) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x40800) r3 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r4 = shmat(r3, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x4, &(0x7f0000ffd000/0x2000)=nil) (async) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x4, &(0x7f0000ffd000/0x2000)=nil) shmdt(r4) tee(r0, r2, 0xfffffffffffffc01, 0x0) (async) tee(r0, r2, 0xfffffffffffffc01, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000640)=0x10) close(r7) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x2, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r9, 0x400c6615, 0x0) write$bt_hci(r8, &(0x7f0000000380)=ANY=[], 0x8) (async) write$bt_hci(r8, &(0x7f0000000380)=ANY=[], 0x8) ioctl$sock_bt_hci(r6, 0x400448ca, &(0x7f0000000180)) (async) ioctl$sock_bt_hci(r6, 0x400448ca, &(0x7f0000000180)) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x4, 0x3}, 0x6) (async) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x4, 0x3}, 0x6) creat(&(0x7f0000001380)='./file0\x00', 0x12c) syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) (async) r10 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r10, 0xc01c64ae, &(0x7f00000000c0)={0x0, 0x13, 0x4, 0x6162f01a, 0x20, 0x18, 0xfca}) 14m44.292584286s ago: executing program 5 (id=3687): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x40, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$uid(0x0, 0xee01, 0x4004) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x8) close(r5) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000e400)={0x2020, 0x0, 0x0, 0x0}, 0x204a) write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, r7, {0x7, 0x1f, 0xffffffff, 0x0, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x0, {0x410000003, 0x10, 0x0, {0x0, 0x800000001, 0x1000, 0x7, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x8001, 0x0, r8, 0x0, 0x0, 0x10000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r5, &(0x7f0000006100)="d1f89c14e7f8640b43b1f1d1e00b2b0b3146d223d281c321953af4ade40d696d07f4b7d2ed1c1fd5691291056351901df48500519139568c88f49bb32801f1eb24b30efbab27313a3acab179fd6ce1f7150b0f0aae8cde4dd46b4f63cd60f647ea9bcf83f107e981a050f61f5d1bb5c7883f93269bba25e4122796c0f88ab27d913586d055f8c977ffcb05c85210f93cbad91499fedb2ab95e06bf009e54b422f66cef043560f4d77ae5c083cc67fcb0d3f10699aac8cceaf6d3b8f32e15555924edbc42b4ca3d2f4a92f5d30c18176c3abd17db4de2ef74472ffb637dd07460aeb7c882811c089217d88cbb5eec41d2be903e1c65cad2ad742f9ba8b512adab575f89d539492034ddfe4fd28205c8f27c52f0f631703d384634bfcad149ea9e842125062ac67006ca474be31f708b4f4f1e0c97a4eb2f26b671e172e251e8a6e9e1510bb74931aaf6b6ff84f8aefd63591f18f2ae8028985d78fcc5ed2d57bf595d3068e904387eeddd19bd359721a432bed0bff033cbca6acfddb6529fb11290bf1563b45034bd9b6c331091efef04303ca9942fcb64e56f3ff74d610e14c8f8a87e41582aebb272e5d6e945fdc7095bd181b93f13ddbdc18545f9cfc4db7f134c9ffa6add6727ab8755a06dca23d24a67658fda84321bb97fc475ace3b9912dad73f0ee6c8b2d6d58d7328ca63d1aeceb22a419fe4ec4c3b943051e9d276c559c33e6a45a97813bfcf80c7d79ebe04b1827878c4c8c2da2d598f9f3e444ae82f142716827dddcd94f8997d88a30be2a76432641125e28d5a0896b3e040a8b6805abc98da90844261468826b89f6cbac8d7b5eb6cd8a23f7c7ae9b99dfa6616f9dd10ac48e8c53a38ebfcee8c0ae1be1ee982515ce12a1ebf5d2d1902203007a9bd062c453845ce75f54dd07e3d8079e19b3b116dc51f7a07d005ba682da13b73e3854bb60059fb021b8f4b9430629d408b32ccd3678bf1dc149a3493c44b2a52a5572c128957e0db8a4a214848b64bea6733bb48fc17a4e42474e2b1f47b507d038bb87a3fc32e7bf471685a61f736a414772cc1825e9342c58768640c83486dbf058050dd6c8a9843c106d1a4efa5e5b36deae71448e55f4ef2721d2d210ce075bdc52c97bd6c097a9a4120a507f6c99cd9054579c250cd5b207684deadf75f2f8c54349a57500625be7577fd6c81ca72111935f577c74c2bd1e9419344e2a3563b5a7d6026722469a30a061d123b45f93027a01c7d38863589118d25e333c07f5c3eb85d4dde937d8f1421b72035f8733754ef4793acdc8d1362ef08ac1e9f0246bfb478647ada002f809a3e63433d031e6d5e4f86218ace6a6221103608705719c3106b4659c377f7e3b6ae1777075ea45a68df2004deb6ef742c5971c23d409278be94c5de68153d93d1a2378f1b1656786ec896b72de0da8259a6f181be8829f9cb7cb98ce0b169e734e4a240508952f6ce3ca984eef7e0cd549996147fe56a0bb1598f015ab955df145a51d783397366084e53455840d5688cb9b7d2cdf8abbfcdf850a7de4073eada567d6ca989611c4910e692e44677a857eec2b654f8dc66b2be192786dce3b9780f9806652bdef013304a43dba3f8d15e5105414f6d1fb2a57dea02211fa311b489088a9802e36d649ada97d72a216f54ca6da090a51c01f5638a04f364a3cbf24bb374f644fda38856a7e0f5c3c9cd7b00555d105daf57561379cf1d77bce66d12de44f202a866a43a7a05a6e0910a1f0ab5b1341d8ae992ae9d95fa2c876db1bcd3635d7851f03dde1eddae6dcf95b182edab72a0521c88c8c3a8c2ad3c6ec2cc44321ce1550d51476e95a18ae5fdab801ef4f5a7a56580261d850f392929061ae5808ba390b2f7d8fe7325df9c07c39faadeeb0ee1ed95db7ccf49c9b93fca83e06be745156d422c8b936d65b8e7e76d9eeb2bbf19c1f9a59b8ee6b55d594d4794a869b2d3b37b0b936866894f00e6a90c788c22e0fb87d0ac53ce75e519765647deee2862552c77ceb75d419627e0627067ba24571807cbfae0bd959fa95cb14c2812a1ce41f76d2ad620c55df55f473e56cb219f7b13bed8cc4a98dddfda9d3b9b5650754f73c34bf00496993a1c4056aeb44e4160c3e2090d733604b2b13f40ae346b726a31365b7a230d8f66665dcb726594280678a258f8ddddfe69d424d62abe910db05c0efa5e773d0f6d8ef8c4c49926b46568a7a1321d996eacabb2f716539a020e34a02afc3bfead458287dd2050000000000000068853637dba0b2eb5e5318750b63c829ab0145c02d6bc05aef4113ee0ea0ba97c44d74cedcc89adff648eb5d7fe932a7a76c772b1e2e36c148dd3be951cfa0cfe11bc58635b38708fa1ff88f949eb15f4a4a3de71c33e2915c799d8204d7d1f9cf7c13c608e6ddf29e12b409028ee5edf37353df7982f67a120ff1871001094b1a3148ed5f4f75d9372aa21b2bb6e02b470336a2c20efee8af866032acd6dc56d1fa7a84dc314cafea1a7bba5fbae89e037a4a5597d2eefd153406d67ddbb3b4eeed6d981b229c2c1b76347b05d20835ecc979b697a2981f6785df853d3d5ce07c624136c805d4dc6c7419d68afe2ad4822aea38da761742b33de8394bcd2462518b35c6ef265eb2a9b130e5a3d669b55d457f92500a7b69156475e001989d55547fc831edf2afe2290591e902858914af73ad4e87ddb8ea3a719f435fe1c2839a39fe088ccc863e7c82e96b66e1b6d32ddbdc42bf2f6076b9e93ed2ec4b6ba6fce5dd3a8f5b3aa105aecf72a5cc9108d02a0b923de2d490ad90aed3a45c46d4594948e7b3f3cc7d153f4b2837ca378fb4af215657f016fd9c66395b98357c1d12a655ce07268beccb35acb3f928c1522bea5df98a0337c751308bfb361e68f3775c75e020ac9570283119264d4f8916c143ccc28d8e0709df356de6b6f35fccde79a677606b5b4d846fdad7c271fc5c2ae5f5e2fbcd6fbf21508a2615ab8f0208e276164bce80fb886b648b4cb085c7922a829c2bccdd850cec329870c866f7923c2c1cd59d6c2653263f7aa1f13d84c82575a021793ef875954ce8737c98abee465e780ab64f1d23da92828e62908543850e5730099eb34f5e47dee740581f596413b8e2711bbfc9d25e4a35b57416a741a60ba650b52ae2189cdd125f64565544f9e75bd8c2cbd898ed2dbdd704ee40d1746715eab4155a51289cf7d89a19ab7a355609dff8111c94f6cdf94a94c667508d7201eab7e86569b8b08bca2291cf3fb166df68f6d6da05398e8a1c0c5c66ca3cee621727a77f19b92927569ba44709302c1102683f338150989d971ea6d0151b69865e540ad4e5a186ad9fc8ce57a56ad114487c5ad99c0beae0fd49927c52380de839cc952f8e41e167006573b4ffc39ebec8f9f9fb4168386a78fe52c00cf3c3be6dbcd4ab32ac7cb8fdd1bae70a5c3da6f555aa6c8e6bd7e668391bd5d87e39ee21f9035b0b14dd50b3c4e211794bfd7e8fbc48658044eab550f6b564d8f663c25ddb30233fb260e2d30bc9956f7293fd5532df2f74019f639c7313ca029280c513c2fc3c77dc4d0e7f5a9f273fda00349c28319743bc8f7eaeacc7f487bcf5866a55b2fa5b66e31964f090ac448a1ccd3b8cbc9735db5d7d1dd2f2bcdad1ee48b4f8a36688d8ddead1f166a5afb2efe12e943ce6ca41f1f45fe650536860881c28ff04a66ddce9cd19b4304c26e3238f114a1f4080999aaf6ff1f4b8b59ef5d54c10cd8a6598420949f1c0eff13259ba7da9f4c749b58f31f01627b780c2502cc6d1d82f68271e2bc945ddcb6784532e1aba414385096eeeb45afca0ddec570b16b476fbf7b4818275a05afe4beec9086e1c816ebf96608ed57a570c931577ca5b14c9359718b4b31b4789f291f5cb012f832e5763ba53521f58d3ee0a10930d3b4ea7747c5c751cfb476159287a9d371530e5d7cffa6ab09f049d2435960b0ad34f7890df22a3cfd6ce052b08409e67a1291f8459a59b988d7b97d2534f306d83656fd43313eebce1732837b6c22dc60a80d03c54b695b4efbf31381916c7da9644ef8e0f6739c98e7892ca89bf696715391c989c3bd53362e01b81d998e50e46fab088f9312465d200c034691b7e5dcb22ead3c3f3225f16a5588b2be09470e225290d8073dce5cd955d31e7acd452950505597f01c4b54a6f16f2e7d00ab182258f26e40bb70db783b2a10aae019f87708e1306e1957fcc081dac3659d603d4044c10b0a1fe61f4482e56d031d43fc355100a9dcf822db16d0895e554b439bd032e6103df725123da3fdd4a48b68863e6bb36e05343136e171d39d86168be30188bf1ebac4a1d748115167033149ac61bb4f8d4cad7f4c68c32de226b03fb42d24d5e37ba886fa357100644e64d869f6395e3d6d3768a30f53e2aca3688408807bd4818a2c5150f8ee770121a4a6402c7dc334a9ee5e876566d19867e45d4bdc73477ff7f543a23f38d5f0bf666219b0391e66457af4238c5bd9a05586333556f8972aca1def4507c4b073d1bc1c3051f0bf34f71673ccc1de9c69170c9fc5299ac733569cfde6a7bbb3cd60b601cfca16510bf7fbb26ffab3b674000844daf55fbf4ab48eade708cf7f5de901454acc8cc95c63fd2ee771bffaf19205e9a119b847931bcfb4c738e39701a3882cef4ff47b46b72ce26ac207a1ccaa253cd3ddae2b2eb61d5b9b3c8156928a169d7dbb2874b884c3b2097cb8ea92ce7fe70af90514c11887df33c4f7ec3d3ee6c327e7129b0188b0ca8c777451b17d8f489d547d711404bef72d1914f66a5676e9d716ede8c4282526419adb31d071d241db47a58bb55ee6ebcb67c82765a25e5e6fedc4c8d1d9b17e2b5bac5e0af3c63ea870ad8c5f9521390b660fc735d331e6eb326abde284256cdb381b4651d05f55807f4ad1b5b883bf6b55ee87285fad8de366f3248ae0b9c32bf85fc95d5bc19a716ac2a5f41e4e58d26bfdfa582be5d506f9929bfe7cea70184c81722ef7300f779d5d64c08a225a083d44ce75ced73f3a016f5047af67245bc8a81214024e905f383252cc0228085aa5fc184cbcb41db3eccede89480e0a1c1d1754cc3ffa53edc27c337ec86ae2f68c6225edb0027c1c5bf9aee1b94b62f6144e4631887272a36add32d908add308207559064cd61576f917db864845e5e89efcb27c80d259eb6fd5fca398da0c7e62fc423511bb8eb3969732c862de33448e95aa5e15d2028b84b3b8348a50abb39c5c10ac7fdc2034d1ceeae9870dc4486f48ac6aae573a775716ec380ed57665b9bf1c77f6869f720e428f8b94170b14c23786ff1cacf95a66ae631c70245bf264ce5078c3bddb4aaa7928eb6f1261d52e45ae5fde6f1b3bff90cd560c6c2f77ecfcf553db137051685c925be70def2be6c9bdd5825eac58d4c892a6d4ad5dcc078c6582ca140e5a75993e5ab7b487f31e5c601844f18f13039c099317f5e512eb9e054dcd8535106a9bd8977bf74254b68753b7f3a9b385d4a38ccaa17e029bd9ab4ff9b9b561b2a7e613ea05eb18a50fc231f32b79b9f32514469193a3d12269f58f3c932e501513e48e81774ad389275d9f00b4f8c677b8bb584b503201f83c7ad2e934e909f9ae1fc540f544dd2327fe1d8e3bb86984a252e2ffa88e2aed6d65a302d1883e51654fdb046d35270130fb9f8e4a4861d7278a07ee627fe272dcf99d294d7b1ce72f2f804cddfe4fa7aeb2c9543ef2665bf826c8ce0ca82dc7d4e57b7181b55a5d96ad83417b79376793235ed5a320a3ffac3a025aefa669450a6df20d830042034c0953836097c9461bc0d9c1446485692d1b9d5c991086f3f118a49bfe2a0888a5af8a868d880e31946dbd0c7ddcfcd27dcf5c62c9c5ff8fa9750d129f32e3c4f524eb3c31d5c9cb33fbcf52384a04a9f4faa216020e45be91181efeb7393d96b1f3ad8e9fadcffe49bec1bf36e70c2291475356ec5a416feb5d3b4f1331052271679d1186b338163682ac5b6bb79c64d6d0f8ddfec84d0d9870f45a64413f529c8dd93b358e66c9da2fd233e53b73ae2761f363ee69a38a0d7320a149c90c086e6a426abca5c461088747a2fb5006919ad7640aad79b1ec03cf6f49206f37382ad3105fcbd0e08d00815029d8cc3ca16472e58226f1def116bfab456c32a2a2323bb5a661eacb3b7c915d1eaa8c5aa8b1bf25c3a7bc9a2e047c499d8f2fbf2fe25606fc7f0ae5a539af68830b1955f82962f596e2ad0feb3e99b1982ffe3e553f102b4360b8e1d659575a8f713b8bb88d97dbcfd98f91c147a97e896646a47a43334569da8a01541b012063e0465c4122cb96b57484b0ab8c5f0c8f346c0766be69decf4e3ebef7f74f153ef8c6b6e9c5fe224e8f995f11c1867c5600cd7a345afacafec9076d4ccfca741fd41e445478a3b71a5f06b0d0cf596c755235408782a5e37abeb1f2dad79c83e59a1040c4b3b6a5a2acce9df0ebdb607c9c0549a4b16028595f7a9cd9da115dab0189f3d98b0dc2b8ddf6be4de2b38421a2071d91f14f8752c74df31fecb64de59dce09da2c3a1a2826446d982509baaa89b76379d8320bf3c1f76448e0ddc0889fe57ba756ab1403949cd2ca9ab520fa485576eca5acb471002a14a31e8d7f54c8c3edda8f416b0ae9d9fdfc445b54ed8fb34ed7c1d11b3c57a2c5ad92217ab2fdebafc195d09fee7a518e027ccf9d2e8de8cef1e0ad52144d82b65519495b8a5c314e85361adca8953dce587cf461a461dc9bbc0eb13a54144964930d80d8b4a015676f3efd10ccfd0ec5fe64deb93b5901b506581461bf2aaf04fa9f8118936c5e67e1cee60ccfc4f011ee2812eb9716af42b22c40d83c55d4e4c4838826cc34387a2085aa3e17219c78255ace7bb1fc30ec80676449084744c0887dc4e7696d25a544f3e4b365cc6ad800931d5787be99d678347ea4d6cdeab5662f6cbcb5fa80590e513c4ca96d73d378085026e0e7c71d968a670aefd48519e35beaeef9c67506db6f9b3edb62ef1b3b52b9c2db876b76101644e7dcf5a5056a8d916a0f69ea5bf096e7a4c2f8f1d0da29dbcef9d2ad1b82179ccd0ef95006b7a1d542a847e3e0f864d63434c15d6de4fecad18b788a867da5515e3d51871417bfd783d2dffd852953ea7113d3a61aac3c7c1a4efb449faa928456eb570e62d0ff9542a971b542d7c1fed9d633eb4a81499c105d0f73c5165badb54b0e83f8192d3d51d46ddd9908b04e9f57d5a4e6b65affee3799ae7cc51b4098f71e8ee947ffdeee4fd03095536376e1281ef8158fd1da4a39aebdad37fad75f6217bf45bfad16f2f1a80f5e8a3eea1141a56beb91319fe948bb44350a6e79959c140a5dad9955fb287aeba0a8a45d1fd8d692d30c96d01c9100e417082ae6edf62965fef7e190af60a99145925a307d1e11534d2a64484be3c6cd642432a2db66ba6d3ab1b7ea645edf4e54623d2ba0619bcc2a917cc2df8b0dbed096951947445ed5f08c626e1f9a5f566515bf106c48174f73587314b513962ed556fa7f16d8c6a953bcdda72f083a9b16357b3262c13cd500dfa09cc3d09240a7338514031768ea3053caa5166c8e4e090b3128464a88ccdc751d8ee1b3b1098997c9eaa2b3a13a47e43723a49e5d011dabb22c0d9605e48d5e26b90a47519536fd77c5260bc713e2b510fa6da698069f6c1df7a72462399d7dd288be19a0eab18adb072677268a306f19685c2d813564bab4ac90b7389c2fb87c0517e769577c081ced55572da71b40d18e4979b6b6290afcde4caa610166920549286dfa80197a10ff074b08d6b96c97110e36742fdbc5607f4c48ea9dd53301eecb5c25fce4eec9381b84e6b5af767c5bcca600149a3021c3f4aa237a0143363549a705c5768b5aa6ed51fd1ca9f0f9dd242f0df21f7c3eaf321fca97837d989ca101b5462d2dc248316c21339cb2b4e3451bb483390c09c958d474c6df2f2eac208ef704cbae5c9f6597c19ce48c4c9161c1b14622ed824b0e8669cbe6746051729fd2fcabb020190764a468c58ce369528bfca46cf8ec51ab69e711a53c4121476d2a5d2ceb19c332a5a86a52cabb246d2be739f361d97a6efc2c1d408b6f079ff5cbfdfa7ffb5da3af4611e42f876a44f8180ebadf8efe05645f3326fd1b1bb7f82753ee13e25c406469a6b103b9083ac06d590a48543240bca6e467eafc7069c97aa93a3a4ef61b6043383b6e990d174637d695893bd910f217c9c2465688eccd8a171cb5270fca2e002261f2e3e595f3484b67c0bbd7b50ea53a470e3935c0eafc6226521f0a15fc7cf5494b67fcfb705019a86a5972a9dd285bc50985947e42ca8519de25510db7ba6553419d4e368fe56c2a7acec8e77cd734f557a0f1b507e0869d2d5c9913c52fcd78b42b8f59ad3ae92226e292ea4439b5486629b739f4cca3d7f21cef79045427656fd1679dc5ab23686e13500dcb6284df60599ce81e2570d1cd5c7c2e0026640177bf1395fcf6e999acac08e3a993c3700ad891b1a68d5efc32a4b4f9cc8841e837e778c2500eb6cffc1b9970b2adf724839c7711ebbb2ee3e55f7aa97746d7538153589deafeef63eee6dfbd43fc72e0b763a0e4709da3deb26691303e99230a93c490029383b322099363ba3b2f76b4773c0c43907361b578cfb312cde55ea6de2f477c351ac82786d15b52f08a42385b2a3349116d34f8719264f79082d7c24165423a8e6764c53b922a0b3121cbb88976e6f53c455be77521bc1ad4997135ff24c520b2fa0002cbcc8eb8ee5cb33b1140dc811ee36816f47f23ff0b77d6680d597ec2fe77f5bfe1bb75c3eddb2356940c01e694da66d1c4fd78f7df5857111c01bb5e9954585e54086af287dc0ce861d921b378e9a2a9c9c5a37d9812595063643b1dae4afa57d884501ee0de2d7e39692ed5ecbd2ba1d9bf4e3f291cf0b1dfb809a2f915ae90bd5fbe76d5848752c298f34e69d8e95f6f3c8a8ef365d0927811b8a90c8f58836da07c058f71b01025af8c9829f761d71465d3d813e1e08a7d8f66dcb0f98daa19bb106fb9b25d49a35e8900e6de4502668cecbb9638c5b0d158317970e802be345ab3570f6a452e18da421fb4957429ec4b6c481b5393be9c7f1cea3d77ad1c935ce6cab01ed08f7f24e5b01d25105211d5e28b25d3a5fea30e3c4cd1289bc2606728f127574cdfed91d7c19d7381c3e532c92d7e532e74f3d24281cbf0f4e1908dd4f5cf145daeb21db6b34f2fe175aafd1c20224544c113f132cefe620bd99c5caff7b74d6acf8a1aae2fda5212ec64c80d647308439d5f90f6f481101599b539cd09a1bdfc510b6c9027c879f76bfd397dce9d3985ff01e62ee0455372960b68202412c6d5eb7b09c36f265b7b8b3822aa489dc169f8079e71dc96e0b75de2ade686761b067416e4915287dfdd6309946487a68115ee9d0bec73ffc63223e9463a30b819297d24824cb20724c6b524d58af1e03264e8e2b8dce59377c78dbd5ff5977782181aeaa8c2bd6d9f3d25ec566fa4a01eb5aeaeb6912acad55ca7336d28e305781bf128d6575dba16110d64c55ec9840f299e353fcc5628f248bd660f4dfa5f3a1bb7fbdac78ec727e87a134c98a98f405a4cd3773e79bd4f22bd3239a5fa8cd5806601e07241b25678f048b05bab6f8da56818f8dd9c97d001f4a7ea8beb3fa65ed7a951878bcef7e1da873e21ac6208cf0852c6cb297c10c84b74582bf59aaa11e7d8239997c9e7fd3c5bbee5b8466c17394fa61771aa10a3541f88419b16bb4fa36126745e99c292911d30ed0fa366dcd62c10879a6826609ab2b80b3a0c2de3d877805a564ce925916063c53d9698bb918eed2b49315fb83465a0db1a63a0528a887f5106dd054edbf381280989581c859a517573a6eb4946e0fcc61956fd5868fd37c788090fd7c3341028cf1bcb38ed595a4fd845ccd45558282c6e23d92d4268875f80ebad1c24f8d247595de2f8b83708b504f674447bc6fa1748b86fdfc971c9275baedda1348324c4dbde22d423744e2d537a4e28d95771b18302bc5d92f9e0ba6b1029a3e73761080a4e6e1b52a9ebe3538cb3e982586c23f0b0cfa78126198a0a496d96734880885e4aef7b35d90af287f9d5b18998fba69cf5a13b9153edc5f1c3cd0d181c1cecb4936a489f34682b056eaf5c57caea4a9ebd9fc7d842bc3850046f925dc430769863922ce5bea6709fa9bf7f21098097d7f47c74269b524c4194bceae0571fe968ebdda85a28fa5be7f794632189da179e248fde037a3ba3fd53845e42db45747caa6cebf574e9abb75e3b33c1096e40e0e845385d6f961c56fd1c71f92ae31a0c9088b2100b457cf2f8b33ac984fe79ceeb65fde350f9c6229433aa20d226aeb7677e0e7e8002e3e220fb74d4a1bc07ca43fa23fcf9cbabe7799b5b8daeb63b35923c4a92d2c636d36d58e719e6855b57445a26072d716aba7b653dfcdee115b3310b0c8af8649337597c1ac8bcee8b0533cb458d165b4ca4ee72c60a49f4a7061aab09449a318a6dc1d5b1a4f2a7f82c5af241e1f0cbe3e9fd5079e385ec86bc978ca82aaf1de5b470dcbb06b5f0360142857a0519583e3a77a6fbdadfff48de440bb5c3dcb2c3e6624800fa7898ab00242b7109809d58e5aa8a25705266d9bb04f165f843f1c61c23b41f010ad67f80aa8e455385cf3ff89073dc9434ce9be78993d6c73a8adf4db6b540e7a9f60d8dbcf3133a8f5c5c59f8378f2e5aad07f31707fb9834c66d6d0ded8a8b2d984ff5b6bfe70bb6479aecf208beb8f4da7b23957ce77d574993e1a44de0b3a5cb245f0ebf8ea32a22472270798defec3deeb94a4d025d1fe276612ebfe0f4e6e639de1300d47e542fb032150ab0aded71ba693817feb9cb43beb6f3074c2d7bfb77b9b2783e0335449c9a9775ccf9060ab2468a6644ebddd41f70add6d2d24fb9dd377c4f0dce3439283f22075ff3973e4e70e0bdcb53001be03800392084d6768c3e8f7fad09b192a497a36f602d07655d3e6a7ccab561ab92c79506e1e06aad05975accc9b8b48c41da8bc611d331717ee312d77403f9f66ee9a81fa4e624cca690540dca722986dc740a919597f7836ee95b554d3c34db3443ee5b6908f8623b2c82f32b65c3e8c20ee92825d9c82745bb5368ddda47036390910e26470b96cfd7c4e7b0df89f897153fd5ab4302de65fcda1f48206346d6051a94d8e0c32b959d914c218f54813811d13d99ef6259f54c0e635c04f875772b38524e94fae3a73109f60d0b00c96c1809f37e8fb37e61620690b07d726d388e9ae5dbc3a1c3557d1e4288da0622d77081ab4cd00ce22243824c363ad1be5cb0ceaad6336a797d8ca6d988c4373b3c00667d651452d50f81a830ac6ebb71559590181eea67dce1599d10000000000000000736dcc7c36782c1788cdc8d5c3820d68093ea84d56daaeaac19c19724ed7d3ebc1b8c1e3092839314dc6eddd99dc0eede13dbcb7fd22d401df8eb7f679a04f785006d3b4c4012bf78b7e43b1b355a9f6d04ca0e86c32d44f73fa514d1e2b14746400", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x0, 0xa, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x84}}, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x26, &(0x7f0000000000)={@rand_addr=0x64010102, @empty, @rand_addr=0x64010100}, 0xc) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) 14m43.328041597s ago: executing program 5 (id=3704): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) fanotify_init(0x0, 0x2) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) getdents(r1, &(0x7f0000000280)=""/138, 0x8a) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x200000000000009, 0x2) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r6 = dup3(r3, r2, 0x80000) ioctl$NBD_DO_IT(r6, 0x1265) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'ipvlan1\x00', &(0x7f0000000540)=@ethtool_eee={0x44, 0x4, 0x0, 0x5, 0x1, 0x8000, 0x3ff, 0x7ff, [0xffff, 0xffff]}}) fanotify_mark(r6, 0x80, 0x8001022, r6, &(0x7f00000001c0)='./cgroup/file0\x00') pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000340)={{0x1, 0x1, 0x18, r7}, './cgroup\x00'}) open$dir(&(0x7f0000000140)='./cgroup\x00', 0x8000, 0x1) 14m43.079230832s ago: executing program 5 (id=3705): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r3 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = getpgid(r3) setpgid(0x0, r4) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x4}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) read$FUSE(r2, &(0x7f0000001080)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000380000001c0a050000000000000000000200000a0c00034000000000a8283fcc0900020073797a32000000000900010073797a30"], 0x8c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'bond_slave_0\x00', &(0x7f0000000180)=@ethtool_dump={0x40, 0xc, 0x9}}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000580)={0x0, 0x1}, &(0x7f00000005c0)=0x8) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) quotactl$Q_GETFMT(0x8000000040000603, &(0x7f0000000000)=@rnullb, r8, &(0x7f0000000200)) 14m42.885432777s ago: executing program 5 (id=3708): r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001f40)={0x9, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x2, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff8}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0xfffc, 0x0, @empty}}}, 0x108) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x2204820, 0x0) socket$inet6(0xa, 0x3, 0x4) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001f40)={0x9, {{0xa, 0x0, 0x3, @mcast2}}, {{0xa, 0x2, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff8}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000400)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0xfffc, 0x0, @empty}}}, 0x108) (async) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x2204820, 0x0) (async) 14m42.539031858s ago: executing program 5 (id=3712): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x1000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, 0x2b, 0xb, 0x70bd2c, 0x0, {0x7}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x12, 0x8d, 0x0, 0x0, @binary="aef5385683eb0a6d84e333f12f4f"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x288}]}) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 32) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, 0x1c) (async) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000780), 0xea, 0x0, &(0x7f0000000600)="8b9e05f16c5c88ad76e601ae16dcc6dcf77b0af0fd2a689197c0e07e3b3914f43dbfc1ac51f78476ea2eb264f3100d7a0356d3c955c2a1d67ba37510f056512d1d113b03c9a20743230840974c0e811dbd7f6839380866035d7475965cecd573de8c1af71f2244dbebf524f2e950bd1604b1f4f03e5907d2e10bd4121a19f567e74a7973d39bf95e5c51716f8c0b4005bcbe46b1e1d86f5fe6dc6ea54edb22f14530ece4866530cfd8d50ec7f1ee07e77efa9c4a37a3a17149b6ec6b0808a7db0bb0ab7af566e323a091019e137be1ef361710346a935519bccd9b685a4d11dab42e04602df4c004ee11"}) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000080)=ANY=[@ANYBLOB="609330911a551ac39d86c4b51ce94632e3f289", @ANYRES16=r9, @ANYBLOB="01002abd7000ffdbdf256900000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) dup2(r5, r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r4, 0xf648e000) (async, rerun: 64) syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x64102) (rerun: 64) r11 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f000000d379)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140f0000140001030000000000001e0000000000"], 0x14}}, 0x0) (async) madvise(&(0x7f00000fd000/0x2000)=nil, 0x2000, 0x16) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r12 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x408440, 0x0) (rerun: 32) ioctl$RNDADDENTROPY(r12, 0x40085203, &(0x7f0000000100)={0x9, 0x31, "a9d09348534981baee02f7790b272e76a8dcc0d2405deb6558e527e31916965df8d2d3a88ee7de3cb838bb67c33648d528"}) 14m42.113796372s ago: executing program 36 (id=3712): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x1000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, 0x2b, 0xb, 0x70bd2c, 0x0, {0x7}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x10004}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x12, 0x8d, 0x0, 0x0, @binary="aef5385683eb0a6d84e333f12f4f"}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x288}]}) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async, rerun: 32) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, 0x1c) (async) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000780), 0xea, 0x0, &(0x7f0000000600)="8b9e05f16c5c88ad76e601ae16dcc6dcf77b0af0fd2a689197c0e07e3b3914f43dbfc1ac51f78476ea2eb264f3100d7a0356d3c955c2a1d67ba37510f056512d1d113b03c9a20743230840974c0e811dbd7f6839380866035d7475965cecd573de8c1af71f2244dbebf524f2e950bd1604b1f4f03e5907d2e10bd4121a19f567e74a7973d39bf95e5c51716f8c0b4005bcbe46b1e1d86f5fe6dc6ea54edb22f14530ece4866530cfd8d50ec7f1ee07e77efa9c4a37a3a17149b6ec6b0808a7db0bb0ab7af566e323a091019e137be1ef361710346a935519bccd9b685a4d11dab42e04602df4c004ee11"}) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r7) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000080)=ANY=[@ANYBLOB="609330911a551ac39d86c4b51ce94632e3f289", @ANYRES16=r9, @ANYBLOB="01002abd7000ffdbdf256900000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) dup2(r5, r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r4, 0xf648e000) (async, rerun: 64) syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x64102) (rerun: 64) r11 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f000000d379)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140f0000140001030000000000001e0000000000"], 0x14}}, 0x0) (async) madvise(&(0x7f00000fd000/0x2000)=nil, 0x2000, 0x16) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r12 = openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x408440, 0x0) (rerun: 32) ioctl$RNDADDENTROPY(r12, 0x40085203, &(0x7f0000000100)={0x9, 0x31, "a9d09348534981baee02f7790b272e76a8dcc0d2405deb6558e527e31916965df8d2d3a88ee7de3cb838bb67c33648d528"}) 11m9.639382619s ago: executing program 6 (id=5096): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') pread64(r2, &(0x7f00000001c0)=""/101, 0x65, 0x8b) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef"], 0x33fe0) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "04dee67b17e81ac5", "fdb19d36ea5ab3e5b106cb49067773f5df0981f807bc75660cd267457ae32f7c", "c4ea37ce", "a9fb36bc8e2c0101"}, 0x38) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) 11m9.476536375s ago: executing program 6 (id=5097): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x3822, 0x4) setsockopt$inet_int(r0, 0x0, 0x5, &(0x7f0000000040)=0x8, 0x4) (async) r1 = syz_io_uring_complete(0x0) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000080)={0x2, 0x6}, 0x2) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) recvfrom$packet(r1, &(0x7f00000000c0)=""/224, 0xe0, 0x40010101, &(0x7f0000000240)={0x11, 0x1b, r2, 0x1, 0x6, 0x6, @broadcast}, 0x14) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x78, r3, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0xca873639508697b9}, 0x40) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x70, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) (async) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3f2, 0x0, 0x70bd28, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4004065) (async) sendmsg$AUDIT_GET(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x10, 0x3e8, 0x300, 0x70bd2b, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x60004890}, 0x4000000) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000740)={0x3, [0x0, 0x401, 0x9]}, 0xa) (async) connect$netrom(r1, &(0x7f0000000780)={{0x3, @null, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) (async) write$binfmt_aout(r1, &(0x7f0000000800)={{0x108, 0x2, 0x5, 0x1be, 0x2da, 0x9, 0x218, 0x1}, "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", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1620) (async) syz_80211_inject_frame(&(0x7f0000001e40), &(0x7f0000001e80)=@ctrl_frame=@pspoll={{}, @random=0x101, @from_mac=@device_b}, 0x10) (async) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000001ec0)={0xdddd1000, 0x8080000, 0xfffffffc, 0x1, 0x2}) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000002080)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f40)={0xd8, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x28000}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9f0}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}]}, @TIPC_NLA_NET={0x5c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x1}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000020c0), &(0x7f0000002100)=0x4) r5 = accept4(r0, &(0x7f0000002140)=@in, &(0x7f00000021c0)=0x80, 0x0) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002280), r4) sendmsg$NL80211_CMD_SET_REG(r6, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x80000080}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x24, r7, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2d}]}, 0x24}, 0x1, 0x0, 0x0, 0x44085}, 0x20028004) bind$bt_hci(r5, &(0x7f0000002380)={0x1f, 0x1, 0x4}, 0x6) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r5, {0x3}}, './file0\x00'}) ioctl$EVIOCGPROP(r8, 0x80404509, &(0x7f0000002400)=""/187) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r5, 0x84, 0x7, &(0x7f00000024c0)={0xff}, 0x4) 11m8.713932004s ago: executing program 6 (id=5099): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) (async) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r1, 0x2000) 11m8.544793358s ago: executing program 6 (id=5100): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x19a199a, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, 0x0, 0x4) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000400)='net/fib_trie\x00') r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r4, r3, 0x0, 0x80000000) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NFC_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)={0x84, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_VENDOR_DATA={0x66, 0x1f, "b9519de1e0902ce9aad77ea011d511a62f861dacdeee40ba6a42ddb3c7de6eeab47f9e6952211519a08aa6a54b348baba37cc9774fa4ae2189737619c746b49f98d5b7b524bc9452750d0eb1bcd0cc775529cc2c3b395bd207fd6dfb60e7b53e9dc3"}]}, 0x84}, 0x1, 0x0, 0x0, 0x20004005}, 0x8000) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8042, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000a40)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x4, 0x8, 0x4a, @mcast1, @empty, 0x20, 0x1, 0xdfb, 0x7}}) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$P9_RSTATu(r6, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x239) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000540)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/97, 0x61}, {&(0x7f0000000a00)=""/81, 0x51}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000940)=""/150, 0x96}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x40000100, &(0x7f0000003700)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="1800000100ffff0a00000000000000000a80"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x8204a0, 0x0) 11m5.912512382s ago: executing program 6 (id=5106): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX]) chdir(&(0x7f0000000140)='./file0\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xfffffffb}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8b5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000001cc0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000001d00)={0x0, 0x9, 0x0, "1e84d371de9f846a771156105f6fc587877b756b9180039d6c4e17d9fb7faebc"}) unlink(&(0x7f0000000240)='./file1\x00') mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) 11m5.423422248s ago: executing program 6 (id=5109): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0xffe, 0x4, 0x870}}) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x4) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000100)={0x3, 0x9, 0xfffffff7, 0x800, 0xffffffffffffffff}) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000280)=0x7) (async) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000280)=0x7) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000140)='/dev/rnullb0\x00') syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffff8, 0x200801) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffff8, 0x200801) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000540), 0x0, 0x2, 0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000540), 0x0, 0x2, 0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000e00)={0x1, r4, r3}) r5 = socket$rxrpc(0x21, 0x2, 0xa) close(r5) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101", 0x32}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101", 0x32}], 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r6, 0x0, r6, &(0x7f0000000080)='./mnt\x00', 0x214) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504"], 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504"], 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 11m5.243809645s ago: executing program 37 (id=5109): r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0xffe, 0x4, 0x870}}) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f00000000c0)=0x4) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000100)={0x3, 0x9, 0xfffffff7, 0x800, 0xffffffffffffffff}) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000280)=0x7) (async) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000280)=0x7) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000140)='/dev/rnullb0\x00') syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffff8, 0x200801) (async) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffff8, 0x200801) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000540), 0x0, 0x2, 0x0, 0x0, r3}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000540), 0x0, 0x2, 0x0, 0x0, r3}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r2, 0xc01064ab, &(0x7f0000000e00)={0x1, r4, r3}) r5 = socket$rxrpc(0x21, 0x2, 0xa) close(r5) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101", 0x32}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafc0d8c560a8447608004000000000000000000a2bc5603ca00000f7f89000000200000000101", 0x32}], 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r6, 0x0, r6, &(0x7f0000000080)='./mnt\x00', 0x214) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504"], 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902240001000000000904000002bee4f900090503000000000000090504"], 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 10m52.327258052s ago: executing program 8 (id=5152): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000914010010000053000000000800010000000000"], 0x18}}, 0x0) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000000)=[{0xffff}]}, 0x10) (async) connect$unix(r4, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) (async) connect$unix(r4, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) (async) sendmsg$tipc(r3, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) (async) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) recvfrom$unix(r0, &(0x7f0000000400)=""/64, 0x40, 0x40000040, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="000826bd7000fbdbdf25550000d2860008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x248d0) (async) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000000c0)='./bus\x00') (async) chdir(&(0x7f00000000c0)='./bus\x00') (async) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x18400, 0x60) getdents(r10, &(0x7f0000000140)=""/194, 0xc2) (async) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000100000001000000040000000000000002000000f9000000090000000000000000000000000000008a90bbb15a3021b72910d96cc387e660cfeb61093a88ff3f2d518cf99fd95aa0caef9a3326fe03b7a27ed117eba8689b1f8b9eadbff2"]) 10m52.107508185s ago: executing program 8 (id=5155): r0 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xbcV\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x13, r0, 0x0) ftruncate(r0, 0x200000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r1, 0x7dfff000) 10m51.913904833s ago: executing program 8 (id=5159): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) fadvise64(r0, 0xffc, 0x1, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x4580b000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x30, 0x99, 0x4, 0xfffff020}, {0x6, 0x0, 0x1, 0x5}]}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfffffffffffffd22, 0x2004050, &(0x7f000005ffe4)={0xa, 0x4e23, 0x3, @loopback, 0xffffffdf}, 0xff9b) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r1], 0x1c}}, 0x804) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000000)=0x3) futex(&(0x7f000000cffc), 0x3, 0x0, 0x0, &(0x7f0000048000), 0x2) 10m51.615533368s ago: executing program 8 (id=5163): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mbind(&(0x7f000049c000/0x2000)=nil, 0x2000, 0x4, 0x0, 0xc4, 0x2) (async) mmap(&(0x7f000049d000/0x2000)=nil, 0x2000, 0x2000007, 0x1010, r0, 0xe7b0f000) 10m51.424167473s ago: executing program 8 (id=5167): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)=ANY=[@ANYBLOB="380000003c0007010000000000000000017c00000800fc80040008800c00018006000600800a00000800028097f09726080005000900ff"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x200}}) mknodat(r3, &(0x7f00000000c0)='./file2\x00', 0x8000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mount(0x0, 0x0, &(0x7f0000000080)='msdos\x00', 0x300000, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x7, 0xa3, 0xe51, 0xffffffffffffffff, 0x5479, 0x103d, 0x6, 0x0, 0x0, 0x401, 0xffffffff, 0x1, 0x40000000009, 0x400000000000005, 0x6c], 0x2000, 0x808d6}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0xffffffffffffffff, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008858}, 0x40040) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000002d00090027bd70000000000004000000080009"], 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x94) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 10m50.28207931s ago: executing program 8 (id=5177): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000480)={@mcast2, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9, 0xfffa, 0x4, 0x500, 0x4, 0x2000000}) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, 0x0) write$ppp(r5, &(0x7f00000003c0)='\x00!', 0x100000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f00000001c0)=0x7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) recvmsg$unix(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r9, 0x7dfff000) recvmsg$unix(r3, &(0x7f0000000500)={&(0x7f0000000100), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000000200)=""/164, 0xa4}, {&(0x7f00000002c0)=""/163, 0xa3}], 0x4, &(0x7f00000003c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}, 0x10000) 10m35.188951195s ago: executing program 38 (id=5177): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000480)={@mcast2, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9, 0xfffa, 0x4, 0x500, 0x4, 0x2000000}) ioctl$PPPIOCUNBRIDGECHAN(r0, 0x7434) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, 0x0) write$ppp(r5, &(0x7f00000003c0)='\x00!', 0x100000) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f00000001c0)=0x7) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) recvmsg$unix(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r9, 0x7dfff000) recvmsg$unix(r3, &(0x7f0000000500)={&(0x7f0000000100), 0x6e, &(0x7f0000000380)=[{&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000000200)=""/164, 0xa4}, {&(0x7f00000002c0)=""/163, 0xa3}], 0x4, &(0x7f00000003c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}, 0x10000) 6m37.953306857s ago: executing program 3 (id=6863): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x1f2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0xfffffdef, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r1}]) 6m37.759396843s ago: executing program 3 (id=6865): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000) (async, rerun: 64) r1 = syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x0) (async, rerun: 64) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000017c0)=@filter={'filter\x00', 0xe, 0x5, 0x146, [0x0, 0x200000000080, 0x20000000097e, 0x2000000014a2], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x0, 0x2, 0x6002, 'gre0\x00', 'geneve1\x00', 'veth0_vlan\x00', 'gre0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, [0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, [0xff, 0x0, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0xb6, [], [], @common=@ERROR={'ERROR\x00', 0x20, {"882c2ce38f10cd9c2f67fc17c2a5f68cd06df2ebcc8bed3e060c4915afb0"}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x3, 0xfffffffffffffffc}]}, 0x1be) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) r4 = socket$rxrpc(0x21, 0x2, 0xa) listen(r4, 0x5) (async) accept4$unix(r3, 0x0, 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0x2c, 0x1}, &(0x7f0000000080)=0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) (async, rerun: 32) timer_settime(r5, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000100)) (rerun: 32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) munlockall() 6m37.707608924s ago: executing program 3 (id=6867): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000480)={0x20, 0x12, 0x2, "03de"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000500)={0x40, 0x1, 0x2, "3aec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x40, 0x7, 0x4, "7a69e2d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 6m35.408429795s ago: executing program 3 (id=6886): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x200000, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) (async) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f00000001c0)={0x0, [[0x1, 0x0, 0x4000000], [0x800, 0x100003, 0x3, 0x1da7, 0x0, 0x0, 0x0, 0x9], [0x91, 0x0, 0x5, 0x0, 0x8, 0x0, 0x1]], '\x00', [{0xfffffffe, 0xfffffffe}, {0x100775, 0xffffffff}, {0x0, 0x5}, {0x5, 0x1}, {0x100}, {0x8564, 0xbe}, {0x0, 0x2}, {0x0, 0xffffffff}, {}, {0x0, 0x1}, {0xb6d}], '\x00', 0x5}) (async) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x40001, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0x40603d10, &(0x7f00000002c0)={0x1, 0x9}) (async) ptrace(0x10, r1) (async) ptrace$setregs(0xffffffffffffffff, r0, 0xa0, &(0x7f0000000140)="ffe9c6859fdc62d0a934dd1cbaf27a4f20b14bb09e3d6097ef2f2c19bdfe6eb4b2d96a297a53ec79a8cec5e7f0c9319eea0ac424f0eda1974df1355a9e974266b7a87ed33c91bffeb26bf735ecb8209852e8") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) (async) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) (async) unshare(0x40020000) (async) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) (async) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) rt_sigqueueinfo(0x0, 0x4, &(0x7f0000000080)={0x34, 0x1, 0x100}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000200)={0xc, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6m35.014173532s ago: executing program 3 (id=6887): r0 = socket(0xb, 0xa, 0xfffffffe) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="04007080ad026f806acc58d9202491e9256595e649dc214d9b5121fd85e6a8e42f0d427c9ec0ee7283b6121243c38368885f758f62392091ccd6e60510ff26894e61001f802d7ae25e993ee7529ec92c998d2cc843917ab6f65cf5907d3bda7935d342a18d066917758308fee4f4b067cd6e07a0ff0775a004cf418246546008f43a5c7d7282149db942b3b5d98a6e38fdbcec03195b8993daf03afa743d34432fc8688125f808003400"/184, @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="08002200a62300001400fd0000000000000000000000ffffac1e010100000000000008002e00", @ANYRES32=0x0, @ANYBLOB="2800de8008004a00", @ANYRES32=r0, @ANYBLOB="1c00328008000800f7ffffff0400888008002f00640101010400148067bc0ca816bfd690a5b2bc965f642f86fc000000"], 0x428}, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x400180, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x80000000086) fsetxattr$trusted_overlay_origin(r2, &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000200)={0x4, 0x9, 0xb, 0xfffffffc, 0x3}, 0x14) listen(r1, 0x8) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 6m34.699458225s ago: executing program 3 (id=6888): mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140)={0x222000, 0x38, 0x22}, 0x18) setresuid(0x0, 0xee01, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000380)={'raw\x00'}, &(0x7f0000003240)=0x54) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000000)={0x614b6437335d87af}) close(r0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x1, 0x0) fchdir(r5) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) mkdirat(r0, &(0x7f0000000180)='./cgroup\x00', 0x64) 6m34.463287339s ago: executing program 39 (id=6888): mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000140)={0x222000, 0x38, 0x22}, 0x18) setresuid(0x0, 0xee01, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000380)={'raw\x00'}, &(0x7f0000003240)=0x54) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000000)={0x614b6437335d87af}) close(r0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r3, 0x1, 0x0) fchdir(r5) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) mkdirat(r0, &(0x7f0000000180)='./cgroup\x00', 0x64) 5m16.78015987s ago: executing program 7 (id=7465): sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e21, 0xc, @loopback, 0xb6}, 0x1c) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async, rerun: 64) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r5, 0x2000) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) 5m16.647099422s ago: executing program 7 (id=7466): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) (async) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) (async) 5m16.596994649s ago: executing program 7 (id=7467): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r2, 0xe6abc45bd9dbfb93, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000040) ioctl$EVIOCGREP(r0, 0x80084524, &(0x7f0000001f40)=""/231) writev(r0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="390000fa461ad7e48489bffa56020013001118680907071200000f0000ff3f21000000170a00170000000004001400100003000131d7b2d0370a00f302415af0083f52b3ac322264dd2429f5160fe70b54eec0864abf8a6c103ebb83", 0x5c}], 0x1) r3 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000840)={0x0, 0xfffffffffffffffe, 0x69, 0x83, @scatter={0x8, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000100)=""/182, 0xb6}, {&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000340)=""/188, 0xbc}, {&(0x7f0000000400)=""/165, 0xa5}, {&(0x7f0000000080)=""/22, 0x16}, {&(0x7f00000004c0)=""/213, 0xd5}, {&(0x7f00000005c0)=""/15, 0xf}, {&(0x7f0000001640)=""/4096, 0x1000}]}, &(0x7f0000000680)="87d77775c06f01bce32648615c624a0de15982005f0698eefb8540a420ad41448bcd5d0ffae74fd677f0b79fe3f63707a7d7bfa9c56004ae0c7180ae0dbcce084d114c7b2d1666ad86bec6628d5249e1e104b0925d5510e746fe52b8a5a5b022b78cf8c4b6cdd1bffb", &(0x7f0000000700)=""/255, 0x67c7390c, 0x32, 0x3, &(0x7f0000000800)}) setreuid(0x0, 0xee00) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4040000) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r3]) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 5m16.449211985s ago: executing program 7 (id=7468): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') clock_gettime(0xa, 0x0) preadv(r0, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/144, 0x90}], 0x1, 0x800, 0xfffffc00) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000001280), r3) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4c001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000200)=""/102) creat(&(0x7f0000001380)='./file0\x00', 0x4) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x626, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f00000008c0), &(0x7f0000000140)=0x8) r7 = fsmount(r5, 0x0, 0x0) openat$cgroup_ro(r7, &(0x7f0000000100)='cpu.stat\x00', 0x300, 0x0) bind$inet(r7, &(0x7f0000000280)={0x2, 0x4e23, @remote}, 0x10) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000080)='ntfs\x00', 0x1088000, 0x0) 5m16.327032045s ago: executing program 7 (id=7469): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000040)={0x6, @raw_data="c17a77574321c7df855f701d27f1419247db44c0883dc7d592d63f33faeac028b3ae30f8dd3d85339be86a5db0535627d15d8c7864f486a68f0467cdfe4c1ebb0cc18a810e0ecd65a438ee681dd48f92fe9a10454bc36e2392acb3c3aa81f378701778528612abb9313e430257afc1b6e83a6f0dcc4e2fccb3be1aefe4b3d97af387a5155756b3f768f0950143a5ad78c591430625606a3fb5453b599500d8c5d7e2791ae679592ac8bf5f9bbf9954c7b606aa13d5ea5dad48885995afecd2e41cb35f67e3a1cd32"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x32a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0xe0, 0x4, [{{0x9, 0x4, 0x0, 0x98, 0x6, 0x3, 0x1, 0x3375b0f0139ac6e5, 0x5, {0x9, 0x21, 0x8, 0x39, 0x1, {0x22, 0x7f3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4a, 0x7, 0xd}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x3, 0xe5, 0x6}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x6, 0x71, 0x81, 0x20}, 0x61, &(0x7f00000001c0)={0x5, 0xf, 0x61, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x9, 0x1, 0xac, 0xf000, 0x9, [0xff3f00]}, @ssp_cap={0x18, 0x10, 0xa, 0xe, 0x3, 0x9, 0xf00f, 0x3, [0xff003f, 0xfff0, 0xffc00f]}, @ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x7, 0xff0f, 0xb5e7, [0xc000, 0xff00c0, 0xff0030, 0xc000, 0xff0f, 0xc00f]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0x7f, 0x5}]}, 0x1, [{0x95, &(0x7f0000000240)=@string={0x95, 0x3, "0899ade41597f16d07fa4521e64c8eb43b5c4843793609bcab9823919d265e66bd610ddb8e633cafe071246c33e23f05666953b301d08fb243664b1fc33b4fdf86def23c5ccb8c9b37944c4f57ffa45e0b1fdcaa1581c3e9d555b1e76e7696e6ae9e261b730225f05cd318d1777e62a6d52d567fad079a2812d9868f7febac48cd73cd35bc94ce4132f7dfafe032b6f5852aa1"}}]}) 5m16.205744961s ago: executing program 7 (id=7471): r0 = socket$inet(0x2, 0x0, 0x6) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000340)=""/163, 0xa3}], 0x2) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local, 0xfff}, 0x1c) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) write(r3, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r4 = dup(r3) read$char_usb(r4, &(0x7f0000000080)=""/139, 0xfdef) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000006c40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000190015000000ffffffffffff02"], 0x1c}], 0x1}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d657461000000001400028008000240000000020800034000000004cbbdaeb00a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) (async) dup(r2) 5m15.940844563s ago: executing program 40 (id=7471): r0 = socket$inet(0x2, 0x0, 0x6) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f0000000340)=""/163, 0xa3}], 0x2) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local, 0xfff}, 0x1c) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) write(r3, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) r4 = dup(r3) read$char_usb(r4, &(0x7f0000000080)=""/139, 0xfdef) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000006c40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000190015000000ffffffffffff02"], 0x1c}], 0x1}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d657461000000001400028008000240000000020800034000000004cbbdaeb00a0001006c696d69740000001c0002800c00014000000000000000640c00024000000000000000010900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) (async) dup(r2) 3m49.894464694s ago: executing program 9 (id=8032): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x50009405, &(0x7f0000001440)) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) 3m49.794970236s ago: executing program 9 (id=8033): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001540)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000840}, 0x44000) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) 3m49.683598144s ago: executing program 9 (id=8035): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80) mkdir(&(0x7f0000000100)='./bus\x00', 0x1f2) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) syz_fuse_handle_req(r1, &(0x7f0000001d40)="197e2dda5662e4ccc0d04afc1970470e7b1e98dca4143927cc5340bd11e381c8573641180363fe78b6acf625a85d1eaaf21aa891c8df88f61fe29c6ade84adefa8de2c42669170441f93c82c385435632cd890cb499ef2f634a45d570b0274c45d730cebe12a560664c6eaa128f30bb8056cd6c3401c4dd7ce39d937b5da82303d765e25a4a250e8837cd1a5714be3b9e6ecc15e5269cc087e5b00f6392a84cfd4b94a00c8ffdb2d8484f680399d735fc048401100be84100b1b929d5e28fed57fb3fa8bea21afeb0040fca896983565c16b532bd82a0a9d412b68cd5fd714ce49161eef06c5dbcb5a485f04fed2ffcbe93e30a73beaf675baae05b8e723a740cb5022f87fed183e641affc830cd1323d152b5a9e425e46a550781e48ff4df17577b03093471e04cab52d4ad58c5e34f2170d6a40a2525343599169dc4d5fe30568ca91f061470c7c957aff03f946cb85ff6baeb18918dcd943e81866b517a5e10e39ead896f6cc9fdeea4c7a1532822ef3f9827b8e1a34bb62fac762f413201372b7adbb46d3f8581cb9eb2d5308f8f30ae26f8452e5c0d19091d76b03bbbeea6fe5eccfe7aeb2e3472f18a4521fe770a4c49eab949f339933e7c2d4e665ce4b0f3dc3bf6cb36a92b1d236eb8ace7eaf8513832b07504c58fe74900a6a07fcb7e728c01b3b68005e809839b4a08fcab7a979eb5498640616fc666f07c0c397adca73032ba78fe1929ca4e03ced3ad16a5ccbe902a9a53a167d2043c022182af6aa03afa3a553999d893cd1d314b9b7c772b903710c9b3df40660afb1a9de881d333fdc68291b384f830bba8a481ec6e65d6fbf3fb6bac9783125a2affc12086368cd0114efc5d4e9dde3a9bf7b260f57ca8c042c1c297391d3dacb5ab231b7f5830589c8bb65959f8ac5454d34dec241bdfbd42ba3d645f671d367c368320376e5df08c8ab5737ba0e13655cbe59ee7c736c9a86bf17120d392cafc8dbae55cea17382b150f4f57ff7de0a520591f615087b71c5743a304e30454d8493add24615776dcd5005d8841608cbb4b8a5a65b73fd0df6a80bffe61e9ffbcc5ced8d165c59866b425b3c5e565479f8df06bfac31db931f03e880935bc68ac2ccca92cc99f58a8b2d98554e2647a9bd43787441bbecb132545f27bc441602df44519e593951a96fdeb940d27a06b08ce1a68d1c003db38b178076e33fde9a2cc4cc1b8bf88ce7be113a910b283db8af812e5f1d8ec35b5363266b3551ec2ca8fd6cab8717fb1f4b4a20e438bf1ea057b8e723df02fd562c1b0eb8ef30f49192ad27e42b0c4ffc3572b042db6160d7611a23c7f2e2849081e178207b92167a1a74643aecb65e45318d8bb6e0f775a6b50b5ddd59b833ff10cb85b0587abf310e6535a568ccb636b8a97c924d081b62a09d8ca0dd28750bb0a310e76925fd73df606790164160ccf5956aef471527345dec445e31eaeb051b0a85e460462939506ead51ced9f58b0fd27e8b326582a205914b7a27e01d2091eb69e153b2b64213b530205b6a8bf7fc9a54ada8447dcab35f1f1947c324b641c3d4c03d38d90e81508954579f13695b0b09231388101b776796366857d19f81534b511e3b6bfddac7bc2509213e6700a6fcb3f46233cf3152b5341e301b6c1bd68814fa996ed05a263104670eef658f37535e3bfafb7ee9a1641e419acb8fb2f03c3884010410d383128720cfe3a98057c6520e5f4bd5f53073cbf578ba8a615b011d8acbb2d068e6c353506f31fcba8651253b1db00c75ed3777536490d1da8eef7304207feecae2910386bc314da717dadae58c8b5a22395ed41382ebf78c0ca7681863b4f00ffc42030fa56d9c560ff005dc4e407b4ee254b26a3a4bcb0f3a02ccbb77b31745b363819f9f4dea7097b3fe076c8e7b0ac96b9b94586872aff88a3acc48304a2790ec2565914990089cf0332691a2c1ed980025862322227d438b9c7eda02d2e841fa62d06dd26cbd29b8898765d51931533bfdd0e5e260bb5fceb9080a75030392f11e7d7fd97b4ad5275a8f0159fbb200b35d14a4c26a8d1fbe368e0a851843a5ccf006ce727990ed914750b1c9b3a201d23005e42b470ca6c2fbb3fa8be4c351dbfad3f09805d4824f39dca97c1a89401a92565db56e17c93f40562fbf42a99dd16283a350d6549ad1cae474f7d0f8feaa93e61b5cc33f2f48467d0bf695ce96644b8a71c81d8517b3885f8e1a69fb6dc99bcb33a47e67dbb058708b7f5ee07497bd8f107104748bcc5fc4d6da53a4c25440ba04ab0e8d918f2d13f4d06ddb625971dcf5256e080ad7c14fe37c9e267bff1e004096649a8e7160794fdb03308ae9df0f8bae21f4fbcece01f18c187423cc1242fd9e6448171b1c4c4db7f8de717397685ceddf0b0ffd76fd85d5286222ac38d192262b4f2f956493681fdb4c4b550aec281e1d758632c1ce9e160c8fe9dc3547e85e03dcdc4eaf72ccafa47b5e26db61445b2bee096ab76de7b9cd478895fa2aff6cb3ec5c9749d33b89c640ca5471a135c344956b176b4b41aea8f41dbc12fd4f2303d680c365dbf895db640b75cb53d9c4dd1af58156a5b8d1fbd6325269b444fc297886254e44126e7340beb129fb0d206ef4c8f0fb762087f53c17fbfb122fe25b9353fed07044b5a53635d5eafcfb524226686c64a99f4f02973a466cf4c8ecb16aaf62f034f4e38c8a688efec37decec749a845dbec9cb19e5854d44195b56bd6c07b88a35b518c1cbd7b55bb190d81f0c0c051278dab8b2b24a0d17efd0cf8dd7854ac9bf3dcffcc94e4801ca2b223eb83f52bc064639fd735c60db2e1e4a9b510122a19bc170fe5e8a4cac931a550b2d8565c60557e5e0f7b75bf7c143a5067bbcb272c1d2facd503897037a047aa78903b7264b3d274bd6f427692663a0505453a1a565c069f24eb10dc2d16fb8b3f167d8141795ac37dd364b8bbf8f10c173ddf1454121ada55db22d366a4c4ad0bbc7cff1f7b03ce7c35b511787b06b38283419572b357331931d7a7f9e730636e6752ed3457825ae93e0c9bc0649be81716eaee960a0350d98fb75d0decce661c92e37c28e4f5edefa54044a3277fc44c834e2f4e93e18bb9e8d32cc548a6fcb3938578d511018bd8410187f605c9f55a08b292917593894251bcbea0d153ed788bf568abd3bcbe668b85c5852609fcccd39afcc0bd1496a785d2b7066dc404f872fcf24a317d9e5221a9c8f9a317ead1238a1b213bd50c4626b4eb454af22a0167933aff8970b5ceffc717895a02fb9c71e784a9e5b1863872c0f1391348125e6871560438bdcf9dc2ae645ab2f73859040074ae0c73a2795f411acd01abb0edaee955f3d0aeee52de3ac5835d6f0372d4301a33d71867db227dcf25d4b0500a34f9f54a8d9de674f4f2077bec186dcc7a9dafacbeb4389ba19ac2d85cb26c976f2c54492329c0b4ffb653a15dae65ef7ee7c7bd4ecc2af9dab7e0f4752d6f10dc9206925612354c38a8854fc46d5f32f3818d7c216c55ef35a0b156ab2aec5ce1cefc2b8565bcfce6b78c0b2f9c6a976fbaf9b8f90c8465ef7b72fc63f5d045741875e85c6fb3effc5a144cbbd99bc574faa04e9bbd9a5ccd7765e2062408aa9275b1a8ccc70030e6f733e85242cfa355142f2ddb893c4ab380e3ba3c7dee7f919ca7e90c8588bcfe8073d21ebcfe2270938b121c48a2b7418d78960002aa11b06161ca2c6b821dee1fbd2e0751136bb9d51673227c83f2dc4f7266ca07e794ad4795cd064bd5d71d980f3660dab595444e5052502cc2d284d0201e7778578349fcdf280782320b005a56bbca68c9aa7683806764fd7e9bd7d21df7660ab9216c7e0643c01c4860aeec305cfb29aff2517105b9e98a2b6624e0a26d7f28dbc784e1b6e4fe7c5693fbd16016f293410347cf64062ed63f4cb344c578d996b8fc7bebe2deaee6fb2aa6331f997b28415394a46608c9e7289cc228205cf2b78d2f4becd0b24f2796dc5d546d6aacfc7e105c2406263c550951eca598053b3fbb5a99bebf02ea99f0c8d078050ac33849c2198d5d65fea32d0e8eb586e19722b5701e62debc90bb9ac4600a861caeead4cd9bcb829d9f38b1a8d2da65072032537bfff3d4a0e3d84a83b9f3d8cc69c6a4597b32f07b7e8d8348970ed2237e72381e069a52890f1fc98581e92bd215b0d15b84beaaeb9ca9fb914d1a2757677a567894cc77511553505cd69c557a67697d8e5286b2dd5c28f86add7d12040c4b33e3eb47bb9257cffe20592b5c8e85edf55664348d74993717f72ebeaabcc85e2bb12f9c19882fee8b3e0307e623273e8637e443a930aad8e0d6e2862894c6eb391de69a37bd1bff3461444878e5ca52ea80b0d869f21ea416cc7c0eab199598585fdf59508c8cf952f00978b0c8a1a5d72b149376b80e6fffdf44427569ff937ebedb8f76b9d4b1922969a20242ba33e8296bbfb1797a2b17683bc6ec8d40b69467434d744e64a06898a006c2b74af0d6a98f2e21af2a1f22fd039dae1549574536f5231cfc00074982c90ae1f0e07c94a8b191ad6fd1b2d70a12f97f2bd5bfc182bce689d7571ec7eab10a492fa97ae60f4eaa3f99cd99452cab480220814efe2bd5e754b82832ff1503edb372dec1e078323c990cbe19a183f07949d306dd703e53445d94f6cb431852847974259209a235b0037d86ad8a621120fe4c2ee060f2b6ea866a4df3398ec212e223be75dd8b8feb54204746655942e6b6f80ea5196f6167bd686e7438129ddd259dadd79b9f2f435f7f62cc450634cff18a5f59a25216f771249f0999a51363dbf19141e7126341983fa1fd4e555289fff4fa476233163c7100a0110775bca931988abfc6f18c4974b1a46df2553d390bfef6064a70674e300b491ae7f27608a7714d931a5fc453881a9f2d15d83850eb791395edb30b904e3e2a6c76381599152d15aa8d5d4e3f83280f08c799c416126a61fdf6e503224b2271181cff2084146be626a8795ec663d346ac7a9624d51132e517e0e71385c5a82c879e226c1c4c5f84d838f5fcfd30f93ef25d903279dce0ee7b0a9e6eac0118d0d60a60fe679a66b6ab6fb27968c8e392455e170cd516ef6ef259c9d24a7dabf04666bf859e743be503fc7ea3efdb57a0856c66d04799edfcd888cb3b48cc8f6eed0b480d1af218c8e5918795c0271cfd7fe07b2c3bf8a1dcca5fcdad9affb33fd65f929dca6fc946e4c8130c802e90a5b7dd848467c3c631e31ea54addd500aaf65efcceee01aca4cd315f03dd073f7a49fa2c34eb71a705cb52f5ee3a0c5dcc31577e7a3a92a6acfbbf5972bc09c96a41d4b2fe022656e4aa12d0aac38de8c978a068a086cd5c5a38a6851324d2754194161f9cce995ec32c5c9e9c7ac264da8f2e44a106c6f1af7abf9279c1f4975a0392b11cec47221e455af5db86d5871805dc0e9a7ca8865bd58b5849ad46cfb11603b6a801881cb4b4d74599ce21f115925b6104bf48f5b04f6a8c056b563bc592c95738cf727b1856414fc20084d222e39dbeeb4abbbf7f057abe7b3fc5523df8501c690b6720f928d847711c2a750f360da38d0f5fb617b955eeb901bb47faa42fa27953c37d6f60542a7ac9e99c04dec97a61a904709dcd834ee9aa5c38ccf0fc92cbbf786006461f48567502a64914ef0d8f10dc03e9eddeb537867aae5b1a86a9087a2f8ded0f2fd696e3bdaada71b7915c2f9bb115ab9b9e191e743256bccedea1ab85c463a5a80dd444301c9029878c284440e7f2dd8b20f125946291f06766948c7fd9879d2dcb22c8001f03d13ba74a321a5dccaca3a9355fafe48fdf9fa025ace60a8351ba8e7b94cfb8e7ce15233bbd6d6e425c2e350bfda1679d90287f3716f12d0d91367d11ca1383c264b53574852ef753514c3e4df2f9c2c47f73d038c82baa3b8aa4e86b7d57962848594e8403711dcb68da51af3affbdbb6d4e1978a4fecda87182273936adac8d6064b541ee8fa8816cdef71a5620892271449ac2fb9600492698bf96b63acb26d73809adbdd8414598cdb5087e910026298f1b4987b1b9cd48ba8b50363ab984bbad247378437572b6223b56c5736362b8f63bf91ff5cc943451e67bef1f1f28b4b89ccda25829919404abebdb83ab668a55bc7899ec45b344d3795bfd836194e86fe2a027322bd547f69f882b916a61d88439aa7189fe08de7c4e6cc247785d2f483f27f309414329d7ceb34e09114cfdedb1f2d41c319a9ffacbb0ce617cf6cbd4ca86fd08a1a8cc23af3f06626e865415d122bca74d3cae4727c4227a11c8a08e0e4de14e877fc6e2ed96b14c09ac2bfe02500c2026d2a3ae741fd12b144f16cf52d9c19aaf1c12fd88929071723e56b89c84b369a8ffc3bba1f79e28436cc03030e57dba1606c3e414fe5c0878c476f4a21514ddd16a1edf3fd133f3a13733cc1d2ba83ec9722337738c0c7e345eb45d277836f6b3d6c6e09d043f6278412b3357e4fe8f939a17823a91d827ec0f2546835c45025f70b1dc5b20ed82cdbf5598e5cc559cd53291fa0a00d5abde7c1b92785ccfb4203b041d8d8345d66cdc1869e06945229eaaa47d956de0f59d342b0ee9ebacb76ce7eb37ab12e36a993bd38a15f632bc0e0e26bfecf04531f36c5d31685605d78f3ed59845773f256540c2fc5f043c1974f9e0577c86730709f16841b3ba33ecd2d83a555e81656934d7c24f39bfbe7b628301d8b971c138c9a478960769cbefa74053900e53a61334d6f38c2c22b3aabdf94b010994f161edc3df9168f81128f5a0aaac509155f231c01dc579a58732a93a456f8f7ad0f1ae0e854d45c12976e63af54a70aa39b80b95c2699e1508df771fb4bdfaf325c885ea86c6f5537affd8ba32d619f0cca34dc3482ff340348748f73e66e5d9b2eea8f64f71e16d7d0e6a1eed1c4b413a8e3099293f05f0a04526d75d3f7452f7a93824d25363ff5f12b7d2fb8bf9858c001d51edc7db8b43d54901eb972287968ed024918f02afe2786f53e29f1ae974a6c5dcdc40d2908931acd63475207109a9863ec4fca6d08d3b2152752ec43fcdec643939a768a7c4752ffcb00808ac8b77b632c574410edcef16027ecc8888d23d2f9479421c04716c97746302cf15b5159a89ecc5afe8c900e76c4173c62c0e032a8d52eede494698a8bc83984301de5f9f5dbe1f1586c5ae044ce8b98f60a5e540c5ded827065bd893f9387ddd001bacf7624d5fed527fb0df3adb55b5991b6935461ab6ab730d90059c9f46d475f94467c3b8ea45081e06f166d67d3719cc5325dbc36c9c8aab47818d5561a957bf6fede4f750b83ce6541becb7fa44b3b570ea64572a37618ff3acce55361dd1ac780f43987024208ea246fade46b71009644e26bc765c584cb7ab014deca0f0955222e06e549ca244aa6cb0f4c2f9664775869ea8a465ecf32be5c6d00b9ba5346b218f472392145e315c1a335b1beb1625b289bcdb6a73cbeafe3cc26abdceb9c5aa8dc6e29922dc01aa6c0ca87a0f3a1b555c854ccaec023dfac8c4bdf93a3318f592ce06a912361971e211e119a86a123761acf8dfd40128320525a22b50986e8ab95be541f2f50318e78a47d084135083eaef7a81a1fd3ca92a3ce5e9a7fa092c15d783aebc9b0331b049efd82a672a0485893190cd3ac84136d665f7080a7b62aa29082dc501928177d8c50be210cb04af4d9566c01c5e73d0aab2ee6a7c3a5a712a4c7db26068addfa56e26e975fa3c57728cb158a8d7998461c4206afeb15a9d979ee3d966b6d5981d982ddb7fc5ec4c2073443de76b81caf06815f00f809a58f20ba4c5ffaafee051c99128a552bc0e5722aed6eaa73248b156e3b27ae7494319bf8a4deb3b3ee0dcdd5431747ea287cd9972235388d7dfe22c1a83b8c05919582c1c5727249070f688fdc72798512e3a37ad6d88651521eb198da5202144fcd5ed07bbc3182ab1d2ae2afe8ec80303fb78eab25f8c777cea5a5c8699aed96fb09e634aa1e5a9eb9d0311f8aa25967e03b6cdf55544bfb4488cf0b68a0787c3a59fb8557b3e1529f065c69dee4b404082500e899e948cbaf4b6c6278f072d520f3be7e570fb984f26604b0ad3b2807527d6c08b4366054c267ae3202eddbef542b894d05f9a3e6f0199ddedbd248d1e0933288e21e8442bfac6f0ec4a6ca9e49dd9b02b91035839c5351cca61fae5f283296d33b8ab7953166e9b3da0b495557f7b433d7830a2118f6967ec16c90d06b97517d704973c8bcc7dcdea84975f10db693bb6cdc039cca2db9261f93f5f01bebe1910830dea607c922d313248279951cc4c0b9fe57f487d0705a4cad2ab01d74061d3a6c254ec1c8f7ce4c43955c9e5949ac6b30af98325646996a1ef0a5fbb7a8a66889cad6da9973e45109fb76584acc9030fc626d09562355bc8c16934bc8473b97eae443acc1cb65f0c78049c25c343048cb77b1601c53ada7812f21ccc91dce5221a26d53410074613ffc758f8d6935b8e74174e3bfea54b4a32634726d285ce98a0d114d5f9a2e8681fceb72637f82920a35f1df006a900b74e1cf779039acc8904d302ebb39f9804bc6b0f3f01dcce9b658b1fc23d571138dd0c08e130d4ec1512b404d5afd3669e7166a4a49d4f7e8eda2f5a24fa584caf70e3808420a623214f8a2a34b7cca1e29497510d628318ba82ee3c2a0dbbd384ef577fbb00a336b3d12d319e60ba7f8c1416c4c1628d4d0ee4a231c971c0f16266c0226357b7ed4f8be9dbb03fe82257fa08638bd8d2b28a180ca4f5a65f65dd61cef19d311a516824e812ea2307557c0dbe3e22c44037d1a95f16e9f71b4527107c00141076a291043365705d4bd4885181a2bb30dc7ecacb06c3d84608b16ba97eca0ec5cce89f4d285fdb2cb43052d2f608e6de28000dadcac27a9c979034a95f500835c197bead5d54d3b72d3807e5a12c3261e90bc82254fa6237bd724b853193e6ff8c1f34a0b1b199a55d85eff6d24fc0750033865382b69db39c908a2b9070d8cd2b7166d2062a2014e6a3b95955815a344c372779884f5f50812d9cc7861b7b7a953bc434d604aac64b5b881a44d6faff3e1c6755e3bc9b054cd148991ad03ad83992e44a706fae975b4488c2769c8b9e0e85ad89578bb642a1e261b7fcc722a4e855bf7579883723d791ae05fb20bee93cb936e86c651aefc7d228270f957f8397e7f926967ca565dbe07e7cda6195afd629ac8a8758cadaf4ecc392b13d1d4596641a7738af5b168b1851220f0277d7c8dbaec61ebec210877df1bb07b38c5998a6af51e896de31fba408384685144b3a4d4e3ac35e190e91a54bfa026dbd0f460b26eef7880a6a7dd07212dd2a69795b1b944befecaf3ff1a8b8523df921454499d4576858b03f9b05b058e2b6a7d1f64c14c5f0f730ca159ef1d651cf84f401d53cfa7c7403fee986ea07d7c51c574831a04f53984202d8833994222507ceeb532e1c59b86c6e6cea43af3ebf6d8a57c76d14a4956906e40bb56c43fabc32c130d438b38c4382e48376f9080929a5bda3d7adb1a495f2f65c800584b7206120f08b63190bc6d46f53e73fecd0f80dd1a5cc9c5760ed65573e463f9e3db94d9c26b596663797b3fc4be7ccf63c16eff7217d261b2e55ba7c697a2013ac33912831ff97d908e1ca66048bb0fa2977cd906a500f68d18efa7622b484395b958aeecb5181a034bb65e219f7cc9dbd9d998d11d62cb2cfcf121ce87af0ddecef3661fb68bdabca18646f437baf5a24d8494651469e19e3f448cfcfaf0fa9eaec6868b5f97119c3ae5e031d84930283306dffc9f891f5dfabc071340b1b9abdc5a9767dd25200ed3da088c7790be3e39b080272a7b0d3f76b08fff616d31f178c99fbbd9a733ec5aa50a99d640aed9d2f086ae9a95d8813ddc4b0804bfd148484bfe181d7adb25c6ae04d7e76c5dc7fb65f7d87456e20b51113a6b8ed010f27a9319fb5ef3c0b06f748aadf00bddb2adbc7d24aaf0d221d7a38955e02e39318e1ff45b796f6ae52522d4c2a6e7540d296704b5f196cfcf4f8a99c8f2c9b457aad0eb48a91e68b0d3769daf59e8ee6ce0a6cb49b56d9da6a0eb052a5aca80aba0334fea7880fdb0de65a2a6d0b8af255c3b81210c2877b6edba0e261ff8362e77e70f0f5a32e35f815efecd808f595bd3626b6b6efbdd033d23f044e178600bf92777925b7ef1aff492891e347e946043720c40ac9c13fb02c2f494019b7040529e0a1d7c910088336070eaf4ef989c7e883e610838a6a6f8fbfef9b73b5d9729130dea7e426d18b11c64b9a8822c231dbccf082d02b46f45e4263861398ebe34ea2b3aca49f268c237dfde9672cc07db200f90cca94d2750cdb535f4c43b8975d9df7a783639965a05ebc0c570bedbcbe9ea21d64489b44444889cd30f32c6133b661d6c33378c3c967fd83ce196b3d877eb38026e94678738ea721343dcb9f1ba7936932bc11721d0bfb3971a3e520aafb557bcda43e31c862c4a58d1f3726e6ece912a79b905d3841a46e11faacd9b40fdb40040b00c3f28b12a05d41502b4725f1083890f28c98b458fb1bb4449e591f88505269bfe91165110cd325d5363b981b2dc7758c58149c72c5ef74dbdc4f6f31e875e3f4fccb06d6bdbff7e476305038e0819c4e18cd93dc732e76390ae091f9d639d9057c4c83fb57b623e088da524ac2d4d1188495e60add92f77c86eb51145b5d77979295237314bc87434d16aebe938009597cc6b679b86a39e1e8a0c786a1050b76762a50df07096c90717b9f207acb17a4052592c7ff920c73e3c0b13da744e3e889d66f20ea85dd40146f2733a3bd32ef3ec11e6da8df1067a767eef1427654d98babb369fe1d04bbc71fefb2eb727cf7905e148d321acef1cd97314b037ea4908807d4d0d109577459e868996c279019372ccd81b02f44105a98fbc048e212fa003ceb5a05a4266f48d257c7115f2d77a5443cd21c96c67a99ee4da9ddb443e367f8f7fd7248525b594d3f65d517abdc09ecb8dfdfb355b41a9ce606289e51d02057d1e1f4fa2f35cc8259b6b1c653d84ea5de664340fc2817a89e5d1384138144b3de27249497fca5668c28de6c65face99a4d3c20d464e2bd0fdbe411eea78e93cb552ed6e43ac72187e6f6ac7d697883d76ea682acc9d6b3e6c21f0a5110b03488919da987df0c185735de2476b700c07d4588816465af3156833fe388fa8fc1a147dbaeb97a8c4445f9575a60fba7aea67bfc10a0ac17966c20d17340dc13cd9e7e1bd26472f2583f8080e37f76759f004589eea7495fcd79be9c0566d088dc5d4eeb5eefae42b012b64f204f384180c3724cba88946194327d295b59e5e3f0808e1603bcdec6185d85f517945a11ba99d650f6cf42b106829806ae0176ecf95fe593d210380fc3f8eef3eb890dd69d5b0cdfda83ece8fec0aaa081a853ceab3b6ea3968163263b0c3cc2588116c96e126a3169870734c1598759ec16062c6d5706292baf2bc7e7b08dd40de6d03467d19298063a74e8c041255a843cc53e40b38cda18b0b5478be882ff6c1bd95a1e95266acd21404db1299cfba59defe", 0x2000, &(0x7f0000001540)={0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0xffffffffffffffda, 0x0, {0x9}}, &(0x7f0000000340)={0x18, 0xffffffffffffffda, 0x10, {0x80}}, &(0x7f0000000440)={0x28, 0x0, 0x80, {{0x7fe3, 0x0, 0x1}}}, &(0x7f0000000480)={0x60, 0x0, 0x3, {{0x75, 0x7ff, 0x3, 0x7, 0x6, 0x3, 0xffffff61, 0xfffffffd}}}, &(0x7f0000000500)={0x18, 0xffffffffffffffda, 0xffffffffffffffc0, {0xffffc78f}}, &(0x7f0000000540)={0x18, 0xffffffffffffffda, 0xfffffffffffeffff, {'upperdir'}}, &(0x7f0000000580)={0x20, 0xffffffffffffffda, 0x5, {0x0, 0x20}}, &(0x7f0000000680)={0x78, 0x0, 0x80000001, {0x0, 0xfffffffb, 0x0, {0x1, 0x9, 0x5, 0x7, 0x6, 0x2, 0x4, 0x1, 0x9, 0x1000, 0x1000, 0xee01, 0x0, 0x5, 0x3}}}, &(0x7f00000007c0)={0x90, 0xffffffffffffffda, 0x8, {0x4, 0x0, 0x10000, 0x7fffffff, 0x3ca, 0x2, {0x3, 0x0, 0x2, 0x94, 0x6, 0x2, 0xffffffff, 0x0, 0x93, 0x6000, 0xb79, 0xffffffffffffffff, 0x0, 0xf1, 0x7}}}, &(0x7f0000000880)={0x110, 0x0, 0x2, [{0x4, 0x6, 0xd, 0x3, '}[*\\+\xaa:\'-\xa6\xc4{.'}, {0x4, 0x1, 0x8, 0x8, 'upperdir'}, {0x6, 0x4, 0x0, 0x9}, {0x4, 0x2, 0x7, 0x31a, 'workdir'}, {0x3, 0x5, 0x8, 0x1, 'overlay\x00'}, {0x3, 0x7fffffffffffffff, 0x8, 0x3ff, 'upperdir'}, {0x4, 0x45a, 0x4, 0x7fffffff, '}}($'}, {0x3, 0x6, 0x7, 0x80000000, 'workdir'}]}, &(0x7f0000000d80)=ANY=[@ANYBLOB="b80300000000000000000000000000000300000000000000020000000000000000000000000000000400000000000000278e0000ff030000010000000000000009000000000000000000000000000000e10b000000000000c4c10000000000001000000000000000400000000100000029030000004000005f000000", @ANYRES32, @ANYRES32, @ANYBLOB="ff00000009000000000000000600000000000000070000000000000003000000000000002b2d2b0000000000020000000000000002000000000000000600000000000000fffffeffffffffff07000000f7ffffff01000000000000006000000000000000890f0000000000008000000000000000001000000000000000000000f0ff0f0004000000000000800800000000c0000000020000", @ANYRES32, @ANYRES32, @ANYBLOB="0900000000000000000000000600000000000000000000000000000000000000ff0700000100000000000000010000000000000008efffffffffffff050000000000000007000000070000000600000000000000070000000000000000000000000000000040020000000000e40000000000000005000000000000000600000009000000070000000010000009000000", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="0100000008000000000000000400000000000000c50000000000000002000000040000002d280000000000000400000000000000030000000000000009000000000000000300000000000000fbffffff40000000060000000000000002000000000000000400000000000000090000000000000000010000000000000f000000000000000400000004000000010001000080000081000000", @ANYRES32, @ANYRES32, @ANYBLOB="0200000003000000000000000100000000000000ff070000008df60009000000000000000000000d0100000000000000ffffffffffffff7f00000000000000000800000001000000010000000000000081000000000000000300000000000000070000000000000056b200000000000053694ebecc7ef914070000000e000000060000000010000009000000", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="00a0240c0b000000000000000100000000000000fdffffffffffffff000000004dc88d4b06000000000000000300000000000000df070000000000000500000000000000e3f4000006000000050000000000000006000000000000000900000000000000060000000000000009000000000000000900000000000000010100003b000000e50f00000020000000000000", @ANYRES32, @ANYRES32=0xee00, @ANYBLOB="0500000004000000000000000100000000000000050000000000000008000000080000007570706572646972"], &(0x7f0000001300)={0xa0, 0x0, 0x7, {{0x4, 0x100000000003, 0x5, 0x4, 0x357, 0x2, {0x5, 0xf96, 0x2, 0x200, 0x800, 0x890, 0x8c, 0x3, 0x3, 0x1000, 0xfffffff7, 0x0, 0x0, 0x7, 0x3}}}}, &(0x7f00000013c0)={0x20, 0x0, 0x7, {0xc05, 0x0, 0x5, 0x8}}, &(0x7f0000001400)={0x130, 0x0, 0x9, {0x9, 0x4, 0x0, '\x00', {0x800, 0xffff0001, 0x16, 0x8, 0x0, 0x0, 0x2000, '\x00', 0x8, 0x2, 0x80000000, 0xa9, {0x4261, 0x9}, {0xffff, 0x4}, {0x2a4, 0x82}, {0x4, 0x7}, 0x5, 0x4, 0x2, 0x8}}}}) 3m49.548116772s ago: executing program 9 (id=8036): r0 = socket(0x29, 0xa, 0x7c) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000400)='./file0\x00') mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[]) chdir(&(0x7f0000000400)='./file0\x00') mount$nfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x6822, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 3m49.351538282s ago: executing program 9 (id=8037): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x50, r1, 0xdc39c000) r2 = mq_open(&(0x7f00000001c0)='\x00', 0x880, 0x4, &(0x7f0000000240)={0x1, 0x3605, 0x6, 0xffffffffffffffff}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000280)={&(0x7f0000000440)=""/144, 0x90}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 3m49.094879122s ago: executing program 9 (id=8041): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xaa80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) 3m48.486913607s ago: executing program 41 (id=8041): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xaa80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) 4.435334931s ago: executing program 0 (id=9615): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x54, &(0x7f0000000640)=[@in6={0xa, 0x4e23, 0x8, @private1, 0x7}, @in6={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, @in6={0xa, 0x4e24, 0xe, @mcast1, 0xffff0001}]}, &(0x7f00000004c0)=0x10) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) close(r1) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) (async) mount(&(0x7f0000000000)=@md0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000080)='nsfs\x00', 0x20c08b, 0x0) 4.350409556s ago: executing program 0 (id=9616): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, 0x6, 0x6, 0xd51df4994cc05469, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x24000000) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f00000005c0)={0x3, 0x0, @ioapic={0x0, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x23, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0x8}, {0xf, 0x0, 0x8, '\x00', 0x8}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x5, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0x4}, {0x7, 0x3, 0x6b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0x7}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x3, 0x9}, {0x4, 0x6, 0xe6, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) personality(0x5400004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r4, 0x7dfff000) 4.186270409s ago: executing program 0 (id=9617): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x0) read$dsp(r0, &(0x7f0000000000)=""/120, 0x78) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@textreal={0x8, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000008c04000000000000d0"]) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x200000, 0x0) 3.955501742s ago: executing program 0 (id=9618): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) r1 = socket(0x2, 0x3, 0xff) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$unix(r1, &(0x7f0000002180)=[{{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000008c0)="166da1949ba0ee9ee511f385427169498f9565a1c4099287", 0x18}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000022c0)={'veth1_to_bond\x00', &(0x7f0000002200)=@ethtool_perm_addr={0x20, 0x8e, "4e98dd553bc0c76c1517abb694a889381d8ea2e9c4b4ce55ac34c411d31b8bfbe804266629a9871f995c2f113c848eaff14993d460c50971d5d1ecd4d2bd6669076c7a3e3cd9067a9e89704234b33716f0f67370b3efc939d2f692ba78ea92b1bd9bd50cba05bbcfe8a2c9869120b3fae172265d3385f107a9593ec74b0f9968911fe27d31d7887efb4afee6024c"}}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000100)={0xd, 0x4}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa01, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r3, &(0x7f0000000140)={0x2020}, 0x2020) 3.830595921s ago: executing program 0 (id=9620): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000449000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f00000008c0)={{0x12, 0x1, 0x300, 0x87, 0xc0, 0x31, 0x8, 0x5ac, 0x8213, 0xfe6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4f, 0x8, 0x80, 0xed, [{{0x9, 0x4, 0x88, 0xcc, 0x1, 0xcf, 0x23, 0xa4, 0x7, [], [{{0x9, 0x5, 0xd, 0x12, 0x400, 0x0, 0x8, 0x7f}}]}}]}}]}}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$binder(0x0, 0x0, 0x0, 0x1151000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 3.687414578s ago: executing program 1 (id=9621): r0 = syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000280)=""/239, 0xef) syz_usb_disconnect(r0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './cgroup\x00'}) openat(r2, &(0x7f0000000080)='./cgroup\x00', 0x814000, 0x54) 1.853886264s ago: executing program 4 (id=9629): mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='afs\x00', 0x2208080, 0x0) 1.747515812s ago: executing program 4 (id=9630): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = socket$inet6(0xa, 0x3, 0x26) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0xffffffff, 0x421042) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r2, 0x40189429, &(0x7f0000000140)={0x0, 0x6, 0x1ff}) listen(r1, 0x9) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@multicast1, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x30}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x25}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1}, {{@in=@rand_addr=0x64010100, 0x800, 0x33}, 0xa, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) socket$unix(0x1, 0x5, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 1.747278722s ago: executing program 1 (id=9631): creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) (async) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f00000001c0)={0x0, 0x9, 0x1, @thr={0x0, 0x0}}) (async) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16=r0], 0x60}}, 0x20000084) futex(&(0x7f0000004000), 0x3, 0x0, 0x0, &(0x7f0000004000), 0xb201ffff) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 1.593270997s ago: executing program 4 (id=9632): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648e000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r2 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) r5 = socket$inet(0x2, 0xa, 0x0) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) setns(r3, 0x24020000) r7 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r7, 0xc040564b, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x400}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000100)={r8, 0x6, "4bf96aa69897"}, &(0x7f0000000140)=0xe) 1.472871285s ago: executing program 1 (id=9633): openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) writev(0xffffffffffffffff, &(0x7f0000001580)=[{&(0x7f0000000140)="df0a4ae128e9112769fbb42ce1de83449996c52713fe7ed6e98d67221799a67b77400c70371e410565037a7d258912a066", 0x31}], 0x1) rt_tgsigqueueinfo(0x0, 0x0, 0x1c, &(0x7f0000000140)={0xfffffffe, 0x4, 0x27}) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00009ba000/0x1000)=nil) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000880)={0x400002f, 0x0, 0x8, 0x6, 0x247, 0x40}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x149, 0x7, 0x9, 0x3}, {0xe564, 0x9, 0x2b, 0x568}, {0x6, 0x1, 0x7, 0xf}, {0x6, 0x48, 0x10}]}) recvfrom$l2tp(r0, &(0x7f0000000140)=""/228, 0xe4, 0x2040, 0x0, 0x0) 1.371370604s ago: executing program 4 (id=9634): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000004, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x10, 0x0, 0x3, "0d58826ac2bca4b611cfb7f5eaac46dbe89b1347050000000000000002249341", 0xb9d6f8cc}) futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) futex(&(0x7f00000040c0), 0x87, 0x0, 0x0, 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$dsp(r1, &(0x7f00000000c0)=""/105, 0x69) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0), 0x4042, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r7, 0x40345410, &(0x7f00000004c0)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x400454a4, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="00001814", @ANYRES16=r6, @ANYBLOB="81000000000000000000390000001c000d8018000280140005000d000c000500a90a0100060000f00500"], 0x30}}, 0x0) r8 = dup(r4) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000300)=0x0) statx(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0, 0x2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0), 0x200000, &(0x7f00000005c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000160000,user_id=', @ANYRESDEC=r10, @ANYBLOB=',group_id=', @ANYRES8=r8, @ANYBLOB=',allow_other,blksize=0x0000000000001c00,blksize=0x0000000000000800,euid<', @ANYRESDEC=r11, @ANYRES8=r9]) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x406001, 0x0) r12 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r12, 0xc0406441, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000200)=0xa481) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='ncpfs\x00', 0x200022, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r8, 0x4144, 0x0) write$dsp(r2, &(0x7f0000000240)="742aa6edd4c6e1fffe1c07134619e0306c60a9e0376178e21915d085fa25b00ae71de34a3b1a6e8d87d07e7b2bbe7b4052693583e3b980a06da3fed61018121f201d7bbd3c8ca8d2", 0x48) 1.370261553s ago: executing program 1 (id=9635): mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='hfs\x00', 0x200000, 0x0) mkdir(&(0x7f0000000080)='./cgroup\x00', 0x63) 1.251269257s ago: executing program 1 (id=9637): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) syz_genetlink_get_family_id$devlink(&(0x7f0000011880), r1) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x32000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r2, 0x7dfff000) 1.159573139s ago: executing program 4 (id=9638): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x2, 0x9, 0x4, 0x1}) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 1.145147885s ago: executing program 2 (id=9639): ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, {0x9b, 0x5, 0x8001, 0x1}}) rt_tgsigqueueinfo(0x0, 0x0, 0x2d, &(0x7f0000000100)={0x1a, 0x1, 0xe}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_INPUT(r1, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) (async) write$UHID_INPUT(r1, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) write(r0, &(0x7f0000000000)="fb196dec69a10b22", 0x8) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001100)={r2}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001100)={r2}) 1.13324114s ago: executing program 1 (id=9640): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) (async) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x54, &(0x7f0000001100)=[@in6={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, @in6={0xa, 0x4e23, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}, @in6={0xa, 0x4e23, 0xe0, @mcast2, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000001240)={r4, 0x6, 0x9, 0x7, 0x4, 0xa57f, 0x8000, 0x100, {r4, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x10, 0x5, 0x2, 0x8}}, &(0x7f0000001040)=0xb0) syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e010000082402de0102"], 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1, 0x0, 0x0, 0x44100}, 0x0) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x12000) (async) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x12000) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x48100, 0x0) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x48100, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_usb_connect$cdc_ncm(0x4, 0x9e, &(0x7f0000001300)=ANY=[@ANYBLOB="12010102020000082505a1a440000102030109028c0002010200fa0904000001020de8000b240600010329442a598e05240081000d240f0102000000050007000206241a06001007240a0304020507240a09033105072414040001000e2407050300682d0700fbff07000724140b0001010905810340000007090904010000020d00000904010102020d000009058202ff03d30e06090503020002080b00"], &(0x7f0000001540)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x201, 0xf8, 0x9, 0x0, 0xff}, 0x31, &(0x7f00000013c0)={0x5, 0xf, 0x31, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0xe, 0xb, 0x0, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "3ff011c839934d1c343ebb53ff896839"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xb, 0x4, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x6, 0x4, 0xfff}]}, 0x3, [{0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x200a}}, {0xbf, &(0x7f0000001480)=@string={0xbf, 0x3, "b61e04e92b82bd7210db4f859674cf8a7b7b7681a347dfa4c846a0441d77408ca09680ef2918ead12b877ecbed8c77705df3db98d4b0126c21948fea50c236a3e7e396c8aa38089b088048ca1a364817c78622e4d2025a09c99801e8b2f79dfc604ce629379c38aba187a257c3c1eeeebf607867c39760b7e2e539b78cf2cfb87466bf0ae2a10ce4eaf31fbe17423736ad1cebcdcdd71f4e4910c425de39630116b75138d4dc22b0fb346995e86e93c5a416c204fe4b8975c4d31242ed"}}]}) r7 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r7, 0x84, 0x6c, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) (async) getsockopt$bt_hci(r7, 0x84, 0x6c, &(0x7f0000000000)=""/4102, &(0x7f00000010c0)=0x1006) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r8}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r8}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000001180)=ANY=[@ANYRES32=r4, @ANYBLOB="342bc91ad80cd1c98b86b9283d703b6925bba86dccfdba84fcb6b8731d6914c66a92a1ba0f49663652a93361f9e39556970ed709c40168c39d0a52392e13c1a8c579a56f91e333db786a0384edd7887d8545bed244eea6bd181e4098c0aab2880828336c5579543d565dd93c6a4fe264c088c7b7e03c07ac66f5cf398c576529942c7c1c6d92946be5e237d1"], 0x9) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000001180)=ANY=[@ANYRES32=r4, @ANYBLOB="342bc91ad80cd1c98b86b9283d703b6925bba86dccfdba84fcb6b8731d6914c66a92a1ba0f49663652a93361f9e39556970ed709c40168c39d0a52392e13c1a8c579a56f91e333db786a0384edd7887d8545bed244eea6bd181e4098c0aab2880828336c5579543d565dd93c6a4fe264c088c7b7e03c07ac66f5cf398c576529942c7c1c6d92946be5e237d1"], 0x9) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="a8050000", @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf25150000000c000600010000000100000004002b80"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x80c4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 1.125337234s ago: executing program 2 (id=9641): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f00001f3000/0x4000)=nil, 0x4000, 0x2, 0x20010, r0, 0xd0466000) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f00000001c0), 0x4) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r5 = creat(&(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1ab) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) ioctl$CEC_RECEIVE(r5, 0xc0386106, &(0x7f0000000000)={0x1ff, 0x0, 0x2, 0x2, 0x8, 0x6, "3891b1bdea472c4d63fede4b44928836", 0x18, 0x0, 0x2, 0x3, 0x17, 0x4e, 0x36}) 1.063475391s ago: executing program 4 (id=9642): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x12c) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f00000000c0)=0xffffffff) ioctl$USBDEVFS_RESET(r3, 0x5514) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010083000000002a906927000000f0b381"], 0x0}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000100)={@local, 0x0, r2}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={@mcast2, @rand_addr=' \x01\x00', @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) bind$xdp(r0, &(0x7f0000000000)={0x2c, 0x5, r2, 0x20, r0}, 0x10) 1.009531321s ago: executing program 2 (id=9643): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x202801, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000001080)=0x19) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x38, 0x1403, 0x20, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x840) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 960.880325ms ago: executing program 2 (id=9644): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setresuid(0xee01, 0xee01, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs}) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, 0x0, &(0x7f0000000240)) 871.445629ms ago: executing program 2 (id=9645): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x12, 0x0, 0x0, 0x2, 0x0, 0x70bd29}, 0x10}}, 0x20000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ac7000/0x3000)=nil, 0x3000, 0x3000002, 0x1010, r0, 0x2000) 663.59151ms ago: executing program 0 (id=9646): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48aa41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r4, 0x80045700, &(0x7f0000000300)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000480)={@val={0x0, 0xca12}, @val={0x0, 0x1, 0x8, 0x9, 0x7, 0x5000}, @eth={@remote, @random="a9225be18c8d", @val={@val={0x88a8, 0x6}, {0x8100, 0x1, 0x0, 0x2}}, {@canfd={0xd, {{0x3, 0x0, 0x0, 0x1}, 0x27, 0x1, 0x0, 0x0, "f3e86079c25373fe0cb9ec085394c42cb091410fcfce9bf33cd85e9a01a363a9cf8bee9645089f8035f136852d8458e3f80e9ca82ec0119c5d14064130588a10"}}}}}, 0x299) syz_usb_control_io$hid(r1, &(0x7f0000000440)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="002205000000376bb99c00"], 0x0}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000003, 0x12, r0, 0x3000) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffe, @loopback, 0xfffffffd}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'dummy0\x00', @link_local}) write$tun(r6, &(0x7f0000000500)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xab, 0x4004, 0x0, 0x5, 0x2f, 0x0, @rand_addr=0x64010102, @multicast1}, {0xa000, 0x6558, 0x97, 0x0, @opaque="9292535f710aeeb4e562c231e4eb359078774a89dfba4d517dad228feea748a9e8f8646680e7b011d1dfd9cab7b53c3ec3c0f367cc42496d8cdd875cb0896920424849e4412180b1236f73d70512adad21ce100d892a1a7128af660000c5e6c86d5728260a7f8c012da8cd0b95a5eb53484011e34d86145b0de299d4e2e32e82f1ab1884dff9485dae36692d7f3865"}}}}}}, 0xbd) setsockopt$inet6_int(r5, 0x29, 0x7, &(0x7f00000001c0)=0x9, 0x4) sendto$inet6(r5, &(0x7f0000000380)="f48fe22f8fb0d5", 0x7, 0x2004c840, &(0x7f0000000140)={0xa, 0x4e23, 0xffffffff, @empty, 0x8000}, 0x1c) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff9, &(0x7f0000000180)={0x0, 0x3938700}) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x10100, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r10, &(0x7f0000000340), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r8, 0x2000) 0s ago: executing program 2 (id=9647): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@hyper}) (async) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) (async) recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40010041) (async) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Product=05d8, bcdDevice= 0.40 [ 1389.963715][T17442] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.974736][T17442] usb 3-1: Product: syz [ 1389.979504][T17442] usb 3-1: Manufacturer: syz [ 1389.984098][T17442] usb 3-1: SerialNumber: syz [ 1389.996527][T32394] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1390.038894][ T7754] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1390.047734][ T7754] usb 2-1: not running at top speed; connect to a high speed hub [ 1390.057038][ T7754] usb 2-1: config index 0 descriptor too short (expected 19986, got 18) [ 1390.065401][ T7754] usb 2-1: config 68 has too many interfaces: 35, using maximum allowed: 32 [ 1390.074278][ T7754] usb 2-1: config 68 has an invalid descriptor of length 201, skipping remainder of the config [ 1390.084757][ T7754] usb 2-1: config 68 has 0 interfaces, different from the descriptor's value: 35 [ 1390.096999][ T7754] usb 2-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=ba.47 [ 1390.106253][ T7754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.114254][ T7754] usb 2-1: Product: syz [ 1390.118695][ T7754] usb 2-1: Manufacturer: syz [ 1390.123484][ T7754] usb 2-1: SerialNumber: syz [ 1390.160408][T32413] bio_check_eod: 14 callbacks suppressed [ 1390.160444][T32413] syz.4.9033: attempt to access beyond end of device [ 1390.160444][T32413] loop4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1390.182311][T32413] vxfs: unable to read disk superblock at 1 [ 1390.188831][T32413] syz.4.9033: attempt to access beyond end of device [ 1390.188831][T32413] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1390.203502][T32413] vxfs: unable to read disk superblock at 8 [ 1390.211790][T32413] vxfs: can't find superblock. [ 1390.223988][T32414] syz.4.9033: attempt to access beyond end of device [ 1390.223988][T32414] loop4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1390.238690][T32414] vxfs: unable to read disk superblock at 1 [ 1390.245922][T32414] syz.4.9033: attempt to access beyond end of device [ 1390.245922][T32414] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1390.259815][T32414] vxfs: unable to read disk superblock at 8 [ 1390.266687][T32414] vxfs: can't find superblock. [ 1390.297525][T17442] usbhid 3-1:1.0: can't add hid device: -71 [ 1390.303542][T17442] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 1390.331126][T17442] usb 3-1: USB disconnect, device number 18 [ 1390.382547][T32426] /dev/rnullb0: Can't open blockdev [ 1390.438956][T32430] /dev/rnullb0: Can't open blockdev [ 1390.460588][ T7754] usb 2-1: USB disconnect, device number 57 [ 1390.666864][ T5895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1390.724048][T32452] netlink: 'syz.0.9038': attribute type 5 has an invalid length. [ 1390.733389][T32452] netlink: 'syz.0.9038': attribute type 5 has an invalid length. [ 1390.741219][T32452] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.9038'. [ 1390.746573][ T9] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1390.904385][T32456] netlink: 'syz.2.9039': attribute type 62 has an invalid length. [ 1390.923830][ T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1390.943314][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.961802][ T9] usb 5-1: Product: syz [ 1390.971903][ T9] usb 5-1: Manufacturer: syz [ 1390.989862][ T9] usb 5-1: SerialNumber: syz [ 1391.022494][ T9] usb 5-1: config 0 descriptor?? [ 1391.122614][T32486] netlink: 1656 bytes leftover after parsing attributes in process `syz.1.9040'. [ 1391.233087][T32495] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1391.283181][T32430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1391.328993][T32430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.494979][ T5895] usb 5-1: USB disconnect, device number 16 [ 1391.554315][T32456] netlink: 'syz.2.9039': attribute type 4 has an invalid length. [ 1391.827098][ T43] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1392.019251][ T43] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1392.028279][ T43] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1392.061023][T32539] binder: 32538:32539 ioctl c018620b 200000000000 returned -14 [ 1392.065443][ T43] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1392.074738][T32539] binder: 32538:32539 ioctl 81f8943c 2000000002c0 returned -22 [ 1392.086226][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1392.107551][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1392.138352][ T43] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1392.147935][ T43] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1392.155941][ T43] usb 3-1: Product: syz [ 1392.174557][ T43] usb 3-1: Manufacturer: syz [ 1392.208783][ T43] cdc_wdm 3-1:1.0: skipping garbage [ 1392.214046][ T43] cdc_wdm 3-1:1.0: skipping garbage [ 1392.254951][ T43] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1392.272959][ T43] cdc_wdm 3-1:1.0: Unknown control protocol [ 1392.280827][T32541] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1392.505858][ T5941] usb 3-1: USB disconnect, device number 19 [ 1392.555640][T32572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9054'. [ 1392.642449][T32581] tmpfs: Bad value for 'mpol' [ 1392.850694][T32596] /dev/rnullb0: Can't open blockdev [ 1392.942188][T32599] syz.1.9060: attempt to access beyond end of device [ 1392.942188][T32599] nbd1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1392.955972][T32599] hpfs: hpfs_map_sector(): read error [ 1392.963678][T32599] syz.1.9060: attempt to access beyond end of device [ 1392.963678][T32599] nbd1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1392.976778][T32599] hpfs: hpfs_map_sector(): read error [ 1393.516700][T32609] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9062'. [ 1393.535346][T32609] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9062'. [ 1394.023012][ T43] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1394.192165][ T43] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1394.201455][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.210066][ T43] usb 3-1: Product: syz [ 1394.214223][ T43] usb 3-1: Manufacturer: syz [ 1394.218922][ T43] usb 3-1: SerialNumber: syz [ 1394.230561][ T43] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1394.250493][ T7754] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1394.336328][ T5895] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1394.486219][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 1394.493405][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1394.509423][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1394.520739][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1394.530580][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1394.542305][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1394.553267][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1394.567106][ T5895] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1394.576273][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.584291][ T5895] usb 2-1: Product: syz [ 1394.588689][ T5895] usb 2-1: Manufacturer: syz [ 1394.593357][ T5895] usb 2-1: SerialNumber: syz [ 1394.602097][ T5895] usb 2-1: config 0 descriptor?? [ 1394.768121][ T5941] usb 3-1: USB disconnect, device number 20 [ 1394.822558][ T5895] usb 2-1: USB disconnect, device number 58 [ 1395.306713][ T7754] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1395.327180][ T7754] ath9k_htc: Failed to initialize the device [ 1395.336129][ T5941] usb 3-1: ath9k_htc: USB layer deinitialized [ 1395.661540][ T30] audit: type=1326 audit(5257432458.523:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32723 comm="syz.4.9082" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7147d8e929 code=0x0 [ 1396.055470][T32742] "syz.1.9086" (32742) uses obsolete ecb(arc4) skcipher [ 1396.267482][T32752] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1396.291006][T32752] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9089'. [ 1396.317854][T32752] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9089'. [ 1396.624263][T32766] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9090'. [ 1396.787670][ T302] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1396.884427][ T305] syz.4.9093: attempt to access beyond end of device [ 1396.884427][ T305] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1396.902696][ T305] vxfs: unable to read disk superblock at 1 [ 1396.911690][ T305] syz.4.9093: attempt to access beyond end of device [ 1396.911690][ T305] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1396.925147][ T305] vxfs: unable to read disk superblock at 8 [ 1396.931151][ T305] vxfs: can't find superblock. [ 1397.071158][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1397.228645][ T322] binder: 320:322 ioctl c018620b 200000000000 returned -14 [ 1397.467347][ T325] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.631068][ T325] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.719901][ T356] Bluetooth: MGMT ver 1.23 [ 1397.852412][ T325] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.998115][ T325] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.250504][ T367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9106'. [ 1398.269588][T18854] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.344617][T18854] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.361879][T18854] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.394255][ T67] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1398.764887][ T384] XFS (rnullb0): Invalid superblock magic number [ 1399.206480][T17442] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1399.366278][T17442] usb 5-1: Using ep0 maxpacket: 16 [ 1399.373729][T17442] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1399.387164][T17442] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1399.416190][T17442] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1399.437415][T17442] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1399.447215][T17442] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1399.480917][T17442] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1399.517805][T17442] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1399.525866][T17442] usb 5-1: Manufacturer: syz [ 1399.575082][T17442] usb 5-1: config 0 descriptor?? [ 1399.664450][ T433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9118'. [ 1399.786832][ T7754] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 1399.812715][ T399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.835103][ T399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.882711][ T440] XFS (rnullb0): Invalid superblock magic number [ 1399.986545][ T7754] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1400.024727][ T7754] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1400.034871][ T453] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9121'. [ 1400.054045][ T444] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9121'. [ 1400.064227][ T7754] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1400.080874][ T453] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9121'. [ 1400.103971][ T7754] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1400.126216][T17442] rc_core: IR keymap rc-hauppauge not found [ 1400.133259][ T7754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.135685][T17442] Registered IR keymap rc-empty [ 1400.161997][ T7754] usb 2-1: Product: syz [ 1400.166341][T17442] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1400.186257][T17442] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1400.204007][ T7754] usb 2-1: Manufacturer: syz [ 1400.216585][ T7754] usb 2-1: SerialNumber: syz [ 1400.232795][T17442] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1400.285069][T17442] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input146 [ 1400.298066][ T5864] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1400.359741][T17442] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1400.411637][T17442] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1400.464240][T17442] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1400.506567][T17442] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1400.556170][T17442] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1400.614241][T17442] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1400.641341][ T7754] usb 2-1: 2:1 : format type 0 is detected, processed as PCM [ 1400.656563][T17442] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1400.696168][T17442] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1400.724538][T17442] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1400.767174][T17442] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1400.797478][T17442] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1400.818647][T17442] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1400.843568][T17442] usb 5-1: USB disconnect, device number 17 [ 1401.263491][ T529] /dev/rnullb0: Can't open blockdev [ 1401.484384][ T7754] usb 2-1: current rate 28022 is different from the runtime rate 9338507 [ 1401.513067][ T540] /dev/rnullb0: Can't open blockdev [ 1401.642264][ T544] binder: 543:544 ioctl c018620b 200000000000 returned -14 [ 1402.010192][ T555] /dev/rnullb0: Can't open blockdev [ 1402.045790][ T559] /dev/rnullb0: Can't open blockdev [ 1402.125687][T17442] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1402.188682][ T43] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1402.223351][ T562] /dev/rnullb0: Can't open blockdev [ 1402.306434][ T564] Invalid logical block size (2) [ 1402.312587][T17442] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1402.354867][T17442] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.369402][ T7754] usb 2-1: USB disconnect, device number 59 [ 1402.385734][T17442] usb 3-1: Product: syz [ 1402.401559][T17442] usb 3-1: Manufacturer: syz [ 1402.422324][T17442] usb 3-1: SerialNumber: syz [ 1402.469654][T12670] udevd[12670]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1402.503260][T17442] usb 3-1: config 0 descriptor?? [ 1402.551534][T17442] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1402.596092][ T604] syz.4.9145: attempt to access beyond end of device [ 1402.596092][ T604] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1402.622444][ T604] syz.4.9145: attempt to access beyond end of device [ 1402.622444][ T604] nbd4: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1402.639965][ T604] Mount JFS Failure: -5 [ 1402.739240][ T607] /dev/rnullb0: Can't open blockdev [ 1402.819538][ T610] No control pipe specified [ 1403.218414][ T625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9149'. [ 1403.219072][ T623] /dev/rnullb0: Can't open blockdev [ 1403.246163][ T625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9149'. [ 1403.265351][ T625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9149'. [ 1403.338168][ T550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.353191][ T30] audit: type=1804 audit(5257432466.213:2296): pid=629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.9151" name="/newroot/390/cgroup.controllers" dev="tmpfs" ino=2166 res=1 errno=0 [ 1403.382094][ T550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1403.419187][T17442] gspca_sunplus: reg_r err -71 [ 1403.420825][ T30] audit: type=1800 audit(5257432466.213:2297): pid=629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9151" name="cgroup.controllers" dev="tmpfs" ino=2166 res=0 errno=0 [ 1403.434239][T17442] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1403.470860][ T625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9149'. [ 1403.496522][ T625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9149'. [ 1403.509072][ T625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9149'. [ 1403.526781][T17442] usb 3-1: USB disconnect, device number 21 [ 1403.666074][ T625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9149'. [ 1403.683635][ T625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9149'. [ 1403.693261][ T625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9149'. [ 1403.909005][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1404.077885][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1404.096892][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1404.105956][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.138821][ T9] usb 5-1: config 0 descriptor?? [ 1404.148967][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1404.226957][T17442] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1404.359175][ T9] pwc: send_video_command error -71 [ 1404.364509][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1404.396511][ T9] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1404.431921][T17442] usb 3-1: Using ep0 maxpacket: 8 [ 1404.452898][ T9] usb 5-1: USB disconnect, device number 18 [ 1404.459798][ T5858] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1404.472660][ T5858] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1404.485061][ T5858] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1404.493386][T17442] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 1404.502195][ T5858] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1404.511449][T17442] usb 3-1: config 0 has an invalid interface number: 49 but max is 2 [ 1404.517685][ T5858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1404.546047][ T5173] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1404.556069][T17442] usb 3-1: config 0 has no interface number 1 [ 1404.567659][ T5173] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1404.583655][T17442] usb 3-1: config 0 has no interface number 2 [ 1404.583869][ T5173] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1404.612592][ T5173] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1404.629780][T17442] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 1404.640628][ T5173] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1404.641952][T17442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1404.684885][ T12] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.723720][T17442] usb 3-1: config 0 descriptor?? [ 1404.752705][T17442] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 1404.768057][ T12] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.833631][ T12] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.888097][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1404.975281][ T12] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.986621][ T653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.010966][ T653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.021327][ T653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.031443][ T653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.041964][ T653] /dev/rnullb0: Can't open blockdev [ 1405.069357][ T664] chnl_net:caif_netlink_parms(): no params data found [ 1405.104616][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.121052][ T5895] usb 3-1: USB disconnect, device number 22 [ 1405.130531][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1405.153401][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.175595][ T9] usb 5-1: config 0 descriptor?? [ 1405.193045][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1405.339675][ T875] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1405.351572][ T875] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1405.433409][ T664] bridge0: port 1(bridge_slave_0) entered blocking state [ 1405.454692][ T664] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.465234][ T664] bridge_slave_0: entered allmulticast mode [ 1405.473760][ T664] bridge_slave_0: entered promiscuous mode [ 1405.499315][ T664] bridge0: port 2(bridge_slave_1) entered blocking state [ 1405.506773][ T664] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.513995][ T664] bridge_slave_1: entered allmulticast mode [ 1405.523083][ T664] bridge_slave_1: entered promiscuous mode [ 1405.581561][ T12] bridge_slave_1: left allmulticast mode [ 1405.593082][ T12] bridge_slave_1: left promiscuous mode [ 1405.599193][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1405.599737][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1405.614127][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1405.622343][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1405.630413][ T12] bridge_slave_0: left promiscuous mode [ 1405.636273][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1405.644225][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 1405.656505][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 1405.686468][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 1405.695831][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 1405.720843][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 1405.747231][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 1405.758093][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 1405.787021][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 1405.801234][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 1405.811455][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 1405.821676][ T9] pwc: recv_control_msg error -32 req 02 val 2800 [ 1406.041661][ T9] pwc: recv_control_msg error -32 req 04 val 1200 [ 1406.064269][ T9] pwc: Registered as video103. [ 1406.079078][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input148 [ 1406.236993][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1406.245999][ T12] bond_slave_0: left promiscuous mode [ 1406.254306][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1406.264015][ T12] bond_slave_1: left promiscuous mode [ 1406.271970][ T12] bond0 (unregistering): Released all slaves [ 1406.288869][ T664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1406.304265][ T664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1406.444039][ T664] team0: Port device team_slave_0 added [ 1406.473904][ T664] team0: Port device team_slave_1 added [ 1406.522419][ T664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1406.553097][ T664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1406.602022][ T664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1406.641317][ T664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1406.662556][ T664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1406.676986][ T1026] /dev/rnullb0: Can't open blockdev [ 1406.691822][ T664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1406.704920][ T5895] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1406.744270][ T1027] /dev/rnullb0: Can't open blockdev [ 1406.750610][ T5173] Bluetooth: hci5: command tx timeout [ 1406.890354][ T1066] /dev/rnullb0: Can't open blockdev [ 1406.905448][ T664] hsr_slave_0: entered promiscuous mode [ 1406.927403][ T664] hsr_slave_1: entered promiscuous mode [ 1406.933548][ T664] debugfs: 'hsr0' already exists in 'hsr' [ 1406.939582][ T664] Cannot create hsr debugfs directory [ 1407.145578][ T12] hsr_slave_0: left promiscuous mode [ 1407.155302][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1407.179607][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1407.192312][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1407.199854][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1407.236405][ T12] veth1_macvtap: left promiscuous mode [ 1407.241957][ T12] veth0_macvtap: left promiscuous mode [ 1407.253324][ T12] veth1_vlan: left promiscuous mode [ 1407.801570][ T5895] usb 5-1: USB disconnect, device number 19 [ 1407.883171][ T1140] input input149: cannot allocate more than FF_MAX_EFFECTS effects [ 1407.912145][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1407.973452][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1407.994816][ T1145] /dev/rnullb0: Can't open blockdev [ 1408.063075][ T1147] /dev/rnullb0: Can't open blockdev [ 1408.081041][ T1148] /dev/rnullb0: Can't open blockdev [ 1408.535008][ T1164] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1408.542223][ T1164] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1408.780709][ T1174] ./cgroup: Can't lookup blockdev [ 1408.838761][ T5173] Bluetooth: hci5: command tx timeout [ 1408.898084][ T1178] usb usb8: check_ctrlrecip: process 1178 (syz.0.9174) requesting ep 01 but needs 81 [ 1408.924202][ T1178] usb usb8: usbfs: process 1178 (syz.0.9174) did not claim interface 0 before use [ 1410.122281][ T1281] /dev/rnullb0: Can't open blockdev [ 1410.270226][ T664] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1410.330998][ T664] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1410.373068][ T664] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1410.498597][ T664] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1410.624674][ T1319] /dev/rnullb0: Can't open blockdev [ 1410.731337][ T1322] /dev/rnullb0: Can't open blockdev [ 1410.754845][ T664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1410.798526][ T664] 8021q: adding VLAN 0 to HW filter on device team0 [ 1410.829199][T16097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.836377][T16097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1410.862908][T16097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.870088][T16097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1410.914862][ T5173] Bluetooth: hci5: command tx timeout [ 1411.005134][ T1334] /dev/rnullb0: Can't open blockdev [ 1411.224228][ T1351] o2cb: This node has not been configured. [ 1411.257527][ T1351] o2cb: Cluster check failed. Fix errors before retrying. [ 1411.264715][ T1351] (syz.2.9184,1351,0):user_dlm_register:674 ERROR: status = -22 [ 1411.292845][ T1351] (syz.2.9184,1351,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "syz1" [ 1411.336219][ T5895] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1411.514984][ T664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1411.517520][ T1366] /dev/rnullb0: Can't open blockdev [ 1411.527286][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 1411.533891][ T5895] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1411.555192][ T5895] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1411.569920][ T5895] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 1411.589320][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 1411.625635][ T5895] usb 5-1: Product: syz [ 1411.649457][ T5895] usb 5-1: config 0 descriptor?? [ 1411.665456][ T664] veth0_vlan: entered promiscuous mode [ 1411.684608][ T664] veth1_vlan: entered promiscuous mode [ 1411.746622][ T664] veth0_macvtap: entered promiscuous mode [ 1411.783971][ T664] veth1_macvtap: entered promiscuous mode [ 1411.829745][ T664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1411.885647][ T664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1411.960015][T18854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.978598][T18854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1411.994153][T18854] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.004099][T18854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1412.085562][ T5895] waterforce 0003:1044:7A4D.005A: unknown main item tag 0x0 [ 1412.149115][ T5895] waterforce 0003:1044:7A4D.005A: unknown main item tag 0x0 [ 1412.167198][ T5895] waterforce 0003:1044:7A4D.005A: unknown main item tag 0x0 [ 1412.196180][ T5895] waterforce 0003:1044:7A4D.005A: unknown main item tag 0x0 [ 1412.213970][ T5895] waterforce 0003:1044:7A4D.005A: unknown main item tag 0x0 [ 1412.254193][ T5895] waterforce 0003:1044:7A4D.005A: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1412.276915][T16097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.287388][ T1339] IPVS: length: 188 != 8 [ 1412.298570][T16097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.359908][ T5895] waterforce 0003:1044:7A4D.005A: fw version request failed with -38 [ 1412.397985][T16097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.429543][T18759] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1412.449694][T16097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.495872][ T9] usb 5-1: USB disconnect, device number 20 [ 1412.643127][ T1415] fido_id[1415]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1412.690020][ T1433] /dev/rnullb0: Can't open blockdev [ 1412.795696][ T1440] /dev/rnullb0: Can't open blockdev [ 1412.935041][ T30] audit: type=1326 audit(5257432475.793:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1443 comm="syz.0.9196" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e9fb8e929 code=0x0 [ 1412.996345][ T5173] Bluetooth: hci5: command tx timeout [ 1413.131623][ T1463] /dev/rnullb0: Can't open blockdev [ 1413.226162][ T5895] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1413.302427][ T1474] /dev/rnullb0: Can't open blockdev [ 1413.398629][ T5895] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1413.413113][ T5895] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1413.439878][ T5895] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 1413.454365][ T1478] /dev/rnullb0: Can't open blockdev [ 1413.459213][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.486512][T26829] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1413.491341][ T5895] usb 3-1: config 0 descriptor?? [ 1413.650581][T26829] usb 5-1: Using ep0 maxpacket: 32 [ 1413.661567][T26829] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1413.681252][T26829] usb 5-1: config 5 has an invalid interface number: 76 but max is 0 [ 1413.696317][T26829] usb 5-1: config 5 has no interface number 0 [ 1413.705763][T26829] usb 5-1: New USB device found, idVendor=0711, idProduct=0230, bcdDevice=3c.61 [ 1413.717273][T26829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.735041][T26829] usb 5-1: Product: syz [ 1413.746189][T26829] usb 5-1: Manufacturer: syz [ 1413.750800][T26829] usb 5-1: SerialNumber: syz [ 1413.887710][ T1494] /dev/rnullb0: Can't open blockdev [ 1413.939727][ T1494] 9pnet_fd: p9_fd_create_unix (1494): problem connecting socket: ./file0: -111 [ 1413.960376][ T5895] kovaplus 0003:1E7D:2D50.005B: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 1414.122423][ T1500] /dev/rnullb0: Can't open blockdev [ 1414.166084][T26829] mct_u232 5-1:5.76: MCT U232 converter detected [ 1414.217059][T26829] mct_u232 ttyUSB0: expected endpoint missing [ 1414.256359][T26829] usb 5-1: USB disconnect, device number 21 [ 1414.286465][T26829] mct_u232 5-1:5.76: device disconnected [ 1414.390190][ T5895] kovaplus 0003:1E7D:2D50.005B: couldn't init struct kovaplus_device [ 1414.425712][ T5895] kovaplus 0003:1E7D:2D50.005B: couldn't install mouse [ 1414.438821][ T5895] kovaplus 0003:1E7D:2D50.005B: probe with driver kovaplus failed with error -71 [ 1414.460319][ T5895] usb 3-1: USB disconnect, device number 23 [ 1414.471944][ T1520] binder: 1518:1520 ioctl c018620b 200000000000 returned -14 [ 1414.670165][ T1535] /dev/rnullb0: Can't open blockdev [ 1414.880614][ T1545] /dev/rnullb0: Can't open blockdev [ 1414.882019][ T1539] /dev/rnullb0: Can't open blockdev [ 1414.994669][ T1554] /dev/rnullb0: Can't open blockdev [ 1415.006626][ T1549] syz_tun: entered promiscuous mode [ 1415.026473][ T1549] syz_tun: entered allmulticast mode [ 1415.055105][ T1549] /dev/rnullb0: Can't open blockdev [ 1415.066724][ T1556] /dev/rnullb0: Can't open blockdev [ 1415.095606][ T1558] /dev/rnullb0: Can't open blockdev [ 1415.394985][ T1584] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9221'. [ 1415.683641][T26829] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1415.830509][T26829] usb 2-1: device descriptor read/64, error -71 [ 1416.014798][ T1615] /dev/rnullb0: Can't open blockdev [ 1416.102914][T26829] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1416.109467][ T1621] /dev/rnullb0: Can't open blockdev [ 1416.236315][T26829] usb 2-1: device descriptor read/64, error -71 [ 1416.257085][ T1630] netlink: 'syz.2.9233': attribute type 29 has an invalid length. [ 1416.265953][ T1631] /dev/sg0: Can't lookup blockdev [ 1416.351705][T26829] usb usb2-port1: attempt power cycle [ 1416.626432][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1416.640608][ T1643] /dev/rnullb0: Can't open blockdev [ 1416.716244][T26829] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1416.738426][T26829] usb 2-1: device descriptor read/8, error -71 [ 1416.789139][ T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1416.798774][ T9] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1416.809855][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1416.819278][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1416.830567][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1416.844078][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1416.853839][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1416.861891][ T9] usb 3-1: Product: syz [ 1416.866249][ T9] usb 3-1: Manufacturer: syz [ 1416.880106][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 1416.885321][ T9] cdc_wdm 3-1:1.0: skipping garbage [ 1416.893339][ T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1416.899294][ T9] cdc_wdm 3-1:1.0: Unknown control protocol [ 1416.946243][T17442] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1416.976448][T26829] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1416.999534][T26829] usb 2-1: device descriptor read/8, error -71 [ 1417.080673][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1417.087295][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1417.093551][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1417.100165][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1417.106722][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1417.113413][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1417.119667][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1417.126361][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1417.133278][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1417.139895][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1417.147140][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1417.153739][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1417.160085][T26829] usb usb2-port1: unable to enumerate USB device [ 1417.167118][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1417.167140][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1417.173837][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1417.173856][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1417.180010][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1417.180032][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1417.187000][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1417.187020][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1417.218712][T17442] usb 5-1: Using ep0 maxpacket: 8 [ 1417.224204][ T9] usb 3-1: USB disconnect, device number 24 [ 1417.230480][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1417.251526][T17442] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1417.260636][T17442] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.271178][T17442] usb 5-1: Product: syz [ 1417.275333][T17442] usb 5-1: Manufacturer: syz [ 1417.280959][T17442] usb 5-1: SerialNumber: syz [ 1417.288738][T17442] usb 5-1: config 0 descriptor?? [ 1417.292366][ T1635] fuse: Bad value for 'fd' [ 1417.378028][ T1635] /dev/rnullb0: Can't open blockdev [ 1417.501944][T17442] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1417.548893][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1417.626916][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1417.945147][ T1668] /dev/rnullb0: Can't open blockdev [ 1418.122291][ T1682] netlink: 'syz.2.9239': attribute type 8 has an invalid length. [ 1418.214748][ T5864] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 1418.225636][ T5864] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 1418.233719][ T5864] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 1418.241398][ T5864] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 1418.249089][ T5864] hid-generic 0000:0000:0000.005C: unknown main item tag 0x0 [ 1418.261230][ T5864] hid-generic 0000:0000:0000.005C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1418.351971][ T1692] fido_id[1692]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1418.374776][ T1695] netlink: 'syz.2.9241': attribute type 27 has an invalid length. [ 1418.680983][ T1710] /dev/rnullb0: Can't open blockdev [ 1418.919655][T17442] usb write operation failed. (-71) [ 1418.941698][T17442] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1418.960079][T17442] dvbdev: DVB: registering new adapter (Terratec H7) [ 1418.967360][T17442] usb 5-1: media controller created [ 1418.973368][T17442] usb read operation failed. (-71) [ 1418.981980][T17442] usb write operation failed. (-71) [ 1418.995443][T17442] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1419.044792][T17442] usb 5-1: USB disconnect, device number 22 [ 1419.151958][ T1747] /dev/rnullb0: Can't open blockdev [ 1419.297500][ T1760] /dev/rnullb0: Can't open blockdev [ 1419.304275][ T1756] /dev/rnullb0: Can't open blockdev [ 1419.514464][ T1772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1419.593057][ T1772] /dev/loop0: Can't lookup blockdev [ 1419.627062][T17442] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1419.647368][ T1777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9257'. [ 1419.677776][ T1777] /dev/rnullb0: Can't open blockdev [ 1419.815926][ T1782] random: crng reseeded on system resumption [ 1419.826429][T17442] usb 2-1: Using ep0 maxpacket: 32 [ 1419.851818][T17442] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1419.886484][T17442] usb 2-1: config 0 has no interface number 0 [ 1419.913588][ T1793] /dev/rnullb0: Can't open blockdev [ 1419.927835][T17442] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1419.938354][ T1796] /dev/rnullb0: Can't open blockdev [ 1419.954912][T17442] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1419.977824][T17442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.985840][T17442] usb 2-1: Product: syz [ 1420.005888][T17442] usb 2-1: Manufacturer: syz [ 1420.037267][T17442] usb 2-1: SerialNumber: syz [ 1420.076471][T17442] usb 2-1: config 0 descriptor?? [ 1420.119918][ T1806] tipc: Can't bind to reserved service type 0 [ 1420.289090][ T1767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.314363][ T1767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.324293][ T1816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1420.343641][ T1816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1420.358497][ T1816] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1420.365608][ T1816] /dev/rnullb0: Can't open blockdev [ 1420.390080][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1420.409744][T17442] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 1420.438580][T17442] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1420.445959][T17442] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1420.468488][T17442] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1420.517591][T17442] usb 2-1: USB disconnect, device number 64 [ 1420.600219][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.613672][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1420.631455][ T9] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1420.645351][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1420.663231][ T9] usb 3-1: SerialNumber: syz [ 1420.736377][T26829] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1420.906727][T26829] usb 5-1: Using ep0 maxpacket: 16 [ 1420.923894][ T1806] /dev/rnullb0: Can't open blockdev [ 1420.931149][T26829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1420.952212][ T9] usb 3-1: 0:2 : does not exist [ 1420.958465][T26829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1420.995379][T26829] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 1421.045129][T26829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.056220][ T9] usb 3-1: USB disconnect, device number 25 [ 1421.090410][T26829] usb 5-1: config 0 descriptor?? [ 1421.122988][ T1870] /dev/rnullb0: Can't open blockdev [ 1421.134446][ T839] udevd[839]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1421.449576][ T1893] netlink: 'syz.1.9270': attribute type 23 has an invalid length. [ 1421.512331][ T1896] /dev/rnullb0: Can't open blockdev [ 1421.566592][T26829] elecom 0003:056E:00FE.005D: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.4-1/input0 [ 1421.669322][ T1911] /dev/rnullb0: Can't open blockdev [ 1421.935997][ T1923] /dev/rnullb0: Can't open blockdev [ 1421.954010][ T1923] /dev/rnullb0: Can't open blockdev [ 1421.964274][ T1923] /dev/rnullb0: Can't open blockdev [ 1421.975529][ T1923] /dev/rnullb0: Can't open blockdev [ 1421.988191][ T1923] /dev/rnullb0: Can't open blockdev [ 1422.005940][ T1923] /dev/rnullb0: Can't open blockdev [ 1422.021462][ T1923] /dev/rnullb0: Can't open blockdev [ 1422.039310][ T1923] /dev/rnullb0: Can't open blockdev [ 1422.051473][ T1923] /dev/rnullb0: Can't open blockdev [ 1422.060608][ T1923] /dev/rnullb0: Can't open blockdev [ 1422.069791][ T1923] /dev/rnullb0: Can't open blockdev [ 1422.075621][ T1923] /dev/rnullb0: Can't open blockdev [ 1422.085980][ T1923] /dev/rnullb0: Can't open blockdev [ 1422.112571][ T1923] /dev/rnullb0: Can't open blockdev [ 1422.134110][ T1923] /dev/rnullb0: Can't open blockdev [ 1422.163156][ T1923] /dev/rnullb0: Can't open blockdev [ 1422.174788][ T1923] /dev/rnullb0: Can't open blockdev [ 1422.365333][T26829] usb 5-1: USB disconnect, device number 23 [ 1422.680487][ T1824] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1422.744375][ T1960] 9pnet_fd: Insufficient options for proto=fd [ 1423.078605][ T1979] netlink: 666 bytes leftover after parsing attributes in process `syz.1.9282'. [ 1423.126538][T17442] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1423.171395][ T1987] /dev/rnullb0: Can't open blockdev [ 1423.222848][ T1990] /dev/rnullb0: Can't open blockdev [ 1423.307264][T18854] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1423.320813][T17442] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1423.331442][T17442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.336560][ T5895] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 1423.342743][T17442] usb 3-1: config 0 descriptor?? [ 1423.373926][T17442] usb 3-1: selecting invalid altsetting 3 [ 1423.390355][T17442] comedi comedi5: could not set alternate setting 3 in high speed [ 1423.407205][ T1995] /dev/rnullb0: Can't open blockdev [ 1423.414051][T17442] usbduxsigma 3-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1423.435084][T17442] usbduxsigma 3-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1423.485794][ T2004] /dev/rnullb0: Can't open blockdev [ 1423.494692][ T2004] No source specified [ 1423.511708][ T5895] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1423.537015][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.572167][ T5895] usb 2-1: config 0 descriptor?? [ 1423.587015][T17442] usb 3-1: USB disconnect, device number 26 [ 1423.634446][ T2010] Malformed UNC in devname [ 1423.634446][ T2010] [ 1423.651959][ T2010] CIFS: VFS: Malformed UNC in devname [ 1423.755208][ T2016] /dev/rnullb0: Can't open blockdev [ 1424.081904][ T2028] /dev/rnullb0: Can't open blockdev [ 1424.446214][T26829] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 1424.473445][ T30] audit: type=1326 audit(5257432487.333:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2043 comm="syz.0.9299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e9fb8e929 code=0x0 [ 1424.628049][T26829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1424.654693][ T2049] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1424.665804][T26829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1424.686617][ T2049] /dev/rnullb0: Can't open blockdev [ 1424.691962][T26829] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 1424.720335][T26829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.754976][T26829] usb 3-1: config 0 descriptor?? [ 1424.805606][ T2055] /dev/rnullb0: Can't open blockdev [ 1424.874219][ T2046] /dev/rnullb0: Can't open blockdev [ 1424.972813][ T2032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1424.984031][ T2032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.073407][ T2067] /dev/rnullb0: Can't open blockdev [ 1425.129702][ T2073] binder: BINDER_SET_CONTEXT_MGR already set [ 1425.135771][ T2073] binder: 2072:2073 ioctl 4018620d 2000000000c0 returned -16 [ 1425.150302][ T2073] binder: BINDER_SET_CONTEXT_MGR already set [ 1425.156558][ T2073] binder: 2072:2073 ioctl 4018620d 200000000040 returned -16 [ 1425.200257][T26829] zydacron 0003:13EC:0006.005E: unknown main item tag 0x7 [ 1425.203921][ T1973] /dev/rnullb0: Can't open blockdev [ 1425.211502][T26829] zydacron 0003:13EC:0006.005E: item fetching failed at offset 2/5 [ 1425.216770][ T5895] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1425.224548][T26829] zydacron 0003:13EC:0006.005E: parse failed [ 1425.238775][ T5895] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1425.239197][ T5895] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1425.251519][ T5895] usb 2-1: USB disconnect, device number 65 [ 1425.282052][T26829] zydacron 0003:13EC:0006.005E: probe with driver zydacron failed with error -22 [ 1425.398499][ T7754] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1425.413416][T26829] usb 3-1: USB disconnect, device number 27 [ 1425.566944][ T7754] usb 5-1: Using ep0 maxpacket: 16 [ 1425.587584][ T7754] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1425.606470][ T7754] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 1425.626213][ T7754] usb 5-1: config 13 has no interface number 0 [ 1425.632694][ T7754] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1425.655210][ T7754] usb 5-1: config 13 interface 50 has no altsetting 0 [ 1425.664963][ T7754] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1425.674096][ T7754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1425.684248][ T7754] usb 5-1: Product: syz [ 1425.688478][ T7754] usb 5-1: Manufacturer: syz [ 1425.688499][ T7754] usb 5-1: SerialNumber: syz [ 1425.701008][ T2073] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1425.900559][ T2117] /dev/rnullb0: Can't open blockdev [ 1425.996652][ T7754] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1426.003665][ T7754] usb 5-1: MIDIStreaming interface descriptor not found [ 1426.104353][ T7754] usb 5-1: USB disconnect, device number 24 [ 1426.142712][ T2130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9312'. [ 1426.318368][ T2166] /dev/rnullb0: Can't open blockdev [ 1426.475343][ T2180] /dev/rnullb0: Can't open blockdev [ 1426.562241][ T2183] syz.4.9317: attempt to access beyond end of device [ 1426.562241][ T2183] loop4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1426.581641][ T2183] SQUASHFS error: Failed to read block 0x0: -5 [ 1426.590339][ T2183] unable to read squashfs_super_block [ 1426.659102][ T2189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1426.676455][ T5864] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1426.846298][ T5864] usb 2-1: Using ep0 maxpacket: 8 [ 1426.853785][ T5864] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1426.877408][ T5864] usb 2-1: config 2 has an invalid interface number: 65 but max is 0 [ 1426.885504][ T5864] usb 2-1: config 2 has no interface number 0 [ 1426.895513][ T5864] usb 2-1: config 2 interface 65 has no altsetting 0 [ 1426.928270][ T5864] usb 2-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=d8.44 [ 1426.940675][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.973104][ T5864] usb 2-1: Product: syz [ 1426.981945][ T5864] usb 2-1: Manufacturer: syz [ 1426.988070][ T5864] usb 2-1: SerialNumber: syz [ 1427.086076][ T2214] /dev/rnullb0: Can't open blockdev [ 1427.222508][ T2173] /dev/rnullb0: Can't open blockdev [ 1427.270596][ T5864] ttusb_dec_send_command: command bulk message failed: error -22 [ 1427.291821][ T2219] /dev/rnullb0: Can't open blockdev [ 1427.320288][ T5864] ttusb-dec 2-1:2.65: probe with driver ttusb-dec failed with error -22 [ 1427.359954][ T5864] usb 2-1: USB disconnect, device number 66 [ 1427.798909][ T2233] /dev/rnullb0: Can't open blockdev [ 1428.174800][ T2243] /dev/rnullb0: Can't open blockdev [ 1428.188359][ T2245] virtio-fs: tag not found [ 1428.202220][ T2248] /dev/rnullb0: Can't open blockdev [ 1428.307277][ T2254] 9pnet_fd: Insufficient options for proto=fd [ 1428.314918][ T2252] 9pnet_fd: Insufficient options for proto=fd [ 1428.337369][ T2252] /dev/rnullb0: Can't open blockdev [ 1428.426738][T16073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1428.617922][ T2260] syz.1.9334: attempt to access beyond end of device [ 1428.617922][ T2260] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1428.651536][ T2260] EXT4-fs (nbd1): unable to read superblock [ 1429.056452][ T5864] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1429.067770][T18854] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1429.196179][ T7754] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1429.236185][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 1429.264262][ T5864] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1429.293288][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1429.336448][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1429.346783][ T7754] usb 5-1: device descriptor read/64, error -71 [ 1429.378290][ T5864] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 1429.396235][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.404248][ T5864] usb 3-1: Product: syz [ 1429.426168][ T5864] usb 3-1: Manufacturer: syz [ 1429.430789][ T5864] usb 3-1: SerialNumber: syz [ 1429.459336][ T5864] usb 3-1: config 0 descriptor?? [ 1429.586362][ T7754] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1429.681360][ T2272] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1429.696398][ T2272] /dev/rnullb0: Can't open blockdev [ 1429.707426][ T5864] pegasus_notetaker 3-1:0.0: probe with driver pegasus_notetaker failed with error -12 [ 1429.738156][ T7754] usb 5-1: device descriptor read/64, error -71 [ 1429.758704][ T5864] usb 3-1: USB disconnect, device number 28 [ 1429.846712][ T7754] usb usb5-port1: attempt power cycle [ 1429.890907][ T2296] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1429.912436][ T2296] /dev/rnullb0: Can't open blockdev [ 1430.156023][ T2302] /dev/rnullb0: Can't open blockdev [ 1430.187044][ T7754] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1430.226705][ T7754] usb 5-1: device descriptor read/8, error -71 [ 1430.324403][ T2307] /dev/rnullb0: Can't open blockdev [ 1430.476762][ T7754] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1430.512483][ T7754] usb 5-1: device descriptor read/8, error -71 [ 1430.627654][ T7754] usb usb5-port1: unable to enumerate USB device [ 1430.716191][ T9] usb 2-1: new low-speed USB device number 67 using dummy_hcd [ 1430.806213][T26829] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1430.859112][ T9] usb 2-1: device descriptor read/64, error -71 [ 1430.966245][T26829] usb 3-1: Using ep0 maxpacket: 32 [ 1430.974289][T26829] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1430.990091][T26829] usb 3-1: config 0 has no interface number 0 [ 1431.000435][T26829] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1431.012462][T26829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1431.022335][T26829] usb 3-1: Product: syz [ 1431.026631][T26829] usb 3-1: Manufacturer: syz [ 1431.031239][T26829] usb 3-1: SerialNumber: syz [ 1431.054510][T26829] usb 3-1: config 0 descriptor?? [ 1431.069581][T26829] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1431.079079][T26829] usb 3-1: selecting invalid altsetting 1 [ 1431.084820][T26829] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1431.104044][T26829] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1431.115724][T26829] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1431.131971][ T9] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 1431.140345][T26829] usb 3-1: media controller created [ 1431.170626][T26829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1431.296231][ T9] usb 2-1: device descriptor read/64, error -71 [ 1431.419189][ T9] usb usb2-port1: attempt power cycle [ 1431.771849][ T9] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 1431.799725][ T9] usb 2-1: device descriptor read/8, error -71 [ 1431.893180][T26829] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1431.978948][T26829] usb 3-1: USB disconnect, device number 29 [ 1432.046456][ T9] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 1432.078796][ T9] usb 2-1: device descriptor read/8, error -71 [ 1432.186934][ T9] usb usb2-port1: unable to enumerate USB device [ 1432.406286][ T5864] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 1432.572920][ T5864] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 1432.584614][ T5864] usb 5-1: config 0 has no interface number 0 [ 1432.601574][ T5864] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 1432.610730][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.619151][ T5864] usb 5-1: Product: syz [ 1432.623413][ T5864] usb 5-1: Manufacturer: syz [ 1432.629161][ T5864] usb 5-1: SerialNumber: syz [ 1432.643353][ T5864] usb 5-1: config 0 descriptor?? [ 1432.653607][ T5864] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1433.133099][ T2375] Invalid source name [ 1433.136899][ T2373] /dev/rnullb0: Can't open blockdev [ 1433.137250][ T2375] UBIFS error (pid: 2375): cannot open "./cgroup", error -22 [ 1433.519805][ T2394] /dev/rnullb0: Can't open blockdev [ 1433.536191][T17442] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 1433.552344][ T2394] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9358'. [ 1433.698304][T17442] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1433.710332][T17442] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1433.721724][T17442] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1433.735994][T17442] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1433.745125][T17442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1433.753178][T17442] usb 3-1: SerialNumber: syz [ 1433.971712][ T2383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.988546][ T2404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1433.988973][ T2383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.005043][ T2404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1434.022550][ T2404] input: syz1 as /devices/virtual/input/input151 [ 1434.081978][ T2383] /dev/rnullb0: Can't open blockdev [ 1434.111418][T17442] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 1434.126064][T17442] usb 3-1: USB disconnect, device number 30 [ 1434.189067][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1434.826880][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1434.874557][ T2353] /dev/rnullb0: Can't open blockdev [ 1434.923060][ T5864] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 1434.950905][ T5864] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 1434.965538][ T5864] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 1434.984771][ T5864] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 1435.009408][ T5864] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 1435.023782][ T5864] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 1435.034156][ T5864] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 1435.055430][ T5864] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 1435.070614][ T5864] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 1435.083942][ T5864] input: xirlink-cit as /devices/platform/dummy_hcd.4/usb5/5-1/input/input152 [ 1435.121043][ T5864] usb 5-1: USB disconnect, device number 29 [ 1435.143419][ T2464] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 1435.153135][ T2464] syz.2.9365: attempt to access beyond end of device [ 1435.153135][ T2464] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1435.153221][ T2468] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 1435.229325][ T2468] syz.2.9365: attempt to access beyond end of device [ 1435.229325][ T2468] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1435.462619][ T2486] /dev/rnullb0: Can't open blockdev [ 1435.649471][ T2495] /dev/rnullb0: Can't open blockdev [ 1435.668974][ T2501] /dev/rnullb0: Can't open blockdev [ 1435.748345][ T2507] /dev/rnullb0: Can't open blockdev [ 1435.831955][ T2516] /dev/rnullb0: Can't open blockdev [ 1435.985500][ T49] Bluetooth: hci2: Frame reassembly failed (-84) [ 1436.036210][T26829] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1436.117513][ T30] audit: type=1804 audit(5257432498.983:2300): pid=2519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.9375" name="/newroot/354/file1" dev="fuse" ino=1 res=1 errno=0 [ 1436.160774][ T30] audit: type=1800 audit(5257432498.983:2301): pid=2519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9375" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1436.197670][ T2522] /dev/rnullb0: Can't open blockdev [ 1436.227508][T26829] usb 2-1: Using ep0 maxpacket: 32 [ 1436.238711][T26829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 1436.263556][T26829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 1436.293661][T26829] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1436.313087][T26829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.333360][T26829] usb 2-1: Product: syz [ 1436.343457][T26829] usb 2-1: Manufacturer: syz [ 1436.355310][T26829] usb 2-1: SerialNumber: syz [ 1436.374687][T26829] usb 2-1: config 0 descriptor?? [ 1436.411286][T26829] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1436.585710][ T2559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1436.600977][T18854] usb 2-1: Failed to submit usb control message: -71 [ 1436.602912][T26829] usb 2-1: USB disconnect, device number 71 [ 1436.614356][T18854] usb 2-1: unable to send the bmi data to the device: -71 [ 1436.624036][T18854] usb 2-1: unable to get target info from device [ 1436.633661][T18854] usb 2-1: could not get target info (-71) [ 1436.640223][T18854] usb 2-1: could not probe fw (-71) [ 1436.640606][ T2559] /dev/rnullb0: Can't open blockdev [ 1436.936797][ T2591] /dev/rnullb0: Can't open blockdev [ 1436.952654][ T2599] /dev/rnullb0: Can't open blockdev [ 1437.090261][ T2612] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1437.097367][ T2612] /dev/rnullb0: Can't open blockdev [ 1437.240301][ T2629] /dev/rnullb0: Can't open blockdev [ 1437.257196][ T2628] /dev/rnullb0: Can't open blockdev [ 1437.392966][ T2640] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9390'. [ 1437.413118][ T2639] /dev/rnullb0: Can't open blockdev [ 1437.623930][ T2651] /dev/rnullb0: Can't open blockdev [ 1438.026622][ T5173] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1438.040013][T26829] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1438.079704][ T7754] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1438.205581][ T2677] /dev/rnullb0: Can't open blockdev [ 1438.216344][T26829] usb 2-1: Using ep0 maxpacket: 32 [ 1438.234338][ T7754] usb 3-1: device descriptor read/64, error -71 [ 1438.242155][T26829] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1438.260890][T26829] usb 2-1: config 0 has no interface number 0 [ 1438.287047][T26829] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1438.302394][ T2680] /dev/rnullb0: Can't open blockdev [ 1438.309788][T26829] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1438.340958][T26829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.360312][T26829] usb 2-1: Product: syz [ 1438.364544][T26829] usb 2-1: Manufacturer: syz [ 1438.396307][T26829] usb 2-1: SerialNumber: syz [ 1438.407137][T26829] usb 2-1: config 0 descriptor?? [ 1438.433713][T26829] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1438.456307][T26829] em28xx 2-1:0.132: Video interface 132 found: [ 1438.477207][ T7754] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1438.616203][ T7754] usb 3-1: device descriptor read/64, error -71 [ 1438.666400][ T5895] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1438.726824][ T7754] usb usb3-port1: attempt power cycle [ 1438.820962][T26829] em28xx 2-1:0.132: unknown em28xx chip ID (21) [ 1438.830670][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 1438.837918][ T5895] usb 5-1: config 143 has an invalid descriptor of length 147, skipping remainder of the config [ 1438.855217][ T5895] usb 5-1: config 143 has 0 interfaces, different from the descriptor's value: 1 [ 1438.871770][ T5895] usb 5-1: New USB device found, idVendor=12d1, idProduct=763a, bcdDevice=4a.a8 [ 1438.881684][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.894018][ T5895] usb 5-1: Product: syz [ 1438.900796][ T5895] usb 5-1: Manufacturer: syz [ 1438.905575][ T5895] usb 5-1: SerialNumber: syz [ 1439.022902][ T2656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.031792][ T2656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.076221][ T7754] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1439.096894][ T7754] usb 3-1: device descriptor read/8, error -71 [ 1439.100184][T26829] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1439.115563][T26829] em28xx 2-1:0.132: board has no eeprom [ 1439.179295][T26829] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1439.190245][T26829] em28xx 2-1:0.132: analog set to bulk mode. [ 1439.196708][T17442] em28xx 2-1:0.132: Registering V4L2 extension [ 1439.213574][T26829] usb 2-1: USB disconnect, device number 72 [ 1439.227377][T26829] em28xx 2-1:0.132: Disconnecting em28xx [ 1439.259712][ T5895] usb 5-1: USB disconnect, device number 30 [ 1439.336337][ T7754] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1439.355607][T17442] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1439.363133][T17442] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1439.370644][ T7754] usb 3-1: device descriptor read/8, error -71 [ 1439.373305][T17442] em28xx 2-1:0.132: No AC97 audio processor [ 1439.388150][T17442] usb 2-1: Decoder not found [ 1439.392763][T17442] em28xx 2-1:0.132: failed to create media graph [ 1439.399440][T17442] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1439.408148][T17442] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1439.417276][T26829] em28xx 2-1:0.132: Closing input extension [ 1439.426680][T26829] em28xx 2-1:0.132: Freeing device [ 1439.496405][ T7754] usb usb3-port1: unable to enumerate USB device [ 1439.815197][ T2745] /dev/rnullb0: Can't open blockdev [ 1439.906310][T26829] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1439.948172][T18854] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1440.036264][T26829] usb 2-1: device descriptor read/64, error -71 [ 1440.096253][ T7754] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1440.246214][ T7754] usb 5-1: Using ep0 maxpacket: 16 [ 1440.253950][ T7754] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1440.263361][ T7754] usb 5-1: config 7 has an invalid interface number: 191 but max is 0 [ 1440.272263][ T7754] usb 5-1: config 7 has no interface number 0 [ 1440.278428][ T7754] usb 5-1: config 7 interface 191 has no altsetting 0 [ 1440.289395][T26829] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1440.292635][ T7754] usb 5-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=9d.86 [ 1440.309479][ T7754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1440.317598][ T7754] usb 5-1: Product: syz [ 1440.321763][ T7754] usb 5-1: Manufacturer: syz [ 1440.326989][ T7754] usb 5-1: SerialNumber: syz [ 1440.438585][T26829] usb 2-1: device descriptor read/64, error -71 [ 1440.499827][ T2765] /dev/rnullb0: Can't open blockdev [ 1440.540687][ T7754] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.191/input/input153 [ 1440.558539][T26829] usb usb2-port1: attempt power cycle [ 1440.558901][ T5208] bcm5974 5-1:7.191: could not read from device [ 1440.566542][ T2774] /dev/sg0: Can't lookup blockdev [ 1440.582382][ T5208] bcm5974 5-1:7.191: could not read from device [ 1440.589537][T18854] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1440.599685][ T7754] usb 5-1: USB disconnect, device number 31 [ 1440.682176][ T2787] /dev/rnullb0: Can't open blockdev [ 1440.916225][T26829] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1440.937152][T26829] usb 2-1: device descriptor read/8, error -71 [ 1441.182975][T26829] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1441.217790][T26829] usb 2-1: device descriptor read/8, error -71 [ 1441.338023][T26829] usb usb2-port1: unable to enumerate USB device [ 1441.346419][ T7754] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1441.496184][ T7754] usb 3-1: Using ep0 maxpacket: 32 [ 1441.503011][ T7754] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1441.516033][ T7754] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1441.516265][T17442] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 1441.528933][ T7754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.540742][ T7754] usb 3-1: Product: syz [ 1441.544918][ T7754] usb 3-1: Manufacturer: syz [ 1441.550015][ T7754] usb 3-1: SerialNumber: syz [ 1441.557160][ T7754] usb 3-1: config 0 descriptor?? [ 1441.566878][ T7754] usb 3-1: bad CDC descriptors [ 1441.572946][ T7754] usb 3-1: unsupported MDLM descriptors [ 1441.688305][T17442] usb 5-1: not running at top speed; connect to a high speed hub [ 1441.697446][T17442] usb 5-1: config 5 has an invalid interface number: 232 but max is 0 [ 1441.705620][T17442] usb 5-1: config 5 has no interface number 0 [ 1441.711948][T17442] usb 5-1: config 5 interface 232 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1441.722890][T17442] usb 5-1: config 5 interface 232 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1441.733869][T17442] usb 5-1: config 5 interface 232 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1441.744901][T17442] usb 5-1: config 5 interface 232 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1441.756286][T17442] usb 5-1: config 5 interface 232 altsetting 0 endpoint 0xD has invalid maxpacket 1951, setting to 1023 [ 1441.767462][T17442] usb 5-1: config 5 interface 232 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1441.778743][T17442] usb 5-1: config 5 interface 232 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1441.792544][T17442] usb 5-1: config 5 interface 232 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1441.803554][T17442] usb 5-1: config 5 interface 232 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 1023 [ 1441.814785][T17442] usb 5-1: config 5 interface 232 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1441.825827][T17442] usb 5-1: config 5 interface 232 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1441.836752][T17442] usb 5-1: config 5 interface 232 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1441.850689][T17442] usb 5-1: Dual-Role OTG device on HNP port [ 1441.859995][T17442] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=fd.21 [ 1441.873096][T17442] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.881355][T17442] usb 5-1: Product: 緌৳럺㾰嵪䔶꾳찜㬶떌蛶磜뫒㦁㹧ۦ憢௒ᆷӆÑᠫ郺ꋟ镜魞㱰등䤐೩ꄍ῔➆㘘禜Ꝑ㈱⃟૘”䍴吗⃰ꂲ罧ꆰ䯯橣⫤ꟊ⬲ᐡィ뎁璁쬐㆙툎椥璣跾꼺ᄟ뢈퉳精鬮ꀥ삞䊸᪀譚輼휁ꯋ⽎礉䳚섯ﭹ᠛䂁⯱톱깹䦎灢ⴥ꧊祸⡩넗礊쀽ҒƝ䢅඀쮄腗횐䭫 [ 1441.912667][T17442] usb 5-1: Manufacturer: 鲇譁湾 [ 1441.917936][T17442] usb 5-1: SerialNumber: 㕏泂휛䏍봦幯唋腴㜓銌誦츹괪Þ䨽髒곤→⼎ゼⰙ⩩靵炤暺蓑쫕ꗉ鿃⁢䮅␇醎᭥袩複᎖倁˛စ읺㐦䭠㑍ﯿ唓鑬껹ね뷱橺蝛◱㔦芸鰻᠊漖⎼㇝騽ꯌ๝軴鸶굱확⍟ᇎ䘮聶줾ꮐ珸龂晔藵䚬㕀栎撷艉䕷쎧Ꮜ୺泌뷡ꆼ⇖樿甊ꖌ懔闽冇芌檑럾ၴ㯩꤁⚑笨 [ 1441.961526][ T2825] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1442.199533][T17442] usb 5-1: USB disconnect, device number 32 [ 1443.065994][ T2862] /dev/rnullb0: Can't open blockdev [ 1443.446420][ T7754] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1443.605672][ T2886] /dev/rnullb0: Can't open blockdev [ 1443.618324][ T7754] usb 5-1: config 0 has an invalid interface number: 199 but max is 1 [ 1443.628615][ T7754] usb 5-1: config 0 has no interface number 1 [ 1443.634821][ T7754] usb 5-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1443.645374][ T7754] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1443.676491][ T7754] usb 5-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1443.685617][ T7754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1443.698819][ T7754] usb 5-1: SerialNumber: syz [ 1443.725940][ T7754] usb 5-1: config 0 descriptor?? [ 1443.733568][ T2893] /dev/rnullb0: Can't open blockdev [ 1443.743949][ T7754] usb 5-1: Found UVC 0.00 device (0002:0000) [ 1443.762408][ T7754] usb 5-1: No valid video chain found. [ 1443.821667][ T2901] /dev/rnullb0: Can't open blockdev [ 1443.948659][ T2871] /dev/rnullb0: Can't open blockdev [ 1443.965708][T26829] usb 5-1: USB disconnect, device number 33 [ 1444.160850][T26829] usb 3-1: USB disconnect, device number 35 [ 1444.308357][ T2932] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9425'. [ 1444.569455][ T2939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9427'. [ 1444.592216][ T2939] netlink: 'syz.0.9427': attribute type 1 has an invalid length. [ 1444.611956][ T2939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9427'. [ 1444.922099][ T2950] /dev/rnullb0: Can't open blockdev [ 1444.985616][ T2953] /dev/rnullb0: Can't open blockdev [ 1445.065211][ T2943] tmpfs: Unknown parameter 'hu' [ 1445.332476][ T2963] netlink: 'syz.1.9435': attribute type 4 has an invalid length. [ 1445.341400][ T2963] netlink: 17 bytes leftover after parsing attributes in process `syz.1.9435'. [ 1445.666237][T17442] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1445.708388][T18759] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1445.770564][ T2987] /dev/rnullb0: Can't open blockdev [ 1445.818645][T17442] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1445.835161][T17442] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1445.854718][T17442] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1445.864039][T17442] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.889027][T17442] usb 5-1: config 0 descriptor?? [ 1445.993632][ T3003] vivid-000: ================= START STATUS ================= [ 1446.003281][ T3003] vivid-000: Enable Output Cropping: false [ 1446.011537][ T3005] JFS: discard option not supported on device [ 1446.018890][ T3003] vivid-000: Enable Output Composing: true [ 1446.026843][ T3005] Mount JFS Failure: -22 [ 1446.031598][ T3003] vivid-000: Enable Output Scaler: true [ 1446.037694][ T3005] jfs_mount failed w/return code = -22 [ 1446.043271][ T3003] vivid-000: Tx RGB Quantization Range: Automatic [ 1446.050950][ T3003] vivid-000: Transmit Mode: HDMI [ 1446.058400][ T3003] vivid-000: Hotplug Present: 0x00000000 [ 1446.064143][ T3003] vivid-000: RxSense Present: 0x00000000 [ 1446.070782][ T3003] vivid-000: EDID Present: 0x00000000 [ 1446.077981][ T3003] vivid-000: ================== END STATUS ================== [ 1446.147325][ T3012] /dev/rnullb0: Can't open blockdev [ 1446.153821][ T3012] /dev/rnullb0: Can't open blockdev [ 1446.246640][ T3019] tmpfs: Bad value for 'mpol' [ 1446.259010][ T3019] /dev/rnullb0: Can't open blockdev [ 1446.307733][T17442] hid-u2fzero 0003:10C4:8ACF.005F: unbalanced delimiter at end of report description [ 1446.323782][T17442] hid-u2fzero 0003:10C4:8ACF.005F: probe with driver hid-u2fzero failed with error -22 [ 1446.334903][ T3024] /dev/rnullb0: Can't open blockdev [ 1446.349907][T16073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1446.425552][ T3029] /dev/rnullb0: Can't open blockdev [ 1446.726994][ T3053] libceph: resolve '4..' (ret=-3): failed [ 1446.996527][T17442] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1447.028505][ T3070] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1447.035628][ T3070] /dev/rnullb0: Can't open blockdev [ 1447.123240][ T3075] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1447.176456][T17442] usb 2-1: Using ep0 maxpacket: 32 [ 1447.186320][T17442] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1447.195462][T17442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.203529][T17442] usb 2-1: Product: syz [ 1447.207853][T17442] usb 2-1: Manufacturer: syz [ 1447.212468][T17442] usb 2-1: SerialNumber: syz [ 1447.219983][T17442] usb 2-1: config 0 descriptor?? [ 1447.230365][T17442] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1447.366211][ T5895] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1447.496415][ T5895] usb 3-1: device descriptor read/64, error -71 [ 1447.739592][ T5895] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1447.876361][ T5895] usb 3-1: device descriptor read/64, error -71 [ 1447.987415][ T5895] usb usb3-port1: attempt power cycle [ 1448.029375][ T3059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9455'. [ 1448.040032][ T3059] /dev/rnullb0: Can't open blockdev [ 1448.048054][T17442] gspca_stk1135: reg_w 0x5 err -71 [ 1448.054359][T17442] gspca_stk1135: serial bus timeout: status=0x00 [ 1448.061456][T17442] gspca_stk1135: Sensor write failed [ 1448.067573][T17442] gspca_stk1135: serial bus timeout: status=0x00 [ 1448.073912][T17442] gspca_stk1135: Sensor write failed [ 1448.079579][T17442] gspca_stk1135: serial bus timeout: status=0x00 [ 1448.085918][T17442] gspca_stk1135: Sensor read failed [ 1448.091351][T17442] gspca_stk1135: serial bus timeout: status=0x00 [ 1448.098862][T17442] gspca_stk1135: Sensor read failed [ 1448.104153][T17442] gspca_stk1135: Detected sensor type unknown (0x0) [ 1448.111214][T17442] gspca_stk1135: serial bus timeout: status=0x00 [ 1448.118631][T17442] gspca_stk1135: Sensor read failed [ 1448.123868][T17442] gspca_stk1135: serial bus timeout: status=0x00 [ 1448.131268][T17442] gspca_stk1135: Sensor read failed [ 1448.136577][T17442] gspca_stk1135: serial bus timeout: status=0x00 [ 1448.142956][T17442] gspca_stk1135: Sensor write failed [ 1448.148322][T17442] gspca_stk1135: serial bus timeout: status=0x00 [ 1448.154730][T17442] gspca_stk1135: Sensor write failed [ 1448.160152][T17442] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 1448.171191][T17442] usb 2-1: USB disconnect, device number 77 [ 1448.323757][ T2969] orangefs_mount: mount request failed with -4 [ 1448.330392][ T5895] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1448.355311][ T43] usb 5-1: USB disconnect, device number 34 [ 1448.370061][ T5895] usb 3-1: device descriptor read/8, error -71 [ 1448.626802][ T5895] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1448.667441][ T5895] usb 3-1: device descriptor read/8, error -71 [ 1448.737837][ T3104] /dev/rnullb0: Can't open blockdev [ 1448.739176][ T3102] syz.1.9460: attempt to access beyond end of device [ 1448.739176][ T3102] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1448.756597][ T3102] FAT-fs (nbd1): unable to read boot sector [ 1448.781454][ T5895] usb usb3-port1: unable to enumerate USB device [ 1448.849323][ T3111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1448.858578][ T3110] orangefs_mount: mount request failed with -4 [ 1448.858985][ T3108] orangefs_mount: mount request failed with -4 [ 1448.871330][ T3111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1449.096329][T17442] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 1449.269059][T17442] usb 2-1: not running at top speed; connect to a high speed hub [ 1449.278456][T17442] usb 2-1: config 1 interface 0 altsetting 91 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1449.289655][T17442] usb 2-1: config 1 interface 0 altsetting 91 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1449.302844][T17442] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1449.312318][T17442] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1449.321456][T17442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1449.329543][T17442] usb 2-1: Product: ࠠ [ 1449.334025][T17442] usb 2-1: Manufacturer: щ [ 1449.338779][T17442] usb 2-1: SerialNumber: syz [ 1449.350372][ T3112] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1449.357941][ T3112] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1449.366277][ T9] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1449.516512][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1449.523205][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1449.531516][ T9] usb 5-1: config 0 has no interface number 0 [ 1449.537888][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1449.549478][ T9] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1449.563027][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1449.573403][ T9] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1449.586564][ T9] usb 5-1: Product: syz [ 1449.590964][ T9] usb 5-1: SerialNumber: syz [ 1449.597206][T17442] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1449.610447][ T9] usb 5-1: config 0 descriptor?? [ 1449.622989][ T9] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1449.641622][T17442] usb 2-1: USB disconnect, device number 78 [ 1449.647912][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input154 [ 1449.821936][ T3153] /dev/rnullb0: Can't open blockdev [ 1449.886238][ T3125] /dev/rnullb0: Can't open blockdev [ 1449.951432][ T3161] /dev/rnullb0: Can't open blockdev [ 1449.975069][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1449.982240][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1449.989415][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1449.996789][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1450.003955][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1450.011130][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1450.018345][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1450.025473][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1450.032619][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1450.040009][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1450.050397][ T5895] usb 5-1: USB disconnect, device number 35 [ 1450.056246][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1450.082079][ T5895] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1450.313701][ T3197] binder: 3191:3197 ioctl c018620b 200000000000 returned -14 [ 1450.491972][ T3211] /dev/rnullb0: Can't open blockdev [ 1450.506490][ T43] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 1450.699665][ T43] usb 2-1: config index 0 descriptor too short (expected 69, got 36) [ 1450.721820][ T3212] /dev/rnullb0: Can't open blockdev [ 1450.736206][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1450.780740][ T43] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 1450.844535][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.853708][ T43] usb 2-1: Product: syz [ 1450.861422][ T43] usb 2-1: Manufacturer: syz [ 1450.866047][ T43] usb 2-1: SerialNumber: syz [ 1450.894343][ T43] usb 2-1: config 0 descriptor?? [ 1450.929475][ T43] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 1451.030009][ T3237] /dev/rnullb0: Can't open blockdev [ 1451.126312][ T5895] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1451.299509][ T5895] usb 5-1: config 8 has an invalid interface number: 196 but max is 0 [ 1451.316489][ T5895] usb 5-1: config 8 has no interface number 0 [ 1451.333050][ T5895] usb 5-1: config 8 interface 196 has no altsetting 0 [ 1451.350017][ T3252] /dev/rnullb0: Can't open blockdev [ 1451.351525][ T5895] usb 5-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=e5.59 [ 1451.365425][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.467689][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1451.514507][ T3267] netlink: 'syz.0.9485': attribute type 37 has an invalid length. [ 1451.601747][ T3224] /dev/rnullb0: Can't open blockdev [ 1451.620266][ T5895] usb 5-1: string descriptor 0 read error: -71 [ 1451.661244][ T5895] quatech2 5-1:8.196: Quatech 2nd gen USB to Serial Driver converter detected [ 1451.672066][ T5895] usb 5-1: qt2_attach - failed to power on unit: -71 [ 1451.680076][ T5895] quatech2 5-1:8.196: probe with driver quatech2 failed with error -71 [ 1451.695023][ T5895] usb 5-1: USB disconnect, device number 36 [ 1451.753938][ T43] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input156 [ 1451.973090][ T5895] usb 2-1: USB disconnect, device number 79 [ 1452.107241][T16073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1452.285851][ T3324] /dev/rnullb0: Can't open blockdev [ 1452.566373][ T5895] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1452.716370][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 1452.724680][ T5895] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1452.731450][ T5895] usb 5-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 1452.740767][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.755524][ T5895] usb 5-1: config 0 descriptor?? [ 1452.766534][ T9] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 1452.928666][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 1452.937870][ T9] usb 2-1: config 5 has an invalid interface number: 232 but max is 0 [ 1452.951289][ T9] usb 2-1: config 5 has no interface number 0 [ 1452.957959][ T9] usb 2-1: config 5 interface 232 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1452.973103][ T9] usb 2-1: config 5 interface 232 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1452.984232][ T9] usb 2-1: config 5 interface 232 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1452.997492][ T9] usb 2-1: config 5 interface 232 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1453.008508][ T9] usb 2-1: config 5 interface 232 altsetting 0 endpoint 0xD has invalid maxpacket 1951, setting to 1023 [ 1453.020026][ T9] usb 2-1: config 5 interface 232 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1453.031077][ T9] usb 2-1: config 5 interface 232 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1453.042286][ T9] usb 2-1: config 5 interface 232 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1453.053286][ T9] usb 2-1: config 5 interface 232 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 1023 [ 1453.065376][ T9] usb 2-1: config 5 interface 232 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1453.086305][ T9] usb 2-1: config 5 interface 232 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1453.106456][ T9] usb 2-1: config 5 interface 232 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1453.122725][ T9] usb 2-1: Dual-Role OTG device on HNP port [ 1453.129266][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=fd.21 [ 1453.140256][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.148672][ T9] usb 2-1: Product: 緌৳럺㾰嵪䔶꾳찜㬶떌蛶磜뫒㦁㹧ۦ憢௒ᆷӆÑᠫ郺ꋟ镜魞㱰등䤐೩ꄍ῔➆㘘禜Ꝑ㈱⃟૘”䍴吗⃰ꂲ罧ꆰ䯯橣⫤ꟊ⬲ᐡィ뎁璁쬐㆙툎椥璣跾꼺ᄟ뢈퉳精鬮ꀥ삞䊸᪀譚輼휁ꯋ⽎礉䳚섯ﭹ᠛䂁⯱톱깹䦎灢ⴥ꧊祸⡩넗礊쀽ҒƝ䢅඀쮄腗횐䭫 [ 1453.183799][ T9] usb 2-1: Manufacturer: 鲇譁湾 [ 1453.190303][ T9] usb 2-1: SerialNumber: 㕏泂휛䏍봦幯唋腴㜓銌誦츹괪Þ䨽髒곤→⼎ゼⰙ⩩靵炤暺蓑쫕ꗉ鿃⁢䮅␇醎᭥袩複᎖倁˛စ읺㐦䭠㑍ﯿ唓鑬껹ね뷱橺蝛◱㔦芸鰻᠊漖⎼㇝騽ꯌ๝軴鸶굱확⍟ᇎ䘮聶줾ꮐ珸龂晔藵䚬㕀栎撷艉䕷쎧Ꮜ୺泌뷡ꆼ⇖樿甊ꖌ懔闽冇芌檑럾ၴ㯩꤁⚑笨 [ 1453.239453][ T3331] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1453.417853][ T5895] hid-u2fzero 0003:20A0:4287.0060: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.4-1/input0 [ 1453.451365][ T5895] hid-u2fzero 0003:20A0:4287.0060: NitroKey U2F LED initialised [ 1453.476624][ T5895] hid-u2fzero 0003:20A0:4287.0060: NitroKey U2F RNG initialised [ 1453.556384][ T9] usb 2-1: USB disconnect, device number 80 [ 1453.593432][ T3326] /dev/rnullb0: Can't open blockdev [ 1453.627417][ T5856] usb 5-1: USB disconnect, device number 37 [ 1453.833251][ T3401] /dev/rnullb0: Can't open blockdev [ 1453.839931][ T3398] /dev/rnullb0: Can't open blockdev [ 1453.854418][ T3401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1453.863615][ T3401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1454.054603][ T3412] /dev/rnullb0: Can't open blockdev [ 1454.100189][ T3415] /dev/rnullb0: Can't open blockdev [ 1454.106423][ T9] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 1454.190376][ T3421] /dev/rnullb0: Can't open blockdev [ 1454.272126][ T9] usb 3-1: config 0 has an invalid descriptor of length 179, skipping remainder of the config [ 1454.285926][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1454.304054][ T3425] sctp: [Deprecated]: syz.4.9508 (pid 3425) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1454.304054][ T3425] Use struct sctp_sack_info instead [ 1454.304261][ T9] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 1454.321222][ T3424] /dev/rnullb0: Can't open blockdev [ 1454.334361][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.346602][ T3425] /dev/rnullb0: Can't open blockdev [ 1454.363869][ T9] usb 3-1: Product: syz [ 1454.376690][ T9] usb 3-1: Manufacturer: syz [ 1454.381298][ T9] usb 3-1: SerialNumber: syz [ 1454.393298][ T9] usb 3-1: config 0 descriptor?? [ 1454.483467][ T3439] /dev/rnullb0: Can't open blockdev [ 1454.566136][ T3441] /dev/rnullb0: Can't open blockdev [ 1454.615757][ T9] radioshark2 3-1:0.0: Invalid radioSHARK2 device [ 1454.646244][ T9] radioshark2 3-1:0.0: probe with driver radioshark2 failed with error -22 [ 1454.655196][ T9] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1454.706719][ T9] usb 3-1: USB disconnect, device number 40 [ 1455.076517][ T5941] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1455.211292][ T3474] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9518'. [ 1455.222583][ T3474] /dev/rnullb0: Can't open blockdev [ 1455.246203][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 1455.254762][ T5941] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1455.276210][ T5941] usb 2-1: config 0 has no interface number 0 [ 1455.297896][ T5941] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1455.329294][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.338281][ T5941] usb 2-1: Product: syz [ 1455.342565][ T5941] usb 2-1: Manufacturer: syz [ 1455.347916][ T5941] usb 2-1: SerialNumber: syz [ 1455.369670][ T5941] usb 2-1: config 0 descriptor?? [ 1455.387261][ T5941] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1455.719431][ T3493] /dev/rnullb0: Can't open blockdev [ 1455.811945][ T3496] binder: 3494:3496 ioctl c018620b 200000000000 returned -14 [ 1455.955663][ T3507] overlay: ./file0 is not a directory [ 1456.436191][ T43] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1456.591090][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 1456.603950][ T43] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 1456.615072][ T43] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 1456.628040][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1456.637345][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1456.645361][ T43] usb 5-1: Product: ᠌ [ 1456.649767][ T43] usb 5-1: Manufacturer: ැ⯰溔네᰾靻蛪蕟﬏ヘʢ譬⩨銋篋뾺궣莼儾䝨䕩㺺 [ 1456.660543][ T43] usb 5-1: SerialNumber: syz [ 1456.891088][ T3509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1456.903509][ T3509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.926781][ T3509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1456.942758][ T3509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.956043][ T3509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1456.967099][ T3509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.982895][ T43] cdc_ncm 5-1:1.0: bind() failure [ 1456.997096][ T43] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1457.004168][ T43] cdc_ncm 5-1:1.1: bind() failure [ 1457.017118][ T43] usb 5-1: USB disconnect, device number 38 [ 1457.212935][ T5941] gspca_spca1528: reg_r err -71 [ 1457.219530][ T5941] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 1457.228964][ T1824] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1457.235515][ T5941] usb 2-1: USB disconnect, device number 81 [ 1457.802515][ T5941] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1457.883382][ T1824] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1457.894980][ T3558] comedi comedi4: comedi_config --init_data is deprecated [ 1457.917652][ T3562] /dev/rnullb0: Can't open blockdev [ 1457.979069][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1458.002279][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1458.015943][ T3567] /dev/rnullb0: Can't open blockdev [ 1458.027273][ T3568] /dev/rnullb0: Can't open blockdev [ 1458.038183][ T5941] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1458.051892][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.077639][ T5941] usb 5-1: config 0 descriptor?? [ 1458.523352][ T5941] cp2112 0003:10C4:EA90.0061: unknown main item tag 0x0 [ 1458.552647][ T5941] cp2112 0003:10C4:EA90.0061: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1458.638195][ T3577] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1458.704417][ T3589] binder: 3575:3589 ioctl c018620b 200000000000 returned -14 [ 1458.721111][ T5941] cp2112 0003:10C4:EA90.0061: Part Number: 0x82 Device Version: 0xFE [ 1458.786703][ T43] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 1458.948705][ T43] usb 2-1: not running at top speed; connect to a high speed hub [ 1458.962854][ T43] usb 2-1: config 5 has an invalid interface number: 232 but max is 0 [ 1458.971234][ T43] usb 2-1: config 5 has no interface number 0 [ 1458.977533][ T43] usb 2-1: config 5 interface 232 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1458.999146][ T43] usb 2-1: config 5 interface 232 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1459.010580][ T43] usb 2-1: config 5 interface 232 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1459.030656][ T43] usb 2-1: config 5 interface 232 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1459.042696][ T43] usb 2-1: config 5 interface 232 altsetting 0 endpoint 0xD has invalid maxpacket 1951, setting to 1023 [ 1459.072004][ T43] usb 2-1: config 5 interface 232 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 1459.083403][ T43] usb 2-1: config 5 interface 232 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1459.104571][ T43] usb 2-1: config 5 interface 232 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 1459.134116][ T43] usb 2-1: config 5 interface 232 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 1023 [ 1459.141999][ T3544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9530'. [ 1459.153029][ T43] usb 2-1: config 5 interface 232 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1459.165515][ T43] usb 2-1: config 5 interface 232 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 1459.188301][ T43] usb 2-1: config 5 interface 232 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 1459.202245][ T3613] /dev/loop0: Can't lookup blockdev [ 1459.212999][ T43] usb 2-1: Dual-Role OTG device on HNP port [ 1459.240233][ T43] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=fd.21 [ 1459.276483][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.321671][ T43] usb 2-1: Product: 緌৳럺㾰嵪䔶꾳찜㬶떌蛶磜뫒㦁㹧ۦ憢௒ᆷӆÑᠫ郺ꋟ镜魞㱰등䤐೩ꄍ῔➆㘘禜Ꝑ㈱⃟૘”䍴吗⃰ꂲ罧ꆰ䯯橣⫤ꟊ⬲ᐡィ뎁璁쬐㆙툎椥璣跾꼺ᄟ뢈퉳精鬮ꀥ삞䊸᪀譚輼휁ꯋ⽎礉䳚섯ﭹ᠛䂁⯱톱깹䦎灢ⴥ꧊祸⡩넗礊쀽ҒƝ䢅඀쮄腗횐䭫 [ 1459.327645][ T3614] /dev/rnullb0: Can't open blockdev [ 1459.421861][ T5941] cp2112 0003:10C4:EA90.0061: error setting SMBus config [ 1459.459419][ T5941] cp2112 0003:10C4:EA90.0061: probe with driver cp2112 failed with error -71 [ 1459.460313][ T43] usb 2-1: Manufacturer: 鲇譁湾 [ 1459.505971][ T43] usb 2-1: SerialNumber: 㕏泂휛䏍봦幯唋腴㜓銌誦츹괪Þ䨽髒곤→⼎ゼⰙ⩩靵炤暺蓑쫕ꗉ鿃⁢䮅␇醎᭥袩複᎖倁˛စ읺㐦䭠㑍ﯿ唓鑬껹ね뷱橺蝛◱㔦芸鰻᠊漖⎼㇝騽ꯌ๝軴鸶굱확⍟ᇎ䘮聶줾ꮐ珸龂晔藵䚬㕀栎撷艉䕷쎧Ꮜ୺泌뷡ꆼ⇖樿甊ꖌ懔闽冇芌檑럾ၴ㯩꤁⚑笨 [ 1459.509226][ T5941] usb 5-1: USB disconnect, device number 39 [ 1459.641053][ T3593] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1459.878500][ T3633] /dev/rnullb0: Can't open blockdev [ 1459.919824][ T43] usb 2-1: USB disconnect, device number 82 [ 1459.997908][ T3641] /dev/rnullb0: Can't open blockdev [ 1460.466519][T17442] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1460.494577][ T3661] /dev/rnullb0: Can't open blockdev [ 1460.513525][ T3661] syzkaller1: entered promiscuous mode [ 1460.522504][ T3661] syzkaller1: entered allmulticast mode [ 1460.533296][ T3661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9551'. [ 1460.562844][ T3665] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20000 [ 1460.571521][ T3667] /dev/rnullb0: Can't open blockdev [ 1460.636203][T17442] usb 5-1: device descriptor read/64, error -71 [ 1460.685586][ T3678] netlink: 'syz.2.9554': attribute type 29 has an invalid length. [ 1460.696002][ T3678] netlink: 'syz.2.9554': attribute type 29 has an invalid length. [ 1460.705363][ T3678] netlink: 'syz.2.9554': attribute type 29 has an invalid length. [ 1460.713756][ T3678] netlink: 'syz.2.9554': attribute type 29 has an invalid length. [ 1460.722012][ T3678] netlink: 'syz.2.9554': attribute type 29 has an invalid length. [ 1460.730675][ T3678] netlink: 'syz.2.9554': attribute type 29 has an invalid length. [ 1460.739609][ T3678] netlink: 'syz.2.9554': attribute type 29 has an invalid length. [ 1460.752278][ T3678] netlink: 'syz.2.9554': attribute type 29 has an invalid length. [ 1460.760513][ T3678] netlink: 'syz.2.9554': attribute type 29 has an invalid length. [ 1460.769021][ T3678] netlink: 'syz.2.9554': attribute type 29 has an invalid length. [ 1460.815270][ T3684] /dev/rnullb0: Can't open blockdev [ 1460.820920][ T3685] /dev/rnullb0: Can't open blockdev [ 1460.866888][ T3687] /dev/rnullb0: Can't open blockdev [ 1460.896351][T17442] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1460.915144][ T3689] /dev/rnullb0: Can't open blockdev [ 1460.927551][ T5941] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1460.977949][ T3691] tmpfs: Bad value for 'mpol' [ 1460.983138][ T3691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9558'. [ 1460.997390][ T3691] /dev/rnullb0: Can't open blockdev [ 1461.041285][ T3693] /dev/rnullb0: Can't open blockdev [ 1461.058715][T17442] usb 5-1: device descriptor read/64, error -71 [ 1461.108593][ T5941] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1461.123137][ T5941] usb 2-1: config 1 has an invalid interface number: 142 but max is 0 [ 1461.131885][ T5941] usb 2-1: config 1 has no interface number 0 [ 1461.141991][ T5941] usb 2-1: config 1 interface 142 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 1461.155107][ T5941] usb 2-1: config 1 interface 142 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1461.167946][ T5941] usb 2-1: New USB device found, idVendor=0cf3, idProduct=0003, bcdDevice=9e.c5 [ 1461.177223][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.191325][T17442] usb usb5-port1: attempt power cycle [ 1461.200003][ T5941] usb 2-1: Product: syz [ 1461.204170][ T5941] usb 2-1: Manufacturer: syz [ 1461.208936][ T5941] usb 2-1: SerialNumber: syz [ 1461.416192][ T7754] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1461.432250][ T5941] usb 2-1: Could not find all expected endpoints [ 1461.444642][ T5941] usb 2-1: USB disconnect, device number 83 [ 1461.548124][T17442] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1461.556469][ T7754] usb 3-1: device descriptor read/64, error -71 [ 1461.566686][T17442] usb 5-1: device descriptor read/8, error -71 [ 1461.797302][ T7754] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1461.806236][T17442] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1461.826854][T17442] usb 5-1: device descriptor read/8, error -71 [ 1461.936425][ T7754] usb 3-1: device descriptor read/64, error -71 [ 1461.941219][T17442] usb usb5-port1: unable to enumerate USB device [ 1462.061119][ T7754] usb usb3-port1: attempt power cycle [ 1462.406245][ T7754] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1462.427119][ T7754] usb 3-1: device descriptor read/8, error -71 [ 1462.666180][ T7754] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1462.687497][ T7754] usb 3-1: device descriptor read/8, error -71 [ 1462.799639][ T7754] usb usb3-port1: unable to enumerate USB device [ 1462.996661][ T1824] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1462.996661][T18854] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1463.170867][T17442] usb 2-1: new low-speed USB device number 84 using dummy_hcd [ 1463.274400][ T3732] /dev/rnullb0: Can't open blockdev [ 1463.303690][ T3730] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1463.358653][T17442] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1463.384113][T17442] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x1 is Bulk; changing to Interrupt [ 1463.394321][T17442] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x82 is Bulk; changing to Interrupt [ 1463.419868][T17442] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1463.452841][T17442] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1463.475474][T17442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1463.490890][T17442] usb 2-1: SerialNumber: Њ [ 1463.502292][ T3718] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1463.519169][ T3718] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1463.591768][ T3752] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9570'. [ 1463.591768][ T3751] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9570'. [ 1463.610846][ T3751] /dev/rnullb0: Can't open blockdev [ 1463.618820][ T3751] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1463.625299][ T3751] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1463.712102][ T3756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9572'. [ 1463.737221][ T3718] program syz.1.9564 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1463.805468][ T3718] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1463.826426][ T3718] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1463.904630][T17442] usb 2-1: USB disconnect, device number 84 [ 1464.053453][ T3797] /dev/rnullb0: Can't open blockdev [ 1464.064361][ T3798] /dev/rnullb0: Can't open blockdev [ 1464.088723][ T30] audit: type=1326 audit(5257432526.953:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3757 comm="syz.0.9573" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e9fb8e929 code=0x0 [ 1464.367073][ T3816] /dev/rnullb0: Can't open blockdev [ 1465.082015][ T3832] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1465.130677][ T3832] Error validating options; rc = [-22] [ 1465.156521][ T5941] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1465.298364][ T3845] loop9: detected capacity change from 0 to 7 [ 1465.308080][ T5941] usb 2-1: device descriptor read/64, error -71 [ 1465.335833][ T839] Dev loop9: unable to read RDB block 7 [ 1465.366526][ T839] loop9: unable to read partition table [ 1465.384024][ T839] loop9: partition table beyond EOD, truncated [ 1465.414295][ T3856] /dev/rnullb0: Can't open blockdev [ 1465.418602][ T3845] Dev loop9: unable to read RDB block 7 [ 1465.435468][ T3856] hugetlbfs: Bad value '' for mount option 'size' [ 1465.435468][ T3856] [ 1465.444696][ T3845] loop9: unable to read partition table [ 1465.461321][ T3845] loop9: partition table beyond EOD, truncated [ 1465.471677][ T3856] input: syz1 as /devices/virtual/input/input157 [ 1465.485862][ T3845] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1465.567431][ T5941] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1465.586399][ T7754] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1465.673841][ T3869] random: crng reseeded on system resumption [ 1465.706279][ T5941] usb 2-1: device descriptor read/64, error -71 [ 1465.748107][ T7754] usb 5-1: too many configurations: 226, using maximum allowed: 8 [ 1465.761906][ T7754] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1465.774007][ T7754] usb 5-1: can't read configurations, error -61 [ 1465.786264][T17442] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1465.826983][ T5941] usb usb2-port1: attempt power cycle [ 1465.906252][ T7754] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1465.956372][T17442] usb 3-1: Invalid ep0 maxpacket: 9 [ 1466.066727][ T7754] usb 5-1: too many configurations: 226, using maximum allowed: 8 [ 1466.082859][ T7754] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1466.096132][ T7754] usb 5-1: can't read configurations, error -61 [ 1466.096579][T17442] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 1466.113824][ T7754] usb usb5-port1: attempt power cycle [ 1466.186422][ T5941] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1466.207105][ T5941] usb 2-1: device descriptor read/8, error -71 [ 1466.257184][T17442] usb 3-1: Invalid ep0 maxpacket: 9 [ 1466.262859][T17442] usb usb3-port1: attempt power cycle [ 1466.449291][ T5941] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1466.476176][ T7754] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1466.478697][ T5941] usb 2-1: device descriptor read/8, error -71 [ 1466.509867][ T7754] usb 5-1: too many configurations: 226, using maximum allowed: 8 [ 1466.519548][ T7754] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1466.527315][ T7754] usb 5-1: can't read configurations, error -61 [ 1466.606605][ T5941] usb usb2-port1: unable to enumerate USB device [ 1466.616209][T17442] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 1466.647711][T17442] usb 3-1: Invalid ep0 maxpacket: 9 [ 1466.656402][ T7754] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1466.687616][ T7754] usb 5-1: too many configurations: 226, using maximum allowed: 8 [ 1466.697159][ T7754] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1466.704763][ T7754] usb 5-1: can't read configurations, error -61 [ 1466.711707][ T7754] usb usb5-port1: unable to enumerate USB device [ 1466.786391][T17442] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 1466.808675][T17442] usb 3-1: Invalid ep0 maxpacket: 9 [ 1466.814165][T17442] usb usb3-port1: unable to enumerate USB device [ 1467.175207][ T3906] /dev/rnullb0: Can't open blockdev [ 1467.234424][ T3909] validate_nla: 15 callbacks suppressed [ 1467.234437][ T3909] netlink: 'syz.0.9600': attribute type 28 has an invalid length. [ 1467.267101][ T3909] /dev/rnullb0: Can't open blockdev [ 1467.905844][ T3925] binder: 3924:3925 ioctl c018620b 200000000000 returned -14 [ 1468.269956][ T7754] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1468.457538][ T7754] usb 2-1: Using ep0 maxpacket: 32 [ 1468.465804][ T7754] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1468.492957][ T7754] usb 2-1: config 0 has no interface number 0 [ 1468.526187][ T7754] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1468.550843][ T7754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.568914][ T7754] usb 2-1: Product: syz [ 1468.573161][ T7754] usb 2-1: Manufacturer: syz [ 1468.581816][ T7754] usb 2-1: SerialNumber: syz [ 1468.593995][ T7754] usb 2-1: config 0 descriptor?? [ 1468.609126][ T7754] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1468.747688][T16073] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1468.759155][T18854] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1468.831377][ T7754] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1468.845534][ T7754] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1468.916362][ T5864] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1469.036187][T17442] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1469.086210][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 1469.094948][ T5864] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 1469.104659][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.112886][ T5864] usb 5-1: Product: syz [ 1469.117114][ T5864] usb 5-1: Manufacturer: syz [ 1469.121737][ T5864] usb 5-1: SerialNumber: syz [ 1469.132475][ T5864] usb 5-1: config 0 descriptor?? [ 1469.142254][ T5864] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 1469.167157][T17442] usb 3-1: device descriptor read/64, error -71 [ 1469.230606][ T3930] x_tables: duplicate underflow at hook 1 [ 1469.360370][ T5864] gspca_sn9c2028: read1 error -32 [ 1469.367149][ T3962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1469.379529][ T3962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1469.417239][T17442] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1469.546425][T17442] usb 3-1: device descriptor read/64, error -71 [ 1469.594303][ T3962] /dev/rnullb0: Can't open blockdev [ 1469.605821][ T3993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1469.615202][ T3993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1469.666627][T17442] usb usb3-port1: attempt power cycle [ 1469.680573][ T5864] gspca_sn9c2028: read1 error -71 [ 1469.686510][ T5864] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71 [ 1469.708995][ T5864] usb 5-1: USB disconnect, device number 48 [ 1470.046379][T17442] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1470.071086][T17442] usb 3-1: device descriptor read/8, error -71 [ 1470.316334][T17442] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1470.354485][T17442] usb 3-1: device descriptor read/8, error -71 [ 1470.378432][ T5864] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1470.466428][T17442] usb usb3-port1: unable to enumerate USB device [ 1470.539976][ T5864] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.551976][ T5864] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1470.567398][ T5864] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1470.578331][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1470.587168][ T5864] usb 5-1: SerialNumber: syz [ 1470.685766][ T4030] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1470.814648][ T4014] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1470.826559][ T4014] /dev/rnullb0: Can't open blockdev [ 1470.845686][ T5864] usb 5-1: 0:2 : does not exist [ 1470.852698][ T5864] usb 5-1: unit 5: unexpected type 0x09 [ 1470.891434][ T4034] /dev/rnullb0: Can't open blockdev [ 1470.906046][ T5864] usb 5-1: USB disconnect, device number 49 [ 1470.962893][ T839] udevd[839]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1471.107284][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1471.123894][T17442] usb 2-1: USB disconnect, device number 89 [ 1471.143508][T17442] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1471.190106][T17442] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1471.203422][T17442] quatech2 2-1:0.51: device disconnected [ 1471.412591][ T4087] /dev/rnullb0: Can't open blockdev [ 1471.509443][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.526966][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.528488][ T4091] : entered promiscuous mode [ 1471.533133][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.547021][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.552863][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.559184][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.565020][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.570973][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.577066][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.582840][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.589249][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.594992][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.601222][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.607686][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.613440][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.619597][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.625321][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.631838][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.638273][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.644547][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.646221][T17442] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 1471.650855][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.663996][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.669942][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.675612][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.681465][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.687877][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.693586][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.699606][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.705407][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.711654][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.718064][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.723738][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.729678][ T4093] /dev/rnullb0: Can't open blockdev [ 1471.784770][ T4097] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1471.834823][T17442] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1471.846273][T17442] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1471.865913][T17442] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1471.896121][T17442] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1471.915276][T17442] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1471.915774][ T4104] /dev/rnullb0: Can't open blockdev [ 1471.929730][T17442] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1471.940127][T17442] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1471.953915][T17442] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1471.970055][T17442] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1471.981743][T17442] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1471.994934][T17442] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1472.013228][T17442] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1472.034322][T17442] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1472.054604][ T4109] nbd: must specify a device to reconfigure [ 1472.074290][T17442] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1472.111587][T17442] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1472.152252][T17442] usb 2-1: string descriptor 0 read error: -22 [ 1472.161939][T17442] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1472.173790][T17442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.198322][T17442] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1472.260549][ T4123] /dev/rnullb0: Can't open blockdev [ 1472.453956][ T9] usb 2-1: USB disconnect, device number 90 [ 1472.596280][ T5941] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 1472.662529][ T4082] /dev/rnullb0: Can't open blockdev [ 1472.757734][ T5941] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 1472.765969][ T5941] usb 3-1: config 0 has no interface number 0 [ 1472.775021][ T5941] usb 3-1: config 0 interface 106 has no altsetting 0 [ 1472.787068][ T5941] usb 3-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59 [ 1472.799142][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.807188][ T5941] usb 3-1: Product: syz [ 1472.811459][ T5941] usb 3-1: Manufacturer: syz [ 1472.816044][ T5941] usb 3-1: SerialNumber: syz [ 1472.826336][ T5941] usb 3-1: config 0 descriptor?? [ 1473.103452][ T5941] usb 3-1: USB disconnect, device number 53 [ 1473.158429][ T4149] kAFS: unparsable volume name [ 1473.280370][ T4156] /dev/rnullb0: Can't open blockdev [ 1473.559846][ T4161] /dev/rnullb0: Can't open blockdev [ 1473.656661][ T4167] /dev/sg0: Can't lookup blockdev [ 1473.836340][ T4177] /dev/rnullb0: Can't open blockdev [ 1473.932801][ T4187] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.9642' resets device [ 1474.002411][ T4192] /dev/rnullb0: Can't open blockdev [ 1474.137132][ T7754] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1474.177281][ T5864] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1474.316485][ T7754] usb 2-1: Using ep0 maxpacket: 16 [ 1474.328188][ T7754] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1474.339172][ T5864] usb 5-1: Using ep0 maxpacket: 16 [ 1474.346999][ T7754] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.360341][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.373515][ T7754] usb 2-1: config 0 has no interface number 0 [ 1474.379782][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.400267][ T7754] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1474.414617][ T5864] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1474.436197][ T7754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.449796][ T7754] usb 2-1: Product: syz [ 1474.455169][ T5864] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1474.468709][ T7754] usb 2-1: Manufacturer: syz [ 1474.477830][ T7754] usb 2-1: SerialNumber: syz [ 1474.484680][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.501392][ T7754] usb 2-1: config 0 descriptor?? [ 1474.508617][ T1824] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1474.519450][ T5864] usb 5-1: config 0 descriptor?? [ 1474.520135][T18759] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1474.534576][ T7754] uvcvideo 2-1:0.105: probe with driver uvcvideo failed with error -22 [ 1474.741327][ T4181] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1474.766814][ T4179] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1474.783492][ T4181] /dev/rnullb0: Can't open blockdev [ 1474.811961][ T9] usb 2-1: USB disconnect, device number 91 [ 1474.958207][ T5864] microsoft 0003:045E:07DA.0062: ignoring exceeding usage max [ 1474.978137][ T5864] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 1474.996487][ T5864] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 1475.003815][ T5864] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 1475.021521][ T5864] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 1475.035319][ T5864] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 1475.044590][ T5864] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 1475.054378][ T5864] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 1475.062165][ T5864] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 1475.072698][ T5864] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 1475.080409][ T5864] microsoft 0003:045E:07DA.0062: unknown main item tag 0x0 [ 1475.090196][ T5864] microsoft 0003:045E:07DA.0062: unsupported Resolution Multiplier 0 [ 1475.103822][ T5864] ================================================================== [ 1475.111913][ T5864] BUG: KASAN: slab-out-of-bounds in mon_bin_event+0x1214/0x2250 [ 1475.119580][ T5864] Read of size 1344 at addr ffff888031f27a21 by task kworker/1:3/5864 [ 1475.127762][ T5864] [ 1475.130109][ T5864] CPU: 1 UID: 0 PID: 5864 Comm: kworker/1:3 Not tainted 6.16.0-rc5-next-20250711-syzkaller #0 PREEMPT(full) [ 1475.130138][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1475.130153][ T5864] Workqueue: usb_hub_wq hub_event [ 1475.130187][ T5864] Call Trace: [ 1475.130195][ T5864] [ 1475.130205][ T5864] dump_stack_lvl+0x189/0x250 [ 1475.130236][ T5864] ? __kasan_check_byte+0x12/0x40 [ 1475.130257][ T5864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1475.130286][ T5864] ? lock_release+0x4b/0x3e0 [ 1475.130314][ T5864] ? __virt_addr_valid+0x4a5/0x5c0 [ 1475.130346][ T5864] print_report+0xca/0x230 [ 1475.130366][ T5864] ? mon_bin_event+0x1214/0x2250 [ 1475.130389][ T5864] kasan_report+0x118/0x150 [ 1475.130409][ T5864] ? mon_bin_event+0x1214/0x2250 [ 1475.130435][ T5864] kasan_check_range+0x2b0/0x2c0 [ 1475.130454][ T5864] ? mon_bin_event+0x1214/0x2250 [ 1475.130478][ T5864] __asan_memcpy+0x29/0x70 [ 1475.130505][ T5864] mon_bin_event+0x1214/0x2250 [ 1475.130541][ T5864] ? __pfx_mon_bin_event+0x10/0x10 [ 1475.130564][ T5864] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1475.130596][ T5864] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1475.130626][ T5864] ? __driver_probe_device+0x18c/0x2f0 [ 1475.130655][ T5864] ? __device_attach_driver+0x2ce/0x530 [ 1475.130683][ T5864] ? bus_for_each_drv+0x251/0x2e0 [ 1475.130703][ T5864] ? __device_attach+0x2b8/0x400 [ 1475.130729][ T5864] ? bus_probe_device+0x185/0x260 [ 1475.130750][ T5864] ? hid_add_device+0x398/0x540 [ 1475.130773][ T5864] ? __pfx_mon_bin_submit+0x10/0x10 [ 1475.130797][ T5864] mon_submit+0x196/0x210 [ 1475.130818][ T5864] usb_hcd_submit_urb+0x11a/0x1aa0 [ 1475.130845][ T5864] usb_start_wait_urb+0x114/0x4c0 [ 1475.130875][ T5864] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1475.130913][ T5864] usb_control_msg+0x232/0x3e0 [ 1475.130943][ T5864] usbhid_raw_request+0x3cd/0x4e0 [ 1475.130983][ T5864] __hid_request+0x1be/0x370 [ 1475.131007][ T5864] hidinput_connect+0x218a/0x3030 [ 1475.131050][ T5864] hid_connect+0x499/0x19a0 [ 1475.131076][ T5864] ? usbhid_start+0x1a92/0x24b0 [ 1475.131103][ T5864] ? __pfx_hid_connect+0x10/0x10 [ 1475.131133][ T5864] hid_hw_start+0xa8/0x120 [ 1475.131155][ T5864] ms_probe+0x180/0x430 [ 1475.131184][ T5864] hid_device_probe+0x3a0/0x710 [ 1475.131209][ T5864] ? driver_sysfs_add+0x1fe/0x210 [ 1475.131237][ T5864] ? __pfx_hid_device_probe+0x10/0x10 [ 1475.131259][ T5864] really_probe+0x26a/0x9e0 [ 1475.131292][ T5864] __driver_probe_device+0x18c/0x2f0 [ 1475.131322][ T5864] driver_probe_device+0x4f/0x430 [ 1475.131352][ T5864] __device_attach_driver+0x2ce/0x530 [ 1475.131383][ T5864] bus_for_each_drv+0x251/0x2e0 [ 1475.131405][ T5864] ? __pfx___device_attach_driver+0x10/0x10 [ 1475.131435][ T5864] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1475.131455][ T5864] ? __lock_acquire+0xab9/0xd20 [ 1475.131484][ T5864] __device_attach+0x2b8/0x400 [ 1475.131512][ T5864] ? __pfx___device_attach+0x10/0x10 [ 1475.131541][ T5864] ? do_raw_spin_unlock+0x122/0x240 [ 1475.131562][ T5864] bus_probe_device+0x185/0x260 [ 1475.131584][ T5864] device_add+0x7b6/0xb50 [ 1475.131611][ T5864] hid_add_device+0x398/0x540 [ 1475.131646][ T5864] usbhid_probe+0xe13/0x12a0 [ 1475.131677][ T5864] usb_probe_interface+0x637/0xbf0 [ 1475.131700][ T5864] ? __pfx_usb_probe_interface+0x10/0x10 [ 1475.131717][ T5864] really_probe+0x26a/0x9e0 [ 1475.131748][ T5864] __driver_probe_device+0x18c/0x2f0 [ 1475.131776][ T5864] driver_probe_device+0x4f/0x430 [ 1475.131806][ T5864] __device_attach_driver+0x2ce/0x530 [ 1475.131835][ T5864] bus_for_each_drv+0x251/0x2e0 [ 1475.131855][ T5864] ? __pfx___device_attach_driver+0x10/0x10 [ 1475.131883][ T5864] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1475.131909][ T5864] __device_attach+0x2b8/0x400 [ 1475.131935][ T5864] ? __pfx___device_attach+0x10/0x10 [ 1475.131967][ T5864] ? do_raw_spin_unlock+0x122/0x240 [ 1475.131987][ T5864] bus_probe_device+0x185/0x260 [ 1475.132009][ T5864] device_add+0x7b6/0xb50 [ 1475.132034][ T5864] usb_set_configuration+0x1a87/0x20e0 [ 1475.132076][ T5864] usb_generic_driver_probe+0x8d/0x150 [ 1475.132106][ T5864] usb_probe_device+0x1c1/0x390 [ 1475.132125][ T5864] ? __pfx_usb_probe_device+0x10/0x10 [ 1475.132143][ T5864] really_probe+0x26a/0x9e0 [ 1475.132172][ T5864] __driver_probe_device+0x18c/0x2f0 [ 1475.132200][ T5864] driver_probe_device+0x4f/0x430 [ 1475.132228][ T5864] __device_attach_driver+0x2ce/0x530 [ 1475.132258][ T5864] bus_for_each_drv+0x251/0x2e0 [ 1475.132278][ T5864] ? __pfx___device_attach_driver+0x10/0x10 [ 1475.132305][ T5864] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1475.132330][ T5864] __device_attach+0x2b8/0x400 [ 1475.132357][ T5864] ? __pfx___device_attach+0x10/0x10 [ 1475.132385][ T5864] ? do_raw_spin_unlock+0x122/0x240 [ 1475.132404][ T5864] bus_probe_device+0x185/0x260 [ 1475.132425][ T5864] device_add+0x7b6/0xb50 [ 1475.132451][ T5864] usb_new_device+0xa39/0x16f0 [ 1475.132480][ T5864] ? __pfx_usb_new_device+0x10/0x10 [ 1475.132504][ T5864] ? _raw_spin_unlock_irq+0x23/0x50 [ 1475.132532][ T5864] ? lockdep_hardirqs_on+0x9c/0x150 [ 1475.132552][ T5864] hub_event+0x2941/0x4a00 [ 1475.132603][ T5864] ? __pfx_hub_event+0x10/0x10 [ 1475.132631][ T5864] ? process_scheduled_works+0x9ef/0x17b0 [ 1475.132658][ T5864] ? _raw_spin_unlock_irq+0x23/0x50 [ 1475.132686][ T5864] ? process_scheduled_works+0x9ef/0x17b0 [ 1475.132710][ T5864] ? process_scheduled_works+0x9ef/0x17b0 [ 1475.132735][ T5864] process_scheduled_works+0xade/0x17b0 [ 1475.132773][ T5864] ? __pfx_process_scheduled_works+0x10/0x10 [ 1475.132805][ T5864] worker_thread+0x8a0/0xda0 [ 1475.132831][ T5864] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1475.132865][ T5864] ? __kthread_parkme+0x7b/0x200 [ 1475.132894][ T5864] kthread+0x711/0x8a0 [ 1475.132912][ T5864] ? __pfx_worker_thread+0x10/0x10 [ 1475.132935][ T5864] ? __pfx_kthread+0x10/0x10 [ 1475.132958][ T5864] ? _raw_spin_unlock_irq+0x23/0x50 [ 1475.132987][ T5864] ? lockdep_hardirqs_on+0x9c/0x150 [ 1475.133005][ T5864] ? __pfx_kthread+0x10/0x10 [ 1475.133022][ T5864] ret_from_fork+0x3f9/0x770 [ 1475.133048][ T5864] ? __pfx_ret_from_fork+0x10/0x10 [ 1475.133074][ T5864] ? __switch_to_asm+0x39/0x70 [ 1475.133092][ T5864] ? __switch_to_asm+0x33/0x70 [ 1475.133108][ T5864] ? __pfx_kthread+0x10/0x10 [ 1475.133143][ T5864] ret_from_fork_asm+0x1a/0x30 [ 1475.133170][ T5864] [ 1475.133178][ T5864] [ 1475.726112][ T5864] Allocated by task 5864: [ 1475.730430][ T5864] kasan_save_track+0x3e/0x80 [ 1475.735109][ T5864] __kasan_kmalloc+0x93/0xb0 [ 1475.739711][ T5864] __kmalloc_noprof+0x27a/0x4f0 [ 1475.744580][ T5864] __hid_request+0x94/0x370 [ 1475.749075][ T5864] hidinput_connect+0x218a/0x3030 [ 1475.754099][ T5864] hid_connect+0x499/0x19a0 [ 1475.758597][ T5864] hid_hw_start+0xa8/0x120 [ 1475.763014][ T5864] ms_probe+0x180/0x430 [ 1475.767169][ T5864] hid_device_probe+0x3a0/0x710 [ 1475.772021][ T5864] really_probe+0x26a/0x9e0 [ 1475.776530][ T5864] __driver_probe_device+0x18c/0x2f0 [ 1475.781836][ T5864] driver_probe_device+0x4f/0x430 [ 1475.786870][ T5864] __device_attach_driver+0x2ce/0x530 [ 1475.792254][ T5864] bus_for_each_drv+0x251/0x2e0 [ 1475.797102][ T5864] __device_attach+0x2b8/0x400 [ 1475.801864][ T5864] bus_probe_device+0x185/0x260 [ 1475.806712][ T5864] device_add+0x7b6/0xb50 [ 1475.811044][ T5864] hid_add_device+0x398/0x540 [ 1475.815711][ T5864] usbhid_probe+0xe13/0x12a0 [ 1475.820305][ T5864] usb_probe_interface+0x637/0xbf0 [ 1475.825409][ T5864] really_probe+0x26a/0x9e0 [ 1475.829914][ T5864] __driver_probe_device+0x18c/0x2f0 [ 1475.835198][ T5864] driver_probe_device+0x4f/0x430 [ 1475.840223][ T5864] __device_attach_driver+0x2ce/0x530 [ 1475.845601][ T5864] bus_for_each_drv+0x251/0x2e0 [ 1475.850446][ T5864] __device_attach+0x2b8/0x400 [ 1475.855212][ T5864] bus_probe_device+0x185/0x260 [ 1475.860056][ T5864] device_add+0x7b6/0xb50 [ 1475.864388][ T5864] usb_set_configuration+0x1a87/0x20e0 [ 1475.869849][ T5864] usb_generic_driver_probe+0x8d/0x150 [ 1475.875302][ T5864] usb_probe_device+0x1c1/0x390 [ 1475.880141][ T5864] really_probe+0x26a/0x9e0 [ 1475.884643][ T5864] __driver_probe_device+0x18c/0x2f0 [ 1475.889923][ T5864] driver_probe_device+0x4f/0x430 [ 1475.894947][ T5864] __device_attach_driver+0x2ce/0x530 [ 1475.900319][ T5864] bus_for_each_drv+0x251/0x2e0 [ 1475.905163][ T5864] __device_attach+0x2b8/0x400 [ 1475.909925][ T5864] bus_probe_device+0x185/0x260 [ 1475.914770][ T5864] device_add+0x7b6/0xb50 [ 1475.919093][ T5864] usb_new_device+0xa39/0x16f0 [ 1475.923858][ T5864] hub_event+0x2941/0x4a00 [ 1475.928279][ T5864] process_scheduled_works+0xade/0x17b0 [ 1475.933827][ T5864] worker_thread+0x8a0/0xda0 [ 1475.938415][ T5864] kthread+0x711/0x8a0 [ 1475.942487][ T5864] ret_from_fork+0x3f9/0x770 [ 1475.947085][ T5864] ret_from_fork_asm+0x1a/0x30 [ 1475.951862][ T5864] [ 1475.954178][ T5864] The buggy address belongs to the object at ffff888031f27a20 [ 1475.954178][ T5864] which belongs to the cache kmalloc-8 of size 8 [ 1475.967882][ T5864] The buggy address is located 1 bytes inside of [ 1475.967882][ T5864] allocated 7-byte region [ffff888031f27a20, ffff888031f27a27) [ 1475.981681][ T5864] [ 1475.984005][ T5864] The buggy address belongs to the physical page: [ 1475.990404][ T5864] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31f27 [ 1475.999156][ T5864] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1476.006698][ T5864] page_type: f5(slab) [ 1476.010681][ T5864] raw: 00fff00000000000 ffff88801a841500 0000000000000000 dead000000000001 [ 1476.019262][ T5864] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000 [ 1476.027839][ T5864] page dumped because: kasan: bad access detected [ 1476.034243][ T5864] page_owner tracks the page as allocated [ 1476.040306][ T5864] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 21722338992, free_ts 21690280871 [ 1476.058815][ T5864] post_alloc_hook+0x240/0x2a0 [ 1476.063582][ T5864] get_page_from_freelist+0x21e4/0x22c0 [ 1476.069131][ T5864] __alloc_frozen_pages_noprof+0x181/0x370 [ 1476.074939][ T5864] alloc_pages_mpol+0x232/0x4a0 [ 1476.079793][ T5864] allocate_slab+0x8a/0x370 [ 1476.084314][ T5864] ___slab_alloc+0xbeb/0x1410 [ 1476.088987][ T5864] __kmalloc_cache_noprof+0x296/0x3d0 [ 1476.094364][ T5864] add_sysfs_param+0x688/0xa20 [ 1476.099129][ T5864] kernel_add_sysfs_param+0xb4/0x130 [ 1476.104415][ T5864] param_sysfs_builtin+0x1de/0x290 [ 1476.109526][ T5864] param_sysfs_builtin_init+0x32/0x40 [ 1476.114896][ T5864] do_one_initcall+0x233/0x820 [ 1476.119666][ T5864] do_initcall_level+0x137/0x1f0 [ 1476.124614][ T5864] do_initcalls+0x69/0xd0 [ 1476.128957][ T5864] kernel_init_freeable+0x3d9/0x590 [ 1476.134158][ T5864] kernel_init+0x1d/0x1d0 [ 1476.138574][ T5864] page last free pid 1216 tgid 1216 stack trace: [ 1476.144899][ T5864] __free_frozen_pages+0xbc4/0xd30 [ 1476.150012][ T5864] vfree+0x25a/0x400 [ 1476.153912][ T5864] delayed_vfree_work+0x55/0x80 [ 1476.158772][ T5864] process_scheduled_works+0xade/0x17b0 [ 1476.164333][ T5864] worker_thread+0x8a0/0xda0 [ 1476.168927][ T5864] kthread+0x711/0x8a0 [ 1476.173009][ T5864] ret_from_fork+0x3f9/0x770 [ 1476.177599][ T5864] ret_from_fork_asm+0x1a/0x30 [ 1476.182359][ T5864] [ 1476.184682][ T5864] Memory state around the buggy address: [ 1476.190325][ T5864] ffff888031f27900: 05 fc fc fc fa fc fc fc 00 fc fc fc 07 fc fc fc [ 1476.198382][ T5864] ffff888031f27980: 07 fc fc fc 06 fc fc fc fa fc fc fc 05 fc fc fc [ 1476.206444][ T5864] >ffff888031f27a00: 06 fc fc fc 07 fc fc fc fa fc fc fc 06 fc fc fc [ 1476.214503][ T5864] ^ [ 1476.219611][ T5864] ffff888031f27a80: 06 fc fc fc fa fc fc fc 05 fc fc fc 06 fc fc fc [ 1476.227702][ T5864] ffff888031f27b00: 05 fc fc fc 05 fc fc fc 05 fc fc fc 05 fc fc fc [ 1476.235758][ T5864] ================================================================== [ 1476.243830][ T5864] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1476.251038][ T5864] CPU: 1 UID: 0 PID: 5864 Comm: kworker/1:3 Not tainted 6.16.0-rc5-next-20250711-syzkaller #0 PREEMPT(full) [ 1476.262591][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1476.272752][ T5864] Workqueue: usb_hub_wq hub_event [ 1476.277812][ T5864] Call Trace: [ 1476.281098][ T5864] [ 1476.284031][ T5864] dump_stack_lvl+0x99/0x250 [ 1476.288646][ T5864] ? __asan_memcpy+0x40/0x70 [ 1476.293252][ T5864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1476.298811][ T5864] ? __pfx__printk+0x10/0x10 [ 1476.303419][ T5864] vpanic+0x281/0x750 [ 1476.307401][ T5864] ? __pfx_print_hex_dump+0x10/0x10 [ 1476.312602][ T5864] ? __pfx_vpanic+0x10/0x10 [ 1476.317459][ T5864] panic+0xb9/0xc0 [ 1476.321194][ T5864] ? __pfx_panic+0x10/0x10 [ 1476.325621][ T5864] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1476.331527][ T5864] ? mon_bin_event+0x1214/0x2250 [ 1476.336465][ T5864] check_panic_on_warn+0x89/0xb0 [ 1476.341421][ T5864] ? mon_bin_event+0x1214/0x2250 [ 1476.346382][ T5864] end_report+0x78/0x160 [ 1476.350633][ T5864] kasan_report+0x129/0x150 [ 1476.355145][ T5864] ? mon_bin_event+0x1214/0x2250 [ 1476.360090][ T5864] kasan_check_range+0x2b0/0x2c0 [ 1476.365025][ T5864] ? mon_bin_event+0x1214/0x2250 [ 1476.369978][ T5864] __asan_memcpy+0x29/0x70 [ 1476.374403][ T5864] mon_bin_event+0x1214/0x2250 [ 1476.379187][ T5864] ? __pfx_mon_bin_event+0x10/0x10 [ 1476.384300][ T5864] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 1476.389685][ T5864] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1476.395580][ T5864] ? __driver_probe_device+0x18c/0x2f0 [ 1476.401044][ T5864] ? __device_attach_driver+0x2ce/0x530 [ 1476.406600][ T5864] ? bus_for_each_drv+0x251/0x2e0 [ 1476.411621][ T5864] ? __device_attach+0x2b8/0x400 [ 1476.416558][ T5864] ? bus_probe_device+0x185/0x260 [ 1476.421583][ T5864] ? hid_add_device+0x398/0x540 [ 1476.426441][ T5864] ? __pfx_mon_bin_submit+0x10/0x10 [ 1476.431651][ T5864] mon_submit+0x196/0x210 [ 1476.435979][ T5864] usb_hcd_submit_urb+0x11a/0x1aa0 [ 1476.441093][ T5864] usb_start_wait_urb+0x114/0x4c0 [ 1476.446140][ T5864] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 1476.451694][ T5864] usb_control_msg+0x232/0x3e0 [ 1476.456456][ T5864] usbhid_raw_request+0x3cd/0x4e0 [ 1476.461481][ T5864] __hid_request+0x1be/0x370 [ 1476.466067][ T5864] hidinput_connect+0x218a/0x3030 [ 1476.471107][ T5864] hid_connect+0x499/0x19a0 [ 1476.475610][ T5864] ? usbhid_start+0x1a92/0x24b0 [ 1476.480463][ T5864] ? __pfx_hid_connect+0x10/0x10 [ 1476.485398][ T5864] hid_hw_start+0xa8/0x120 [ 1476.489807][ T5864] ms_probe+0x180/0x430 [ 1476.493966][ T5864] hid_device_probe+0x3a0/0x710 [ 1476.498819][ T5864] ? driver_sysfs_add+0x1fe/0x210 [ 1476.503926][ T5864] ? __pfx_hid_device_probe+0x10/0x10 [ 1476.509324][ T5864] really_probe+0x26a/0x9e0 [ 1476.513839][ T5864] __driver_probe_device+0x18c/0x2f0 [ 1476.519151][ T5864] driver_probe_device+0x4f/0x430 [ 1476.524191][ T5864] __device_attach_driver+0x2ce/0x530 [ 1476.529572][ T5864] bus_for_each_drv+0x251/0x2e0 [ 1476.534431][ T5864] ? __pfx___device_attach_driver+0x10/0x10 [ 1476.540722][ T5864] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1476.546105][ T5864] ? __lock_acquire+0xab9/0xd20 [ 1476.550964][ T5864] __device_attach+0x2b8/0x400 [ 1476.555750][ T5864] ? __pfx___device_attach+0x10/0x10 [ 1476.561077][ T5864] ? do_raw_spin_unlock+0x122/0x240 [ 1476.566280][ T5864] bus_probe_device+0x185/0x260 [ 1476.571144][ T5864] device_add+0x7b6/0xb50 [ 1476.575483][ T5864] hid_add_device+0x398/0x540 [ 1476.580169][ T5864] usbhid_probe+0xe13/0x12a0 [ 1476.584768][ T5864] usb_probe_interface+0x637/0xbf0 [ 1476.589881][ T5864] ? __pfx_usb_probe_interface+0x10/0x10 [ 1476.595506][ T5864] really_probe+0x26a/0x9e0 [ 1476.600019][ T5864] __driver_probe_device+0x18c/0x2f0 [ 1476.605314][ T5864] driver_probe_device+0x4f/0x430 [ 1476.610343][ T5864] __device_attach_driver+0x2ce/0x530 [ 1476.615721][ T5864] bus_for_each_drv+0x251/0x2e0 [ 1476.620571][ T5864] ? __pfx___device_attach_driver+0x10/0x10 [ 1476.626477][ T5864] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1476.631857][ T5864] __device_attach+0x2b8/0x400 [ 1476.636629][ T5864] ? __pfx___device_attach+0x10/0x10 [ 1476.641922][ T5864] ? do_raw_spin_unlock+0x122/0x240 [ 1476.647117][ T5864] bus_probe_device+0x185/0x260 [ 1476.651971][ T5864] device_add+0x7b6/0xb50 [ 1476.656320][ T5864] usb_set_configuration+0x1a87/0x20e0 [ 1476.661794][ T5864] usb_generic_driver_probe+0x8d/0x150 [ 1476.667261][ T5864] usb_probe_device+0x1c1/0x390 [ 1476.672108][ T5864] ? __pfx_usb_probe_device+0x10/0x10 [ 1476.677477][ T5864] really_probe+0x26a/0x9e0 [ 1476.681991][ T5864] __driver_probe_device+0x18c/0x2f0 [ 1476.687281][ T5864] driver_probe_device+0x4f/0x430 [ 1476.692311][ T5864] __device_attach_driver+0x2ce/0x530 [ 1476.697699][ T5864] bus_for_each_drv+0x251/0x2e0 [ 1476.702594][ T5864] ? __pfx___device_attach_driver+0x10/0x10 [ 1476.708518][ T5864] ? __pfx_bus_for_each_drv+0x10/0x10 [ 1476.713912][ T5864] __device_attach+0x2b8/0x400 [ 1476.718692][ T5864] ? __pfx___device_attach+0x10/0x10 [ 1476.723992][ T5864] ? do_raw_spin_unlock+0x122/0x240 [ 1476.729186][ T5864] bus_probe_device+0x185/0x260 [ 1476.734034][ T5864] device_add+0x7b6/0xb50 [ 1476.738370][ T5864] usb_new_device+0xa39/0x16f0 [ 1476.743143][ T5864] ? __pfx_usb_new_device+0x10/0x10 [ 1476.748341][ T5864] ? _raw_spin_unlock_irq+0x23/0x50 [ 1476.753550][ T5864] ? lockdep_hardirqs_on+0x9c/0x150 [ 1476.758756][ T5864] hub_event+0x2941/0x4a00 [ 1476.763204][ T5864] ? __pfx_hub_event+0x10/0x10 [ 1476.767974][ T5864] ? process_scheduled_works+0x9ef/0x17b0 [ 1476.773700][ T5864] ? _raw_spin_unlock_irq+0x23/0x50 [ 1476.778919][ T5864] ? process_scheduled_works+0x9ef/0x17b0 [ 1476.784663][ T5864] ? process_scheduled_works+0x9ef/0x17b0 [ 1476.790400][ T5864] process_scheduled_works+0xade/0x17b0 [ 1476.795955][ T5864] ? __pfx_process_scheduled_works+0x10/0x10 [ 1476.801948][ T5864] worker_thread+0x8a0/0xda0 [ 1476.806541][ T5864] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1476.812885][ T5864] ? __kthread_parkme+0x7b/0x200 [ 1476.817835][ T5864] kthread+0x711/0x8a0 [ 1476.821904][ T5864] ? __pfx_worker_thread+0x10/0x10 [ 1476.827019][ T5864] ? __pfx_kthread+0x10/0x10 [ 1476.831606][ T5864] ? _raw_spin_unlock_irq+0x23/0x50 [ 1476.836813][ T5864] ? lockdep_hardirqs_on+0x9c/0x150 [ 1476.842005][ T5864] ? __pfx_kthread+0x10/0x10 [ 1476.846592][ T5864] ret_from_fork+0x3f9/0x770 [ 1476.851183][ T5864] ? __pfx_ret_from_fork+0x10/0x10 [ 1476.856299][ T5864] ? __switch_to_asm+0x39/0x70 [ 1476.861060][ T5864] ? __switch_to_asm+0x33/0x70 [ 1476.865816][ T5864] ? __pfx_kthread+0x10/0x10 [ 1476.870401][ T5864] ret_from_fork_asm+0x1a/0x30 [ 1476.875168][ T5864] [ 1476.878590][ T5864] Kernel Offset: disabled [ 1476.882927][ T5864] Rebooting in 86400 seconds..