last executing test programs: 12m0.377337202s ago: executing program 1 (id=1320): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000040)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/cpu_byteorder', 0x40, 0x140) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0x647) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080)={0x7}, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000100)={0x4b}, 0xffffff43) 12m0.264112677s ago: executing program 1 (id=1322): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) syz_usb_connect$uac1(0x3, 0xa7, &(0x7f0000000400)=ANY=[@ANYBLOB="12015002000000206b1d0101400001020301090295000301a0a0090904000000010100000a2401900c020201020c240202060203840c0008120daa471fcfda0a0007000500190c240803090034c5e5eb68a3082405010201013f0924030201030301"], &(0x7f0000001c40)={0x0, 0x0, 0x0, 0x0}) r2 = dup(r0) write$FUSE_BMAP(r2, 0x0, 0x0) 11m59.580225182s ago: executing program 1 (id=1334): sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005", 0x7}], 0x1}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000480)='attr/prev\x00') write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="d8000000190081054e81f782db4cb904021d080000000000000000070a000a000900142603600e1208001e0000050401a8000500027c035c0461c1d67f6f94007134cf6efb8001a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c3f5aeb4edbb57a5025ccca9e008026f6e6ddba61f5fad95667e006dcdf639500bfeb789d00000000000000d5e1cace81ed6c117ab5d6d69bda4039e81f86f60f0bffece0b42a9ecbee5de6ccd40dd6e4edef3985000092954b43370e970392", 0xd8}], 0x1}, 0x44000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x40) 11m58.661944843s ago: executing program 1 (id=1345): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, 0x0, 0x2000, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x180) chdir(&(0x7f0000000140)='./bus\x00') (fail_nth: 3) 11m58.443893705s ago: executing program 1 (id=1350): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) sendfile(r1, r0, 0x0, 0x80000000) 11m58.000140448s ago: executing program 1 (id=1355): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$char_usb(r1, &(0x7f00000008c0)='-0', 0x2) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 11m57.675939316s ago: executing program 32 (id=1355): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$char_usb(r1, &(0x7f00000008c0)='-0', 0x2) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={0x1, @default, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 8m59.727566778s ago: executing program 3 (id=2388): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$KVM_RUN(r2, 0xae80, 0x6000000) 8m59.471996287s ago: executing program 3 (id=2391): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201500216d80e10f00a2167cefc010200000000000000000009050102ff0300"/45], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000053eeb4526d04ae08581101020301090212000d000000000904c739fae9c48b3ffbb7dca9e3db58f20fdcd099f645e0bccded3bd55c79294006a9b0298f2505f180ce49558b483ff5c729265cc499f7f2e18c3e4800000000cdc680fa95b776e9d6ede771be40dbedb924c0d10879a1a4e11e056225"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000200), 0x4) listen(r2, 0xfff) accept4(r2, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f0000000100)=0x80, 0x800) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000600)={0x14, &(0x7f00000004c0)={0x20, 0xc, 0xd5, {0xd5, 0x11, "3d5a92bdc4e7c386e5d911d31c9062514d841a7b9f40d143ef6e580d3cb350d0a285f9c2f0b49fc4724c152d7e42e677601a3e54f5ef1664c3dd2d1f1c8828f8fc88e4aaaa7b96d54771a881f6fd34e96c947229bee9e6eed7dd2fdd481eb9c3e685eb89326cf3235d855df9fa87aa108ae8cc0924ba17a8d6c9915fbce61a8d30ebba58611a4be58e8bf2be684b56cb58dfda1519070c5c932d8f3597030900749c49a1444d5bebcdf177a70c8effb2163170c0dbc35b98377430ef681c597de993cd7a7e81851c84632bb6f126d72e545100"}}, &(0x7f00000005c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000700)={0x1c, &(0x7f0000000640)={0x20, 0x13, 0x23, "03c689259d880d673e4ea58089e983bb348497f9b8e325c0a2f24a0d93d6479babef77"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x1}}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000a80)={0x1c, &(0x7f0000000440)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000001080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r1) syz_usb_control_io$printer(r0, 0x0, 0x0) r3 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x80, 0xd0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0xb8, 0xff, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x4c13bf0aaba7998d, 0xb8, 0x2, 0x2}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x7f, 0x5, 0x45, 0xff, 0x7f}, 0x130, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x4, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x42f}}, {0xc5, &(0x7f0000000200)=@string={0xc5, 0x3, "396dad0a4af43aa6da9c932d10103112c87d62a1a6a2c9bad4239838c20708e45040d0d9e2a3af0251ae4423ddddfeb92faa7ec87eb8807af9d605d6742679335502aff799ace11a2cd69d637fb95e5304a2ce047483ecd342db7afa36ed96cf527b1437ed61bc08532d1034f87bf0b30f4f96cc53bfe7e8da456914e0603bf6bfec4eb77c5500f89ef86ae435645eefb9f95799f9daa40b2bcfd494606db2a8fef01c57b31dc4973a427cc37425b1cd2bc6d1698087fbec47a27a5f655e84609030f7"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x410}}]}) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 8m56.438672144s ago: executing program 3 (id=2399): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0xc02, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x15) write$uinput_user_dev(r5, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff2726, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffd, 0x0, 0x0, 0xae83, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$packet(0x11, 0x3, 0x300) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/42, 0x0, 0xeeee0004}) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000480)) r9 = syz_open_procfs(0x0, &(0x7f0000000700)='net/psched\x00') dup3(r7, r9, 0x0) ioctl$VHOST_NET_SET_BACKEND(r8, 0x4008af30, &(0x7f00000000c0)={0x1, r9}) close_range(r6, 0xffffffffffffffff, 0x0) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r10, 0xc0145401, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0xffff8000}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000240)={0x74, 0x0, 0x44}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x100a, 0x1}) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000207d1eed2c0000aa90e5525d0f51dfe90000000103000200094d05000401220500090581030000000000"], 0x0) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="041817aaaaaaaaaa105c"], 0x1a) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) syz_usb_control_io(r11, 0x0, 0x0) 8m55.803874678s ago: executing program 3 (id=2404): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) fadvise64(r0, 0x94, 0x6e, 0x5) (async) mmap(&(0x7f00002dd000/0x4000)=nil, 0x4000, 0xe52dc1b35e5d902e, 0x50, r0, 0xfbaae000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 8m55.620322955s ago: executing program 3 (id=2405): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x11, 0x39, 0x5b, 0x40, 0x5d8, 0x810c, 0x185f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x1, 0xf0, 0x8, [{{0x9, 0x4, 0xc8, 0x8, 0x1, 0x7f, 0xf8, 0xae, 0x4c, [], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x7, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r2 = openat$kvm(0x0, &(0x7f00000001c0), 0x2b82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000000000006a0200000000000000000008"]) syz_usb_control_io$printer(r1, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}}, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000002900)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_ep_read(r1, 0x1, 0xc7, &(0x7f0000000080)=""/199) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 8m55.568219535s ago: executing program 2 (id=2406): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name, &(0x7f0000000140)=0x10, 0x80000) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000200)=""/139, &(0x7f0000000180)=0x8b) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r4, 0x0, 0x10000, 0x0, 0x20002, 0x80195764, 0x1000000, 0x8000000}) 8m55.401680035s ago: executing program 2 (id=2407): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xac) openat$kvm(0xffffffffffffff9c, 0x0, 0x41720, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) ioctl$KVM_RUN(r0, 0xae80, 0x0) keyctl$session_to_parent(0x12) mount(&(0x7f0000000180)=@md0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ufs\x00', 0x8010, 0x0) 8m55.309508384s ago: executing program 2 (id=2408): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x1) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="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", 0x187}], 0x1}}], 0x1, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x17, 0x0, 0x0) write$snddsp(r0, 0x0, 0xfd78) r3 = gettid() r4 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0xffffffffffffffff, 0x2100) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r4, 0x80184151, &(0x7f0000000080)={0x0, &(0x7f0000001900)="42c0bb99fe1656e608f2fa71e07793a6955f544120421802660c716e047e261cadee94fb3ef20bc8673f7835d346895f24cfebfb1b88788633c5e22688726f4ecc4c5ea17e474cb59d856d72d5023d7c7ffe24be3975d1989293e88a1f3639405d56834c422108fe62e7a6d9a3ffa33c7974a15a24c32998c34fa5f31036fbf549ede7dc2c5ab71b5e73ded6e8f68cf7f03a7fe8df5c721a49b522e03fcc9c151d7f5adac7910db01f529312d5175066ba16845e77724e6c49b634466f5176ac41f1c99456df5962a0708289d4a1d11324641ba74180a6dd9e8417020114794e0c7aa7cea6bcc49ff330949cf1cc38bfcc5a23a6d830efede33f0ce98bb149a777d715fb9390f13601550f811b178e5f39471999b5ae74039c713b270a90e4c1bbfb15c60cfc603aecd7c457cd3a15d3e978c89dfd75e03dd2b2d3652df170d8e9875c6936deaefe735b7a60864f7bf793b06e1a28c1f3812190ba53b993f77a4969498178e8ad9a65ebc69dba39bc9b50b3e8f104da29f9b7656e96c238c05a0d19133fc39c4c2427a8bc943a8468cada7bc926540861b52f220d60787d05c80ea2279a23fdbe39bf9fcf034542af5eeea3bb112a754552610828684363b0d9835b449bf8c5dfe7817158de312026637d7a9c0baee1c1369239152af1156e74de9d8d026dee86033b13162e834e58abe1bc1ce379a7441b73e637c09f08bd1b7b481ebb66b64895367da3b3404612656fe7fa09121a61dbc4077d9072613a0af5a2ed319c555b65187850cd92f68c7e93812620ef5cc8d01affb9399df9ccd902d74c4a8b74494f88fd449f26ea591a416e00c50f7e53e512d80dae868a4ebdb74f4a6d317fa7fc741b029bcb4d3a8cda9eaa6ac491ea14a7d65acb1ce1556989e4ae26e30fa29039309b41dd4b97e529f9152fc73b237fea0ace4407aad33416391d476ea1bdfe3b9c94e263b5fa85c733616010f49550cda729ee3a7e830cb472effd323374a73907e1cc68e7a02a4e24b5695e215da337266468152d1570506556c86566fc1fa9700ffd207d0d5faf5e856d5fe008d0b95df456fa2063752b3c97e4748757646e06f80dd8f06e773200a6962eb522914c6bc31305b6f35457397b50e96c7d024b4691513144745f6e10492fb14233fae92f7a51e20b4599f83a50cddcb4fbbc00ae9cab06d6b89834257d247b7b612d8f94e7cf506f91d1f15669945601b4543a215929c615e98705d1e9001ba582436eaf430d2caf0ef588ef65b76724ccd6ec6b2e270532b53ee25282ac9cc44d75430c95c8334e24806d86624b0e763a96da646a549483a166e5855345096123de8ff5f04e765a3043ee11b4da49be8ffb3c9445e428f71ad4c09c63f3d85b2c2c0da89ea3052941ae4362647905aa46854bf3bb9fed7ef7f0eb198cabd0c61b2b42b6d0887b25461b02d6f9a96a1d1ac77088613999aa7e5118e64dc15abad9b86c966f3c7088caf1d2779b9e5b0e9ca402a449f5342b1a71cef3442a31aaa20f3c60718367a0b953fcfb13b61d38456f0e005efe9f3ab72756151ec97521cf6ea2386f3cb3c3f134e053e1e3dac31098aa3248271663d401b9ec607baeb8dc795cb7b2cc8a011fde2af2028556760b9abcbe7dd603b82ea277af10551330f5e6d6a6a5cc20d10bb8162e9d0d21e613d57288acbbb38d6966ef6d4c71c9615b4c6ee813f1dee24159b62ff285c4b15e97fa9290bc9bb0e70ae2997c786b33d236d2965f62c67d61a3b96fc347037bec665ca9e97bef9c0f6ba758912cb4282930901937c249c0b20e290861fa4c8ec556c8d699333e75aa0d4f64370a9e006ee76f9a779bb81cb733c308e480f4ce6113c04d63d82310b3181688e0f9bfb9b1d4cb670c5f22499b6ad625bba9902eca4c804b5e9101740068b2826872972608fecc0256581e03b0e263edfa9350cc853d759b45472c223b243587e90f98fd555c036e454ede09b72b3b343c49e72cbb28c0ed09e411ff608eee7322b4c78971f4ca37105fe1485226ddc87cec090fecf6957251aba2d96a3fde935318888213a2695957fc2a455f5abc5801a2737eb5956ec811da06c86a462a9f2f0e2a47f5cc473e9fbc6caaa66ffa4751e39d370abfa200be65947bbc43f63b1b600b50f03073f2721dc9131d7cf109a4a0a2efbf0495fb6ecb45eb2698947d4e6b5c706d554cb9240f8e6eb9991f043e80c82dfcaa7cb47e9f93d2f077d027fcbcdb21fb6fbb5ef0680264bef67a7a01e6a4063efdc78607f9dd1a3a878462d08c70ac590c0250d4d9b6478f023fab2bd390b1ee79872e3bef029d54c8c9b1ae544d2a85f2d4e4d7b5d0f6130e9bd026441d35a158014d647979f87b861e7f5f6ef48a3bf78831717085ca525d8a012940ed0df87ff52836af999970a83bfb92f20ed97e8f2e04af056f940e4b92bf772ddc991bbdd5b2816e60ff4618471dd4b05b4ff7114c20949cdb26a694392d24858535e2b28ac514a2759a4c1e1e0b9c6414931de16547ccdf379f33d27293483c461f2662b81fad25aa32790cea3d7b6d01fd3b2eeda9ec4cae8744ddc78702121cba0868e7dd75c0bf75799b329b7daab49b64ce41dc16451df476aae6946e0037c8875718a5d9e00511d0664f0ca6b60fcd36ce16fe4950b990286390e65d1d1b360322e39b84124f6155df6676b5c9d4fe995d13fecaf40cbad018d1ad31a323af3e463f38bdfac6830e29977ccae5fecf096dbf0dad86c3156251abda29f09cbed6bb43e7c272e4853304dff374c066f50bc5814b8155b34a7bd395358fe3be9317f32a734cdb27abb843d37ccf102b31f61e2c1b005f78182b824c8367bbdc1677b8ff5605a59b3cb595075be2ec0ff62aace99a24f5ebc8c029e69bf7a5740089b254b7f36fb8a1df1166c6abd1bf59c28fbc101cd86a098d3665ebe0eeecb792a9f6ff84f31519cd6f7cf7952d5a128650a6869ae16a66e574e2837f1be1be5a06cf0041aac0da386ce502f47a5127f8fa4a8ac3a3f4238dc26ff3ac48a5ced2ccc985ca8f3ce028bde1de52b98e888b50db08ab138008fa74e3a4f67ef7d1a91511929e5dc6fd32a040ce6a0dc41e1ef9a530a0bf5f847a89a499626eeb3cccd1f4c6078aa1fe9de7b47c679a9cf5cbd90c17c179b9748772b00ac70472556f93f3bd3b84f207124484448add0d4485ecd802291dd23bb95413f9c1ec46cd89f76c90957a57f39e4a02acf25b46170d00e970c68a70ee993f97319bcff907751fd5204abe8e5b70fc25788d057ff28fb7b703bc6203c7ed72d1def3876bda1798413d7e7cd7b121d454399c3b3ee4c9dfca8b9b5f1abcad069da17c1a633cc41115ba29107bb684047f7ee893aeffa0bf4d9cdf784af4adaaff2e3f3b9a778ab119f7af6dd56d3078ffeb61ae46e0fdbf76b6d2791680bdf044e3f06e7496f0722d51c86a89f9a32c10604faa195ba0ebf128d7bc513da71834afcea2d54b76379f7e11a6d030eac9954b4f723c220be3cf3e17c11bca612dce119a82d1a018ae75912910da0f53eee965d49c030bb38292bdb1483ec320e4f2b5e7ad8c4b8bc52495fdefa1e06551d0dedebfbc503a48051917598fba454a242b9c8e1a1cd351e8ace3aa0fa3f278330bf202c505ccf66b5675fd080a2f0632b45c4c9996e5b92b04dfe40ebb0ac0eea0ee1fb862f943b3419df79403336e58bbf57851b59cc835cf30379bcf51b5627f8d8b108de9aeac3ab015d83ce06ba076245c9438b2f576410b981a29061370abfffe955d0747c135d01a7763a49564e0da4d66d88af3bffaa9e792e4f03ae7d9114a80fbe696f9c83332d16e6d85b0907b306973626feb32d2979689aa8d1b29291fcace46c0c2622205c95ef25abd4294f5400eefd5689acd53a14487430b20cb280a5cf0f4b620a4aa19d5843793e0e3cb6dac20c514301b7845706360b25dc3accbab4530f6c5545c741b6a09ea334ccafb89212e0f0da4b8572ca2f9c68bc63983e5f6df68a9259d1e9716a383fa1064583499c0b4a7da68051b4fb34bbc9169911f82bdbb5421b120c8101eb9af8d34ec415a66d448bcf4ea334d351b4a173b905fb58639fc5aa125340ee8e7fd4e879386adbecef7f93e70493805e32d7ca34e23f06af833a40e5f079bd7f264336bd9adf5488540b2a8cb9937f9ce001b18312fb8557e5a5ac3a33fea8ddb64f47487450cfc5122d8afe95572ed0499242a300a33af0bcbab1c8c4334aabb5a65c497557f5fb872d0f773fad6f2461ef0dad63dce668b3a13e4d45f34cb26fc8e40befbcf1e457e8b2da4bc019597e28bfd260d9712edebec6cb5ed89980f80ff98f841e3e4ae076b258d5fe500553aa588ed076cf16d26cec082b85a700b610e97d99c946b7092ba00ac7285ff09579613700bb62b7e65ef192b2600416933691eb51ce4a653b843c2928519e0fc986e4a85268a607feba24baf2f7d7161b7d8315864b09d321ca6694418ad41f4d900148d607c191544f50249a0506bba407a163a34dd1b6ed718b2ca6ac88a78e083ebcdd3f1a98a223747abff0890b4c4796dcdcef8ee25af92f592f5f54d0c69f0040170f3b9360137b0ebcac1126329f5b862e3ffaaf11764c6469257a555bb58fa219e9c4095888c475a178f3ad2206b56b260318d603522a5c8c4991ca537470f3ba592c8e678b15c9b1242b2251313f471887c8345c08383f65f7aa4c239a0c9673e01a547d10c35847fb9a242e92fe697dddcd58b3a7a70040afc6590d78919f4c9904a8b153cd3d530a918e0ed2303bf91d0cb5b99de35898f87b29f2ddf35c9fb4cdb6ba815b7ddfc8f031349636ad3a6559a6d24a3f978512944fd27f05c174e43194758b9c5005abb303c043e5848262031c0f0acfb1e98549b274ca90b35bcf1996f8f88387ada88813906156f2d2839c5f24617217af83423daccff0acd835431ea7f50b72aa1dedc4b5bf0838baf2fc1b02f40a8fa24d0a540e0cd44dc524df8de9526c4cde26a490a882632a717e72281483057e192115e3bed389d866bb6b0e8bbf8c5e5b352748099acce5447a1e3ebbf279bb20eff474b493d43ffa538884ff0dd10c72a0935ff27fd371ee69eb91717c87f2f5a7100c133c30523654368109f1f4fd039d522611f174814c3e8d5c91642e190d7c641fb6bea491057a3bdb748069423132796339ec5d876ade0fbe2d7cea317c3fce43db9d151713f97c2c03ce426b2d2c134a50bbfc9f9abb9b4ab01596638865ac488d217af63ff529f96b009d7211edabecf916a5f281a634552b3511abe93bb8419a8509a96b888b8b09492c651f86a95dab3fe576e7d20864e91e895cfd8e3d2b54b6f7ee307c84405a53189484a8f8ae5baf70778ba6dbbcff747f12e956ce32a8e74f40599c07244b88fdc56ea23c522b45b056b7e5adb607ab18bbada005ede709ead3e4800d7e4236f13667321637041019f26fe4f2aa0b3b623a21ecf5ff057211fd6bb273442a35f2397be9543202c8a766655f3a49d3245e81369557b5aa82f52eda78cce4e7a73def3d38aeb540e5f5bd28ddbe87d3bcbfcf39db8e9d0d4682c16785227ccef0c5222d1663fcd6d9f692e4e1523fd3bace830ae38510c2e25b49389f645cae8d52e97e19e3ab1abd6d74034cbad3975e59366a8d179ebafc6345a74f5cfed686b2f174d97cfcd7d132441ec52f5dc548d0b177a3c68bdcb1015a6b29767df0857e9f08b091fd7f4a4b8a504398834b2a04f229de6b7d68ec62cc46a53dd4b582fc2ccb617a6", 0x1000}) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_buf(r5, 0x0, 0x2c, &(0x7f0000000100), 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000000)) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r6, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) 8m54.886915816s ago: executing program 3 (id=2410): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200008000000010902120001000000000904"], 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './cgroup/file0', [{0x20, '/dev/sr0\x00'}, {0x20, 'devices.list\x00'}, {0x20, '!\\&\''}], 0xa, "b6fec6b450dc10e3c831b06707e677ed229bfc392027b83ef0127823dca66c6321e6d75d7cd536945eb4911d413d19b0efc86372d64f6aa05bbf0bfe6fc2fccb9817916e08eaaffa11c31a9e2d71f312fd05bf0c8d6bc4a928e750c46bb2c86b266fd1ec42ac296c35e5e6285463531763b3123a55bb1c8ff53a7ee0b56d8df78658cdd53c32254c96fd"}, 0xb9) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000740)={0x30}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000100)=""/103, &(0x7f0000000000)=0x67) write$uinput_user_dev(r0, &(0x7f0000000780)={'syz0\x00', {0x3, 0xfff, 0x1ff, 0x40}, 0x27, [0x3f395aa0, 0x6, 0x8, 0x1, 0x3dffcbde, 0x1, 0x5663, 0xffff, 0x6, 0x1, 0x7, 0xea, 0x2, 0x6, 0x8, 0x4, 0x7, 0x8001, 0x0, 0x3, 0x8, 0x9, 0x8, 0x735, 0x8, 0xffffffff, 0x9, 0xa, 0x628db221, 0x6, 0x10001, 0xd, 0x3, 0x4, 0x3, 0x7c9, 0xffff, 0x2, 0x2, 0x7, 0x0, 0x9, 0x10001, 0xffd4, 0x0, 0xc, 0xff, 0x7, 0x7, 0xe, 0x9, 0x27b00, 0x6bb, 0x1, 0x8, 0x8, 0xd, 0x9, 0x3, 0x0, 0x1, 0x5, 0x1ff, 0x7], [0x8, 0xffffffff, 0x4970, 0xf, 0x0, 0x6, 0xb3a, 0x2, 0x9, 0x11f, 0x8, 0xec, 0x8, 0x1, 0x1, 0x7, 0x5, 0xffffffff, 0xfff, 0x8001, 0x4, 0x2, 0x7, 0x3, 0xc3a3, 0x40, 0x9, 0x96, 0x4, 0x9, 0x712, 0x848e, 0x6, 0xffff, 0x7fffffff, 0x6, 0xd8, 0x401, 0x2, 0x7fff, 0x10000000, 0xc, 0x7, 0x3, 0x10000, 0x10, 0x5, 0x3, 0x7, 0xe767, 0x7fffffff, 0x5f9, 0xa43, 0x4, 0x9, 0x7, 0xe000, 0x5, 0x40, 0x0, 0x69, 0x4, 0x7, 0x3], [0xffff54b0, 0xff, 0x80, 0x4, 0x6, 0x65, 0x24, 0x4, 0x9, 0x8001, 0x800, 0x136d, 0xe, 0x1, 0x3, 0x7, 0x6, 0x80, 0x3, 0x7, 0x3, 0x5, 0x0, 0x2511, 0x2, 0x6, 0x3, 0x7, 0x100, 0x4, 0xff, 0x1, 0x1, 0x8da, 0x9, 0xb84c, 0x0, 0x3, 0x10001, 0x3, 0x1ff, 0x9, 0x101, 0x9, 0x9, 0xfffffff9, 0x1, 0xf3, 0x3, 0x3ff, 0xa, 0x8, 0x6, 0x58d, 0x0, 0x2, 0x0, 0xfffffffd, 0x3, 0x8000, 0x9, 0x0, 0x4, 0x6], [0xd70c, 0xfffffffe, 0x27, 0x2, 0x7, 0x7, 0x2, 0xfffffff9, 0xde, 0x7, 0xa115, 0x3, 0x7ff, 0x42f4, 0x3, 0x101, 0x3, 0x0, 0x281, 0x305, 0x1, 0x7, 0x8, 0x2, 0x0, 0x0, 0x8, 0x4, 0x8, 0xce, 0x4, 0x8, 0x1, 0x0, 0x6000000, 0x2fbebfff, 0xbff, 0x1b24, 0x200, 0x4, 0x2, 0xc, 0x0, 0xece, 0x3, 0x8, 0x3, 0x0, 0x0, 0xe, 0x5, 0x9, 0x7, 0xff, 0xbb, 0x7, 0x800, 0x2, 0xbbc, 0x6, 0x646d, 0x4, 0x9, 0x6]}, 0x45c) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x0, 0xf4, 0x40000}, 0x20) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./cgroup/file0\x00', &(0x7f0000000040)='nfs\x00', 0x40a, 0x0) 8m54.203808402s ago: executing program 2 (id=2413): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f0000000080)='./bus\x00', 0x4001610c2, 0x766c618eb221465a) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r2, 0x24, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x9, r3}) r4 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r4) tkill(r4, 0x40) ptrace(0x4208, r4) capset(&(0x7f0000000080)={0x20071026, r4}, &(0x7f0000000300)={0x200000, 0x200000, 0xfffffffe, 0x0, 0x81, 0x7}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0xa4000608) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8923, &(0x7f0000000080)={'wlan0\x00', @multicast}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b78e0000", @ANYRES16, @ANYRES32, @ANYRES32=r9, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000101000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000005000300030000000800040001"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, 0x0, &(0x7f00000001c0)={0x10004, 0x100, 0x1, 0x3}) 8m53.979472927s ago: executing program 2 (id=2415): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x6ff9) 8m53.626380296s ago: executing program 2 (id=2418): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="fadc6939851a0c6481a159bec2056cf913e60e3b10777554de2e5f6904f331bdc29e370afca1058f3bd03afbc80adb03febe6183b67321ec7fe6b0f0784262a74f5612329b84cf30aac8b48626c5426020ec6b6bc1dbdc79448f28a8fd0d3646"], 0x18}, 0x1, 0x0, 0x0, 0x8015}, 0x722121421f91d838) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000000c0)}, 0x6}, {{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x10002}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000004ac0)=""/4087, 0xff7}, {&(0x7f0000000540)=""/215, 0xd7}, {&(0x7f0000000780)=""/118, 0x76}, {&(0x7f0000003a80)=""/4105, 0x1009}, {&(0x7f0000000380)=""/163, 0xa3}], 0x5}, 0x88a}, {{0x0, 0x0, 0x0}, 0x80000003}], 0x5, 0x40008042, 0x0) (async, rerun: 64) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) (async, rerun: 64) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @bcast}, [@null, @bcast, @default, @rose, @default, @remote, @null, @rose]}, &(0x7f00000000c0)=0x48) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f00000001c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default}) 8m53.337584232s ago: executing program 33 (id=2418): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="fadc6939851a0c6481a159bec2056cf913e60e3b10777554de2e5f6904f331bdc29e370afca1058f3bd03afbc80adb03febe6183b67321ec7fe6b0f0784262a74f5612329b84cf30aac8b48626c5426020ec6b6bc1dbdc79448f28a8fd0d3646"], 0x18}, 0x1, 0x0, 0x0, 0x8015}, 0x722121421f91d838) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000000c0)}, 0x6}, {{0x0, 0x0, 0x0}, 0xfc}, {{0x0, 0x0, 0x0}, 0x10002}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000004ac0)=""/4087, 0xff7}, {&(0x7f0000000540)=""/215, 0xd7}, {&(0x7f0000000780)=""/118, 0x76}, {&(0x7f0000003a80)=""/4105, 0x1009}, {&(0x7f0000000380)=""/163, 0xa3}], 0x5}, 0x88a}, {{0x0, 0x0, 0x0}, 0x80000003}], 0x5, 0x40008042, 0x0) (async, rerun: 64) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) (async, rerun: 64) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @bcast}, [@null, @bcast, @default, @rose, @default, @remote, @null, @rose]}, &(0x7f00000000c0)=0x48) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f00000001c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default}) 8m39.719065109s ago: executing program 34 (id=2410): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200008000000010902120001000000000904"], 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './cgroup/file0', [{0x20, '/dev/sr0\x00'}, {0x20, 'devices.list\x00'}, {0x20, '!\\&\''}], 0xa, "b6fec6b450dc10e3c831b06707e677ed229bfc392027b83ef0127823dca66c6321e6d75d7cd536945eb4911d413d19b0efc86372d64f6aa05bbf0bfe6fc2fccb9817916e08eaaffa11c31a9e2d71f312fd05bf0c8d6bc4a928e750c46bb2c86b266fd1ec42ac296c35e5e6285463531763b3123a55bb1c8ff53a7ee0b56d8df78658cdd53c32254c96fd"}, 0xb9) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000740)={0x30}, 0x30) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000100)=""/103, &(0x7f0000000000)=0x67) write$uinput_user_dev(r0, &(0x7f0000000780)={'syz0\x00', {0x3, 0xfff, 0x1ff, 0x40}, 0x27, [0x3f395aa0, 0x6, 0x8, 0x1, 0x3dffcbde, 0x1, 0x5663, 0xffff, 0x6, 0x1, 0x7, 0xea, 0x2, 0x6, 0x8, 0x4, 0x7, 0x8001, 0x0, 0x3, 0x8, 0x9, 0x8, 0x735, 0x8, 0xffffffff, 0x9, 0xa, 0x628db221, 0x6, 0x10001, 0xd, 0x3, 0x4, 0x3, 0x7c9, 0xffff, 0x2, 0x2, 0x7, 0x0, 0x9, 0x10001, 0xffd4, 0x0, 0xc, 0xff, 0x7, 0x7, 0xe, 0x9, 0x27b00, 0x6bb, 0x1, 0x8, 0x8, 0xd, 0x9, 0x3, 0x0, 0x1, 0x5, 0x1ff, 0x7], [0x8, 0xffffffff, 0x4970, 0xf, 0x0, 0x6, 0xb3a, 0x2, 0x9, 0x11f, 0x8, 0xec, 0x8, 0x1, 0x1, 0x7, 0x5, 0xffffffff, 0xfff, 0x8001, 0x4, 0x2, 0x7, 0x3, 0xc3a3, 0x40, 0x9, 0x96, 0x4, 0x9, 0x712, 0x848e, 0x6, 0xffff, 0x7fffffff, 0x6, 0xd8, 0x401, 0x2, 0x7fff, 0x10000000, 0xc, 0x7, 0x3, 0x10000, 0x10, 0x5, 0x3, 0x7, 0xe767, 0x7fffffff, 0x5f9, 0xa43, 0x4, 0x9, 0x7, 0xe000, 0x5, 0x40, 0x0, 0x69, 0x4, 0x7, 0x3], [0xffff54b0, 0xff, 0x80, 0x4, 0x6, 0x65, 0x24, 0x4, 0x9, 0x8001, 0x800, 0x136d, 0xe, 0x1, 0x3, 0x7, 0x6, 0x80, 0x3, 0x7, 0x3, 0x5, 0x0, 0x2511, 0x2, 0x6, 0x3, 0x7, 0x100, 0x4, 0xff, 0x1, 0x1, 0x8da, 0x9, 0xb84c, 0x0, 0x3, 0x10001, 0x3, 0x1ff, 0x9, 0x101, 0x9, 0x9, 0xfffffff9, 0x1, 0xf3, 0x3, 0x3ff, 0xa, 0x8, 0x6, 0x58d, 0x0, 0x2, 0x0, 0xfffffffd, 0x3, 0x8000, 0x9, 0x0, 0x4, 0x6], [0xd70c, 0xfffffffe, 0x27, 0x2, 0x7, 0x7, 0x2, 0xfffffff9, 0xde, 0x7, 0xa115, 0x3, 0x7ff, 0x42f4, 0x3, 0x101, 0x3, 0x0, 0x281, 0x305, 0x1, 0x7, 0x8, 0x2, 0x0, 0x0, 0x8, 0x4, 0x8, 0xce, 0x4, 0x8, 0x1, 0x0, 0x6000000, 0x2fbebfff, 0xbff, 0x1b24, 0x200, 0x4, 0x2, 0xc, 0x0, 0xece, 0x3, 0x8, 0x3, 0x0, 0x0, 0xe, 0x5, 0x9, 0x7, 0xff, 0xbb, 0x7, 0x800, 0x2, 0xbbc, 0x6, 0x646d, 0x4, 0x9, 0x6]}, 0x45c) mount_setattr(0xffffffffffffffff, 0x0, 0x8100, &(0x7f0000000300)={0x0, 0xf4, 0x40000}, 0x20) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./cgroup/file0\x00', &(0x7f0000000040)='nfs\x00', 0x40a, 0x0) 8m28.712360435s ago: executing program 5 (id=2504): ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000005740)={{0x0, 0x0, 0x80, {0x0, 0x8081000}}, "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", "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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x2, 0x2, 0xdddd1000, 0x1000, &(0x7f0000093000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x700000000000000) 8m28.457368628s ago: executing program 5 (id=2505): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r0, 0x9a035000) lseek(r0, 0x800000008401, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) ioctl$AUTOFS_IOC_FAIL(r1, 0x40187542, 0x200000000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000000140)={0x18, 0x0, r2, {0x5}}, 0x18) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x1000042, &(0x7f0000000080)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000100)='./bus\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r3, 0x4, 0x0) r4 = dup(r3) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x5}) 8m28.328722333s ago: executing program 5 (id=2506): pipe2(&(0x7f0000000000), 0x80) (async, rerun: 64) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x78, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfdfffffd, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x5, 0xb, 0x3, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1002, 0xa2, 0x7, 0x953a, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x149, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0x226, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) (async) r3 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) (async) pipe2(&(0x7f0000000080), 0x80800) (async) mmap(&(0x7f00001fd000/0x2000)=nil, 0x2000, 0x1000000, 0x13, r1, 0xd0f01000) 8m27.979697214s ago: executing program 5 (id=2508): mkdir(&(0x7f0000000040)='./file1\x00', 0x86) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14, r3, 0x615, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0xc040) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000240)="a9", 0x1, 0x0, 0x0, 0x2}]) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, 0x0) setpgid(0x0, r4) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) 8m27.360082428s ago: executing program 5 (id=2509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300b042051cd6b16c138d534c2a62f06da456f3172dfe1738c37b9070aae12eb00b890b58c9e1f027f1457820c38983d216ae3c5bb25bb04ae95bbffef861c43c43c6c7be08356d3f6d981f226c01a02f68ee161f4a88817ecc4aee43da246781ee0000000000", @ANYRES64=r0, @ANYBLOB="08005a8004002080"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000229000/0x3000)=nil) ptrace(0x10, 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002200)='/sys/kernel/profiling', 0x2, 0x142) write$binfmt_misc(r3, &(0x7f0000004080)='k', 0x1) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, r1, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x3}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004}, 0x40800) r4 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000001540)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x80, 0x0}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = syz_open_dev$vcsn(&(0x7f0000000180), 0x1, 0x0) read$FUSE(r5, 0x0, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r6, r6, &(0x7f0000000000), 0x1ff) sendfile(r6, r6, 0x0, 0x7ffff000) 8m27.096548203s ago: executing program 5 (id=2511): syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d"], 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f47"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101800, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES16=r0, @ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0xc4}, 0x8001) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}]) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x891e, &(0x7f0000000180)={'virt_wifi0\x00', @ifru_settings={0x6, 0x8, @fr_pvc_info=0x0}}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x10, 0x6, @link_local}, 0x14) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x4002004c4, 0xffe, 0x0, 0x0, 0x0, 0x900f, 0x0, 0xd57b, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 8m26.601299083s ago: executing program 35 (id=2511): syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d"], 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f47"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101800, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5c0200007ff77366d13ca292efce94661ede3b114ffa2b50b5e39d4463565c88abab809baa9158b0a989d21ead04e41bac1798352691b0f1a5bb48179769e45a147de8d379f6a7bbc8d7de54efbf161f0e9e1a1e832ddba211ee6d3ec8c5de1a446a015abd08b82bdc5eb119c421a2f0580e1851538634f10e1df28b3351aca63c5deb9e82addc78aa78e1bf9de60a0cbd602bfaa908eb00443784dd7c4c14b7439acd74cb027e4e445411637457a7ce51f244354037f8fee2898e423310ceb7a9ce9d7014834b321f180f8cfcd22b268c773dfac15cfef0bc4222a33deeae278a362226f71f897a3a64d015aaf2c183b6d438ee835e0147c701c47e63170f5052f877e849432a4b9257824e711c14e334679c10c34c8d55f94295e1f510bc3b3dd523fbbd45c8212013ce3d5cfa4013115dd63c5d643cab05e3ba7440c56c7498d996cbbb32c882", @ANYRES16=r0, @ANYBLOB="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"], 0x25c}, 0x1, 0x0, 0x0, 0xc4}, 0x8001) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r4, 0x0}]) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x80000) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r6, 0x891e, &(0x7f0000000180)={'virt_wifi0\x00', @ifru_settings={0x6, 0x8, @fr_pvc_info=0x0}}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x10, 0x6, @link_local}, 0x14) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x4002004c4, 0xffe, 0x0, 0x0, 0x0, 0x900f, 0x0, 0xd57b, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r9, 0x112, 0x8, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 8m16.345689981s ago: executing program 7 (id=2512): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r2, &(0x7f0000000340)="896102aecdfcc44f", 0xfdef, 0x2, 0x200000000000000, 0xf400}]) 8m12.744118495s ago: executing program 7 (id=2555): mkdir(&(0x7f0000000e40)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000640)='./file0\x00') r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0db7) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x81, 0x6bb1}) fchown(r0, 0xffffffffffffffff, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40080c4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) process_vm_writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/248, 0xf8}], 0x1, &(0x7f0000000480)=[{&(0x7f00000021c0)=""/4096, 0x1000}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000400)=ANY=[]) r4 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x0) mmap$snddsp_status(&(0x7f0000ffb000/0x4000)=nil, 0x1000, 0xb, 0x2012, r4, 0x82000000) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x201) ioctl$I2C_PEC(r6, 0x708, 0x7) pwritev2(r6, &(0x7f0000001b00), 0x0, 0x0, 0x0, 0x12) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0xffffffffffffffda, r5, {0x7, 0x29, 0x2009, 0xffffffff9002edc4, 0xfffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20301, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000080)=0x10000) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x12900, 0x22) faccessat(r8, &(0x7f00000001c0)='./file0\x00', 0x2) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000002c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x1}}, 0x30) 8m12.60960962s ago: executing program 7 (id=2556): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3, 0x62, 0x7, {0x0, 0x2710}, {}, {0x2, 0x0, 0x1}, 0x1, @can={{0x0, 0x1, 0x0, 0x1}, 0x6, 0x3, 0x0, 0x0, "557373a6468da0e7"}}, 0x48}, 0x1, 0x0, 0x0, 0x4044045}, 0x20000800) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) 8m10.869470366s ago: executing program 7 (id=2562): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa}}, './cgroup/file0\x00'}) connect$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @private=0xa010101, 0x2}, 0x10) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) 8m10.274969938s ago: executing program 36 (id=2562): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa}}, './cgroup/file0\x00'}) connect$l2tp(r0, &(0x7f00000000c0)={0x2, 0x0, @private=0xa010101, 0x2}, 0x10) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) 1m31.739340339s ago: executing program 0 (id=4633): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1m29.395630864s ago: executing program 0 (id=4642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1m29.126931843s ago: executing program 0 (id=4638): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 1m28.969795163s ago: executing program 0 (id=4641): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) epoll_create1(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r3, @ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x1}, 0x40) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, '\x00', "a5fdeb69a751e94df53ad7e900de4c164e071a0000000000007b443803cf578f", '\x00', "066580001e00"}, 0x38) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @private=0xa010101}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x882, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0xfffffffffffffffe, 0x0, 0xfffffffe, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000006c0)=0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r8) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x40, @broadcast}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000035d2fa9a6ae351f85828f897418cb82e113b6881ed0de9116997b2b865e5ab1c694c6a59243ac6e1885a191fc151b7e252cfad922c9b70b2220554042193ce78e4c5ff3e887a1b1928148c550bac7872047acb641107cd2b785e0165038ee2dc1176259b9c39a805c4b1c9df7a138be58ed340920ef263195437fe9a425daf8a2f4861cf6aa809e9041a12a775eb8ad4374dbc284d995476080e77ec5e11892ecaf6bffdbe95272d07b1c1ab6955f59ba23e5ab01fe69cb4e25ef4c271f2182a3a8b550d8e1994d094132fa39b354e97c998189f8b347050334ca805", @ANYRES16=r9, @ANYBLOB="010000000000000000000700000014000800000000000000000000000000000000000500140000000000"], 0x30}}, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r7, 0x7c80, 0x0) write$FUSE_INIT(r4, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x14c0348, 0x800, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}}, 0x50) r12 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r12, 0x4004092b, 0x8) 1m28.811903064s ago: executing program 0 (id=4645): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = fsopen(&(0x7f00000000c0)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='dax\x00', &(0x7f0000000040)='\x00\x80', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r2], 0x3c}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000780)={0x5b4, r3, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x3e}}}}, [@NL80211_ATTR_IE={0x203, 0x2a, [@perr={0x84, 0x35, {0x1, 0x3, [{{0x0, 0x1}, @device_a, 0x6, @value, 0x42}, {{}, @device_b, 0x3, @void, 0x32}, {{0x0, 0x1}, @device_a, 0xa47, @value, 0x83}]}}, @preq={0x82, 0x78, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x7, 0x40, 0xbfa6, @device_b, 0x1, @value, 0x7, 0x4, 0x8, [{{0x1, 0x0, 0x1}, @device_b, 0x4}, {{}, @device_b, 0x144eac5d}, {{}, @device_a, 0x8}, {{0x0, 0x0, 0x1}, @broadcast, 0x3}, {{0x0, 0x0, 0x1}, @device_b, 0x4}, {{}, @device_b, 0x5}, {{0x0, 0x0, 0x1}, @device_a, 0x9}, {{}, @device_b, 0xa}]}}, @random_vendor={0xdd, 0xdf, "b05d33f8da041c3f4c70008c319bb01fb55965c1d8b95f8728e1346f39bc723e0c5076e89b48edebae90d7d712cdf451adaef9fb095c8f027d79880cf287b720c72db6eee499db1858702e15f3468887fd6b1c141e63458d5adc431411a3d533a4beb40322d0467f81191b154e83d2c25de0c9289bbdb7cb0d2096ae98367331f8cef7fe357f21f99ea895857a9fb7388e4a403241396537b860452aacfb08c85e9333ba98dd34eadb40e2ac3a91bca7b7bbf57bd8eb04007f3ee2a92da42d10f257a4af62518edb937df3c02e41793caae31bf74c4148f70f658fb510dccf"}, @tim={0x5, 0x66, {0x9, 0x59, 0x3, "2966ae3d3f4f04787da248a31280090ce7f499d31115f0dc4afc4a1cd8304f2dcaf6d386bb696500ee08b36a0da201d28c7dbfb6a54bc6c993d3770882c09bcb0b580cdb967256bd67d2cd91c0c07b30dc18e6508dde50645a800513119177b102908b"}}, @channel_switch={0x25, 0x3, {0x1, 0x7, 0xfb}}]}, @NL80211_ATTR_IE={0x9b, 0x2a, [@ibss={0x6, 0x2, 0x6b1}, @preq={0x82, 0x72, {{0x1, 0x0, 0x1}, 0x9, 0x2, 0xfffff000, @device_a, 0x4, @void, 0x4, 0x2b05, 0x8, [{{}, @device_b, 0x8}, {{0x1, 0x0, 0x1}, @broadcast, 0x1}, {{0x1, 0x0, 0x1}, @broadcast, 0xd4}, {{}, @device_b, 0x3}, {{0x1, 0x0, 0x1}, @device_a, 0x5}, {{}, @device_a, 0x5}, {{0x1, 0x0, 0x1}, @broadcast, 0x2}, {{}, @broadcast, 0x8b1}]}}, @tim={0x5, 0x17, {0x82, 0x25, 0x4, "15643ade6f16975331f4de266a0008e743dfc197"}}, @chsw_timing={0x68, 0x4, {0x7, 0x38}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@erp={0x2a, 0x1, {0x1}}, @random={0xc6, 0x96, "75df67fdc0239efc68f29366ae1e23e1e3bc8003ddf20718d6db3e450b6a7fdfdb7e52838bc2b43a77918acd2261402e53c129542e2c9c384b8033ee1077b49209abe51667f26e72b749cc497beea69903ce2db8544f569948336a9d815ea0c35d481dbaf862e827b0c85c4af4e4b2d07b6e5b3be44ea7c2bf112deca84ee797465a9017312db7235b285735fac4718d648d40cb245a"}, @chsw_timing={0x68, 0x4, {0x6, 0x7}}, @challenge={0x10, 0x1, 0x2e}, @mesh_config={0x71, 0x7, {0x1, 0x1, 0x1, 0x0, 0x1, 0x9, 0x2b}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_IE={0x174, 0x2a, [@peer_mgmt={0x75, 0x14, {0x0, 0x720, @void, @void, @val="7256cdfe346ebeb0fb387bafe4a25eec"}}, @rann={0x7e, 0x15, {{0x1, 0x39}, 0x10, 0x0, @device_b, 0x3, 0x9a}}, @peer_mgmt={0x75, 0x8, {0x1, 0x2, @val=0x7, @val=0x3d, @void}}, @mesh_id={0x72, 0x6}, @mesh_chsw={0x76, 0x6, {0x3, 0x3, 0x37, 0x4}}, @fast_bss_trans={0x37, 0x127, {0x0, 0x9, "928f3e4ab2991101cb07b3d4c8599fb3", "e7d48f55c209d06a5ef1f347d169f195aa392c162a511335d8ec47174bfe1638", "7c66ade82cac8762880d7ee91efff914ef8c3aa701e5cef9e5057f370efc5ae6", [{0x1, 0x11, "f7aadc42f71d89998c7f4d9fdff0d3c0b9"}, {0x1, 0x16, "60fd297925729580a31c12da07c45ee4efc8e1631e5d"}, {0x2, 0x25, "9d25ffef1b89ee202f294de51bfb4062f2c463f668c3bbe31d67a08aa6793a1441fe36c3bb"}, {0x3, 0xe, "61d7732079bfef33555ceb55584e"}, {0x4, 0x1c, "7415c3c2ac933c9cee0671a20f80b538837e938fc857b7e41f4e70b2"}, {0x1, 0x8, "c98eca050fae512f"}, {0x4, 0x6, "ad7006a6ae96"}, {0x4, 0x1e, "2c1fac9b20bf8bdedda3ca9788f2d69321090110aee73de988ec4b704a60"}, {0x2, 0x21, "de11270097da213e47405f111733365a6a25b11c4e95bf86518884f44a2d8f0f19"}]}}]}, @NL80211_ATTR_IE={0xb1, 0x2a, [@fast_bss_trans={0x37, 0x68, {0xd2, 0x1, "fac2ffd93eee8cfcbae222b6848ae491", "35e0de7c548c1597601eec07ce57772b2c61085156c37789633439dec5c26597", "a05bca3fb00c827cfd6d17e91794ea56758648539ac62a1be9291765d98b4f21", [{0x1, 0x14, "5b98feb7a066cf5d725ee39ce3d473bde40feb81"}]}}, @channel_switch={0x25, 0x3, {0x0, 0x6c, 0x59}}, @ssid={0x0, 0xd, @random="ae58fdc2f50867c56b37365735"}, @peer_mgmt={0x75, 0x6, {0x1, 0x7, @void, @val=0x21, @void}}, @gcr_ga={0xbd, 0x6}, @gcr_ga={0xbd, 0x6, @device_b}, @link_id={0x65, 0x12, {@random="db6029f12fd8", @device_b, @broadcast}}, @sec_chan_ofs={0x3e, 0x1, 0x1}]}]}, 0x5b4}, 0x1, 0x0, 0x0, 0x44005}, 0x24040015) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r6, 0x7ab, &(0x7f0000000040)={&(0x7f00000002c0)={{@host, 0x9}, {@any, 0x3}, 0x400, "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"}, 0x418, 0x2}) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 1m28.743008455s ago: executing program 0 (id=4646): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000270001000000000000000000030100800c0000000000000000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) getpeername(r0, &(0x7f00000000c0)=@caif, &(0x7f00000001c0)=0x80) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000002a80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x16c0, 0x5e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x7, 0x2a, 0x1, {0x22, 0xcba}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfb, 0x7f, 0x3}}}}}]}}]}}, &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$video4linux(&(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0305602, &(0x7f0000000540)={0x1, 0xe7}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000053c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000005480)={0x0, 0x8, 0x3cdb, {0x0, 0x10000}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x2208080, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_open_procfs$namespace(0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, 0x0) 1m13.221978969s ago: executing program 37 (id=4646): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="14010000270001000000000000000000030100800c0000000000000000000000140001"], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x0) getpeername(r0, &(0x7f00000000c0)=@caif, &(0x7f00000001c0)=0x80) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000002a80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x16c0, 0x5e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x7, 0x2a, 0x1, {0x22, 0xcba}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xfb, 0x7f, 0x3}}}}}]}}]}}, &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$video4linux(&(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0305602, &(0x7f0000000540)={0x1, 0xe7}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000053c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000005480)={0x0, 0x8, 0x3cdb, {0x0, 0x10000}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x2208080, 0x0) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_open_procfs$namespace(0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(0xffffffffffffffff, 0x40044104, 0x0) 18.002212001s ago: executing program 8 (id=4973): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x84, @mcast1, 0x7fff}, 0x1c) pread64(r0, &(0x7f0000000080)=""/110, 0x88, 0x400) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 16.281272952s ago: executing program 8 (id=4983): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00'/10, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0xfffffffffffffcef) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x4880) socket$kcm(0x10, 0x2, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) prctl$PR_GET_TIMERSLACK(0x1e) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="f0000000100007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a0002007000000000000000836716c5b4fde456f858547a2258a25cb400"], 0xf0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000", @ANYRES32=0xee00], 0x104}}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)={0x14, 0x16, 0xf15, 0x0, 0x0, "", [@typed={0xc20}]}, 0x14}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x200c0841}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r4, 0x1) ioctl$int_in(r4, 0x5452, &(0x7f0000000300)=0x208) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f0000000180), 0x4) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r6, 0xc0bc5351, &(0x7f0000000d40)={0x55, 0x0, 'client1\x00', 0x0, "2cd367818b4014ff", "859e92f118c4484604734b1d43209426c1bd711b936fc2c4d28f902e94f8e647"}) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00') write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000002c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x1}}, 0x30) 16.096940664s ago: executing program 8 (id=4984): syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 14.782039039s ago: executing program 8 (id=4985): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8) fcntl$getflags(r0, 0x11) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket(0x10, 0x3, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8000000, 0x9, 0x800000, 0x0, 0x7ffffffe}, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000140)=r1) 13.781629314s ago: executing program 8 (id=4987): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d399a11a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000810000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fe17000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x0, 0x0, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r4, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) lseek(r2, 0x81, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000480)={0xf8, r5, 0x20, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'macvtap0\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ca5c2eeb7b03e54e21da5e67c3b716d10e02343f6effdbae"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "8fab702523ed29a850a144dd6a4a83bde6f07a21a87a7020"}], @NL80211_ATTR_MESH_ID={0xa}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40811) 10.452224341s ago: executing program 8 (id=4992): socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, 0x4, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8000}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2a83}, @CTA_TIMEOUT_UDP_REPLIED={0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x20008840) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r3, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x9, 0xb1, 0x1]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x120, r4, 0x200, 0x70bd29, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x120}, 0x1, 0x0, 0x0, 0x4c040}, 0x44000) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r5, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10010000}, 0x240488c4) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r5, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10010000}, 0x240488c4) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000680)) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000006c0)={{0x4, @empty, 0x4e23, 0x0, 'lc\x00', 0x1, 0xd15, 0x24}, {@private=0xa010100, 0x4e20, 0x10000, 0x4c6a169a, 0x3, 0x3ff}}, 0x44) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f00000006c0)={{0x4, @empty, 0x4e23, 0x0, 'lc\x00', 0x1, 0xd15, 0x24}, {@private=0xa010100, 0x4e20, 0x10000, 0x4c6a169a, 0x3, 0x3ff}}, 0x44) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x6c, r4, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r2) r7 = syz_usb_connect$uac1(0x4, 0xe1, &(0x7f00000008c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf, 0x3, 0x1, 0x4, 0x100, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x2}, [@selector_unit={0x9, 0x24, 0x5, 0x6, 0x1, '0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r9, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x34, r5, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x48800) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001d80), 0x2, 0x0) (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001d80), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000001e80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x14, 0x2b, 0x200, 0x70bd25, 0x25dfdbfe, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x50) 4.382948548s ago: executing program 9 (id=5005): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0xa373c929d22dfb1b, 0x0) r0 = fsopen(&(0x7f0000000000)='ext2\x00', 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r2 = memfd_secret(0x80000) read$hiddev(r2, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='/dev/udmabuf\x00', &(0x7f0000000100)='ext2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000180)=ANY=[@ANYBLOB="6d616e676c6500000000000000000000000000000000000000000000000000000400"/104], 0x68) 4.28040239s ago: executing program 9 (id=5006): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000011c0)=ANY=[@ANYBLOB="01000000000000004503"]) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 4.166802618s ago: executing program 9 (id=5007): mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) open$dir(&(0x7f00000000c0)='\x00', 0x2000, 0x4) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000180)={0x240000, 0x8, 0xc}, 0x18) clock_settime(0x0, &(0x7f00000000c0)={0x7, 0xffffffff000}) move_mount(r0, &(0x7f0000000200)='./cgroup\x00', r0, &(0x7f00000001c0)='./cgroup\x00', 0x103) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) (async) open$dir(&(0x7f00000000c0)='\x00', 0x2000, 0x4) (async) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000180)={0x240000, 0x8, 0xc}, 0x18) (async) clock_settime(0x0, &(0x7f00000000c0)={0x7, 0xffffffff000}) (async) move_mount(r0, &(0x7f0000000200)='./cgroup\x00', r0, &(0x7f00000001c0)='./cgroup\x00', 0x103) (async) 4.086623657s ago: executing program 9 (id=5008): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d0d, &(0x7f0000000480)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r1, &(0x7f0000000000), 0x12) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x1) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) chown(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f00000001c0), 0x80080) signalfd(0xffffffffffffffff, &(0x7f0000000280)={[0x3]}, 0x8) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1000, 0x103) mount$9p_fd(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB=',wfdno=', @ANYRESHEX]) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0x17) 4.026656596s ago: executing program 9 (id=5009): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022d00010000000009040000050300020009210000330122050009058103"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r3 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000a40)=[{{&(0x7f00000001c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000700)=[{&(0x7f00000007c0)="19239e62f4552804739d9bcdfc484810b2f82bddf39c93dca4c876269c91e4e21b447b2e53703a82c34ab3edbefcd993ca472106ec9aee446cf2d274fceff8874ce529fd53046f99523746a0a00e8a6069c7ac4bcb5ca494d273468bb432e9a62bc823cc34b618f6766639ee7961ccae25520492e3a338a55c63d4459474aa7c9692b3d50f40f2f1d5291b14fabfe77075fa4f2659e55f21a9da50b31193898e8485583df6a7e453e4b77a78d877a05e5f2c1b982193cc", 0xb7}, {&(0x7f0000001640)="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", 0x50e}], 0x2}}], 0x1, 0x4004040) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r4, @ANYBLOB="0a0006000802110000010000050074"], 0x84}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r5 = syz_usb_connect$uac1(0x2, 0xc3, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0x6, 0xc0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x5}, [@mixer_unit={0x5, 0x24, 0x4, 0x5, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x40, 0x0, "8e1ec880914e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x9, 0x40, 0xfe, {0x7, 0x25, 0x1, 0x80, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x3, 0x4, 0x8, 0x9, "bd1d07718cd6"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x81, 0x9, 0x43, "b48f8584fed8b5"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x82, 0x4, 0xf, 0xe9, '.p'}, @as_header={0x7, 0x24, 0x1, 0x2, 0x4, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xff, 0x3, 0x5, "06abbde9790b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xe, 0x10, 0x7e, {0x7, 0x25, 0x1, 0x80, 0x1, 0x6}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x3, 0x5, 0x8, 0x20, 0x38}, 0xc2, &(0x7f00000003c0)={0x5, 0xf, 0xc2, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x4, 0xff, 0x8000}, @generic={0x84, 0x10, 0x1, "2c94806d4cab53f1417bb74833935f99f56a2f610be09b9dcc3932b38086f77f09d7f9ac402654a9e5d381a11bcfb6b28ef115783719c90b1cf34539a9ea4559aaa77066325665737981e2cbe5b3191dd3af35110f4e90a5116cba5252124e0a6fdc6f9e37c28674f3cc779eb0301779dcac7988d1e97abb3bacbb0a0800f60146"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x1, 0x0, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x24, "1e1a5d3815dad2fda3cb19abedfeef85"}, @ss_container_id={0x14, 0x10, 0x4, 0x8a, "1f409d24bd606e50f2c40f9cc0fdaa64"}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x44f}}, {0xcc, &(0x7f0000000580)=@string={0xcc, 0x3, "67e5a0f35926f7e449351555fa57de6fd7ef54355c8359a9883d1b82d2b2e4ba1425558e581817d77cb738dddff28c26f0e125fc52636a36d3732dcd5df316a68af420c7d7d2c80844d515e208c7e50a764b44d812861d90f5aa928dd48cdb68c5ae56ce3ddfa32a264841acba9509862190b556d36bc8a1e07a2165cbeff9dff00ab72046612e8a0fd9147d754b4982ca12c68d78a9a673cd06dfd4a7b6ea890793075f95cccbb15e3c839f625ce3315d37d8421d48e0afc7a4e15e8f9737a24912867930fb3df9e957"}}, {0x6f, &(0x7f0000000680)=@string={0x6f, 0x3, "617f8de73f920ea4f1af07de7a97d99fbc041327f578a5d3678a7d7c3aec04ddf066e7aa8d8e588237b50c513d0443c920d92b3d92ffe81917491769788c80945f50e9864fbad35fd1b5cec240edd75e04fb989f18390e59187d4efb201e1b774ad2a47b37eaabe981e495f8fa"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x140c}}, {0x18, &(0x7f0000000740)=@string={0x18, 0x3, "f5177e808df14e67182e231db6b0f1009eba06627f8e"}}]}) syz_usb_control_io$uac1(r5, &(0x7f0000000a00)={0x14, &(0x7f0000000900)={0x0, 0x22, 0xf7, {0xf7, 0xf, "61313e6786a38ef8efbac8041259da7903c11689ce9be42b10f62a71060d0ea1d2179a4cd132856e687af48d23054344de802be51f964cf941f9309ef3d6ddd980e8dc3e32ec678900b19b8163ec2d98179975ad3d7a2b1e7cc6322609714b51c4c2ed9c16c294684415af5617bc075596108af2259e53f9e560b640b976bae9351162427806f46d1656047e035929b475d6c66a222357499861832db653ee3a6d1d9e320a36f43e9d8017efb1beb625697b246edaca7663edf29b928aecdd9d26ed39d7f93b6b32e5fb5807036650ea123e693ad94fa54901ca2a1e085259686a26de7f6151a33d473b78628b434d3158c5c58a03"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}}, &(0x7f0000000c80)={0x44, &(0x7f0000000a80)={0x0, 0x5, 0x4, "2a43a55a"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000000b40)={0x20, 0x81, 0x2, "0692"}, &(0x7f0000000b80)={0x20, 0x82, 0x1, "ba"}, &(0x7f0000000bc0)={0x20, 0x83, 0x2, "6af3"}, &(0x7f0000000c00)={0x20, 0x84, 0x3, "2dfee4"}, &(0x7f0000000c40)={0x20, 0x85, 0x3, "e9be25"}}) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="400e3d0000003d1060d4115e4a6b086995dbb816a4f923936b455bd612c103dd040379d2ea130943c7f66cf35f3e08b761c536de90cd5c4274954a0c063c8d4fc851204a6ea2bd449644e9448512e0"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r6, 0x80284504, &(0x7f0000000040)=""/95) 3.618943379s ago: executing program 6 (id=5012): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) syz_open_dev$evdev(&(0x7f0000001640), 0x0, 0x80a80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xff95, {}, {}, @raw32}], 0xffc8) 3.487591893s ago: executing program 6 (id=5013): r0 = getpid() syz_pidfd_open(r0, 0x0) syz_open_procfs(r0, &(0x7f0000000040)='net/icmp6\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) 3.442457043s ago: executing program 6 (id=5014): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10000030) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8890}, 0x400c0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) write$binfmt_misc(r4, &(0x7f0000000000), 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000003c0)={0xbc, 0x0, 0x1}) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = syz_usb_connect(0x1, 0x36, &(0x7f0000000440)=ANY=[], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r9) writev(r8, &(0x7f00000008c0)=[{&(0x7f00000002c0)="a3", 0x1}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_KEYBIT(r10, 0x40045565, 0x4000000000001d7) r11 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a00, 0x0) r12 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffd000/0x3000)=nil) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r11, 0x80045400, &(0x7f0000000180)) shmat(r12, &(0x7f0000ffc000/0x3000)=nil, 0x4000) r13 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(r13, 0x0, 0x40000000, 0x0) remap_file_pages(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x0, 0x0) 3.205363221s ago: executing program 4 (id=5015): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='map_files\x00') getdents(r1, &(0x7f0000000100)=""/117, 0x75) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) getdents64(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$KDGETKEYCODE(r2, 0x4b4c, 0x0) rmdir(&(0x7f0000000200)='./file0\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="b8010000000f01d9c7442400ef000000c74424027a000000c7442406000000000f01142466bad004ed0fc79e7b1300000f01c5f436640f019d00003892cb0f01c1b9b70b00000f320fbce7", 0x4b}], 0x1, 0x5, &(0x7f00000002c0)=[@cstype0={0x4, 0x4}], 0x1) dup3(r0, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r5, r6}}}], 0x20, 0x40044}}], 0x1, 0x4) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r8) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r10) setreuid(r10, 0xee00) setresuid(r6, r8, r10) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000004000000000a0060603b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000070000000000040000000000000000000000000000000000000000000000d4339ed3000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000080000200"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40}, {0x1, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 3.092370665s ago: executing program 4 (id=5016): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000004300e7ef7f000000000000e100a197", 0x13, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 3.072823979s ago: executing program 4 (id=5017): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12, 0x5800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x30, 0x2c, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0xd93f, {0x4, 0x6, "074f94", 0xf08, 0x11, 0xb9e02c7ea3376920, @mcast2, @dev={0xfe, 0x80, '\x00', 0x12}}}}}}}, 0x66) 2.366052713s ago: executing program 4 (id=5018): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100480, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a, 0x0, 0x0, 0x1, [0x0, 0x1ff]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_macvtap\x00'}]}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xd8}}, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d549b, 0x0, [0x8000000000000001, 0x8, 0x0, 0x8, 0x10001, 0x80000000000002, 0x6, 0x10007ffffe]}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000080)="470f23fc6541fc48b8e7320000000000000f23d80f21f80f23e1f8f30f1edd0f2221c74c24022063800000002c24f30f556797c483fd005b02ea6426470f01cf65666466430f3833af00580000", 0x4d}], 0x1, 0x3e, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.164672612s ago: executing program 9 (id=5019): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000640)={0x20, 0x3, 0x4, "5905d900"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000840)={0x0, 0x30, 0x4, "ad972f8f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.571993004s ago: executing program 4 (id=5020): syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902"], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 304.18799ms ago: executing program 6 (id=5021): mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x2, 0x0) 276.93877ms ago: executing program 6 (id=5022): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000d80)=0x101, 0x4) sendto$inet6(r1, &(0x7f0000000000)='X', 0x1, 0x4000000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x80fe, @loopback}, 0x1c) 252.683202ms ago: executing program 4 (id=5023): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000940)=ANY=[@ANYBLOB="40be0000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c77, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fff, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfdfffffd, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x5, 0xb, 0x3, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000006, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1002, 0x8, 0x7, 0x953a, 0x5, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x3, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x149, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0x226, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a", 0xd5}], 0x1}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 0s ago: executing program 6 (id=5024): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0xffff, 0x401f, 0xffffffff}) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x29, 0x2, 0x0, 0x5d) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040c41090ea0000000000010902240001000000000904000001030000ed082100000001220700090581030000000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) writev(r3, &(0x7f00000024c0)=[{&(0x7f0000000180)="38f1b896f7f76295b19a2ed2d57878b68a95500905fc855ebe1953138cb59c078c3d5f17cce6780c0a0ad2bd6ce6a67c0fbc19d15dd2c547ff5fe166ea9d01f30d7f0c886cbc13a8980142d22d", 0x4d}, {&(0x7f00000003c0)="f50984fa8a3bc1eebf7efa8cf1eb5f5ab4b961ff57c4abafff5c2e41406dfb9e3686b2562712a0f5d6cfabe820233e6a4a1037f039e4e374ce92fd1b0853a769dddab0396eca3182003d1bef2003a8ce5edd970e8b9e3e48c3195757e3b92a3646f92968fe5e5d474f898f45a82d23fb162aed1e65bae2032fe1938f9a1660fae5fb239db3f9c3e3ecb3abdf1135788942c6eda530dace386ffb72984549c01222910da35b9ebd46ab7475bee61906700dc37eb946817f617956655345e3695f1296a09887a79ba57af9345cb58af34dc429ea6d86eb654119fa354df8d8305435eda398ac682534dadb755d2d311d9227b766a09f4e282efc74e40c70c3a0098afa4f632b528c5d5c911be708555460cbc402ac22d5a28afea44637e37ab3bd34194cbd1f4bf165727b531c793373a6d73e7f7877b74ef1d1b86e7caa76b444fc3319edef6a9f577a365f45e627b074e6b6b9b2477ecbad57f5dfe0f22b658f0d6c0abc00121bb1bc61d4104db640d46291b31be7ba0c816beb00aea9bca010e068ca4b5fc7c63ffc595e26e0c33e046d7526fb6466b4fc62732cd99f6533dd01ddcbb12065fd446d670a39385f80b77cc356a124f53c2f63de3275904c6f62b233b1fc7a825a6d6d87c3214778f04caf74a49efb1d8c79424a3ecbe6ce7c469006f4647db0efea8947eb0f9d7dddc7aadf34023a5a6734e276e3f711b3df83a10685aa1a356178bfe0384fff6211d8fb4391465b8de83ef78a64f15f810cdff51cce07a8a83460a452b7d2ed7f823ffa933019a49857fb704539c00220b08362f010dd4b3cfe4d51b21e5819ab6ac2c308bc85aa03123758bd098d9aea26a67e6ab043ed086d8a2c5282d1cc51851a486e6c6180acc11b0deba3147d4854765b14e7da2d88b0e25117d321d1e726ea2118590330423c94d2fa746679882d1cde1daf94c596e8b53a7d634cdd473492ba99ec57505fadc05dc5beeef36396c6b0a52c54ff813c8bb8f224dba2b447868d9f5117b75d868a4e00175e37a772d647d3125798bf01792ded2a50015e58bf0c7eab253e4ce85ee6fbdf31595e8fff59b88290a0f8a013a95835ca111824ed4720bfcb2c9997dace25347d3269c1236f9cdb18edf63362382ce71a7b53ced008e08954f20ee94d5ad99fb0ab1dd4b82d9e2cdd81c9cc32d7e5a366f11fb2d73ac890af2b746bfac235be8f1cbab4f4bd126ce8d737606fc973a412e2ee4bf16a8017d3198f926b2f7289654c7f0fb933952b8cad7212349661071c48f1ee2bb4da8d5e927c79829bbf937d97862b221e3a06486ecf99b6ca323f5b8d2afd13d297d0f613914440ab1a5e557742d641ffc456ec696b106a2132d50ca43338f85764c1140f0c03a877b9a1cd9742c528ee57eab1df7d9d82e3ad26f72276abe04c6dce77be4cbb63ed59c6c9b6353b599cd72fcc8b3b9055c5f1341891d9150bc3af59a785dc2703f1dccdc517807bd620f91d3a4d8707046292467bf523b57198143ad7367a7075ac77f7cde8f7995fd7fd450604e1f9729446e83d2d88e57e9761a06637e9feafa9bbddb51ad1a354debf73aae48ced2adbfa84bef12e93b0374e59c776c07558f92e640493efcd410e3888c07b4df037bde64577e5cebf094d64aecf24046e8279cf210a3cf874511bc4b7d89b90c9ca34ba18ad290148ef2bdbc0b04c8107f273d4bfd946b3d07b7e83dbbdfe801b70922deb2ba7fd5d1fb06c26d7992b861e55c5475255f9a9930c3e3fee9cc0ef54c04bda73b4be2de640475b1bf41b126f7c5813a0804f9389fefb02940da702f6e050a6a411eac8f6f3882f7f2b39fcee1a84df287b279fc6b1f0045929c268dff615b7707a5e0608767211d497d311560479f17d2268fafd44ab6cd29637f39d63d7c7f82c40b6a5dd82238352ed40df6d7478419bbd883e371af2415ed7fda808de86eecd3fbeeb749d8ba0447c66bb4f0f78b727b251034c136747bea922ae84e148e05762bfd621978d7ace649b4a105d96f095b986eca779423099f13746671c36132aefcfae1aac74e24d078b8c00f3493567ddf6060198c398e7acf0d16617e7a2c891a53bfc9557f54d91ec4be31c9238aab6b691b5dcf8d349ab5f1c7f5de18f4444255e6e999dd16a16428a1353c972f9e0e14b214790c9ea8ed1dda2bcb3a1cb7d636521cef1152651e8ad103fa61ee7e82cc7ba4a7599ea3ba31d20ef90845bb31ff72b730513652c6be09898e24eb33f87f5606124f0523556f4032b7113f4ce49476b13222b1f529ae0f62aa07e2d679a537d0d4eafbfe34205d0a28c091bb1c94cee90c2781e85dbee84d6a49d6f4816dee491d8d9274c80c84e968a6edbdd24ea1786eb9dc12e1fcf257bae31d8f0c196d4669e925cc8d63091f99bc4797a381e4e48e0791a98a1e10145d251e4cd43ad6e8d56596e3a32668785b23a63fa8d2e545b5f39585d04e9ffcb1c7a9196d2b3738456d2433dc8aa312894770769c004f564ac1dd8b72dd9eca0671e87b89540232572396234e177442c01f27442cf0c26e1f7dc4bf28045b16295f9559cf9e1e9fd8cf09642c27adbfc6a4d1b4408dc33e1210ec47159f9e26742e57d05472c366a61a1d354802b2b730b970ce026c83dbb7c180b64a5d34c16ccf163875847426da830d222487b319dceb268f55e8edcad8c79e8bbd15d89b0ca0830bb787a3df2e9eb3b8765d2043c471efb75518c51f56570ac38a284423f13add7d5da6895845981d4b5cb82a6ed74da728e969f19f8eaf17f9ca744a5093b378102b96f39418a3e511740aabf88339f90a2b9b74bfa2d9bd5d5f68175ff3cd9edb5fdda41bca21de37b0b89cb47ab73dd516df34b01ff2537de88d908c81929318e56687d3795450f10fe94f622b4910d5667afed9808bf40edc0e16b8d6168d06a48d1a4ea7adf893bc3e75d98045e8afbd7f57740f2d981838da5976e341504d1d5bdb82cb56aba248ed856c4f78729a264b5c5d43cccb816de947ef5e50578ee2c470fcd8567a6dd42478fffb8976fc7ed79163483ce82bad059bad7bbb59a94bd19d8524677b58cd9f24d1a3425bb50b2a3ed42064f17a667fd6ae78bfa5e836bb2ed75e6b8a5032da5b0b353087b201c457cb8af79d46f96c2ac476ba2420ce214ac68a7aad4c2a278e6321256e94a4fa700fbb9a8c42d05c5816425a2e8a6819d4924d354e7559e4518006d17b7119f15612d5a644b024a3105797884649fe8415ae9935bed0e0f19d2a38d93a36aaca4b05eb1afddb0f100dac874985f5104d53d44f177fa725347671dc7c4635e989d2c0423d23c8e25c2b2791396f45cae4b7acd1335174a2ebfce2be53b7fc4d6cb2264498d22e7fe7a79bee27e3fbfe387da380d9e01998d23c080e7594847fa532906aad1592722f3a925f80d3368a9d777a2251a104435ab552525d6f9a271f0faf9600be80e85bc5a90ffb12b027ce80e4fe4daa398d19371757e98db844ba86e6a8df21d4ad679bc7ca5b690d4685fb324e8819b1ceac85f7af9d498a09bbec239e28f65a61f2c28b03a431161c58c99e9e7f52f29ff0a01c88221183a32d393af94808d8adae0842bad44ed91793599baae2e191785f11f7954ea13fb3e023944da12f89552b4220eda0e955cd9e6e53a9c03c61e5bb0880d68043b180950d06adfc74df1f4c947a3f7b4796138da5acf21074d4817f00a5eecf0e76250fa4c79f24a149f233687e75517c9d52d5303b7aa589d207cf59d2d4ff0d5a66ed01fe3f84e8bc27bf9b022e8b7c490199f3da3e6340c1c0e7f8cae8383090b5e2017697ca69d9deacd198a3a2aa8cf60291caf641a2f77e7dc81511729548fb842bd4a1c9cf0822c5088567af78607cb5a76f3d134cf5f9266797513147d7d4e7f9436f36b3c6c76a5a01a30946955b9731008b1981b3f996c465cd6f693c405b2cfa038fe9b97276af18dc2e0a484ec20497a673a83ba2f8a94d73429650ad7f5ed4934839db0d932388a1c97f7f510eb6be1eeafd49b0e39e73564c359e404d9e29fe36130cbe3dc15adb051aabdb55274a3bfc71ceb360cc9b5baaec519779907b4336d09987a1d6a82e2518fcfa3aae3dfd5e05923b8f5d9157af881767addb1b56687098e2056be11c6ae41d97cab14115af2c1df0ae21678e64c155d2e46a3617622c331dfc1f99f4478e0b856d8ee2b9f93f0cb5cb8f9ffc5b9ef7e9b828e663d86022ef1619a63cf57e93717927acbe91d367ea5edd070b0c23f815bf46120c52a5bf2533c8b7283477d2655c521b95003af7217cbcac5f12a36da46b46d71139aa7a1fcf3fd460e01f910ad1302b47adc976d2a99df70259e65ef2c5a8ad66c85855a34ec06398ec4fdcd698a1ad6cad0a0887839ad325fb43892b4d2254d705456f4c736e9217876251e719ec3c994128b30d5e5a497cec98bdd90490109234d51f7ccbb3877f9a8403f4e1053b6e34c848e899996be6cf54cced1ddefbef2cd75abd8db03b32310555b5d5f184eb82ca5643fa864261602c64a2a4c16f4d8a7e4b6a851850d2d60ad4d388815c568c46bdb22e920e6902cda30b2a352e175b3321301e49f4e178f8f1cd29f3938bedba77e238f8eea54a4fe57073776721974e0b177560fb9277453582198984755d1476a71dfeb0ff58c52db476c2e9e60eea1993f315505f099f997046364d18c43118e7e7d4414706290b1536a5e1e506a5ec3beb2ef5a67aca5304aa24e5b0b3be518c0ad611a4d0c424b4cfec10d41073c162d1854ddc7c80af206c4dbd6e68b94ef610d93c0180c3a2ad1413efbc830aab39ac7726778734d77fed9c36943a607818260936da15fb217353b59883a81fd5ec1c224b35664eb5cba3cbede6ec66883e5bf1068777cf45a343ffffbafe8f8894154551477c0c07c9d9eefd6bbf5931ac3720640bcf27a25e6403d4833725ce6f88c6c03371ffc7edb968227c1cfd7eb09dbf91a47980609fa84549fc0c86ac7d4e1a15599967e7a031c48d065db54ea948ecef6063dd2829fc5fa0e6a1803272c6b7f2f88d544a9b43597ce3251bafe5238311bbfdf17951992c9a1588e7103ef18e1136b5999a844cd35473c86e904b18f23a01da62d0025acc31386672d38544c1fe461ca3297106eb81210f07a54e1f8de4507fea251a67436ef708d2d91e25e54a2c1121de73ed3f5b8d85f9ed44c7a379805de627ad188b030eec9013b6d899921329e2c1ca24f112458da0976986ef583688ef79f2fdf8a2e33c4ba30bacfe189de9c9b66f8f809940e3b18ce6ee5ec24de029e50c69ea713230dec5fd6fce900e9fc32c8353af62095b801e67f8f4bd9f983eece5ccb5575f4367bb0c70d8f1d2a9cf3636912d20ccb662caa703807b75860e1a9c71a1020784992fc3c1a9cfb57b48b0a0bb48a63d3d6f325114c51105c6306f64c06170d826464bce2f18648ab4efce93452cb887cff0d95927e0336b869b1a1dfba404fbc1d38615ac1484a1471ff4e99bef318e4ced29f183f5b1570b4a67a043f0d1800b28ab98537fdcede0195a7b50a46c232821bab0f2673c40452c370529cf2462337235c873bd49e44ab0ead1d20e4bc6bd3e1c1e9cfa3e72d74ea791a635c522c94f0378eec4bbc4b7380fd640ab570bac7b41c3e4d8ff99619c66ca736f3d1c5", 0xfb3}], 0x2) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x20, 0x1, 0xfb, "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"}, 0x0}) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_dev$ndb(&(0x7f0000000240), 0x0, 0x4add7a1b71e659b3) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xbe) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000000580)=""/228, 0xe4}], 0x2) socket$inet(0x2, 0xa, 0x6) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000980)={0x14, &(0x7f0000000700)={0x40, 0x11, 0xe1, {0xe1, 0x30, "621ecb18c9371a4788cb5b2ed312f4408e97e8b8e7c84ecc3cdcbfbecaae328d335463dedf292f6e01b8ad7f2c76429fd3a49b0cc4c9c6994eda752d2a43a3c652f2298825216530ad60d51914341d9aeda94fb01387fc2dc72f01403d382a6ccc5b7d68d835f641c0af2a24cfc0dd98fdadb048a34c6a080d1699e9c3985da70b1113bc83410e2b653b83d34b5c55403537745a6510111232b718da13cc9b8ac41f7060787dfb7152dc44db084889c04c3c26a9ad3199e6bd091408a5191c2ee2bc646dd63e3a570946ea5f49251bbd44c8120db18afccd85544874c7dc91"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x861}}}, &(0x7f0000000c00)={0x44, &(0x7f00000009c0)={0x0, 0x15, 0x60, "f7e582b70ad2e601ab9cc0ed3352ed3ec4ca81c8d740c6d4050f42e52369eaa9102e097d59b8c1bc80f6df93b7f904093182196beaf52e5f03e46333976e915750309edaaa5d29155c324d27f2ab6a7f033a4ba22d42dbd837ad0ddbb2f46900"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000ac0)={0x20, 0x81, 0x2, "2594"}, &(0x7f0000000b00)={0x20, 0x82, 0x1, 'N'}, &(0x7f0000000b40)={0x20, 0x83, 0x3, "07ad0f"}, &(0x7f0000000b80)={0x20, 0x84, 0x4, "d05eae82"}, &(0x7f0000000bc0)={0x20, 0x85, 0x3, 'Dpx'}}) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000480)={0x98800, 0x1, 0x10}, 0x18) getdents(r6, &(0x7f0000001480)=""/4096, 0x1000) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) ioctl$TIOCSSOFTCAR(r7, 0x5453, 0x0) ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000080)={0x30, 0x7, 0xa, 0x4, 0x101}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) r9 = socket$igmp6(0xa, 0x3, 0x2) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f00000006c0)={0x1, 0x1, 0x4, r10, 0x6}, 0xc) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000801, r8, &(0x7f0000000180)={0x2, 0x1c, 0x0, 0x5942044a, 0xfffffffffffffffc, 0x9, 0x6, 0x5, 0x37c0}) kernel console output (not intermixed with test programs): 00080 (ttyS3) vs. 00200000 (comedi_parport) [ 873.512219][ T2090] usb 1-1: Using ep0 maxpacket: 32 [ 873.519945][ T2090] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 873.535160][ T43] gspca_spca1528: reg_w err -71 [ 873.540696][ T5848] block nbd0: Receive control failed (result -104) [ 873.557746][ T43] spca1528 9-1:0.1: probe with driver spca1528 failed with error -71 [ 873.566689][ T2090] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 873.582841][ T43] usb 9-1: USB disconnect, device number 37 [ 873.590100][ T2090] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 873.609150][ T2090] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.635185][ T2090] usb 1-1: config 0 descriptor?? [ 873.648369][ T2090] hub 1-1:0.0: USB hub found [ 873.849869][ T2090] hub 1-1:0.0: 1 port detected [ 873.932655][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 873.942232][T13690] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 874.098174][T20739] FAULT_INJECTION: forcing a failure. [ 874.098174][T20739] name failslab, interval 1, probability 0, space 0, times 0 [ 874.112197][T13690] usb 5-1: Using ep0 maxpacket: 8 [ 874.118708][T20739] CPU: 0 UID: 0 PID: 20739 Comm: syz.6.4625 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 874.118737][T20739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 874.118750][T20739] Call Trace: [ 874.118759][T20739] [ 874.118766][T20739] dump_stack_lvl+0x189/0x250 [ 874.118814][T20739] ? __pfx____ratelimit+0x10/0x10 [ 874.118845][T20739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 874.118874][T20739] ? __pfx__printk+0x10/0x10 [ 874.118910][T20739] ? __pfx___might_resched+0x10/0x10 [ 874.118934][T20739] ? fs_reclaim_acquire+0x7d/0x100 [ 874.118966][T20739] should_fail_ex+0x414/0x560 [ 874.118998][T20739] should_failslab+0xa8/0x100 [ 874.119025][T20739] kmem_cache_alloc_noprof+0x73/0x3c0 [ 874.119047][T20739] ? p9_client_prepare_req+0x171/0xeb0 [ 874.119086][T20739] p9_client_prepare_req+0x171/0xeb0 [ 874.119114][T20739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.119142][T20739] ? __kasan_kmalloc+0x93/0xb0 [ 874.119162][T20739] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 874.119183][T20739] ? p9_fid_create+0x50/0x220 [ 874.119222][T20739] ? p9_client_walk+0xbb/0x5b0 [ 874.119243][T20739] ? v9fs_create+0x11c/0x5e0 [ 874.119265][T20739] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 874.119291][T20739] ? __x64_sys_mknod+0x8c/0xa0 [ 874.119314][T20739] ? do_syscall_64+0xfa/0x3b0 [ 874.119343][T20739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.119385][T20739] p9_client_rpc+0x188/0xa70 [ 874.119413][T20739] ? node_tag_clear+0x1ef/0x320 [ 874.119445][T20739] ? idr_alloc_u32+0x1b7/0x2d0 [ 874.119476][T20739] ? __pfx_p9_client_rpc+0x10/0x10 [ 874.119510][T20739] ? rcu_is_watching+0x15/0xb0 [ 874.119538][T20739] ? trace_9p_fid_ref+0x7c/0x1d0 [ 874.119568][T20739] p9_client_walk+0x19f/0x5b0 [ 874.119601][T20739] ? __pfx_p9_client_walk+0x10/0x10 [ 874.119627][T20739] ? v9fs_fid_lookup+0x1d1/0xb70 [ 874.119665][T20739] v9fs_create+0x11c/0x5e0 [ 874.119688][T20739] ? common_perm+0x18f/0x200 [ 874.119721][T20739] ? __pfx_v9fs_create+0x10/0x10 [ 874.119742][T20739] ? __pfx_from_kgid+0x10/0x10 [ 874.119761][T20739] ? apparmor_path_mknod+0x1b1/0x230 [ 874.119786][T20739] ? generic_permission+0x322/0x690 [ 874.119823][T20739] v9fs_vfs_create+0x1d0/0x310 [ 874.119842][T20739] ? may_create+0x227/0x320 [ 874.119870][T20739] vfs_create+0x24e/0x400 [ 874.119902][T20739] do_mknodat+0x3c6/0x4d0 [ 874.119932][T20739] ? __pfx_do_mknodat+0x10/0x10 [ 874.119958][T20739] ? getname_flags+0x1e5/0x540 [ 874.119983][T20739] __x64_sys_mknod+0x8c/0xa0 [ 874.120012][T20739] do_syscall_64+0xfa/0x3b0 [ 874.120042][T20739] ? lockdep_hardirqs_on+0x9c/0x150 [ 874.120071][T20739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.120092][T20739] ? clear_bhb_loop+0x60/0xb0 [ 874.120118][T20739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.120138][T20739] RIP: 0033:0x7fc65e78e9a9 [ 874.120158][T20739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.120177][T20739] RSP: 002b:00007fc65f611038 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 874.120200][T20739] RAX: ffffffffffffffda RBX: 00007fc65e9b5fa0 RCX: 00007fc65e78e9a9 [ 874.120215][T20739] RDX: 0000000000000000 RSI: 00000000ffff8000 RDI: 0000200000000000 [ 874.120230][T20739] RBP: 00007fc65f611090 R08: 0000000000000000 R09: 0000000000000000 [ 874.120243][T20739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 874.120256][T20739] R13: 0000000000000000 R14: 00007fc65e9b5fa0 R15: 00007fff1230b6d8 [ 874.120291][T20739] [ 874.120683][T13690] usb 5-1: config 0 has an invalid interface number: 4 but max is 0 [ 874.481781][T13690] usb 5-1: config 0 has no interface number 0 [ 874.488438][T13690] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 874.509293][T13690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.535887][T13690] usb 5-1: config 0 descriptor?? [ 874.749798][T13263] usb 5-1: USB disconnect, device number 85 [ 874.827576][ T10] usb 1-1: USB disconnect, device number 8 [ 874.830407][T13690] hub 1-1:0.0: activate --> -90 [ 874.932084][ T2090] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 874.992238][ T5933] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 875.087334][ T2090] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 875.097042][ T2090] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.105219][ T2090] usb 9-1: Product: syz [ 875.109401][ T2090] usb 9-1: Manufacturer: syz [ 875.114067][ T2090] usb 9-1: SerialNumber: syz [ 875.120854][ T2090] usb 9-1: config 0 descriptor?? [ 875.154333][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 875.165791][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 875.176621][ T5933] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 875.190578][ T5933] usb 7-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 875.199847][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.208672][ T5933] usb 7-1: Product: syz [ 875.216251][ T5933] usb 7-1: Manufacturer: syz [ 875.220914][ T5933] usb 7-1: SerialNumber: syz [ 875.232373][ T5933] usb 7-1: config 0 descriptor?? [ 875.287286][T20732] Process accounting resumed [ 875.329345][ T2090] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 875.443411][ T5933] adutux 7-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 875.582362][ T10] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 875.647227][T13690] usb 7-1: USB disconnect, device number 39 [ 875.745985][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.757709][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 875.766907][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.778175][ T10] usb 5-1: config 0 descriptor?? [ 875.788965][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 875.988904][ T10] pwc: send_video_command error -71 [ 875.995301][ T10] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 876.005047][ T10] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 876.019198][ T10] usb 5-1: USB disconnect, device number 86 [ 876.337276][ T2090] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 876.432085][T13690] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 876.583637][T13690] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.594052][T13690] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 876.603266][T13690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.615701][T13690] usb 5-1: config 0 descriptor?? [ 876.627461][T13690] pwc: Askey VC010 type 2 USB webcam detected. [ 877.024072][T13690] pwc: recv_control_msg error -32 req 02 val 2b00 [ 877.031239][T13690] pwc: recv_control_msg error -32 req 02 val 2700 [ 877.038880][T13690] pwc: recv_control_msg error -32 req 02 val 2c00 [ 877.045954][T13690] pwc: recv_control_msg error -32 req 04 val 1000 [ 877.055411][T13690] pwc: recv_control_msg error -32 req 04 val 1300 [ 877.062659][T13690] pwc: recv_control_msg error -32 req 04 val 1400 [ 877.070179][T13690] pwc: recv_control_msg error -32 req 02 val 2000 [ 877.078310][T13690] pwc: recv_control_msg error -32 req 02 val 2100 [ 877.086011][T13690] pwc: recv_control_msg error -32 req 04 val 1500 [ 877.093391][T13690] pwc: recv_control_msg error -32 req 02 val 2500 [ 877.100461][T13690] pwc: recv_control_msg error -32 req 02 val 2400 [ 877.107598][T13690] pwc: recv_control_msg error -32 req 02 val 2600 [ 877.315811][T13690] pwc: recv_control_msg error -71 req 02 val 2800 [ 877.326051][T13690] pwc: recv_control_msg error -71 req 04 val 1100 [ 877.334014][T13690] pwc: recv_control_msg error -71 req 04 val 1200 [ 877.344650][T13690] pwc: Registered as video103. [ 877.358975][T13690] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input60 [ 877.381332][T13690] usb 5-1: USB disconnect, device number 87 [ 877.697227][T13690] usb 9-1: USB disconnect, device number 38 [ 877.776536][T20766] NILFS (rnullb0): couldn't find nilfs on the device [ 877.929378][T20772] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 877.939375][T20772] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 878.102341][T13690] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 878.177967][T20785] tls_set_device_offload: netdev not found [ 878.195895][T20785] fuse: Bad value for 'fd' [ 878.272049][T13690] usb 9-1: Using ep0 maxpacket: 32 [ 878.278993][T13690] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 878.285393][T20791] omfs: Invalid superblock (0) [ 878.293794][T13690] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 878.308257][T13690] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 878.318300][T13690] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 878.327656][T13690] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.349348][T13690] usb 9-1: config 0 descriptor?? [ 878.374200][T13690] hub 9-1:0.0: USB hub found [ 878.392117][T20793] netlink: 'syz.0.4646': attribute type 1 has an invalid length. [ 878.399908][T20793] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4646'. [ 878.462279][ T43] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 878.472426][ T2090] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 878.564984][T13690] hub 9-1:0.0: 2 ports detected [ 878.612010][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 878.621221][ T43] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 878.630956][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.639305][ T43] usb 7-1: Product: syz [ 878.643822][ T43] usb 7-1: Manufacturer: syz [ 878.648505][ T43] usb 7-1: SerialNumber: syz [ 878.653896][T20726] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 878.665709][ T43] usb 7-1: config 0 descriptor?? [ 878.674829][ T2090] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 878.690201][ T43] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 878.696528][ T2090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.705111][ T2090] usb 5-1: Product: syz [ 878.709353][ T2090] usb 5-1: Manufacturer: syz [ 878.714110][ T2090] usb 5-1: SerialNumber: syz [ 878.721566][ T2090] usb 5-1: config 0 descriptor?? [ 878.765652][T20766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.774802][T20766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.789679][T13690] hub 9-1:0.0: hub_hub_status failed (err = -71) [ 878.800200][T13690] hub 9-1:0.0: config failed, can't get hub status (err -71) [ 878.813863][T13690] usbhid 9-1:0.0: can't add hid device: -71 [ 878.820141][T13690] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 878.833132][T20726] usb 1-1: Using ep0 maxpacket: 8 [ 878.841004][T20726] usb 1-1: unable to get BOS descriptor or descriptor too short [ 878.850263][T20726] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 251, changing to 11 [ 878.863301][T13690] usb 9-1: USB disconnect, device number 39 [ 878.872255][T20726] usb 1-1: config 1 interface 0 has no altsetting 0 [ 878.883405][T20726] usb 1-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 878.896262][T20726] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.907511][T20726] usb 1-1: Product: syz [ 878.911762][T20726] usb 1-1: Manufacturer: syz [ 878.917784][T20726] usb 1-1: SerialNumber: syz [ 878.934719][T20788] can0: slcan on ttyprintk. [ 878.940082][ T2090] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 879.447485][T20786] can0 (unregistered): slcan off ttyprintk. [ 879.474965][ T43] gspca_ov534_9: reg_w failed -71 [ 879.764842][ T43] gspca_ov534_9: Unknown sensor 0000 [ 879.764984][ T43] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 879.793860][ T43] usb 7-1: USB disconnect, device number 40 [ 880.168097][T20830] binder: 20829:20830 unknown command 1074029334 [ 880.185769][T20830] binder: 20829:20830 ioctl c0306201 200000000080 returned -22 [ 880.222387][ T10] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 880.405134][T20839] FAT-fs (rnullb0): bogus number of reserved sectors [ 880.407945][ T10] usb 9-1: config 0 has no interfaces? [ 880.412359][T20839] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 880.431693][ T2090] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 880.442508][T20839] netlink: 'syz.6.4654': attribute type 2 has an invalid length. [ 880.450882][ T10] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 880.461487][ T2090] usb 5-1: USB disconnect, device number 88 [ 880.478885][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.502864][ T10] usb 9-1: Product: syz [ 880.507090][ T10] usb 9-1: Manufacturer: syz [ 880.540718][ T10] usb 9-1: SerialNumber: syz [ 880.556959][ T10] usb 9-1: config 0 descriptor?? [ 880.828059][ T10] usb 9-1: USB disconnect, device number 40 [ 881.039071][ T10] kernel write not supported for file /adsp1 (pid: 10 comm: kworker/0:1) [ 881.245785][T20852] ptrace attach of ""[20853] was attempted by "./syz-executor exec"[20852] [ 881.502097][ T2090] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 881.662159][ T2090] usb 7-1: Using ep0 maxpacket: 8 [ 881.674149][ T2090] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 881.686034][ T2090] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 881.697784][ T2090] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 881.708244][ T2090] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 881.727916][ T2090] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 881.738283][ T2090] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 881.751543][ T2090] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 881.760974][ T2090] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.932640][ T10] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 881.990452][ T2090] usb 7-1: GET_CAPABILITIES returned 0 [ 881.996288][ T2090] usbtmc 7-1:16.0: can't read capabilities [ 882.090511][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 882.100908][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.110200][ T10] usb 5-1: Product: syz [ 882.114714][ T10] usb 5-1: Manufacturer: syz [ 882.119373][ T10] usb 5-1: SerialNumber: syz [ 882.127020][ T10] usb 5-1: config 0 descriptor?? [ 882.132283][T13263] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 882.195662][ T2090] usb 7-1: USB disconnect, device number 41 [ 882.287951][T13263] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 882.301461][T13263] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 882.311689][T13263] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.331780][T13263] usb 9-1: config 0 descriptor?? [ 882.343771][T13263] pwc: Askey VC010 type 2 USB webcam detected. [ 882.350146][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 882.548083][T13263] pwc: send_video_command error -71 [ 882.554793][T13263] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 882.563154][T13263] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 882.582326][T13263] usb 9-1: USB disconnect, device number 41 [ 883.072090][T13263] usb 9-1: new full-speed USB device number 42 using dummy_hcd [ 883.225149][T13263] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.237241][T13263] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 883.246387][T13263] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.257490][T13263] usb 9-1: config 0 descriptor?? [ 883.272524][T13263] pwc: Askey VC010 type 2 USB webcam detected. [ 883.668782][T13263] pwc: recv_control_msg error -32 req 02 val 2b00 [ 883.680150][T13263] pwc: recv_control_msg error -32 req 02 val 2700 [ 883.691352][T13263] pwc: recv_control_msg error -32 req 02 val 2c00 [ 883.703472][T13263] pwc: recv_control_msg error -32 req 04 val 1000 [ 883.710867][T13263] pwc: recv_control_msg error -32 req 04 val 1300 [ 883.718374][T13263] pwc: recv_control_msg error -32 req 04 val 1400 [ 883.725564][T13263] pwc: recv_control_msg error -32 req 02 val 2000 [ 883.736091][T13263] pwc: recv_control_msg error -32 req 02 val 2100 [ 883.751818][T13263] pwc: recv_control_msg error -71 req 04 val 1500 [ 883.759933][T13263] pwc: recv_control_msg error -71 req 02 val 2500 [ 883.768968][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 883.781316][T13263] pwc: recv_control_msg error -71 req 02 val 2400 [ 883.789877][T13263] pwc: recv_control_msg error -71 req 02 val 2600 [ 883.799094][ T10] usb 5-1: USB disconnect, device number 89 [ 883.807714][T13263] pwc: recv_control_msg error -71 req 02 val 2900 [ 883.818348][T13263] pwc: recv_control_msg error -71 req 02 val 2800 [ 883.826705][T13263] pwc: recv_control_msg error -71 req 04 val 1100 [ 883.833818][T13263] pwc: recv_control_msg error -71 req 04 val 1200 [ 883.849488][T13263] pwc: Registered as video103. [ 883.859694][T13263] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input61 [ 883.898964][T13263] usb 9-1: USB disconnect, device number 42 [ 883.942519][ T43] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 884.029469][T20726] usbhid 1-1:1.0: can't add hid device: -32 [ 884.036179][T20726] usbhid 1-1:1.0: probe with driver usbhid failed with error -32 [ 884.104401][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.116840][ T43] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 884.126103][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.134382][ T43] usb 7-1: Product: syz [ 884.138648][ T43] usb 7-1: Manufacturer: syz [ 884.143461][ T43] usb 7-1: SerialNumber: syz [ 884.150522][ T43] usb 7-1: config 0 descriptor?? [ 884.474430][T13263] usb 7-1: USB disconnect, device number 42 [ 884.609478][ T30] audit: type=1326 audit(884.568:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20897 comm="syz.8.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ead8e9a9 code=0x7ffc0000 [ 884.631622][ T30] audit: type=1326 audit(884.568:4432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20897 comm="syz.8.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ead8e9a9 code=0x7ffc0000 [ 884.656241][ T30] audit: type=1326 audit(884.568:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20897 comm="syz.8.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb4ead8e9a9 code=0x7ffc0000 [ 884.688130][ T30] audit: type=1326 audit(884.648:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20897 comm="syz.8.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ead8e9a9 code=0x7ffc0000 [ 884.713744][ T30] audit: type=1326 audit(884.668:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20897 comm="syz.8.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4ead2ab89 code=0x7ffc0000 [ 884.735474][ C0] vkms_vblank_simulate: vblank timer overrun [ 884.745356][ T30] audit: type=1326 audit(884.668:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20897 comm="syz.8.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4ead2ab89 code=0x7ffc0000 [ 884.780677][ T30] audit: type=1326 audit(884.668:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20897 comm="syz.8.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4ead2ab89 code=0x7ffc0000 [ 884.802533][ C0] vkms_vblank_simulate: vblank timer overrun [ 884.815163][ T30] audit: type=1326 audit(884.668:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20897 comm="syz.8.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4ead2ab89 code=0x7ffc0000 [ 884.844153][ T10] usb 5-1: new low-speed USB device number 90 using dummy_hcd [ 884.852864][ T30] audit: type=1326 audit(884.668:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20897 comm="syz.8.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4ead2ab89 code=0x7ffc0000 [ 884.880136][ T30] audit: type=1326 audit(884.668:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20897 comm="syz.8.4674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4ead2ab89 code=0x7ffc0000 [ 885.027211][T20903] netlink: 180 bytes leftover after parsing attributes in process `syz.8.4676'. [ 885.041821][T20903] netlink: 'syz.8.4676': attribute type 3 has an invalid length. [ 885.056607][T20903] netlink: 'syz.8.4676': attribute type 1 has an invalid length. [ 885.067088][T20895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4673'. [ 885.080644][T20903] netlink: 192 bytes leftover after parsing attributes in process `syz.8.4676'. [ 885.094922][T20903] NCSI netlink: No device for ifindex 0 [ 885.102882][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 885.116012][ T10] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 885.126876][ T10] usb 5-1: can't read configurations, error -71 [ 885.162239][T20907] autofs4:pid:20907:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 885.312156][ T43] usb 7-1: new full-speed USB device number 43 using dummy_hcd [ 885.470384][ T43] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 885.487601][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.497862][ T43] usb 7-1: Product: syz [ 885.505494][ T43] usb 7-1: Manufacturer: syz [ 885.510353][ T43] usb 7-1: SerialNumber: syz [ 885.533215][ T43] usb 7-1: config 0 descriptor?? [ 885.754406][ T43] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 886.122178][T20926] FAULT_INJECTION: forcing a failure. [ 886.122178][T20926] name failslab, interval 1, probability 0, space 0, times 0 [ 886.134998][T20926] CPU: 0 UID: 0 PID: 20926 Comm: syz.4.4686 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 886.135026][T20926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 886.135041][T20926] Call Trace: [ 886.135049][T20926] [ 886.135059][T20926] dump_stack_lvl+0x189/0x250 [ 886.135092][T20926] ? __pfx____ratelimit+0x10/0x10 [ 886.135120][T20926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 886.135141][T20926] ? __pfx__printk+0x10/0x10 [ 886.135164][T20926] ? __pfx___might_resched+0x10/0x10 [ 886.135186][T20926] ? fs_reclaim_acquire+0x7d/0x100 [ 886.135218][T20926] should_fail_ex+0x414/0x560 [ 886.135247][T20926] should_failslab+0xa8/0x100 [ 886.135271][T20926] __kmalloc_noprof+0xcb/0x4f0 [ 886.135287][T20926] ? tomoyo_encode+0x28b/0x550 [ 886.135304][T20926] tomoyo_encode+0x28b/0x550 [ 886.135321][T20926] tomoyo_realpath_from_path+0x58d/0x5d0 [ 886.135342][T20926] ? tomoyo_domain+0xd9/0x130 [ 886.135368][T20926] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 886.135395][T20926] tomoyo_path_number_perm+0x1e8/0x5a0 [ 886.135422][T20926] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 886.135453][T20926] ? __lock_acquire+0xab9/0xd20 [ 886.135489][T20926] ? __fget_files+0x2a/0x420 [ 886.135524][T20926] ? __fget_files+0x2a/0x420 [ 886.135550][T20926] ? __fget_files+0x3a0/0x420 [ 886.135574][T20926] ? __fget_files+0x2a/0x420 [ 886.135598][T20926] security_file_ioctl+0xcb/0x2d0 [ 886.135618][T20926] __se_sys_ioctl+0x47/0x170 [ 886.135644][T20926] do_syscall_64+0xfa/0x3b0 [ 886.135673][T20926] ? lockdep_hardirqs_on+0x9c/0x150 [ 886.135700][T20926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.135718][T20926] ? clear_bhb_loop+0x60/0xb0 [ 886.135735][T20926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.135751][T20926] RIP: 0033:0x7ff82c58e9a9 [ 886.135764][T20926] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 886.135779][T20926] RSP: 002b:00007ff82d378038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 886.135801][T20926] RAX: ffffffffffffffda RBX: 00007ff82c7b5fa0 RCX: 00007ff82c58e9a9 [ 886.135816][T20926] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 886.135827][T20926] RBP: 00007ff82d378090 R08: 0000000000000000 R09: 0000000000000000 [ 886.135839][T20926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.135851][T20926] R13: 0000000000000000 R14: 00007ff82c7b5fa0 R15: 00007ffd360728d8 [ 886.135876][T20926] [ 886.135893][T20926] ERROR: Out of memory at tomoyo_realpath_from_path. [ 886.832389][ T10] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 886.946899][T20935] tipc: Enabled bearer , priority 10 [ 886.954138][T20935] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4690'. [ 886.992272][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 887.009174][ T10] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 887.021259][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.035507][ T10] usb 5-1: Product: syz [ 887.040274][ T10] usb 5-1: Manufacturer: syz [ 887.047833][ T10] usb 5-1: SerialNumber: syz [ 887.070707][ T10] usb 5-1: config 0 descriptor?? [ 887.506893][ T10] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 887.525455][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 887.546886][ T10] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 887.555546][ T10] usb 5-1: media controller created [ 887.593679][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 887.719738][ T10] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 887.737326][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 887.895675][ T43] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 887.911648][ T43] usb 7-1: USB disconnect, device number 43 [ 887.950897][T20937] FAULT_INJECTION: forcing a failure. [ 887.950897][T20937] name failslab, interval 1, probability 0, space 0, times 0 [ 887.970855][T20937] CPU: 0 UID: 0 PID: 20937 Comm: syz.6.4691 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 887.970887][T20937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 887.970901][T20937] Call Trace: [ 887.970910][T20937] [ 887.970920][T20937] dump_stack_lvl+0x189/0x250 [ 887.970956][T20937] ? __pfx____ratelimit+0x10/0x10 [ 887.970987][T20937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 887.971017][T20937] ? __pfx__printk+0x10/0x10 [ 887.971054][T20937] ? __pfx___might_resched+0x10/0x10 [ 887.971080][T20937] ? fs_reclaim_acquire+0x7d/0x100 [ 887.971113][T20937] should_fail_ex+0x414/0x560 [ 887.971147][T20937] should_failslab+0xa8/0x100 [ 887.971175][T20937] kmem_cache_alloc_noprof+0x73/0x3c0 [ 887.971198][T20937] ? fuse_get_req+0x7b9/0x10b0 [ 887.971228][T20937] ? stack_trace_save+0x9c/0xe0 [ 887.971263][T20937] fuse_get_req+0x7b9/0x10b0 [ 887.971304][T20937] ? kasan_save_track+0x4f/0x80 [ 887.971327][T20937] ? __pfx_fuse_get_req+0x10/0x10 [ 887.971356][T20937] ? __se_sys_getdents64+0xe4/0x260 [ 887.971381][T20937] ? do_syscall_64+0xfa/0x3b0 [ 887.971411][T20937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.971450][T20937] __fuse_simple_request+0x2aa/0x18d0 [ 887.971491][T20937] ? __pfx___fuse_simple_request+0x10/0x10 [ 887.971537][T20937] ? fuse_readdir+0x146e/0x2bb0 [ 887.971569][T20937] ? fuse_readdir+0x146e/0x2bb0 [ 887.971599][T20937] ? rcu_is_watching+0x15/0xb0 [ 887.971625][T20937] ? fuse_readdir+0x146e/0x2bb0 [ 887.971655][T20937] ? trace_kmalloc+0x1f/0xd0 [ 887.971674][T20937] ? __kvmalloc_node_noprof+0x331/0x5f0 [ 887.971703][T20937] ? fuse_readdir+0x146e/0x2bb0 [ 887.971731][T20937] ? fuse_read_args_fill+0x34/0x340 [ 887.971767][T20937] fuse_readdir+0x1771/0x2bb0 [ 887.971797][T20937] ? __lock_acquire+0xab9/0xd20 [ 887.971843][T20937] ? __lock_acquire+0xab9/0xd20 [ 887.971878][T20937] ? __lock_acquire+0xab9/0xd20 [ 887.971909][T20937] ? __pfx_fuse_readdir+0x10/0x10 [ 887.971949][T20937] ? aa_file_perm+0x13e/0x11b0 [ 887.971973][T20937] ? aa_file_perm+0x3ed/0x11b0 [ 887.971996][T20937] ? __pfx___mutex_trylock_common+0x10/0x10 [ 887.972028][T20937] ? look_up_lock_class+0x74/0x170 [ 887.972061][T20937] ? register_lock_class+0x51/0x320 [ 887.972126][T20937] ? down_read_killable+0x1d1/0x350 [ 887.972153][T20937] iterate_dir+0x396/0x570 [ 887.972186][T20937] __se_sys_getdents64+0xe4/0x260 [ 887.972216][T20937] ? __pfx___se_sys_getdents64+0x10/0x10 [ 887.972241][T20937] ? ksys_write+0x22a/0x250 [ 887.972266][T20937] ? __pfx_filldir64+0x10/0x10 [ 887.972295][T20937] ? __pfx_ksys_write+0x10/0x10 [ 887.972320][T20937] ? rcu_is_watching+0x15/0xb0 [ 887.972352][T20937] ? do_syscall_64+0xbe/0x3b0 [ 887.972387][T20937] do_syscall_64+0xfa/0x3b0 [ 887.972417][T20937] ? lockdep_hardirqs_on+0x9c/0x150 [ 887.972446][T20937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.972467][T20937] ? clear_bhb_loop+0x60/0xb0 [ 887.972493][T20937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.972513][T20937] RIP: 0033:0x7fc65e78e9a9 [ 887.972532][T20937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 887.972550][T20937] RSP: 002b:00007fc65f611038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 887.972573][T20937] RAX: ffffffffffffffda RBX: 00007fc65e9b5fa0 RCX: 00007fc65e78e9a9 [ 887.972589][T20937] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 887.972602][T20937] RBP: 00007fc65f611090 R08: 0000000000000000 R09: 0000000000000000 [ 887.972615][T20937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.972627][T20937] R13: 0000000000000000 R14: 00007fc65e9b5fa0 R15: 00007fff1230b6d8 [ 887.972661][T20937] [ 888.332467][ C0] vkms_vblank_simulate: vblank timer overrun [ 888.777145][ T10] usb 5-1: USB disconnect, device number 92 [ 888.914138][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 888.989563][T20945] /dev/rnullb0: Can't open blockdev [ 889.030896][T20945] /dev/rnullb0: Can't open blockdev [ 889.055166][T20945] /dev/rnullb0: Can't open blockdev [ 889.078552][T20945] /dev/rnullb0: Can't open blockdev [ 889.091627][T20945] /dev/rnullb0: Can't open blockdev [ 889.111732][T20945] /dev/rnullb0: Can't open blockdev [ 889.127311][T20945] /dev/rnullb0: Can't open blockdev [ 889.147805][T20945] /dev/rnullb0: Can't open blockdev [ 889.176817][T20945] /dev/rnullb0: Can't open blockdev [ 889.195960][T20945] /dev/rnullb0: Can't open blockdev [ 889.209373][T20945] /dev/rnullb0: Can't open blockdev [ 889.236964][T20945] /dev/rnullb0: Can't open blockdev [ 889.249148][T20945] /dev/rnullb0: Can't open blockdev [ 889.278463][T20945] /dev/rnullb0: Can't open blockdev [ 889.293382][T20945] /dev/rnullb0: Can't open blockdev [ 889.316395][T20945] /dev/rnullb0: Can't open blockdev [ 889.335068][T20945] /dev/rnullb0: Can't open blockdev [ 889.351164][T20945] /dev/rnullb0: Can't open blockdev [ 889.371420][T20945] /dev/rnullb0: Can't open blockdev [ 889.399602][T20945] /dev/rnullb0: Can't open blockdev [ 889.419363][T20945] /dev/rnullb0: Can't open blockdev [ 889.434520][T20945] /dev/rnullb0: Can't open blockdev [ 889.474377][T20945] /dev/rnullb0: Can't open blockdev [ 889.487924][T20945] /dev/rnullb0: Can't open blockdev [ 889.521336][T20945] /dev/rnullb0: Can't open blockdev [ 889.540331][T20945] /dev/rnullb0: Can't open blockdev [ 889.554663][T20945] /dev/rnullb0: Can't open blockdev [ 889.561208][T20945] /dev/rnullb0: Can't open blockdev [ 889.572553][T20945] /dev/rnullb0: Can't open blockdev [ 889.578622][T20945] /dev/rnullb0: Can't open blockdev [ 889.593345][T20945] /dev/rnullb0: Can't open blockdev [ 889.599504][T20945] /dev/rnullb0: Can't open blockdev [ 889.632901][T20945] /dev/rnullb0: Can't open blockdev [ 889.654242][T20945] /dev/rnullb0: Can't open blockdev [ 889.666763][T20945] /dev/rnullb0: Can't open blockdev [ 889.686237][T20945] /dev/rnullb0: Can't open blockdev [ 889.698781][T20945] /dev/rnullb0: Can't open blockdev [ 889.728243][T20945] /dev/rnullb0: Can't open blockdev [ 889.749553][T20945] /dev/rnullb0: Can't open blockdev [ 889.765332][T20945] /dev/rnullb0: Can't open blockdev [ 889.771695][T20945] /dev/rnullb0: Can't open blockdev [ 889.785650][T20945] /dev/rnullb0: Can't open blockdev [ 889.798433][T20945] /dev/rnullb0: Can't open blockdev [ 890.033403][T20958] 9pnet_fd: p9_fd_create_tcp (20958): problem binding to privport [ 890.485710][T20964] cgroup: Unknown subsys name 'appraise' [ 890.496986][T20964] netlink: 'syz.4.4700': attribute type 3 has an invalid length. [ 890.515535][T20964] autofs: Unknown parameter 'd' [ 890.673899][T13263] usb 9-1: new full-speed USB device number 43 using dummy_hcd [ 890.728680][T20974] /dev/rnullb0: Can't open blockdev [ 890.852927][T13263] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 890.875500][T13263] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.884455][T13263] usb 9-1: Product: syz [ 890.888653][T13263] usb 9-1: Manufacturer: syz [ 890.893740][T13263] usb 9-1: SerialNumber: syz [ 890.902738][T13263] usb 9-1: config 0 descriptor?? [ 891.117283][T13263] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 891.126849][ T10] usb 7-1: new low-speed USB device number 44 using dummy_hcd [ 891.242081][T20726] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 891.295499][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.305844][ T10] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 891.315056][ T10] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 891.325373][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.337691][ T10] usb 7-1: config 0 descriptor?? [ 891.382235][T20726] usb 5-1: device descriptor read/64, error -71 [ 891.622235][T20726] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 891.763034][T20726] usb 5-1: device descriptor read/64, error -71 [ 891.873033][T20726] usb usb5-port1: attempt power cycle [ 892.212166][T20726] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 892.232663][T20726] usb 5-1: device descriptor read/8, error -71 [ 892.472125][T20726] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 892.493626][T20726] usb 5-1: device descriptor read/8, error -71 [ 892.532293][T13263] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 892.554085][T13263] usb 9-1: USB disconnect, device number 43 [ 892.602484][T20726] usb usb5-port1: unable to enumerate USB device [ 893.352223][ T43] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 893.502085][ T43] usb 9-1: Using ep0 maxpacket: 8 [ 893.509243][ T43] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 893.518411][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.528891][ T43] usb 9-1: config 0 descriptor?? [ 893.750784][ T43] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 894.290671][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 894.306268][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 894.315605][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 894.326338][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 894.336997][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 894.389306][T20995] wg0 speed is unknown, defaulting to 1000 [ 894.452159][T13263] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 894.486474][T14002] usb 7-1: USB disconnect, device number 44 [ 894.612027][T13263] usb 5-1: Using ep0 maxpacket: 8 [ 894.624832][T13263] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 894.637468][T13263] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 894.650631][T13263] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 894.661391][T13263] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 894.673571][T13263] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 894.683857][T13263] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 894.701999][T13263] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 894.712831][T13263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.718089][T21006] vxfs: WRONG superblock magic 00000000 at 1 [ 894.744759][T21006] vxfs: WRONG superblock magic 00000000 at 8 [ 894.750857][T21006] vxfs: can't find superblock. [ 894.779389][T20995] chnl_net:caif_netlink_parms(): no params data found [ 894.945181][T13263] usb 5-1: GET_CAPABILITIES returned 0 [ 894.954585][T13263] usbtmc 5-1:16.0: can't read capabilities [ 895.019411][T20995] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.027325][T20995] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.034778][T20995] bridge_slave_0: entered allmulticast mode [ 895.042905][T20995] bridge_slave_0: entered promiscuous mode [ 895.051783][T20995] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.059452][T20995] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.069949][T20995] bridge_slave_1: entered allmulticast mode [ 895.078630][T20995] bridge_slave_1: entered promiscuous mode [ 895.132236][T20995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 895.154694][T20995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.165661][ T2090] usb 5-1: USB disconnect, device number 97 [ 895.231208][T20995] team0: Port device team_slave_0 added [ 895.241315][T20995] team0: Port device team_slave_1 added [ 895.283882][T20995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 895.290969][T20995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.318942][T20995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 895.333683][T20995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 895.340676][T20995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 895.352179][T20726] usb 7-1: new full-speed USB device number 45 using dummy_hcd [ 895.366872][T20995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 895.388443][ T43] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 895.406669][ T43] asix 9-1:0.0: probe with driver asix failed with error -71 [ 895.424691][ T43] usb 9-1: USB disconnect, device number 44 [ 895.465559][T20995] hsr_slave_0: entered promiscuous mode [ 895.473114][T20995] hsr_slave_1: entered promiscuous mode [ 895.479405][T20995] debugfs: 'hsr0' already exists in 'hsr' [ 895.485828][T20995] Cannot create hsr debugfs directory [ 895.569280][T20726] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 895.579254][T20726] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.587588][T20726] usb 7-1: Product: syz [ 895.591857][T20726] usb 7-1: Manufacturer: syz [ 895.596853][T20726] usb 7-1: SerialNumber: syz [ 895.608839][T20726] usb 7-1: config 0 descriptor?? [ 895.730422][T20995] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 895.754122][T20995] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 895.779840][T20995] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 895.791717][T20995] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 895.806872][T21019] fuse: Bad value for 'fd' [ 895.818405][T20726] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 895.843274][T20995] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.850474][T20995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 895.958221][T20995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.003190][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.062122][T20995] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.080951][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.088131][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.102075][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.109269][ T1322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.415554][ T51] Bluetooth: hci2: command tx timeout [ 896.523185][T20995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 896.702045][ T2090] usb 5-1: new low-speed USB device number 98 using dummy_hcd [ 896.854473][ T2090] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 896.876888][ T2090] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 896.895922][ T2090] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 896.925704][ T2090] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.969525][ T2090] usb 5-1: config 0 descriptor?? [ 897.004173][T20995] veth0_vlan: entered promiscuous mode [ 897.021565][T20995] veth1_vlan: entered promiscuous mode [ 897.110738][T20995] veth0_macvtap: entered promiscuous mode [ 897.127707][T20995] veth1_macvtap: entered promiscuous mode [ 897.170662][T20995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 897.198802][T20995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 897.231046][ T8329] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.240252][T20726] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 897.269743][ T8329] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.273272][T20726] usb 7-1: USB disconnect, device number 45 [ 897.301494][ T8329] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.343854][ T8329] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.458516][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.478336][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.520256][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 897.530033][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 897.933880][T13263] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 898.130698][T13263] usb 10-1: unable to get BOS descriptor or descriptor too short [ 898.150393][T13263] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 898.162122][T13263] usb 10-1: can't read configurations, error -71 [ 898.492263][ T51] Bluetooth: hci2: command tx timeout [ 898.532283][ T5933] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 898.678029][ T5933] usb 9-1: device descriptor read/64, error -71 [ 898.695300][T20726] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 898.864600][T20726] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.890354][T20726] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 898.929978][T20726] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.934338][ T5933] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 898.954635][T20726] usb 7-1: config 0 descriptor?? [ 898.978485][T20726] pwc: Askey VC010 type 2 USB webcam detected. [ 899.104086][ T5933] usb 9-1: device descriptor read/64, error -71 [ 899.212802][ T5933] usb usb9-port1: attempt power cycle [ 899.232213][T13263] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 899.378313][T20726] pwc: recv_control_msg error -32 req 02 val 2b00 [ 899.386998][T13263] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 899.391127][T20726] pwc: recv_control_msg error -32 req 02 val 2700 [ 899.397112][T13263] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.413261][T20726] pwc: recv_control_msg error -32 req 02 val 2c00 [ 899.420457][T13263] usb 10-1: Product: syz [ 899.421847][T20726] pwc: recv_control_msg error -32 req 04 val 1000 [ 899.426946][T13263] usb 10-1: Manufacturer: syz [ 899.434265][T20726] pwc: recv_control_msg error -32 req 04 val 1300 [ 899.444684][T20726] pwc: recv_control_msg error -32 req 04 val 1400 [ 899.450040][T13263] usb 10-1: SerialNumber: syz [ 899.452421][T20726] pwc: recv_control_msg error -32 req 02 val 2000 [ 899.461306][T13263] usb 10-1: config 0 descriptor?? [ 899.469235][T20726] pwc: recv_control_msg error -32 req 02 val 2100 [ 899.562413][ T5933] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 899.592742][ T5933] usb 9-1: device descriptor read/8, error -71 [ 899.672450][T13263] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 899.700399][T21073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.709755][T21073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 899.823387][T20726] pwc: recv_control_msg error -71 req 02 val 2500 [ 899.832584][T20726] pwc: recv_control_msg error -71 req 02 val 2400 [ 899.833529][ T5933] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 899.843935][T20726] pwc: recv_control_msg error -71 req 02 val 2600 [ 899.864791][T20726] pwc: recv_control_msg error -71 req 02 val 2900 [ 899.871817][T20726] pwc: recv_control_msg error -71 req 02 val 2800 [ 899.879858][T20726] pwc: recv_control_msg error -71 req 04 val 1100 [ 899.885866][ T5933] usb 9-1: device descriptor read/8, error -71 [ 899.889376][T20726] pwc: recv_control_msg error -71 req 04 val 1200 [ 899.902340][T20726] pwc: Registered as video103. [ 899.912448][T20726] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input62 [ 899.966955][T20726] usb 7-1: USB disconnect, device number 46 [ 900.015236][ T5933] usb usb9-port1: unable to enumerate USB device [ 900.137638][ T43] usb 5-1: USB disconnect, device number 98 [ 900.522282][ T43] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 900.572465][ T51] Bluetooth: hci2: command tx timeout [ 900.682025][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 900.689157][ T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 900.706009][ T43] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 900.715257][ T43] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 900.723578][ T43] usb 5-1: Product: syz [ 900.727787][ T43] usb 5-1: Manufacturer: syz [ 900.732560][ T43] usb 5-1: SerialNumber: syz [ 900.740063][ T43] usb 5-1: config 0 descriptor?? [ 900.752437][T21084] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 900.765643][ T43] hub 5-1:0.0: bad descriptor, ignoring hub [ 900.771626][ T43] hub 5-1:0.0: probe with driver hub failed with error -5 [ 900.991122][T21094] netlink: 116 bytes leftover after parsing attributes in process `syz.6.4731'. [ 901.007138][T21094] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 901.016543][T21094] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 901.110517][T13263] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 901.129305][T13263] usb 10-1: USB disconnect, device number 3 [ 901.672034][T21084] usb 5-1: reset high-speed USB device number 99 using dummy_hcd [ 901.672150][ T43] usb 9-1: new full-speed USB device number 49 using dummy_hcd [ 901.844921][ T43] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 901.858539][ T43] usb 9-1: config 0 has no interface number 0 [ 901.864385][T21084] usb 5-1: device firmware changed [ 901.866253][ T43] usb 9-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 901.881667][ T43] usb 9-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 901.885856][ T5933] usb 5-1: USB disconnect, device number 99 [ 901.904311][ T43] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 901.933513][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.941583][ T43] usb 9-1: Product: syz [ 901.946069][ T43] usb 9-1: Manufacturer: syz [ 901.950747][ T43] usb 9-1: SerialNumber: syz [ 901.962712][ T43] usb 9-1: config 0 descriptor?? [ 901.975487][T21102] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 901.983412][T21102] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 901.993466][ T43] smsc95xx v2.0.0 [ 902.027541][T21110] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 902.052298][ T5933] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 902.086421][ T2090] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 902.202028][ T5933] usb 5-1: Using ep0 maxpacket: 32 [ 902.207075][T21102] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 902.215585][ T5933] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 902.221628][T21102] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 902.244580][ T5933] usb 5-1: string descriptor 0 read error: -22 [ 902.255175][ T5933] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 902.264720][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 902.269642][T21115] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 902.280944][ T5933] usb 5-1: config 0 descriptor?? [ 902.294243][ T2090] usb 10-1: unable to get BOS descriptor or descriptor too short [ 902.302162][T21095] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 902.304451][ T5933] hub 5-1:0.0: bad descriptor, ignoring hub [ 902.323055][ T5933] hub 5-1:0.0: probe with driver hub failed with error -5 [ 902.331602][ T2090] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 902.340042][ T2090] usb 10-1: can't read configurations, error -71 [ 902.456474][ T43] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 902.456516][ T43] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 902.612588][T13690] usb 5-1: USB disconnect, device number 100 [ 902.652635][ T51] Bluetooth: hci2: command tx timeout [ 902.882066][ T5933] usb 7-1: new low-speed USB device number 47 using dummy_hcd [ 903.039478][ T5933] usb 7-1: unable to get BOS descriptor or descriptor too short [ 903.053238][T21127] netlink: 212364 bytes leftover after parsing attributes in process `syz.9.4742'. [ 903.068242][T21127] openvswitch: netlink: Message has 5 unknown bytes. [ 903.079018][ T5933] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 903.091526][ T5933] usb 7-1: can't read configurations, error -71 [ 903.256755][T21131] program syz.9.4744 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 903.386873][ T55] block nbd0: Possible stuck request ffff888025530000: control (read@0,1024B). Runtime 30 seconds [ 903.398685][ T55] block nbd0: Possible stuck request ffff8880255301c0: control (read@1024,1024B). Runtime 30 seconds [ 903.410212][ T55] block nbd0: Possible stuck request ffff888025530380: control (read@2048,1024B). Runtime 30 seconds [ 903.425620][ T55] block nbd0: Possible stuck request ffff888025530540: control (read@3072,1024B). Runtime 30 seconds [ 903.439394][ T10] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 903.585216][T21139] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 903.632763][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 903.652153][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.660215][ T10] usb 5-1: Product: syz [ 903.681517][ T10] usb 5-1: Manufacturer: syz [ 903.702428][ T10] usb 5-1: SerialNumber: syz [ 903.721763][ T10] usb 5-1: config 0 descriptor?? [ 903.934876][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 904.112841][T13263] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 904.182294][ T5933] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 904.293216][T13263] usb 10-1: unable to get BOS descriptor or descriptor too short [ 904.310037][T13263] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 904.317987][T13263] usb 10-1: can't read configurations, error -71 [ 904.342344][ T5933] usb 7-1: Using ep0 maxpacket: 8 [ 904.350013][ T5933] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 904.358975][ T5933] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 904.378592][ T5933] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 904.388939][ T5933] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 904.408587][ T5933] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 904.422069][ T5933] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 904.436589][ T5933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.651045][ T5933] usb 7-1: usb_control_msg returned -32 [ 904.657875][ T5933] usbtmc 7-1:16.0: can't read capabilities [ 905.182144][T13263] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 905.336670][T13263] usb 10-1: unable to get BOS descriptor or descriptor too short [ 905.353771][T13263] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 905.367471][T13263] usb 10-1: can't read configurations, error -71 [ 905.370058][T21150] usbtmc 7-1:16.0: CHECK_CLEAR_STATUS returned 6 [ 905.374565][T13263] usb usb10-port1: attempt power cycle [ 905.392710][T13690] usb 7-1: USB disconnect, device number 48 [ 905.753968][ T10] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 905.772481][ T10] usb 5-1: USB disconnect, device number 101 [ 906.092840][ T43] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 906.107445][ T43] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 906.123823][ T43] usb 9-1: USB disconnect, device number 49 [ 906.212096][T13263] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 906.246328][T13263] usb 10-1: device descriptor read/8, error -71 [ 906.374930][T21160] ieee802154 phy0 wpan0: encryption failed: -126 [ 906.381553][T21160] ieee802154 phy0 wpan0: encryption failed: -126 [ 906.437295][T21164] tipc: Enabling of bearer rejected, already enabled [ 906.496793][T13263] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 906.533620][T13263] usb 10-1: device descriptor read/8, error -71 [ 906.652738][T13263] usb usb10-port1: unable to enumerate USB device [ 906.896715][T21168] overlayfs: missing 'workdir' [ 907.302530][T13263] usb 7-1: new low-speed USB device number 49 using dummy_hcd [ 907.479707][T13263] usb 7-1: unable to get BOS descriptor or descriptor too short [ 907.512624][ T5933] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 907.529752][T13263] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 907.539561][T13263] usb 7-1: can't read configurations, error -71 [ 907.662139][ T5933] usb 5-1: device descriptor read/64, error -71 [ 907.902628][ T5933] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 908.042054][ T5933] usb 5-1: device descriptor read/64, error -71 [ 908.163232][ T5933] usb usb5-port1: attempt power cycle [ 908.525342][ T5933] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 908.563145][ T5933] usb 5-1: device descriptor read/8, error -71 [ 908.671836][T21180] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4763'. [ 908.825482][ T5933] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 908.873002][ T5933] usb 5-1: device descriptor read/8, error -71 [ 908.993251][ T5933] usb usb5-port1: unable to enumerate USB device [ 909.515106][T13263] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 909.652213][T13263] usb 10-1: device descriptor read/64, error -71 [ 909.912496][T13263] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 910.053553][T13263] usb 10-1: device descriptor read/64, error -71 [ 910.092423][T13689] usb 9-1: new full-speed USB device number 50 using dummy_hcd [ 910.165142][T13263] usb usb10-port1: attempt power cycle [ 910.255760][T13689] usb 9-1: config 0 has no interfaces? [ 910.266405][T13689] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 910.289255][T13689] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.299203][T13689] usb 9-1: Product: syz [ 910.303622][T13689] usb 9-1: Manufacturer: syz [ 910.308244][T13689] usb 9-1: SerialNumber: syz [ 910.334318][T13689] usb 9-1: config 0 descriptor?? [ 910.512630][T13263] usb 10-1: new low-speed USB device number 12 using dummy_hcd [ 910.537148][T13263] usb 10-1: device descriptor read/8, error -71 [ 910.607845][T14002] usb 9-1: USB disconnect, device number 50 [ 910.847671][T13263] usb 10-1: new low-speed USB device number 13 using dummy_hcd [ 910.883112][T13263] usb 10-1: device descriptor read/8, error -71 [ 910.903918][T21214] tipc: Failed to obtain node identity [ 910.909464][T21214] tipc: Enabling of bearer rejected, failed to enable media [ 911.557210][T21222] netlink: 'syz.8.4780': attribute type 39 has an invalid length. [ 911.568287][T21222] lo: entered promiscuous mode [ 911.866391][T13263] usb usb10-port1: unable to enumerate USB device [ 912.739371][T21230] futex_wake_op: syz.9.4783 tries to shift op by -1; fix this program [ 913.432184][ T2090] usb 10-1: new full-speed USB device number 14 using dummy_hcd [ 913.482359][T13690] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 913.595946][ T2090] usb 10-1: config 0 has no interfaces? [ 913.616761][ T2090] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 913.639838][ T2090] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.650937][ T2090] usb 10-1: Product: syz [ 913.656643][T13690] usb 9-1: Using ep0 maxpacket: 8 [ 913.670535][ T2090] usb 10-1: Manufacturer: syz [ 913.676843][T13690] usb 9-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 913.695229][ T2090] usb 10-1: SerialNumber: syz [ 913.700123][T13690] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 913.721007][T13690] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 913.737099][T13690] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 913.748999][T13690] usb 9-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 913.766055][ T2090] usb 10-1: config 0 descriptor?? [ 913.782476][T13690] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.821302][T13690] usb 9-1: config 0 descriptor?? [ 914.037854][ T2090] usb 10-1: USB disconnect, device number 14 [ 914.277713][T13690] holtek 0003:1241:5015.0019: hidraw0: USB HID vff.ff Device [HID 1241:5015] on usb-dummy_hcd.8-1/input0 [ 914.319746][T13690] holtek 0003:1241:5015.0019: no inputs found [ 914.440853][T21246] binder: 21245:21246 ioctl 8010661b 200000000100 returned -22 [ 914.465647][T21247] ieee802154 phy0 wpan0: encryption failed: -126 [ 914.479375][T21247] ieee802154 phy0 wpan0: encryption failed: -126 [ 914.514465][T13690] usb 9-1: USB disconnect, device number 51 [ 914.682624][T13263] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 914.844275][T13263] usb 5-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 914.854119][T13263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.866669][T13263] usb 5-1: config 0 descriptor?? [ 914.877310][T13263] usb 5-1: selecting invalid altsetting 1 [ 914.924258][T13263] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 915.089289][T13263] usb 5-1: USB disconnect, device number 106 [ 915.168531][T21255] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 915.460022][T21262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 915.472471][ T5941] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 915.522642][T21262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 915.585631][T21262] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 915.642521][ T5941] usb 9-1: Using ep0 maxpacket: 8 [ 915.667068][ T5941] usb 9-1: unable to get BOS descriptor or descriptor too short [ 915.704242][ T5941] usb 9-1: config index 0 descriptor too short (expected 9856, got 36) [ 915.719304][ T5941] usb 9-1: config 15 has an invalid descriptor of length 0, skipping remainder of the config [ 915.735293][ T5941] usb 9-1: config 15 has no interfaces? [ 915.744457][ T5941] usb 9-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 915.764590][ T5941] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.780902][ T5941] usb 9-1: Product: syz [ 915.787305][ T5941] usb 9-1: Manufacturer: syz [ 915.794946][ T5941] usb 9-1: SerialNumber: syz [ 916.026232][T21256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.043048][T21256] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.132292][T13263] usb 10-1: new full-speed USB device number 15 using dummy_hcd [ 916.294560][T13263] usb 10-1: config 0 has no interfaces? [ 916.302949][T13263] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 916.313451][T13263] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.321623][T13263] usb 10-1: Product: syz [ 916.326148][T13263] usb 10-1: Manufacturer: syz [ 916.330875][T13263] usb 10-1: SerialNumber: syz [ 916.347118][T13263] usb 10-1: config 0 descriptor?? [ 916.585868][ T2090] usb 10-1: USB disconnect, device number 15 [ 917.276761][T21284] ieee802154 phy0 wpan0: encryption failed: -126 [ 917.291874][T21284] ieee802154 phy0 wpan0: encryption failed: -126 [ 917.662017][T13263] usb 7-1: new full-speed USB device number 51 using dummy_hcd [ 917.845711][T13263] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 917.856063][T13263] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 917.867100][T13263] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 917.876663][T13263] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 917.890410][T13263] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 917.902616][T13263] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 917.911818][T13263] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 917.921735][T13263] usb 7-1: Product: syz [ 917.926062][T13263] usb 7-1: Manufacturer: syz [ 917.938025][T13263] cdc_wdm 7-1:1.0: skipping garbage [ 917.947442][T13263] cdc_wdm 7-1:1.0: skipping garbage [ 917.955480][T13263] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 917.961476][T13263] cdc_wdm 7-1:1.0: Unknown control protocol [ 918.208794][ T5941] usb 9-1: USB disconnect, device number 52 [ 918.226542][ T5933] usb 7-1: USB disconnect, device number 51 [ 918.342082][ T2090] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 918.496877][ T2090] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 918.506518][ T2090] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.514982][ T2090] usb 10-1: Product: syz [ 918.519359][ T2090] usb 10-1: Manufacturer: syz [ 918.524201][ T2090] usb 10-1: SerialNumber: syz [ 918.531850][ T2090] usb 10-1: config 0 descriptor?? [ 918.582250][ T5941] usb 9-1: new full-speed USB device number 53 using dummy_hcd [ 918.741743][ T2090] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 918.757801][ T5941] usb 9-1: config 0 has no interfaces? [ 918.772807][ T5941] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 918.788340][ T5941] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.797105][ T5941] usb 9-1: Product: syz [ 918.801542][ T5941] usb 9-1: Manufacturer: syz [ 918.815796][ T5941] usb 9-1: SerialNumber: syz [ 918.826750][ T5941] usb 9-1: config 0 descriptor?? [ 919.052557][T13689] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 919.088056][T13690] usb 9-1: USB disconnect, device number 53 [ 919.202070][T13689] usb 7-1: Using ep0 maxpacket: 32 [ 919.209612][T13689] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 919.218431][T13689] usb 7-1: config 0 has no interface number 0 [ 919.224722][T13689] usb 7-1: config 0 interface 89 has no altsetting 0 [ 919.234700][T13689] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 919.244006][T13689] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.252903][T13689] usb 7-1: Product: syz [ 919.257142][T13689] usb 7-1: Manufacturer: syz [ 919.262124][T13689] usb 7-1: SerialNumber: syz [ 919.269534][T13689] usb 7-1: config 0 descriptor?? [ 919.279921][T13689] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 919.290072][T13689] em28xx 7-1:0.89: Video interface 89 found: bulk [ 919.887451][T13689] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 920.097576][T21308] fuse: Unknown parameter '' [ 920.161349][ T2090] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 920.181279][ T2090] usb 10-1: USB disconnect, device number 16 [ 920.509482][T21300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.520818][T21300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.550079][T13689] em28xx 7-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 920.562934][T13689] em28xx 7-1:0.89: board has no eeprom [ 920.832945][T13689] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 920.840366][T13689] em28xx 7-1:0.89: analog set to bulk mode. [ 920.850535][T13690] em28xx 7-1:0.89: Registering V4L2 extension [ 920.870385][T13689] usb 7-1: USB disconnect, device number 52 [ 920.898771][T13689] em28xx 7-1:0.89: Disconnecting em28xx [ 920.953880][T13690] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 920.961185][T13690] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 920.968830][ T2090] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 920.979342][T13690] em28xx 7-1:0.89: No AC97 audio processor [ 921.001059][T13690] usb 7-1: Decoder not found [ 921.009196][T13690] em28xx 7-1:0.89: failed to create media graph [ 921.017672][T13690] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 921.029933][T13690] em28xx 7-1:0.89: Registering snapshot button... [ 921.040771][T13690] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input63 [ 921.060904][T13690] em28xx 7-1:0.89: Remote control support is not available for this card. [ 921.070721][T13689] em28xx 7-1:0.89: Closing input extension [ 921.081579][T13689] em28xx 7-1:0.89: Deregistering snapshot button [ 921.120337][T13689] em28xx 7-1:0.89: Freeing device [ 921.147375][ T2090] usb 5-1: config 0 has no interfaces? [ 921.169105][ T2090] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 921.192128][ T2090] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.200186][ T2090] usb 5-1: Product: syz [ 921.219388][ T2090] usb 5-1: Manufacturer: syz [ 921.237111][ T2090] usb 5-1: SerialNumber: syz [ 921.268658][ T2090] usb 5-1: config 0 descriptor?? [ 921.347439][T21331] FAULT_INJECTION: forcing a failure. [ 921.347439][T21331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 921.361186][T21331] CPU: 1 UID: 0 PID: 21331 Comm: syz.8.4822 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 921.361216][T21331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 921.361230][T21331] Call Trace: [ 921.361239][T21331] [ 921.361248][T21331] dump_stack_lvl+0x189/0x250 [ 921.361282][T21331] ? __pfx____ratelimit+0x10/0x10 [ 921.361312][T21331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 921.361342][T21331] ? __pfx__printk+0x10/0x10 [ 921.361385][T21331] should_fail_ex+0x414/0x560 [ 921.361416][T21331] strncpy_from_user+0x36/0x290 [ 921.361447][T21331] getname_flags+0xf3/0x540 [ 921.361472][T21331] do_sys_openat2+0xbc/0x1c0 [ 921.361499][T21331] ? __pfx_do_sys_openat2+0x10/0x10 [ 921.361522][T21331] ? ksys_write+0x22a/0x250 [ 921.361552][T21331] ? __pfx_ksys_write+0x10/0x10 [ 921.361577][T21331] ? rcu_is_watching+0x15/0xb0 [ 921.361608][T21331] __x64_sys_openat+0x138/0x170 [ 921.361636][T21331] do_syscall_64+0xfa/0x3b0 [ 921.361666][T21331] ? lockdep_hardirqs_on+0x9c/0x150 [ 921.361696][T21331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.361717][T21331] ? clear_bhb_loop+0x60/0xb0 [ 921.361743][T21331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.361773][T21331] RIP: 0033:0x7fb4ead8e9a9 [ 921.361792][T21331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 921.361811][T21331] RSP: 002b:00007fb4ebc97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 921.361834][T21331] RAX: ffffffffffffffda RBX: 00007fb4eafb5fa0 RCX: 00007fb4ead8e9a9 [ 921.361850][T21331] RDX: 0000000000000000 RSI: 0000200000004280 RDI: ffffffffffffff9c [ 921.361864][T21331] RBP: 00007fb4ebc97090 R08: 0000000000000000 R09: 0000000000000000 [ 921.361878][T21331] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 921.361895][T21331] R13: 0000000000000000 R14: 00007fb4eafb5fa0 R15: 00007ffc2eafe6d8 [ 921.361926][T21331] [ 921.601844][T13689] usb 5-1: USB disconnect, device number 107 [ 922.203180][T21354] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 922.222056][T21354] Error validating options; rc = [-22] [ 922.252241][ T2090] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 922.419055][ T2090] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.442808][ T2090] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 922.472530][ T2090] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 922.481712][ T2090] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.505822][T13263] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 922.506980][ T2090] usb 7-1: config 0 descriptor?? [ 922.686449][T13263] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 922.705370][T13263] usb 5-1: config 0 has no interface number 1 [ 922.721834][T13263] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 922.741572][T13263] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.782936][T13263] usb 5-1: config 0 descriptor?? [ 923.012235][T13263] qcserial 5-1:0.2: Qualcomm USB modem converter detected [ 923.120291][T21377] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4840'. [ 923.143747][ T2090] usbhid 7-1:0.0: can't add hid device: -71 [ 923.149871][ T2090] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 923.170888][ T2090] usb 7-1: USB disconnect, device number 53 [ 923.217557][ T5941] usb 5-1: USB disconnect, device number 108 [ 923.230515][ T5941] qcserial 5-1:0.2: device disconnected [ 923.312139][T13689] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 923.476450][T13689] usb 10-1: config 0 has no interfaces? [ 923.494436][T13689] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 923.503946][T13689] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.512597][T13689] usb 10-1: Product: syz [ 923.520527][T13689] usb 10-1: Manufacturer: syz [ 923.530523][T13689] usb 10-1: SerialNumber: syz [ 923.543385][T13689] usb 10-1: config 0 descriptor?? [ 923.796079][T21390] binder_alloc: 21389: binder_alloc_buf size 1052672 failed, no address space [ 923.808905][T13689] usb 10-1: USB disconnect, device number 17 [ 923.815887][T21390] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 923.832592][ T5941] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 923.897627][T21392] tipc: Enabling of bearer rejected, already enabled [ 924.012289][ T5941] usb 9-1: Using ep0 maxpacket: 32 [ 924.025112][ T5941] usb 9-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 924.043169][ T5941] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.068932][ T5941] usb 9-1: config 0 descriptor?? [ 924.103481][ T5941] as10x_usb: device has been detected [ 924.135788][ T5941] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 924.210576][ T5941] usb 9-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 924.281768][ T5941] as10x_usb: error during firmware upload part1 [ 924.315703][ T5941] Registered device nBox DVB-T Dongle [ 924.324331][ T5941] usb 9-1: USB disconnect, device number 54 [ 924.440859][ T5941] Unregistered device nBox DVB-T Dongle [ 924.447230][ T5941] as10x_usb: device has been disconnected [ 924.721556][T21400] ieee802154 phy0 wpan0: encryption failed: -126 [ 924.738077][T21400] ieee802154 phy0 wpan0: encryption failed: -126 [ 925.183816][T21404] cgroup: Invalid name [ 925.309900][T21404] /dev/rnullb0: Can't open blockdev [ 926.153339][ T5941] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 926.356345][ T5941] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 926.385991][ T5941] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 926.424803][ T5941] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 926.450383][ T5941] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.483084][ T5941] usb 9-1: Product: syz [ 926.500790][ T5941] usb 9-1: Manufacturer: syz [ 926.515187][ T5941] usb 9-1: SerialNumber: syz [ 926.541636][ T5941] usb 9-1: config 0 descriptor?? [ 927.162329][T13689] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 927.183496][T21416] FAULT_INJECTION: forcing a failure. [ 927.183496][T21416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 927.255013][T21416] CPU: 0 UID: 0 PID: 21416 Comm: syz.8.4854 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 927.255044][T21416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 927.255057][T21416] Call Trace: [ 927.255066][T21416] [ 927.255076][T21416] dump_stack_lvl+0x189/0x250 [ 927.255110][T21416] ? __pfx____ratelimit+0x10/0x10 [ 927.255141][T21416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 927.255170][T21416] ? __pfx__printk+0x10/0x10 [ 927.255200][T21416] ? __might_fault+0xb0/0x130 [ 927.255249][T21416] should_fail_ex+0x414/0x560 [ 927.255282][T21416] _copy_from_user+0x2d/0xb0 [ 927.255307][T21416] core_sys_select+0x604/0xa20 [ 927.255348][T21416] ? __pfx_core_sys_select+0x10/0x10 [ 927.255404][T21416] ? __pfx_set_user_sigmask+0x10/0x10 [ 927.255443][T21416] __se_sys_pselect6+0x27a/0x300 [ 927.255478][T21416] ? __pfx___se_sys_pselect6+0x10/0x10 [ 927.255508][T21416] ? __pfx_ksys_write+0x10/0x10 [ 927.255533][T21416] ? rcu_is_watching+0x15/0xb0 [ 927.255563][T21416] ? __x64_sys_pselect6+0x21/0xf0 [ 927.255594][T21416] do_syscall_64+0xfa/0x3b0 [ 927.255624][T21416] ? lockdep_hardirqs_on+0x9c/0x150 [ 927.255653][T21416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.255673][T21416] ? clear_bhb_loop+0x60/0xb0 [ 927.255699][T21416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.255719][T21416] RIP: 0033:0x7fb4ead8e9a9 [ 927.255737][T21416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 927.255755][T21416] RSP: 002b:00007fb4ebc55038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 927.255777][T21416] RAX: ffffffffffffffda RBX: 00007fb4eafb6160 RCX: 00007fb4ead8e9a9 [ 927.255793][T21416] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 927.255807][T21416] RBP: 00007fb4ebc55090 R08: 0000000000000000 R09: 0000000000000000 [ 927.255820][T21416] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 927.255834][T21416] R13: 0000000000000000 R14: 00007fb4eafb6160 R15: 00007ffc2eafe6d8 [ 927.255863][T21416] [ 927.345141][T13689] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 927.349439][ C0] vkms_vblank_simulate: vblank timer overrun [ 927.362165][T13689] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 927.502191][ T5941] usb 7-1: new full-speed USB device number 54 using dummy_hcd [ 927.583964][T13689] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 927.597095][T13263] usb 9-1: USB disconnect, device number 55 [ 927.614901][T13689] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.635640][T13689] usb 10-1: Product: syz [ 927.639960][T13689] usb 10-1: Manufacturer: syz [ 927.652282][T13689] usb 10-1: SerialNumber: syz [ 927.656184][ T5941] usb 7-1: config 0 has no interfaces? [ 927.664828][ T5941] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 927.676184][T13689] usb 10-1: config 0 descriptor?? [ 927.679964][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.714009][ T5941] usb 7-1: Product: syz [ 927.718477][ T5941] usb 7-1: Manufacturer: syz [ 927.731999][ T5941] usb 7-1: SerialNumber: syz [ 927.748452][ T5941] usb 7-1: config 0 descriptor?? [ 927.923538][ T51] Bluetooth: hci0: unexpected event for opcode 0x0c24 [ 928.034549][ T5941] usb 7-1: USB disconnect, device number 54 [ 928.432075][T13689] usb 9-1: new full-speed USB device number 56 using dummy_hcd [ 928.482447][T13690] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 928.601093][T13689] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 928.620711][T13689] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.638884][T13689] usb 9-1: Product: syz [ 928.648896][T13689] usb 9-1: Manufacturer: syz [ 928.656966][T13690] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 928.672083][T13689] usb 9-1: SerialNumber: syz [ 928.678006][T13690] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 928.705194][T13689] usb 9-1: config 0 descriptor?? [ 928.738691][T13690] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 928.748657][T21438] tipc: Enabling of bearer rejected, already enabled [ 928.761220][T13690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 928.769631][T13690] usb 5-1: Product: syz [ 928.774162][T13690] usb 5-1: Manufacturer: syz [ 928.778919][T13690] usb 5-1: SerialNumber: syz [ 928.931607][T13689] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 929.062818][T13690] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 109 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 929.269168][T21433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.298209][T21433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.380955][T13690] usb 10-1: USB disconnect, device number 18 [ 929.869012][T21440] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 930.342442][T13689] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 930.409539][T13689] usb 9-1: USB disconnect, device number 56 [ 931.552771][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.559242][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.765980][T13689] usb 5-1: USB disconnect, device number 109 [ 931.925065][T13689] usblp0: removed [ 932.855173][T21471] nfs: Unknown parameter ' ' [ 932.962188][T13689] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 933.021827][T21475] ieee802154 phy0 wpan0: encryption failed: -126 [ 933.028656][T21475] ieee802154 phy0 wpan0: encryption failed: -126 [ 933.112417][T13690] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 933.124520][T13689] usb 5-1: config 0 has no interfaces? [ 933.146188][T13689] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 933.156428][T13689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.164815][T13689] usb 5-1: Product: syz [ 933.172100][T13689] usb 5-1: Manufacturer: syz [ 933.176758][T13689] usb 5-1: SerialNumber: syz [ 933.192657][T13689] usb 5-1: config 0 descriptor?? [ 933.252079][T13690] usb 10-1: device descriptor read/64, error -71 [ 933.389144][T21483] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 933.445017][T13689] usb 5-1: USB disconnect, device number 110 [ 933.468016][ T55] block nbd0: Possible stuck request ffff888025530000: control (read@0,1024B). Runtime 60 seconds [ 933.482184][ T55] block nbd0: Possible stuck request ffff8880255301c0: control (read@1024,1024B). Runtime 60 seconds [ 933.493946][T13690] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 933.495187][ T55] block nbd0: Possible stuck request ffff888025530380: control (read@2048,1024B). Runtime 60 seconds [ 933.513777][ T55] block nbd0: Possible stuck request ffff888025530540: control (read@3072,1024B). Runtime 60 seconds [ 933.652330][T13690] usb 10-1: device descriptor read/64, error -71 [ 933.773753][T13690] usb usb10-port1: attempt power cycle [ 933.855823][T21500] FAULT_INJECTION: forcing a failure. [ 933.855823][T21500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 933.875587][T21500] CPU: 0 UID: 0 PID: 21500 Comm: syz.8.4892 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 933.875617][T21500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 933.875630][T21500] Call Trace: [ 933.875638][T21500] [ 933.875647][T21500] dump_stack_lvl+0x189/0x250 [ 933.875686][T21500] ? __pfx____ratelimit+0x10/0x10 [ 933.875733][T21500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 933.875761][T21500] ? __pfx__printk+0x10/0x10 [ 933.875803][T21500] should_fail_ex+0x414/0x560 [ 933.875835][T21500] _copy_to_user+0x31/0xb0 [ 933.875862][T21500] simple_read_from_buffer+0xe1/0x170 [ 933.875898][T21500] proc_fail_nth_read+0x1b3/0x220 [ 933.875925][T21500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 933.875951][T21500] ? rw_verify_area+0x2a6/0x4d0 [ 933.875977][T21500] ? __lock_acquire+0xab9/0xd20 [ 933.875999][T21500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 933.876024][T21500] vfs_read+0x1fd/0x980 [ 933.876049][T21500] ? fdget_pos+0x247/0x320 [ 933.876071][T21500] ? __pfx___mutex_lock+0x10/0x10 [ 933.876102][T21500] ? __pfx_vfs_read+0x10/0x10 [ 933.876131][T21500] ? __fget_files+0x2a/0x420 [ 933.876166][T21500] ? __fget_files+0x3a0/0x420 [ 933.876195][T21500] ? __fget_files+0x2a/0x420 [ 933.876235][T21500] ksys_read+0x145/0x250 [ 933.876266][T21500] ? __pfx_ksys_read+0x10/0x10 [ 933.876290][T21500] ? rcu_is_watching+0x15/0xb0 [ 933.876323][T21500] ? do_syscall_64+0xbe/0x3b0 [ 933.876359][T21500] do_syscall_64+0xfa/0x3b0 [ 933.876389][T21500] ? lockdep_hardirqs_on+0x9c/0x150 [ 933.876418][T21500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.876440][T21500] ? clear_bhb_loop+0x60/0xb0 [ 933.876467][T21500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.876487][T21500] RIP: 0033:0x7fb4ead8d3bc [ 933.876505][T21500] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 933.876524][T21500] RSP: 002b:00007fb4ebc97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 933.876546][T21500] RAX: ffffffffffffffda RBX: 00007fb4eafb5fa0 RCX: 00007fb4ead8d3bc [ 933.876561][T21500] RDX: 000000000000000f RSI: 00007fb4ebc970a0 RDI: 0000000000000005 [ 933.876574][T21500] RBP: 00007fb4ebc97090 R08: 0000000000000000 R09: 0000000000000000 [ 933.876587][T21500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 933.876600][T21500] R13: 0000000000000000 R14: 00007fb4eafb5fa0 R15: 00007ffc2eafe6d8 [ 933.876633][T21500] [ 934.192077][T13690] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 934.242803][T13690] usb 10-1: device descriptor read/8, error -71 [ 934.479766][T21514] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 934.502155][T13690] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 934.539613][T13690] usb 10-1: device descriptor read/8, error -71 [ 934.690622][T13690] usb usb10-port1: unable to enumerate USB device [ 934.903246][ T5933] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 935.064337][ T5933] usb 9-1: config 0 interface 0 has no altsetting 0 [ 935.071237][ T5933] usb 9-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 935.081007][ T5933] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.106729][ T5933] usb 9-1: config 0 descriptor?? [ 935.523078][ T5933] zeroplus 0003:0C12:0005.001A: item fetching failed at offset 0/3 [ 935.532359][ T5933] zeroplus 0003:0C12:0005.001A: parse failed [ 935.538481][ T5933] zeroplus 0003:0C12:0005.001A: probe with driver zeroplus failed with error -22 [ 935.582181][T13690] usb 7-1: new full-speed USB device number 55 using dummy_hcd [ 935.723946][T21520] tmpfs: Unknown parameter '0x0000000000000003' [ 935.731134][T21520] lo: left promiscuous mode [ 935.745736][T21520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.762262][T13690] usb 7-1: config 0 has no interfaces? [ 935.772827][T13690] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 935.786536][T21520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.794935][T13690] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.805755][T13690] usb 7-1: Product: syz [ 935.810577][T13690] usb 7-1: Manufacturer: syz [ 935.816171][T13690] usb 7-1: SerialNumber: syz [ 935.825011][T13690] usb 7-1: config 0 descriptor?? [ 936.029470][T13689] usb 9-1: USB disconnect, device number 57 [ 936.085575][T20726] usb 7-1: USB disconnect, device number 55 [ 936.118423][T21545] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 936.282083][T13690] usb 10-1: new low-speed USB device number 23 using dummy_hcd [ 936.336468][T21551] bridge0: port 3(syz_tun) entered blocking state [ 936.346339][T21551] bridge0: port 3(syz_tun) entered disabled state [ 936.353344][T21551] syz_tun: entered allmulticast mode [ 936.361427][T21551] syz_tun: entered promiscuous mode [ 936.373765][T21551] bridge0: port 3(syz_tun) entered blocking state [ 936.380782][T21551] bridge0: port 3(syz_tun) entered forwarding state [ 936.433687][T13690] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 936.447463][T13690] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 936.456747][T13690] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 936.466260][T13690] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.477491][T13690] usb 10-1: config 0 descriptor?? [ 936.740411][T21565] ieee802154 phy0 wpan0: encryption failed: -126 [ 936.752772][T21565] ieee802154 phy0 wpan0: encryption failed: -126 [ 936.843730][T21572] FAULT_INJECTION: forcing a failure. [ 936.843730][T21572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 936.849000][T21571] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4921'. [ 936.857437][T21572] CPU: 0 UID: 0 PID: 21572 Comm: syz.6.4920 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 936.857467][T21572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 936.857481][T21572] Call Trace: [ 936.857489][T21572] [ 936.857498][T21572] dump_stack_lvl+0x189/0x250 [ 936.857536][T21572] ? __pfx____ratelimit+0x10/0x10 [ 936.857573][T21572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 936.857606][T21572] ? __pfx__printk+0x10/0x10 [ 936.857639][T21572] ? __might_fault+0xb0/0x130 [ 936.857680][T21572] should_fail_ex+0x414/0x560 [ 936.857716][T21572] _copy_from_iter+0x1db/0x16f0 [ 936.857745][T21572] ? rcu_is_watching+0x15/0xb0 [ 936.857778][T21572] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 936.857808][T21572] ? __pfx__copy_from_iter+0x10/0x10 [ 936.857847][T21572] ? __build_skb_around+0x257/0x3e0 [ 936.857875][T21572] ? netlink_sendmsg+0x642/0xb30 [ 936.857910][T21572] ? skb_put+0x11b/0x210 [ 936.857938][T21572] netlink_sendmsg+0x6b2/0xb30 [ 936.857984][T21572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 936.858025][T21572] ? aa_sock_msg_perm+0xf1/0x1d0 [ 936.858062][T21572] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 936.858106][T21572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 936.858144][T21572] __sock_sendmsg+0x219/0x270 [ 936.858180][T21572] ____sys_sendmsg+0x505/0x830 [ 936.858212][T21572] ? __pfx_____sys_sendmsg+0x10/0x10 [ 936.858249][T21572] ? import_iovec+0x74/0xa0 [ 936.858280][T21572] ___sys_sendmsg+0x21f/0x2a0 [ 936.858309][T21572] ? __pfx____sys_sendmsg+0x10/0x10 [ 936.858375][T21572] ? __fget_files+0x2a/0x420 [ 936.858409][T21572] ? __fget_files+0x3a0/0x420 [ 936.858456][T21572] __x64_sys_sendmsg+0x19b/0x260 [ 936.858485][T21572] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 936.858523][T21572] ? __pfx_ksys_write+0x10/0x10 [ 936.858551][T21572] ? rcu_is_watching+0x15/0xb0 [ 936.858586][T21572] ? do_syscall_64+0xbe/0x3b0 [ 936.858625][T21572] do_syscall_64+0xfa/0x3b0 [ 936.858659][T21572] ? lockdep_hardirqs_on+0x9c/0x150 [ 936.858692][T21572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.858714][T21572] ? clear_bhb_loop+0x60/0xb0 [ 936.858742][T21572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.858766][T21572] RIP: 0033:0x7fc65e78e9a9 [ 936.858788][T21572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.858810][T21572] RSP: 002b:00007fc65f611038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 936.858836][T21572] RAX: ffffffffffffffda RBX: 00007fc65e9b5fa0 RCX: 00007fc65e78e9a9 [ 936.858853][T21572] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 936.858868][T21572] RBP: 00007fc65f611090 R08: 0000000000000000 R09: 0000000000000000 [ 936.858884][T21572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.858897][T21572] R13: 0000000000000000 R14: 00007fc65e9b5fa0 R15: 00007fff1230b6d8 [ 936.858933][T21572] [ 937.634114][T21595] ieee802154 phy0 wpan0: encryption failed: -126 [ 937.640643][T21595] ieee802154 phy0 wpan0: encryption failed: -126 [ 937.662654][ T5941] usb 7-1: new full-speed USB device number 56 using dummy_hcd [ 937.717905][T21598] gfs2: not a GFS2 filesystem [ 937.817333][ T5941] usb 7-1: config 0 has no interfaces? [ 937.831302][T21601] tipc: Enabling of bearer rejected, already enabled [ 938.781158][ T5941] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 938.798606][ T5941] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 938.807176][ T5941] usb 7-1: Product: syz [ 938.811371][ T5941] usb 7-1: Manufacturer: syz [ 938.816432][ T5941] usb 7-1: SerialNumber: syz [ 940.119053][T13690] usb 10-1: USB disconnect, device number 23 [ 940.238211][ T30] kauditd_printk_skb: 89 callbacks suppressed [ 940.238230][ T30] audit: type=1326 audit(940.198:4530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21606 comm="syz.9.4932" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f167a38e9a9 code=0x0 [ 940.799831][ T5941] usb 7-1: config 0 descriptor?? [ 941.192066][ T5941] usb 7-1: can't set config #0, error -71 [ 941.202913][ T5941] usb 7-1: USB disconnect, device number 56 [ 941.577854][T21623] ieee802154 phy0 wpan0: encryption failed: -126 [ 941.601046][T21625] netlink: 1041 bytes leftover after parsing attributes in process `syz.8.4939'. [ 941.601871][T21623] ieee802154 phy0 wpan0: encryption failed: -126 [ 941.962118][T13690] usb 10-1: new low-speed USB device number 24 using dummy_hcd [ 942.002016][T20726] usb 7-1: new full-speed USB device number 57 using dummy_hcd [ 942.102147][ T2090] usb 9-1: new full-speed USB device number 58 using dummy_hcd [ 942.114026][T13690] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.124403][T13690] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 942.133926][T13690] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 942.143812][T13690] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.160150][T13690] usb 10-1: config 0 descriptor?? [ 942.170298][T20726] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 942.180910][T20726] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.189032][T20726] usb 7-1: Product: syz [ 942.193349][T20726] usb 7-1: Manufacturer: syz [ 942.197956][T20726] usb 7-1: SerialNumber: syz [ 942.205699][T20726] usb 7-1: config 0 descriptor?? [ 942.254230][ T2090] usb 9-1: config 0 has no interfaces? [ 942.264504][ T2090] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 942.273799][ T2090] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.281833][ T2090] usb 9-1: Product: syz [ 942.286498][ T2090] usb 9-1: Manufacturer: syz [ 942.291183][ T2090] usb 9-1: SerialNumber: syz [ 942.299037][ T2090] usb 9-1: config 0 descriptor?? [ 942.416462][T20726] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 942.523911][ T2090] usb 9-1: USB disconnect, device number 58 [ 943.514025][T21647] ieee802154 phy0 wpan0: encryption failed: -126 [ 943.520547][T21647] ieee802154 phy0 wpan0: encryption failed: -126 [ 943.596217][T21649] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4949'. [ 943.605634][T21649] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4949'. [ 944.026710][T20726] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 944.058442][T20726] usb 7-1: USB disconnect, device number 57 [ 944.678597][T21662] binder: BINDER_SET_CONTEXT_MGR already set [ 944.684986][T21662] binder: 21659:21662 ioctl 4018620d 200000000140 returned -16 [ 944.694626][T21662] binder: 21659:21662 ioctl c0306201 200000000440 returned -22 [ 944.772159][T14002] usb 9-1: new full-speed USB device number 59 using dummy_hcd [ 944.949088][T14002] usb 9-1: config 0 has no interfaces? [ 944.956843][T14002] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 944.966206][T14002] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.975212][T14002] usb 9-1: Product: syz [ 944.980713][T14002] usb 9-1: Manufacturer: syz [ 944.985832][T14002] usb 9-1: SerialNumber: syz [ 944.995988][T14002] usb 9-1: config 0 descriptor?? [ 945.224074][T20726] usb 9-1: USB disconnect, device number 59 [ 945.290207][ T2090] usb 10-1: USB disconnect, device number 24 [ 945.552026][ T5941] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 945.617782][T21674] ieee802154 phy0 wpan0: encryption failed: -126 [ 945.627994][T21674] ieee802154 phy0 wpan0: encryption failed: -126 [ 945.719754][ T5941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 945.804864][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.972676][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.002286][ T5941] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 946.021983][ T5941] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 946.031175][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.063807][ T5941] usb 5-1: config 0 descriptor?? [ 946.102822][T14002] usb 7-1: new full-speed USB device number 58 using dummy_hcd [ 946.280553][T14002] usb 7-1: device descriptor read/64, error -71 [ 946.289386][T21665] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4953'. [ 946.413390][T13263] usb 9-1: new full-speed USB device number 60 using dummy_hcd [ 946.501130][T21665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.510750][T21665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.526151][ T5941] keytouch 0003:0926:3333.001B: fixing up Keytouch IEC report descriptor [ 946.540616][ T5941] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.001B/input/input64 [ 946.553944][T14002] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 946.602172][ T5933] usb 10-1: new low-speed USB device number 25 using dummy_hcd [ 946.615622][T13263] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 946.632393][T13263] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.640443][T13263] usb 9-1: Product: syz [ 946.657569][T13263] usb 9-1: Manufacturer: syz [ 946.665554][ T5941] keytouch 0003:0926:3333.001B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 946.682288][T13263] usb 9-1: SerialNumber: syz [ 946.702041][T14002] usb 7-1: device descriptor read/64, error -71 [ 946.709548][T13263] usb 9-1: config 0 descriptor?? [ 946.746824][T20726] usb 5-1: USB disconnect, device number 111 [ 946.786089][ T5933] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 946.797348][ T5933] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 946.806894][ T5933] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 946.816983][T14002] usb usb7-port1: attempt power cycle [ 946.826981][T21688] fido_id[21688]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 946.830872][ T5933] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.863981][ T5933] usb 10-1: config 0 descriptor?? [ 946.920522][T13263] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 947.192051][T14002] usb 7-1: new full-speed USB device number 60 using dummy_hcd [ 947.242648][T14002] usb 7-1: device descriptor read/8, error -71 [ 947.366575][T21691] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4964'. [ 947.493133][T14002] usb 7-1: new full-speed USB device number 61 using dummy_hcd [ 947.523647][T14002] usb 7-1: device descriptor read/8, error -71 [ 947.646144][T14002] usb usb7-port1: unable to enumerate USB device [ 947.827146][T21699] ieee802154 phy0 wpan0: encryption failed: -126 [ 947.835833][T21699] ieee802154 phy0 wpan0: encryption failed: -126 [ 948.142178][T14002] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 948.304203][T14002] usb 5-1: config 0 has no interfaces? [ 948.311657][T14002] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 948.321639][T14002] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.329791][T14002] usb 5-1: Product: syz [ 948.334514][T14002] usb 5-1: Manufacturer: syz [ 948.339384][T14002] usb 5-1: SerialNumber: syz [ 948.348412][T14002] usb 5-1: config 0 descriptor?? [ 948.540456][T13263] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 948.571151][T13263] usb 9-1: USB disconnect, device number 60 [ 948.607800][T20726] usb 5-1: USB disconnect, device number 112 [ 949.332961][T21723] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4978'. [ 949.392232][ T2090] usb 9-1: new low-speed USB device number 61 using dummy_hcd [ 949.573771][ T2090] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 949.604709][ T2090] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 949.625932][ T2090] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 949.649794][ T2090] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 949.665650][ T2090] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 949.682667][ T2090] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 949.700833][ T2090] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 949.726815][ T2090] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 949.751188][ T2090] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 949.778437][ T2090] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 949.834099][ T2090] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 949.841605][ T2090] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 949.874055][ T2090] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 949.892089][ T2090] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 949.921940][ T2090] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 949.954786][ T2090] usb 9-1: string descriptor 0 read error: -22 [ 949.961157][ T2090] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 949.997135][ T2090] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.044040][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 950.061173][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 950.068430][ T2090] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 950.079569][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 950.106875][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 950.115077][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 950.137271][ T2090] usb 10-1: USB disconnect, device number 25 [ 950.194094][T21733] wg0 speed is unknown, defaulting to 1000 [ 950.290095][ T1145] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.371728][ T1145] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.433674][ T1145] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.494979][ T1145] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.523845][ T43] usb 9-1: USB disconnect, device number 61 [ 950.572121][ T2090] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 950.789547][ T2090] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 950.815685][ T2090] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.841112][ T2090] usb 10-1: Product: syz [ 950.857307][ T2090] usb 10-1: Manufacturer: syz [ 950.873780][ T2090] usb 10-1: SerialNumber: syz [ 950.907396][T21743] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4983'. [ 950.939383][ T1145] bridge_slave_1: left allmulticast mode [ 950.944651][ T2090] usb 10-1: config 0 descriptor?? [ 950.961625][ T1145] bridge_slave_1: left promiscuous mode [ 950.971026][ T1145] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.993189][ T1145] bridge_slave_0: left allmulticast mode [ 950.999367][ T1145] bridge_slave_0: left promiscuous mode [ 951.012991][ T1145] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.159395][ T2090] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 951.288711][T13690] usb 9-1: new full-speed USB device number 62 using dummy_hcd [ 951.364617][ T1145] team0: Port device geneve0 removed [ 951.389822][ T1145] bridge0 (unregistering): left allmulticast mode [ 951.443891][T13690] usb 9-1: config 0 has no interfaces? [ 951.451578][T13690] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 951.461079][T13690] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.469952][T13690] usb 9-1: Product: syz [ 951.474910][T13690] usb 9-1: Manufacturer: syz [ 951.479571][T13690] usb 9-1: SerialNumber: syz [ 951.488410][T13690] usb 9-1: config 0 descriptor?? [ 951.637214][ T1145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 951.649871][ T1145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 951.663495][ T1145] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 951.679830][ T1145] bond0 (unregistering): Released all slaves [ 951.697132][T21733] chnl_net:caif_netlink_parms(): no params data found [ 951.735135][T13690] usb 9-1: USB disconnect, device number 62 [ 951.741103][ T1322] tipc: Resetting bearer [ 951.866077][T21733] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.874057][T21733] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.881329][T21733] bridge_slave_0: entered allmulticast mode [ 951.890221][T21733] bridge_slave_0: entered promiscuous mode [ 951.900160][T21733] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.908145][T21733] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.915916][T21733] bridge_slave_1: entered allmulticast mode [ 951.924052][T21733] bridge_slave_1: entered promiscuous mode [ 951.970662][T21733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.987295][T21733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.041089][T21733] team0: Port device team_slave_0 added [ 952.053231][T21733] team0: Port device team_slave_1 added [ 952.139094][T21733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.147892][T21733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.173891][ C1] vkms_vblank_simulate: vblank timer overrun [ 952.182597][ T51] Bluetooth: hci1: command tx timeout [ 952.193063][T21733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.216829][T21733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.224671][T21733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 952.262936][T21733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.469975][T21733] hsr_slave_0: entered promiscuous mode [ 952.480792][T21733] hsr_slave_1: entered promiscuous mode [ 952.496989][T21733] debugfs: 'hsr0' already exists in 'hsr' [ 952.505154][T21733] Cannot create hsr debugfs directory [ 952.794923][ T2090] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 952.840657][ T2090] usb 10-1: USB disconnect, device number 26 [ 953.421582][T21733] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 953.515975][ T1145] tipc: Disabling bearer [ 953.525601][ T1145] tipc: Left network mode [ 953.542134][T21733] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 953.585984][T21733] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 953.652469][T21733] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 953.822461][ T2090] usb 5-1: new low-speed USB device number 113 using dummy_hcd [ 953.998436][ T2090] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 954.022667][ T2090] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 954.032219][T13263] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 954.046386][ T2090] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 954.058527][ T2090] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.093599][ T2090] usb 5-1: config 0 descriptor?? [ 954.117019][T21733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 954.196705][T21733] 8021q: adding VLAN 0 to HW filter on device team0 [ 954.214379][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 954.221724][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 954.236047][T13263] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 954.246793][T13263] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 954.258004][ T51] Bluetooth: hci1: command tx timeout [ 954.265209][T13263] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 954.277786][T13263] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 954.291058][T13263] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 954.302369][T13263] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.320740][T13263] usb 10-1: config 0 descriptor?? [ 954.326359][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state [ 954.333565][ T1322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.476770][ T1145] hsr_slave_0: left promiscuous mode [ 954.488260][ T1145] hsr_slave_1: left promiscuous mode [ 954.498422][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.508995][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.524380][ T1145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.533434][ T1145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.568245][ T1145] veth0_macvtap: left promiscuous mode [ 954.576614][ T1145] veth0_vlan: left promiscuous mode [ 954.679456][ T1145] pimreg3 (unregistering): left allmulticast mode [ 954.750382][T13263] keytouch 0003:0926:3333.001C: fixing up Keytouch IEC report descriptor [ 954.776990][T13263] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.001C/input/input65 [ 954.927586][T13263] keytouch 0003:0926:3333.001C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 954.984648][T13263] usb 10-1: USB disconnect, device number 27 [ 955.066278][T21799] fido_id[21799]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 955.381688][ T1145] team0 (unregistering): Port device team_slave_1 removed [ 955.433984][ T1145] team0 (unregistering): Port device team_slave_0 removed [ 955.792569][T20726] usb 10-1: new full-speed USB device number 28 using dummy_hcd [ 955.942519][T20726] usb 10-1: device descriptor read/64, error -71 [ 956.182106][T20726] usb 10-1: new full-speed USB device number 29 using dummy_hcd [ 956.257545][ T1145] vcan0 (unregistering): left allmulticast mode [ 956.312511][T20726] usb 10-1: device descriptor read/64, error -71 [ 956.332918][ T51] Bluetooth: hci1: command tx timeout [ 956.432673][T20726] usb usb10-port1: attempt power cycle [ 956.805449][T20726] usb 10-1: new full-speed USB device number 30 using dummy_hcd [ 956.833178][T20726] usb 10-1: device descriptor read/8, error -71 [ 956.849302][T21733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.866499][T21821] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20003 [ 956.880945][T21822] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20003 [ 957.082142][T20726] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 957.123700][T20726] usb 10-1: device descriptor read/8, error -71 [ 957.262617][T20726] usb usb10-port1: unable to enumerate USB device [ 957.282381][T14002] usb 5-1: USB disconnect, device number 113 [ 957.379016][T21838] x_tables: ip_tables: TPROXY.0 target: invalid size 16 (kernel) != (user) 24 [ 957.543732][T21733] veth0_vlan: entered promiscuous mode [ 957.570619][T21733] veth1_vlan: entered promiscuous mode [ 957.665705][T21842] wg0 speed is unknown, defaulting to 1000 [ 957.677363][T21733] veth0_macvtap: entered promiscuous mode [ 957.736763][T21733] veth1_macvtap: entered promiscuous mode [ 957.860781][T21733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 957.923645][T21733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.004067][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.023428][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.057107][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.069314][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.306945][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.327420][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.415882][ T51] Bluetooth: hci1: command tx timeout [ 958.429967][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.439510][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.272304][ T5933] usb 10-1: new full-speed USB device number 32 using dummy_hcd [ 959.334881][T20726] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 959.439269][ T5933] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 959.479678][ T5933] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.503565][ T5933] usb 10-1: Product: syz [ 959.507990][ T5933] usb 10-1: Manufacturer: syz [ 959.542709][ T5933] usb 10-1: SerialNumber: syz [ 959.584406][ T5933] usb 10-1: config 0 descriptor?? [ 959.688835][T20726] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 959.701795][T20726] usb 7-1: config 0 has no interface number 0 [ 959.730780][T20726] usb 7-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 959.751752][T20726] usb 7-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 959.775481][T20726] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 959.812305][T20726] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.818038][ T5933] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 959.820366][T20726] usb 7-1: Product: syz [ 959.820387][T20726] usb 7-1: Manufacturer: syz [ 959.820404][T20726] usb 7-1: SerialNumber: syz [ 959.848831][T20726] usb 7-1: config 0 descriptor?? [ 959.888381][T21874] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 959.902431][T21874] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 959.914740][T20726] smsc95xx v2.0.0 [ 960.140620][T21874] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 960.162161][T21874] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 960.373494][T20726] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 960.384570][T20726] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 960.532028][ T10] usb 5-1: new low-speed USB device number 114 using dummy_hcd [ 960.688338][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.698653][ T10] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 960.709299][ T10] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 960.718513][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.729913][ T10] usb 5-1: config 0 descriptor?? [ 961.426881][ T5933] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 961.440620][ T5933] usb 10-1: USB disconnect, device number 32 [ 962.818083][T20726] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 962.842025][T20726] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 962.864317][T20726] usb 7-1: USB disconnect, device number 62 [ 962.973973][T21922] NILFS (nbd9): device size too small [ 962.984246][T21922] NILFS (nbd9): device size too small [ 963.332363][ T5933] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 963.445842][T21934] ieee802154 phy0 wpan0: encryption failed: -126 [ 963.452512][T21934] ieee802154 phy0 wpan0: encryption failed: -126 [ 963.496157][ T5933] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 963.506583][ T5933] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.519232][ T5933] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 963.530760][ T5933] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 963.545403][ T55] block nbd0: Possible stuck request ffff888025530000: control (read@0,1024B). Runtime 90 seconds [ 963.556140][ T55] block nbd0: Possible stuck request ffff8880255301c0: control (read@1024,1024B). Runtime 90 seconds [ 963.567413][ T55] block nbd0: Possible stuck request ffff888025530380: control (read@2048,1024B). Runtime 90 seconds [ 963.578410][ T55] block nbd0: Possible stuck request ffff888025530540: control (read@3072,1024B). Runtime 90 seconds [ 963.598173][ T5933] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 963.616696][ T5933] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.628113][ T5933] usb 10-1: config 0 descriptor?? [ 963.698350][T21941] netlink: 'syz.6.5014': attribute type 83 has an invalid length. [ 963.761321][T21942] netlink: 'syz.6.5014': attribute type 83 has an invalid length. [ 963.858519][T21929] netlink: 84 bytes leftover after parsing attributes in process `syz.9.5009'. [ 963.878389][T20726] usb 5-1: USB disconnect, device number 114 [ 964.022340][ T43] usb 7-1: new low-speed USB device number 63 using dummy_hcd [ 964.078683][T21929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.090243][T21929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.101051][T21950] wg0 speed is unknown, defaulting to 1000 [ 964.109373][ T5933] keytouch 0003:0926:3333.001D: fixing up Keytouch IEC report descriptor [ 964.138417][ T5933] input: HID 0926:3333 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:0926:3333.001D/input/input67 [ 964.174338][ T43] usb 7-1: device descriptor read/64, error -71 [ 964.262571][ T5933] keytouch 0003:0926:3333.001D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.9-1/input0 [ 964.356471][T20726] usb 10-1: USB disconnect, device number 33 [ 964.488163][ T43] usb 7-1: new low-speed USB device number 64 using dummy_hcd [ 964.622291][ T43] usb 7-1: device descriptor read/64, error -71 [ 964.743796][ T43] usb usb7-port1: attempt power cycle [ 965.102028][ T43] usb 7-1: new low-speed USB device number 65 using dummy_hcd [ 965.144459][ T43] usb 7-1: device descriptor read/8, error -71 [ 965.272958][T20726] usb 10-1: new full-speed USB device number 34 using dummy_hcd [ 965.412218][ T43] usb 7-1: new low-speed USB device number 66 using dummy_hcd [ 965.432864][ T43] usb 7-1: device descriptor read/8, error -71 [ 965.465524][T20726] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 965.474232][T20726] usb 10-1: config 0 has no interface number 0 [ 965.480460][T20726] usb 10-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 965.492378][T20726] usb 10-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 965.506290][T20726] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 965.517986][T20726] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.531142][T20726] usb 10-1: Product: syz [ 965.539329][T20726] usb 10-1: Manufacturer: syz [ 965.544939][ T43] usb usb7-port1: unable to enumerate USB device [ 965.551435][T20726] usb 10-1: SerialNumber: syz [ 965.563344][T20726] usb 10-1: config 0 descriptor?? [ 965.569585][T21964] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 965.578416][T21964] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 965.591007][T20726] smsc95xx v2.0.0 [ 965.792430][T21964] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 965.799737][T21964] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 965.822134][ T43] usb 5-1: new full-speed USB device number 115 using dummy_hcd [ 965.985000][ T43] usb 5-1: config 0 has no interfaces? [ 965.994180][ T43] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 966.004166][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.014781][T20726] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 966.025797][ T43] usb 5-1: Product: syz [ 966.030419][ T43] usb 5-1: Manufacturer: syz [ 966.035169][T20726] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 966.044503][ T43] usb 5-1: SerialNumber: syz [ 966.051646][ T43] usb 5-1: config 0 descriptor?? [ 966.291120][ T43] usb 5-1: USB disconnect, device number 115 [ 966.778284][T21970] ieee802154 phy0 wpan0: encryption failed: -126 [ 966.787015][T21970] ieee802154 phy0 wpan0: encryption failed: -126 [ 967.085551][T21976] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 967.097166][T21976] VFS: Can't find a romfs filesystem on dev rnullb0. [ 967.097166][T21976] [ 967.142418][ T2090] usb 5-1: new low-speed USB device number 116 using dummy_hcd [ 967.295300][ T2090] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.306696][ T2090] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 967.315948][ T2090] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 967.325450][ T2090] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.337907][ T2090] usb 5-1: config 0 descriptor?? [ 967.343058][ T43] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 967.514904][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.525726][ T43] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 967.539800][ T43] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 967.548998][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.571733][ T43] usb 7-1: config 0 descriptor?? [ 967.988345][T21976] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 968.001084][ C0] Oops: divide error: 0000 [#1] SMP KASAN PTI [ 968.007164][ C0] CPU: 0 UID: 0 PID: 21976 Comm: syz.6.5024 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 968.018722][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 968.028799][ C0] RIP: 0010:comedi_inc_scan_progress+0x1a4/0x430 [ 968.035148][ C0] Code: b6 0c 19 84 c9 0f 85 bd 01 00 00 03 45 2c 4c 8d a5 80 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 cc 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 9b 84 cf f8 48 bb 00 00 00 [ 968.054783][ C0] RSP: 0018:ffffc90000007c80 EFLAGS: 00010046 [ 968.060858][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 968.068846][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 968.076818][ C0] RBP: ffff88807a4ad400 R08: dffffc0000000000 R09: 0000000000000000 [ 968.084790][ C0] R10: dffffc0000000000 R11: ffffed10093f3401 R12: ffff88807a4ad480 [ 968.092766][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: ffff88807a4ad42c [ 968.100738][ C0] FS: 00007f47001bb6c0(0000) GS:ffff8881257ab000(0000) knlGS:0000000000000000 [ 968.109688][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 968.116286][ C0] CR2: 000000110c240632 CR3: 0000000069d90000 CR4: 00000000003526f0 [ 968.124265][ C0] Call Trace: [ 968.127558][ C0] [ 968.130405][ C0] comedi_buf_write_samples+0x373/0x5a0 [ 968.135972][ C0] parport_interrupt+0xf3/0x150 [ 968.140834][ C0] ? __pfx_parport_interrupt+0x10/0x10 [ 968.146298][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 968.152634][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 968.159227][ C0] ? __pfx_parport_interrupt+0x10/0x10 [ 968.164691][ C0] __handle_irq_event_percpu+0x28c/0x980 [ 968.170345][ C0] ? __pfx___handle_irq_event_percpu+0x10/0x10 [ 968.176608][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 968.181815][ C0] handle_irq_event+0x8b/0x1e0 [ 968.186582][ C0] ? handle_edge_irq+0x25d/0x9e0 [ 968.191537][ C0] handle_edge_irq+0x267/0x9e0 [ 968.196321][ C0] __common_interrupt+0x143/0x250 [ 968.201384][ C0] common_interrupt+0xb6/0xe0 [ 968.206092][ C0] [ 968.209034][ C0] [ 968.211981][ C0] asm_common_interrupt+0x26/0x40 [ 968.217019][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 968.223621][ C0] Code: 74 05 e8 7b 98 45 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e3 46 0e f6 65 8b 05 4c 43 65 07 85 c0 74 40 48 c7 04 24 0e 36 [ 968.243239][ C0] RSP: 0018:ffffc9000b9ef9a0 EFLAGS: 00000206 [ 968.249327][ C0] RAX: b31f9da4858eca00 RBX: 0000000000000a02 RCX: b31f9da4858eca00 [ 968.257306][ C0] RDX: 0000000000000006 RSI: ffffffff8dc6a0fe RDI: 0000000000000001 [ 968.265369][ C0] RBP: ffffc9000b9efa30 R08: ffffffff8fe3cf37 R09: 1ffffffff1fc79e6 [ 968.273351][ C0] R10: dffffc0000000000 R11: fffffbfff1fc79e7 R12: dffffc0000000000 [ 968.281325][ C0] R13: dffffc0000000000 R14: ffffffff9a2700c0 R15: 1ffff9200173df34 [ 968.289483][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 968.295827][ C0] serial8250_config_port+0x1451/0x5370 [ 968.301387][ C0] ? __release_region+0x2d6/0x360 [ 968.306423][ C0] ? kfree+0x18e/0x440 [ 968.310503][ C0] ? __pfx_serial8250_config_port+0x10/0x10 [ 968.316406][ C0] ? __release_region+0x2d6/0x360 [ 968.321455][ C0] ? __pfx___release_region+0x10/0x10 [ 968.326853][ C0] univ8250_config_port+0x3d4/0x9a0 [ 968.332097][ C0] ? serial8250_release_std_resource+0x135/0x2e0 [ 968.338450][ C0] uart_ioctl+0x1354/0x19f0 [ 968.342969][ C0] ? __lock_acquire+0xab9/0xd20 [ 968.347833][ C0] ? __pfx_uart_ioctl+0x10/0x10 [ 968.352711][ C0] ? __fget_files+0x2a/0x420 [ 968.357313][ C0] ? __fget_files+0x3a0/0x420 [ 968.362011][ C0] ? __fget_files+0x2a/0x420 [ 968.366623][ C0] tty_ioctl+0x926/0xde0 [ 968.370864][ C0] ? __pfx_tty_ioctl+0x10/0x10 [ 968.375619][ C0] __se_sys_ioctl+0xf9/0x170 [ 968.380220][ C0] do_syscall_64+0xfa/0x3b0 [ 968.384756][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 968.389975][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.396051][ C0] ? clear_bhb_loop+0x60/0xb0 [ 968.400736][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 968.406652][ C0] RIP: 0033:0x7f46ff38e9a9 [ 968.411085][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 968.430690][ C0] RSP: 002b:00007f47001bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 968.439220][ C0] RAX: ffffffffffffffda RBX: 00007f46ff5b5fa0 RCX: 00007f46ff38e9a9 [ 968.447211][ C0] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 000000000000000a [ 968.455196][ C0] RBP: 00007f46ff410d69 R08: 0000000000000000 R09: 0000000000000000 [ 968.463178][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 968.471150][ C0] R13: 0000000000000000 R14: 00007f46ff5b5fa0 R15: 00007ffeca128fc8 [ 968.479137][ C0] [ 968.482192][ C0] Modules linked in: [ 968.486108][ C0] ---[ end trace 0000000000000000 ]--- [ 968.491567][ C0] RIP: 0010:comedi_inc_scan_progress+0x1a4/0x430 [ 968.497902][ C0] Code: b6 0c 19 84 c9 0f 85 bd 01 00 00 03 45 2c 4c 8d a5 80 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 cc 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 9b 84 cf f8 48 bb 00 00 00 [ 968.517597][ C0] RSP: 0018:ffffc90000007c80 EFLAGS: 00010046 [ 968.523675][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 968.531648][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 968.539618][ C0] RBP: ffff88807a4ad400 R08: dffffc0000000000 R09: 0000000000000000 [ 968.547592][ C0] R10: dffffc0000000000 R11: ffffed10093f3401 R12: ffff88807a4ad480 [ 968.555562][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: ffff88807a4ad42c [ 968.563536][ C0] FS: 00007f47001bb6c0(0000) GS:ffff8881257ab000(0000) knlGS:0000000000000000 [ 968.572470][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 968.579055][ C0] CR2: 000000110c240632 CR3: 0000000069d90000 CR4: 00000000003526f0 [ 968.587037][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 968.594627][ C0] Kernel Offset: disabled [ 968.598957][ C0] Rebooting in 86400 seconds..