last executing test programs: 2m56.279718334s ago: executing program 0 (id=896): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) poll(&(0x7f0000000100)=[{r1, 0x1040}], 0x1, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, &(0x7f0000000240)) 2m56.128188938s ago: executing program 0 (id=897): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x40) setxattr$security_ima(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000), &(0x7f0000000580)=ANY=[@ANYBLOB="0491"], 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000380)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './bus\x00'}) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)) (async) lstat(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x4}, [{0x2, 0x1, r2}, {0x2, 0x4, r3}, {0x2, 0x0, r4}], {0x4, 0x2}, [{0x8, 0x0, r5}], {0x10, 0x1}, {0x20, 0x2}}, 0x44, 0x2) (async) lsetxattr$system_posix_acl(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x4}, [{0x2, 0x1, r2}, {0x2, 0x4, r3}, {0x2, 0x0, r4}], {0x4, 0x2}, [{0x8, 0x0, r5}], {0x10, 0x1}, {0x20, 0x2}}, 0x44, 0x2) pipe2$9p(&(0x7f0000000180), 0xc80) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) (async) socket$inet_sctp(0x2, 0x0, 0x84) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x18682, 0x0) syz_open_dev$I2C(&(0x7f0000000140), 0xfffffffffffffec3, 0x80081) (async) syz_open_dev$I2C(&(0x7f0000000140), 0xfffffffffffffec3, 0x80081) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3225f1ea}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3225f1ea}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0x3}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r7, {0x3}}, './file0\x00'}) r8 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r9, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$kcm(0x2, 0xa, 0x2) r12 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r12, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f0000000e80)=ANY=[@ANYBLOB="000000f71880c2000001aa88aaaaaaaa88a8a0008100"], 0x36) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r13, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0xfff7, "b59f35", 0x5, 0x7f}) (async) ioctl$HCIINQUIRY(r13, 0x800448f0, &(0x7f0000000080)={0xffffffffffffffff, 0xfff7, "b59f35", 0x5, 0x7f}) r14 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) 2m55.97651368s ago: executing program 0 (id=898): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x7, 0x4, 0x438, 0x0, 0x240, 0x0, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0x0, 0xffffff00, 0x3, 0x0, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0xfffd, 'veth0_to_bridge\x00', 'veth1_macvtap\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="1758a179fe8f", @rand_addr=0x64010100, @multicast1, 0x2, 0xffffffff}}}, {{@arp={@rand_addr=0x64010101, @rand_addr, 0x0, 0x0, 0xc, 0x3, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x8a8cfb792f7af7f0]}}, 0x0, 0xfffc, 0x0, 0xa51, 0x0, 0x1000, 'team_slave_0\x00', 'veth0\x00', {0xff}}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x8, 0x5, 0x0, 0x0, "f245442f682c06144f1fb782d77bc38316214ca84d2f69b44810c3a40a495fa278a1728df4f6eaac07ddb7086bd6e732ed48ea39c4670df6527298897d41f42e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0xa010100, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x488) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) creat(0x0, 0x4) prlimit64(0x0, 0x7, 0x0, 0x0) pipe2(0x0, 0x0) fadvise64(r2, 0x1000, 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x4580b000) futex(&(0x7f000000cffc), 0x3, 0x0, 0x0, &(0x7f0000048000), 0x2) 2m55.796686271s ago: executing program 0 (id=900): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "b056035d961a5a957131c33dfbe0705c"}, 0x11, 0x0) inotify_add_watch(r0, &(0x7f0000000100)='./file1\x00', 0x2) (async) inotify_add_watch(r0, &(0x7f0000000100)='./file1\x00', 0x2) 2m55.716200814s ago: executing program 0 (id=902): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x1, 0x1, 0x0, 0x0, 0x0, 0xd000}) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000000)) 2m55.528377839s ago: executing program 0 (id=904): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x15, 0x5, 0x0) connect$l2tp6(r1, &(0x7f0000001100)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x20) getsockname$l2tp6(r1, 0x0, &(0x7f0000000100)) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @local, 0x5}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="10", 0x1}], 0x1}}], 0x1, 0xc0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x4004, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x600}}], [{@smackfstransmute}]}}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000940)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f00000008c0)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe5a, 0x48}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x8800) sendmsg$inet(r4, &(0x7f0000000b00)={&(0x7f0000000640)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000680)="64797c90ae2ba350", 0x8}, {&(0x7f00000006c0)}], 0x2, &(0x7f0000000ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x30}, 0x8081) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="3cf4e079275ef40b112a3c4c721b868b4eb7c7c67e685320519909fe04eb740aef616d489621c7b47849e63bc5b52b5a9d39ba2a4a028ffb3ab9", 0x3a}, {&(0x7f0000000100)="51ca2f41dc62272cef6720c9bef361c2f326ea834247e66bc989df7bdf35898aa4ef03b04c1c", 0x26}, {&(0x7f0000000280)="d5a1fd853c98c8c320e2fa6d6b0dddc9c3fb8a6d21f2b8db437a02e7019460b98ad443018a1445a864ab242b4760fd26fa921ae5e423bead3063d81fcfc8f48a01f39daa0afe76feb3faa82e8771c5c3d5e27a61ca16a491df74e8f2eaa3e8bb1671535b7bdd594066d9f268f3ea66773a8f825ba62c4b41ca787f688104f71d598731", 0x83}, {&(0x7f0000000340)="85a28e8290b87e025a2b49c3d81ea421cd522d72d9d1488c7cf1ce294fe43469048d02ee7f5bc5d045c93d9ecf41819e66c42b79ac306b1577d8105472aef38b1f0345cbc6bcf5670c5d497a7cc5ec308931a4aea857e28bc158bbdb4977337b6e04ecd838e82a3dbc6be7203a650aafad346401492c26688865d1473c170a67f070c5793706d57491b3dde18bd07e290ef704e6ed5437285434be6a1b1d8ed186ad3bfe623d3f", 0xa7}, {&(0x7f0000000440)="0d79a4944e7d261914411e3bb7efb89f5af01b39d45df264b09f27d7b23c625c4e317f5ea69cd4bd636bc967e93186a1f82c13b51725c9db9398f063969cab122384b8ee15f916ef05795f268a4cf09753f5f36b087621e75f210ba64976de8f3268460b0bb3d221a51e541fb082195c054db88c6418095f7d585d52bd624b1f150e501d2d027c4faf289d597c83b9ad5884df55c95b63fcd0daa8ddf77383f4190e6168d89ec0067d93", 0xaa}, {&(0x7f0000000540)="452d0a542b1338c4a90a800a1225851c1bd072892ce5ea00bee5a03e28cc1862519cb177f84a76b17cca33c0b2b810f2a5d0db8622e145150f53647ab4daa44e6b955967552a710c44df3a51a220a87f822ae430f823f731b52250dc7ddbc4656ccdaacbd63898f610714c039784662223b8427fd6cf50c25e02e26860ec43d514c038fd4bb7bbf66e60f49f5ed83575c6fa499c829a35a7d0010d56957ff2f7f75536e6678642025aa17a9a29a4a7868872eb2a6ddad78fc624514b3740db6f3e01e083d013510982b2851c4e4cdc917646ef3f80af82a308aae8d3654b47f5a51e6291696acbfb8742e228a1919144", 0xf0}, {&(0x7f0000000980)="3cdbe08581149c2d754f422ae2ee90dd7b4b7a7c105d414e880d4c026c4a7077cd2d4ab85a92fb38f2e4e36e11980d9e9cd9111953054be88ebd8491e9a71bd950463acb141841f6ad6de224256a7de030f8d1d4d0351299304071d00c5bc8ded3e31b16a2957583e8f9f9023441db0000796f57729fb90e081565050222d8b5ca053b4247a345d54d4dc4abceaa88898a3ceddab8b3cfc85b9f67c2b767c89d19891c36e5056564db8cb2b3b8a028062d7d3c0cb8d3bfd03aa163b08bfbd4c02874b5bbb9655c963f28cddb45a6af34822bd4f1720ef218d19a4f12022ebaeede350000000000000000000000005db67b4cc5dedb972c47efbf498c17b8f2c65eb37d9ca2bd5be4", 0x108}], 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="e2e4a1b842e649577fc51176475c88c71cdd347b4ee93047e8fca3fcfb4e81f68ca0c07ec345c2568530e27fe66ddd2dfd8586a776c586baaed063f178904f37a1d15db823adecf73f1bd054fa112c170114a354745e309b0426781411d0564bda98a95e97ef9161aa73913b902cb4ab62153a651d0ae71ce0bfac1680960e7f161e04b46512a56370155840f837f42ec8579fd44fad147cecbf12d70687065db6509e850fac6b0103e90b174a7c3644b52d4dc12ff343fb297ac43fb707fb34329288ae2bb1d7b0d2"], 0x10}}], 0x1, 0x4004804) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket(0x15, 0x5, 0x0) (async) connect$l2tp6(r1, &(0x7f0000001100)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x20) (async) getsockname$l2tp6(r1, 0x0, &(0x7f0000000100)) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) socket$inet6(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @local, 0x5}, 0x1c) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="10", 0x1}], 0x1}}], 0x1, 0xc0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) (async) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x4004, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x600}}], [{@smackfstransmute}]}}) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000940)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f00000008c0)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe5a, 0x48}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x8800) (async) sendmsg$inet(r4, &(0x7f0000000b00)={&(0x7f0000000640)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000680)="64797c90ae2ba350", 0x8}, {&(0x7f00000006c0)}], 0x2, &(0x7f0000000ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x30}, 0x8081) (async) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="3cf4e079275ef40b112a3c4c721b868b4eb7c7c67e685320519909fe04eb740aef616d489621c7b47849e63bc5b52b5a9d39ba2a4a028ffb3ab9", 0x3a}, {&(0x7f0000000100)="51ca2f41dc62272cef6720c9bef361c2f326ea834247e66bc989df7bdf35898aa4ef03b04c1c", 0x26}, {&(0x7f0000000280)="d5a1fd853c98c8c320e2fa6d6b0dddc9c3fb8a6d21f2b8db437a02e7019460b98ad443018a1445a864ab242b4760fd26fa921ae5e423bead3063d81fcfc8f48a01f39daa0afe76feb3faa82e8771c5c3d5e27a61ca16a491df74e8f2eaa3e8bb1671535b7bdd594066d9f268f3ea66773a8f825ba62c4b41ca787f688104f71d598731", 0x83}, {&(0x7f0000000340)="85a28e8290b87e025a2b49c3d81ea421cd522d72d9d1488c7cf1ce294fe43469048d02ee7f5bc5d045c93d9ecf41819e66c42b79ac306b1577d8105472aef38b1f0345cbc6bcf5670c5d497a7cc5ec308931a4aea857e28bc158bbdb4977337b6e04ecd838e82a3dbc6be7203a650aafad346401492c26688865d1473c170a67f070c5793706d57491b3dde18bd07e290ef704e6ed5437285434be6a1b1d8ed186ad3bfe623d3f", 0xa7}, {&(0x7f0000000440)="0d79a4944e7d261914411e3bb7efb89f5af01b39d45df264b09f27d7b23c625c4e317f5ea69cd4bd636bc967e93186a1f82c13b51725c9db9398f063969cab122384b8ee15f916ef05795f268a4cf09753f5f36b087621e75f210ba64976de8f3268460b0bb3d221a51e541fb082195c054db88c6418095f7d585d52bd624b1f150e501d2d027c4faf289d597c83b9ad5884df55c95b63fcd0daa8ddf77383f4190e6168d89ec0067d93", 0xaa}, {&(0x7f0000000540)="452d0a542b1338c4a90a800a1225851c1bd072892ce5ea00bee5a03e28cc1862519cb177f84a76b17cca33c0b2b810f2a5d0db8622e145150f53647ab4daa44e6b955967552a710c44df3a51a220a87f822ae430f823f731b52250dc7ddbc4656ccdaacbd63898f610714c039784662223b8427fd6cf50c25e02e26860ec43d514c038fd4bb7bbf66e60f49f5ed83575c6fa499c829a35a7d0010d56957ff2f7f75536e6678642025aa17a9a29a4a7868872eb2a6ddad78fc624514b3740db6f3e01e083d013510982b2851c4e4cdc917646ef3f80af82a308aae8d3654b47f5a51e6291696acbfb8742e228a1919144", 0xf0}, {&(0x7f0000000980)="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", 0x108}], 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="e2e4a1b842e649577fc51176475c88c71cdd347b4ee93047e8fca3fcfb4e81f68ca0c07ec345c2568530e27fe66ddd2dfd8586a776c586baaed063f178904f37a1d15db823adecf73f1bd054fa112c170114a354745e309b0426781411d0564bda98a95e97ef9161aa73913b902cb4ab62153a651d0ae71ce0bfac1680960e7f161e04b46512a56370155840f837f42ec8579fd44fad147cecbf12d70687065db6509e850fac6b0103e90b174a7c3644b52d4dc12ff343fb297ac43fb707fb34329288ae2bb1d7b0d2"], 0x10}}], 0x1, 0x4004804) (async) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) (async) 2m40.525497667s ago: executing program 32 (id=904): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x15, 0x5, 0x0) connect$l2tp6(r1, &(0x7f0000001100)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x20) getsockname$l2tp6(r1, 0x0, &(0x7f0000000100)) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @local, 0x5}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="10", 0x1}], 0x1}}], 0x1, 0xc0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x4004, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x600}}], [{@smackfstransmute}]}}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000940)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f00000008c0)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe5a, 0x48}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x8800) sendmsg$inet(r4, &(0x7f0000000b00)={&(0x7f0000000640)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000680)="64797c90ae2ba350", 0x8}, {&(0x7f00000006c0)}], 0x2, &(0x7f0000000ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x30}, 0x8081) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="3cf4e079275ef40b112a3c4c721b868b4eb7c7c67e685320519909fe04eb740aef616d489621c7b47849e63bc5b52b5a9d39ba2a4a028ffb3ab9", 0x3a}, {&(0x7f0000000100)="51ca2f41dc62272cef6720c9bef361c2f326ea834247e66bc989df7bdf35898aa4ef03b04c1c", 0x26}, {&(0x7f0000000280)="d5a1fd853c98c8c320e2fa6d6b0dddc9c3fb8a6d21f2b8db437a02e7019460b98ad443018a1445a864ab242b4760fd26fa921ae5e423bead3063d81fcfc8f48a01f39daa0afe76feb3faa82e8771c5c3d5e27a61ca16a491df74e8f2eaa3e8bb1671535b7bdd594066d9f268f3ea66773a8f825ba62c4b41ca787f688104f71d598731", 0x83}, {&(0x7f0000000340)="85a28e8290b87e025a2b49c3d81ea421cd522d72d9d1488c7cf1ce294fe43469048d02ee7f5bc5d045c93d9ecf41819e66c42b79ac306b1577d8105472aef38b1f0345cbc6bcf5670c5d497a7cc5ec308931a4aea857e28bc158bbdb4977337b6e04ecd838e82a3dbc6be7203a650aafad346401492c26688865d1473c170a67f070c5793706d57491b3dde18bd07e290ef704e6ed5437285434be6a1b1d8ed186ad3bfe623d3f", 0xa7}, {&(0x7f0000000440)="0d79a4944e7d261914411e3bb7efb89f5af01b39d45df264b09f27d7b23c625c4e317f5ea69cd4bd636bc967e93186a1f82c13b51725c9db9398f063969cab122384b8ee15f916ef05795f268a4cf09753f5f36b087621e75f210ba64976de8f3268460b0bb3d221a51e541fb082195c054db88c6418095f7d585d52bd624b1f150e501d2d027c4faf289d597c83b9ad5884df55c95b63fcd0daa8ddf77383f4190e6168d89ec0067d93", 0xaa}, {&(0x7f0000000540)="452d0a542b1338c4a90a800a1225851c1bd072892ce5ea00bee5a03e28cc1862519cb177f84a76b17cca33c0b2b810f2a5d0db8622e145150f53647ab4daa44e6b955967552a710c44df3a51a220a87f822ae430f823f731b52250dc7ddbc4656ccdaacbd63898f610714c039784662223b8427fd6cf50c25e02e26860ec43d514c038fd4bb7bbf66e60f49f5ed83575c6fa499c829a35a7d0010d56957ff2f7f75536e6678642025aa17a9a29a4a7868872eb2a6ddad78fc624514b3740db6f3e01e083d013510982b2851c4e4cdc917646ef3f80af82a308aae8d3654b47f5a51e6291696acbfb8742e228a1919144", 0xf0}, {&(0x7f0000000980)="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", 0x108}], 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="e2e4a1b842e649577fc51176475c88c71cdd347b4ee93047e8fca3fcfb4e81f68ca0c07ec345c2568530e27fe66ddd2dfd8586a776c586baaed063f178904f37a1d15db823adecf73f1bd054fa112c170114a354745e309b0426781411d0564bda98a95e97ef9161aa73913b902cb4ab62153a651d0ae71ce0bfac1680960e7f161e04b46512a56370155840f837f42ec8579fd44fad147cecbf12d70687065db6509e850fac6b0103e90b174a7c3644b52d4dc12ff343fb297ac43fb707fb34329288ae2bb1d7b0d2"], 0x10}}], 0x1, 0x4004804) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket(0x15, 0x5, 0x0) (async) connect$l2tp6(r1, &(0x7f0000001100)={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x20) (async) getsockname$l2tp6(r1, 0x0, &(0x7f0000000100)) (async) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) socket$inet6(0xa, 0x3, 0x3a) (async) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x7, @local, 0x5}, 0x1c) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)="10", 0x1}], 0x1}}], 0x1, 0xc0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) (async) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x4004, &(0x7f0000000400)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x600}}], [{@smackfstransmute}]}}) (async) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000940)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f00000008c0)={0x20, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xe5a, 0x48}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x8800) (async) sendmsg$inet(r4, &(0x7f0000000b00)={&(0x7f0000000640)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000680)="64797c90ae2ba350", 0x8}, {&(0x7f00000006c0)}], 0x2, &(0x7f0000000ac0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x30}, 0x8081) (async) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="3cf4e079275ef40b112a3c4c721b868b4eb7c7c67e685320519909fe04eb740aef616d489621c7b47849e63bc5b52b5a9d39ba2a4a028ffb3ab9", 0x3a}, {&(0x7f0000000100)="51ca2f41dc62272cef6720c9bef361c2f326ea834247e66bc989df7bdf35898aa4ef03b04c1c", 0x26}, {&(0x7f0000000280)="d5a1fd853c98c8c320e2fa6d6b0dddc9c3fb8a6d21f2b8db437a02e7019460b98ad443018a1445a864ab242b4760fd26fa921ae5e423bead3063d81fcfc8f48a01f39daa0afe76feb3faa82e8771c5c3d5e27a61ca16a491df74e8f2eaa3e8bb1671535b7bdd594066d9f268f3ea66773a8f825ba62c4b41ca787f688104f71d598731", 0x83}, {&(0x7f0000000340)="85a28e8290b87e025a2b49c3d81ea421cd522d72d9d1488c7cf1ce294fe43469048d02ee7f5bc5d045c93d9ecf41819e66c42b79ac306b1577d8105472aef38b1f0345cbc6bcf5670c5d497a7cc5ec308931a4aea857e28bc158bbdb4977337b6e04ecd838e82a3dbc6be7203a650aafad346401492c26688865d1473c170a67f070c5793706d57491b3dde18bd07e290ef704e6ed5437285434be6a1b1d8ed186ad3bfe623d3f", 0xa7}, {&(0x7f0000000440)="0d79a4944e7d261914411e3bb7efb89f5af01b39d45df264b09f27d7b23c625c4e317f5ea69cd4bd636bc967e93186a1f82c13b51725c9db9398f063969cab122384b8ee15f916ef05795f268a4cf09753f5f36b087621e75f210ba64976de8f3268460b0bb3d221a51e541fb082195c054db88c6418095f7d585d52bd624b1f150e501d2d027c4faf289d597c83b9ad5884df55c95b63fcd0daa8ddf77383f4190e6168d89ec0067d93", 0xaa}, {&(0x7f0000000540)="452d0a542b1338c4a90a800a1225851c1bd072892ce5ea00bee5a03e28cc1862519cb177f84a76b17cca33c0b2b810f2a5d0db8622e145150f53647ab4daa44e6b955967552a710c44df3a51a220a87f822ae430f823f731b52250dc7ddbc4656ccdaacbd63898f610714c039784662223b8427fd6cf50c25e02e26860ec43d514c038fd4bb7bbf66e60f49f5ed83575c6fa499c829a35a7d0010d56957ff2f7f75536e6678642025aa17a9a29a4a7868872eb2a6ddad78fc624514b3740db6f3e01e083d013510982b2851c4e4cdc917646ef3f80af82a308aae8d3654b47f5a51e6291696acbfb8742e228a1919144", 0xf0}, {&(0x7f0000000980)="3cdbe08581149c2d754f422ae2ee90dd7b4b7a7c105d414e880d4c026c4a7077cd2d4ab85a92fb38f2e4e36e11980d9e9cd9111953054be88ebd8491e9a71bd950463acb141841f6ad6de224256a7de030f8d1d4d0351299304071d00c5bc8ded3e31b16a2957583e8f9f9023441db0000796f57729fb90e081565050222d8b5ca053b4247a345d54d4dc4abceaa88898a3ceddab8b3cfc85b9f67c2b767c89d19891c36e5056564db8cb2b3b8a028062d7d3c0cb8d3bfd03aa163b08bfbd4c02874b5bbb9655c963f28cddb45a6af34822bd4f1720ef218d19a4f12022ebaeede350000000000000000000000005db67b4cc5dedb972c47efbf498c17b8f2c65eb37d9ca2bd5be4", 0x108}], 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="e2e4a1b842e649577fc51176475c88c71cdd347b4ee93047e8fca3fcfb4e81f68ca0c07ec345c2568530e27fe66ddd2dfd8586a776c586baaed063f178904f37a1d15db823adecf73f1bd054fa112c170114a354745e309b0426781411d0564bda98a95e97ef9161aa73913b902cb4ab62153a651d0ae71ce0bfac1680960e7f161e04b46512a56370155840f837f42ec8579fd44fad147cecbf12d70687065db6509e850fac6b0103e90b174a7c3644b52d4dc12ff343fb297ac43fb707fb34329288ae2bb1d7b0d2"], 0x10}}], 0x1, 0x4004804) (async) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) (async) 2m34.638338656s ago: executing program 4 (id=1021): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x5f, 0x2, 0x5}, 0xe) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000140)={0x804, 0x0, 0x0, 0x0, 0x267a4e37}, 0xc) shutdown(r0, 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x80044942, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000400)={r3, 0x6, 0x5, 0xfffffff8, 0x0, 0x172}, &(0x7f0000000440)=0x14) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 2m34.482844396s ago: executing program 4 (id=1023): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) (async) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000000000)={0x85}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x128202, 0x0) write(r2, &(0x7f0000000000)="fb196dec69a10b22", 0x8) 2m34.150508925s ago: executing program 4 (id=1029): syz_usb_connect(0x0, 0x2d, &(0x7f0000000700)=ANY=[], 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x20048041) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x6, 0x1, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x40000) splice(r2, 0x0, r0, 0x0, 0x3, 0xb) 2m31.066082643s ago: executing program 4 (id=1053): mkdir(&(0x7f0000000ec0)='./file1\x00', 0x156) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x1, 0x70bd24, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$PTRACE_GETSIGMASK(0x420a, r3, 0x8, &(0x7f0000000040)) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x802) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) r8 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) copy_file_range(r2, 0x0, r8, 0x0, 0x8, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@expire={0x104, 0x18, 0x1, 0x70bd29, 0x25df5bfe, {{{@in=@rand_addr=0x64010101, @in6=@loopback, 0x4e23, 0x2, 0x4e20, 0x4, 0x2, 0x80, 0xa0, 0x33, 0x0, 0xee00}, {@in=@empty, 0x4d6, 0x32}, @in=@loopback, {0xafa9, 0xb13, 0x3, 0x0, 0x5, 0x0, 0xb, 0x8}, {0x120000, 0xffffffffffffffff, 0x6c, 0x4}, {0x5, 0xe, 0x7fffffff}, 0x70bd29, 0x3500, 0x2, 0x1, 0x1, 0x30}, 0x3}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffb}}]}, 0x104}, 0x1, 0x0, 0x0, 0x24000014}, 0x0) bind$alg(r9, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x54) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 2m30.901667722s ago: executing program 4 (id=1054): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, 0x0, 0x0) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='fuseblk\x00', 0x1a2003e, 0x0) 2m30.553127685s ago: executing program 4 (id=1059): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) fadvise64(r0, 0x3, 0x0, 0x1) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) fallocate(r1, 0x21, 0x9ac, 0x400) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000140)={0x2020}, 0x2020) 2m30.316301022s ago: executing program 33 (id=1059): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) fadvise64(r0, 0x3, 0x0, 0x1) ioctl$BLKRRPART(r0, 0x125f, 0x0) r1 = memfd_create(&(0x7f0000000280)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x6) fallocate(r1, 0x21, 0x9ac, 0x400) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000140)={0x2020}, 0x2020) 1m38.908596141s ago: executing program 1 (id=1424): r0 = inotify_init1(0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x11, r0, 0xe92de000) r1 = fanotify_init(0x10, 0x2) fcntl$setstatus(r1, 0x4, 0x84000) read(r0, &(0x7f0000000000)=""/213, 0xd5) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = getpgid(0xffffffffffffffff) migrate_pages(r3, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x8000000000000000) r4 = accept4(r2, &(0x7f0000000180)=@tipc, &(0x7f0000000200)=0x80, 0x80000) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000001, 0x20010, r5, 0x5b7fc000) connect$rose(r2, &(0x7f0000000240)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x40) kcmp(r3, r3, 0x4, r4, r5) open$dir(&(0x7f0000000280)='./file0\x00', 0x703200, 0x4) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r6, &(0x7f0000000380)={0x9, 0x108, 0xfa00, {r7, 0x3, "1e9d09", "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"}}, 0x110) r8 = syz_open_procfs(r3, &(0x7f00000004c0)='net/vlan/vlan0\x00') mount(&(0x7f0000000500)=@loop={'/dev/loop', 0x0}, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='erofs\x00', 0x4040, &(0x7f00000005c0)='/dev/infiniband/rdma_cm\x00') ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000600)={0x10000, 0x5}) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000640)=@gcm_128={{0x304}, "62d28cb4f5b4e82b", "b29b3ecce13833569e309cad6af7122f", "473dcfdc", "25346ba949f6b166"}, 0x28) open(&(0x7f0000000680)='./file0\x00', 0x4000, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x3a302, 0x0) setsockopt$MRT_TABLE(r8, 0x0, 0xcf, &(0x7f0000000700)=0xfc, 0x4) ioctl$FS_IOC_GETFSSYSFSPATH(r1, 0x80811501, &(0x7f0000000740)={0x80}) ioctl$BLKCRYPTOIMPORTKEY(r8, 0xc0401289, &(0x7f00000008c0)={&(0x7f0000000800)="a14e41b597915f84d3ed8c8f4ad9e2bca0b8a3ab144a39d5cac08b0af5", 0x1d, &(0x7f0000000840)=""/94, 0x5e}) bind$packet(r8, &(0x7f0000000900)={0x11, 0x2, 0x0, 0x1, 0xe, 0x6, @local}, 0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), r4) 1m37.982057178s ago: executing program 1 (id=1434): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffe, @loopback, 0xfffffffd}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000140)=0x9, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x4000) sendto$inet6(r2, &(0x7f0000000340)="f47f", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffffa, @loopback}, 0x1c) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x19) read(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r9 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) write$cgroup_int(r9, &(0x7f0000000040), 0x12) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x24, r8, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0xa010) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0x88800) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x262097, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffe, @loopback, 0xfffffffd}, 0x1c) (async) setsockopt$inet6_int(r2, 0x29, 0x43, &(0x7f0000000140)=0x9, 0x4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) (async) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x4000) (async) sendto$inet6(r2, &(0x7f0000000340)="f47f", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffffa, @loopback}, 0x1c) (async) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x19) (async) read(r5, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) (async) write$cgroup_int(r9, &(0x7f0000000040), 0x12) (async) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x24, r8, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0xa010) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0x88800) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x262097, 0x0) (async) 1m37.916578261s ago: executing program 1 (id=1436): openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x13dd, 0xc01) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x8080, &(0x7f0000002440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, &(0x7f0000000240)) 1m36.940656083s ago: executing program 1 (id=1441): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0xffffffffffffffff, 0xffffffffffffffff, r0}}, 0x18) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 1m36.881646716s ago: executing program 1 (id=1442): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab5b7233ac3507e16db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r4, 0xf648e000) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) setsockopt$ax25_int(r5, 0x101, 0x5, &(0x7f0000000000)=0x780a, 0x4) 1m36.725058434s ago: executing program 1 (id=1443): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e36, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r2, 0x3ba0, &(0x7f0000000500)={0x48, 0x3, r3, 0x0, 0xdb2, 0x0, &(0x7f00000004c0)}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000001040)={0x1f3, 0xcf70, 0x5}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r7 = getpid() waitid(0x1, r7, 0x0, 0x4, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000001080)=ANY=[@ANYBLOB="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"]) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f0000002080)=0x64, 0x23b) sendmsg$AUDIT_SET_FEATURE(r9, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x3fa, 0x0, 0x70ad27, 0x25dfdbff, {0x1, 0x0, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000080)) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000280)=0x4) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r11, 0x5408, &(0x7f0000000080)={0x49de, 0xfff6, 0x3, 0xbfff, 0x0, "ec28a144f13d7607"}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)) mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2320002, 0x0) 1m20.803646396s ago: executing program 34 (id=1443): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080)=0x8, 0x4) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e36, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r2, 0x3ba0, &(0x7f0000000500)={0x48, 0x3, r3, 0x0, 0xdb2, 0x0, &(0x7f00000004c0)}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000001040)={0x1f3, 0xcf70, 0x5}) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r7 = getpid() waitid(0x1, r7, 0x0, 0x4, 0x0) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000001080)=ANY=[@ANYBLOB="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"]) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r10, r9, &(0x7f0000002080)=0x64, 0x23b) sendmsg$AUDIT_SET_FEATURE(r9, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x3fa, 0x0, 0x70ad27, 0x25dfdbff, {0x1, 0x0, 0x1, 0x1}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) ioctl$EXT4_IOC_GETSTATE(r6, 0x40046629, &(0x7f0000000080)) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000280)=0x4) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r11, 0x5408, &(0x7f0000000080)={0x49de, 0xfff6, 0x3, 0xbfff, 0x0, "ec28a144f13d7607"}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)) mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000180)='devtmpfs\x00', 0x2320002, 0x0) 1m2.591221151s ago: executing program 6 (id=1611): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r4, 0x801, 0x70bd2a, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00}) 1m2.456620112s ago: executing program 6 (id=1613): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x4, 0x20000) ioctl$HIDIOCGUSAGE(r0, 0xc018480b, &(0x7f0000000040)={0x1, 0x63a4632cedd4540c, 0x80, 0x5, 0x7, 0x1}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='binfmt_misc\x00', 0x6, &(0x7f0000001100)='\x00') syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000001140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xbf, 0x5ac, 0x24e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x24, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x3, 0x52, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0xa7c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x81, 0x7f}}]}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001180)={0xa, 0x6, 0x110, 0x7, 0x5, 0x0, 0x40, 0x1}, 0x30, &(0x7f00000011c0)={0x5, 0xf, 0x30, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "0e2d60c00a7a6523c465b1db0e4b7f94"}, @ss_container_id={0x14, 0x10, 0x4, 0x6b, "14ae07a5c6bec69a2d16f51487be0077"}, @ptm_cap={0x3}]}, 0x7, [{0x100, &(0x7f0000001200)=@string={0x100, 0x3, "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"}}, {0xec, &(0x7f0000001300)=@string={0xec, 0x3, "f8c10b8c52e1821360672c766af983820b2b9e266b370e3e8971845bab23e4b6926faeeb65fdb2cd0591f8a6f112b2150770ce99c275f980852d1820206448907d45a38d486aa7341976ef225a078ed9ccca62472164740769b0a14c7ee48adbb38311c1e923beb4c18b130504a44bea0f453916e9fcfd7044f8a3ed5ea760293d25e0ba0c175439adb90873012894011711d158672ca557076dae20688682eee9f4391524d63ec7e6581f5c79c126ee05fe76aaca6a7db8a239b108ce862a3f36e177d3182a3a6c6b9b5b70dcd19fd958ed3e3129241991b24f9cf5bab396ae78a0a17591779586c5ce"}}, {0x45, &(0x7f0000001400)=@string={0x45, 0x3, "b11c2f30dc1f6b21563c6ba1483aec84fb202d12c92ec1b99141661eacfc86dbf4ae31bb5c3da1df817c851c30832110f28973e0e52978d05bc3e0f45593880be4ee30"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x3, &(0x7f0000001500)=@string={0x3, 0x3, "ce"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x861}}]}) (async) r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000001140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xbf, 0x5ac, 0x24e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x24, 0x20, 0x4, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x3, 0x52, {0x9, 0x21, 0x7, 0x4, 0x1, {0x22, 0xa7c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x81, 0x7f}}]}}}]}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000001180)={0xa, 0x6, 0x110, 0x7, 0x5, 0x0, 0x40, 0x1}, 0x30, &(0x7f00000011c0)={0x5, 0xf, 0x30, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "0e2d60c00a7a6523c465b1db0e4b7f94"}, @ss_container_id={0x14, 0x10, 0x4, 0x6b, "14ae07a5c6bec69a2d16f51487be0077"}, @ptm_cap={0x3}]}, 0x7, [{0x100, &(0x7f0000001200)=@string={0x100, 0x3, "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"}}, {0xec, &(0x7f0000001300)=@string={0xec, 0x3, "f8c10b8c52e1821360672c766af983820b2b9e266b370e3e8971845bab23e4b6926faeeb65fdb2cd0591f8a6f112b2150770ce99c275f980852d1820206448907d45a38d486aa7341976ef225a078ed9ccca62472164740769b0a14c7ee48adbb38311c1e923beb4c18b130504a44bea0f453916e9fcfd7044f8a3ed5ea760293d25e0ba0c175439adb90873012894011711d158672ca557076dae20688682eee9f4391524d63ec7e6581f5c79c126ee05fe76aaca6a7db8a239b108ce862a3f36e177d3182a3a6c6b9b5b70dcd19fd958ed3e3129241991b24f9cf5bab396ae78a0a17591779586c5ce"}}, {0x45, &(0x7f0000001400)=@string={0x45, 0x3, "b11c2f30dc1f6b21563c6ba1483aec84fb202d12c92ec1b99141661eacfc86dbf4ae31bb5c3da1df817c851c30832110f28973e0e52978d05bc3e0f45593880be4ee30"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x3, &(0x7f0000001500)=@string={0x3, 0x3, "ce"}}, {0x4, &(0x7f0000001540)=@lang_id={0x4, 0x3, 0x861}}]}) syz_usb_control_io$hid(r1, &(0x7f0000001780)={0x24, &(0x7f0000001600)={0x20, 0x5, 0xa8, {0xa8, 0xa, "23d8cd0a7c7d5a0c225d481c698818c4185e5ecc185d9400a31bddd6969169ae4d41ce6bfac908fc2a69dcfe4e195c5d5ebde3c317d59d6f0bcb68e8b29bb43dd70a875e2270511098afbd6259eb509eaedfba9072c5e8ea781085bff3893f9d3eba6b70100a101b2c45130e16578a1eb70d8a0e7d221385cc18155ebf981b79db155f4221c1ea354560166f7402c64d39e7609a52907489dbd043efacc5957fb5e1ce1c5bab"}}, &(0x7f00000016c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x88a2ac6116cd0ce2}}, &(0x7f0000001700)={0x0, 0x22, 0x1c, {[@local=@item_4={0x3, 0x2, 0xa, "357abf93"}, @global=@item_012={0x2, 0x1, 0xa, "54f6"}, @local=@item_4={0x3, 0x2, 0x1, "1b06ffc5"}, @main=@item_4={0x3, 0x0, 0xc, 'MJJ{'}, @global=@item_4={0x3, 0x1, 0x9, "b28a8969"}, @main=@item_4={0x3, 0x0, 0x9, "08b9b4e6"}]}}, &(0x7f0000001740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8ae0, 0x40, 0x1, {0x22, 0xd49}}}}, &(0x7f0000001980)={0x2c, &(0x7f00000017c0)={0x20, 0x14, 0x3c, "82aacd42ec091990a49b2262553f538181013ad795ecded57fd347747e7f212c53941a41fd5435101dcc11a45f32121538ef3ab458ba14326ac39cf1"}, &(0x7f0000001840)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001880)={0x0, 0x8, 0x1, 0x12}, &(0x7f00000018c0)={0x20, 0x1, 0x41, "435fb75b1f504a311642107f5a502d0b16b4eb37ba48f340d82f69976c5124eddd3df34438d3bc8eac8dbbc77b6f756ea16de3883b84ae9f00a781b6931eb5dc2f"}, &(0x7f0000001940)={0x20, 0x3, 0x1, 0x4}}) syz_usb_connect$cdc_ncm(0x1, 0x92, &(0x7f00000019c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x2, 0x1, 0x1, 0x190, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x975d}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8, 0x7, 0x7d}, {0x6, 0x24, 0x1a, 0x3, 0x32}, [@obex={0x5, 0x24, 0x15, 0x2}, @dmm={0x7, 0x24, 0x14, 0x8001, 0x7}, @dmm={0x7, 0x24, 0x14, 0x9}, @acm={0x4}, @obex={0x5, 0x24, 0x15, 0xea}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0xf8, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x3f7, 0x6, 0x1, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x20, 0x2, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0x0, 0xfd}}}}}}}]}}, &(0x7f0000002080)={0xa, &(0x7f0000001a80)={0xa, 0x6, 0x300, 0x8, 0x19, 0x2, 0x8, 0x3}, 0x2c, &(0x7f0000001ac0)={0x5, 0xf, 0x2c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0x9, 0x8}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x8, 0xf0f, 0x2, [0xff2070, 0xc00f, 0xc000, 0xc00f, 0x3fc0]}]}, 0xa, [{0x4, &(0x7f0000001b00)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x40b}}, {0xf6, &(0x7f0000001bc0)=@string={0xf6, 0x3, "3ba2386ffbd4eca2e40877c5a0915847bcec67150189dc4817d9ac05217a19fb591fb3b3c24d7dca163d8b2feaa5f73171b620a779d18d7a866f4312f62e19dc66f83fb9a2e8f2305abb3bb16791e393647150362d0c1b2d60db1726a8f4b9dfae16f00a5b418a744f9e49a127807e7aaa43080549196d9f05f26ad15ef2693251204ad5a0cffffbd34f66aeec12df6d3c2c2fe376f89ead6c2346d518f4cdcdeaeffb9eaa58e72eb44a0ab560d199b56881fdbcdb890cfd2ebb19bd831900dd134338993263c46771be8a4a6e54268750742d6eec7dfb7a1e8c8d5fc1d36836b2bf933e3a967f274c18b5728661f691da40187e"}}, {0x4, &(0x7f0000001cc0)=@lang_id={0x4, 0x3, 0x402}}, {0x6b, &(0x7f0000001d00)=@string={0x6b, 0x3, "0013bb20b1284151689b2ba3cad64118e2ff263bedaa325b963a0f8a10f150083cce83a11d50c2b2085bc96e9ba4ae0965ddb78b9883611257cb7dccadda4795126c590551504937c02d29d0fa5016216a998641881bdbb5423db566e6688fa6c742c48ca595942cbe"}}, {0x1d, &(0x7f0000001d80)=@string={0x1d, 0x3, "460b9e31b24b6c3798d01e074afb5b42fdfe3afd32f9584f42f610"}}, {0xd8, &(0x7f0000001dc0)=@string={0xd8, 0x3, "96bd3e0fb582df464f29805fefcb19bc00a20949f4db1ad350c45f839578057edad7d31995182a13e6b74cc4fdb7750070b840cc839f52e50e69b66e54b8d7e142b40bd445a0a9e1d217c383ee9459195c36038928d47122622fd7ccb3cb52c3f751050e638dae322411f77573ccfa50754e0819297b34a8cdecd2786cf4eb806c3d7083d0bee081855266692aba2c6ce5d9e3d945ab8330e54274764cf8a0736dcbd6ca7815dee7141d5cda05d15681748849499436e58d9a1bdd30918bb79aed1d04541b419239cb67e83c5caf90b6c2f05c0dd2f5"}}, {0xb2, &(0x7f0000001ec0)=@string={0xb2, 0x3, "4ab57a0778c1d763b3a9d98e2e71dc4397d46c71ff894164bee4660ebab563e65b927ae5013a2f70f01eda732addbd7d7fe33ed6af737323374e6e25c83980833c9ba032aba094077b9a2b0926ee7e253a9bbc20f938b985e9099f736c9e5a07ea0e9edef67fea6384d588e86b52ad6fa9d92616ca4a75062b1e1a4179e0cdea13ea9c806bf8c9722fb90b4a6ac1109cfb1389e44791c43bf50a0237071a53c5417f282ccbe92ab68a16e556beb5ca1b"}}, {0xd3, &(0x7f0000001f80)=@string={0xd3, 0x3, "804a51b3bc69f04446ecc424f4742980936c295706b397012c5f610003abba74dba47e965db74f74673c6a74907758b77705638a62138edf29a8694eaa93d075e5ed30c074cd6ad48b340313e02785d1cea5f08348bfa06fb89eb9a9d5c56c5880fda5e654c62950e07a370d066f111f09ef1f1c4a7de96fcc0c2e632840542d974c9bc9f5702bbd629deba64fdd8eedd0de0caa78d78a017d7bbd38a38208c25267d6cb083fc09d52ada68c8a202c6705d6ea383576d70c3cbc6152e669e1dcf5b9e8957d2ed82b61624d9b895a80ad88"}}]}) (async) syz_usb_connect$cdc_ncm(0x1, 0x92, &(0x7f00000019c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x2, 0x1, 0x1, 0x190, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x975d}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x8, 0x7, 0x7d}, {0x6, 0x24, 0x1a, 0x3, 0x32}, [@obex={0x5, 0x24, 0x15, 0x2}, @dmm={0x7, 0x24, 0x14, 0x8001, 0x7}, @dmm={0x7, 0x24, 0x14, 0x9}, @acm={0x4}, @obex={0x5, 0x24, 0x15, 0xea}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0xf8, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x3f7, 0x6, 0x1, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x20, 0x2, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3, 0x0, 0xfd}}}}}}}]}}, &(0x7f0000002080)={0xa, &(0x7f0000001a80)={0xa, 0x6, 0x300, 0x8, 0x19, 0x2, 0x8, 0x3}, 0x2c, &(0x7f0000001ac0)={0x5, 0xf, 0x2c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xe, 0x9, 0x8}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x8, 0xf0f, 0x2, [0xff2070, 0xc00f, 0xc000, 0xc00f, 0x3fc0]}]}, 0xa, [{0x4, &(0x7f0000001b00)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000001b80)=@lang_id={0x4, 0x3, 0x40b}}, {0xf6, &(0x7f0000001bc0)=@string={0xf6, 0x3, "3ba2386ffbd4eca2e40877c5a0915847bcec67150189dc4817d9ac05217a19fb591fb3b3c24d7dca163d8b2feaa5f73171b620a779d18d7a866f4312f62e19dc66f83fb9a2e8f2305abb3bb16791e393647150362d0c1b2d60db1726a8f4b9dfae16f00a5b418a744f9e49a127807e7aaa43080549196d9f05f26ad15ef2693251204ad5a0cffffbd34f66aeec12df6d3c2c2fe376f89ead6c2346d518f4cdcdeaeffb9eaa58e72eb44a0ab560d199b56881fdbcdb890cfd2ebb19bd831900dd134338993263c46771be8a4a6e54268750742d6eec7dfb7a1e8c8d5fc1d36836b2bf933e3a967f274c18b5728661f691da40187e"}}, {0x4, &(0x7f0000001cc0)=@lang_id={0x4, 0x3, 0x402}}, {0x6b, &(0x7f0000001d00)=@string={0x6b, 0x3, "0013bb20b1284151689b2ba3cad64118e2ff263bedaa325b963a0f8a10f150083cce83a11d50c2b2085bc96e9ba4ae0965ddb78b9883611257cb7dccadda4795126c590551504937c02d29d0fa5016216a998641881bdbb5423db566e6688fa6c742c48ca595942cbe"}}, {0x1d, &(0x7f0000001d80)=@string={0x1d, 0x3, "460b9e31b24b6c3798d01e074afb5b42fdfe3afd32f9584f42f610"}}, {0xd8, &(0x7f0000001dc0)=@string={0xd8, 0x3, "96bd3e0fb582df464f29805fefcb19bc00a20949f4db1ad350c45f839578057edad7d31995182a13e6b74cc4fdb7750070b840cc839f52e50e69b66e54b8d7e142b40bd445a0a9e1d217c383ee9459195c36038928d47122622fd7ccb3cb52c3f751050e638dae322411f77573ccfa50754e0819297b34a8cdecd2786cf4eb806c3d7083d0bee081855266692aba2c6ce5d9e3d945ab8330e54274764cf8a0736dcbd6ca7815dee7141d5cda05d15681748849499436e58d9a1bdd30918bb79aed1d04541b419239cb67e83c5caf90b6c2f05c0dd2f5"}}, {0xb2, &(0x7f0000001ec0)=@string={0xb2, 0x3, "4ab57a0778c1d763b3a9d98e2e71dc4397d46c71ff894164bee4660ebab563e65b927ae5013a2f70f01eda732addbd7d7fe33ed6af737323374e6e25c83980833c9ba032aba094077b9a2b0926ee7e253a9bbc20f938b985e9099f736c9e5a07ea0e9edef67fea6384d588e86b52ad6fa9d92616ca4a75062b1e1a4179e0cdea13ea9c806bf8c9722fb90b4a6ac1109cfb1389e44791c43bf50a0237071a53c5417f282ccbe92ab68a16e556beb5ca1b"}}, {0xd3, &(0x7f0000001f80)=@string={0xd3, 0x3, "804a51b3bc69f04446ecc424f4742980936c295706b397012c5f610003abba74dba47e965db74f74673c6a74907758b77705638a62138edf29a8694eaa93d075e5ed30c074cd6ad48b340313e02785d1cea5f08348bfa06fb89eb9a9d5c56c5880fda5e654c62950e07a370d066f111f09ef1f1c4a7de96fcc0c2e632840542d974c9bc9f5702bbd629deba64fdd8eedd0de0caa78d78a017d7bbd38a38208c25267d6cb083fc09d52ada68c8a202c6705d6ea383576d70c3cbc6152e669e1dcf5b9e8957d2ed82b61624d9b895a80ad88"}}]}) dup3(r0, r0, 0x80000) (async) r2 = dup3(r0, r0, 0x80000) ioctl$PPPIOCUNBRIDGECHAN(r2, 0x7434) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000002140)={'ipvlan0\x00', 0x1}) write$tun(r2, &(0x7f0000002180)={@void, @val={0x2, 0x4, 0x8, 0x5, 0x1000, 0x800}, @ipv6=@generic={0x3, 0x6, "0ce974", 0x2e9, 0x6, 0x1, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, {[@fragment={0x1, 0x0, 0xe, 0x0, 0x0, 0x1, 0x68}, @srh={0x2c, 0x6, 0x4, 0x3, 0x95, 0x40, 0x7e, [@local, @dev={0xfe, 0x80, '\x00', 0xb}, @private1]}, @hopopts={0x3b, 0x26, '\x00', [@generic={0x1, 0x7a, "f8fc1fb5a96a95cf9e44308c6f2218f4cccb6a1b0b66aa0670f058b5e8dee231d96009f420abc0d329d3c69a11269dc87a11aef915167dad9214facd19545b2eee94124078a44ee87081a0b479c6512661d6eca987e7aecdc212d41e12971413965c34552ebfb73db195df2b91461c5a4f39b9864f28c6b05d76"}, @pad1, @generic={0x9, 0xb1, "9d007601d6bce55b1304c84ba031076d56b2f8bc0a35725c557127e788b3feba9a948805092d6a709995dcea1692a1f78c27d8d30984e9c5ce1ce4122d18b15cea137da3ee25d54ca7167bd9b1e6b43614688b0bde9bc7e10e342df4f8e853c055c0307b5c1585765c352a275dba6fdbb062f5ceb0349e4024ec3139c19b381f037bc73f9c6f46cee74eacb1a34bea091b29a4c986df4d88b3fd999d86403521f80167a72fa0779badba52d385320f674d"}, @pad1]}, @fragment={0x2f, 0x0, 0x90, 0x0, 0x0, 0x5, 0x64}, @dstopts={0x32, 0x0, '\x00', [@jumbo]}, @srh={0x4, 0xe, 0x4, 0x7, 0xb, 0x8, 0x7, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @dev={0xfe, 0x80, '\x00', 0x3b}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @private0]}, @fragment={0x33, 0x0, 0x9, 0x0, 0x0, 0x9, 0x65}, @fragment={0xe, 0x0, 0xd, 0x1, 0x0, 0x3, 0x64}], "3b7d66fd0816a17cdb6ad4668227c8542cc703465b147404de018fc5d519453e631170f828d38e5d98a2f50d568b02ee82a7db8fc37cde7dd80e580c3ea7d65d75200f63439d085e3b282192d2052c1bdb12a3b82c06bf0cf6edde46555bdc4212ec454d6db67b6c861c5a852ce3c03bd8e26ed0a582ac337bc88ed4fdff89d0e402fb5dbe470d76ed1c5450261463910bfd760b2a68a086a43a01ad37a72b879b0c0da2d0de051022e67d0a2b6515cbed0669e5e860b33c426592b1f398bb076f6f13da91c28bbdb9"}}}, 0x31b) (async) write$tun(r2, &(0x7f0000002180)={@void, @val={0x2, 0x4, 0x8, 0x5, 0x1000, 0x800}, @ipv6=@generic={0x3, 0x6, "0ce974", 0x2e9, 0x6, 0x1, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, {[@fragment={0x1, 0x0, 0xe, 0x0, 0x0, 0x1, 0x68}, @srh={0x2c, 0x6, 0x4, 0x3, 0x95, 0x40, 0x7e, [@local, @dev={0xfe, 0x80, '\x00', 0xb}, @private1]}, @hopopts={0x3b, 0x26, '\x00', [@generic={0x1, 0x7a, "f8fc1fb5a96a95cf9e44308c6f2218f4cccb6a1b0b66aa0670f058b5e8dee231d96009f420abc0d329d3c69a11269dc87a11aef915167dad9214facd19545b2eee94124078a44ee87081a0b479c6512661d6eca987e7aecdc212d41e12971413965c34552ebfb73db195df2b91461c5a4f39b9864f28c6b05d76"}, @pad1, @generic={0x9, 0xb1, "9d007601d6bce55b1304c84ba031076d56b2f8bc0a35725c557127e788b3feba9a948805092d6a709995dcea1692a1f78c27d8d30984e9c5ce1ce4122d18b15cea137da3ee25d54ca7167bd9b1e6b43614688b0bde9bc7e10e342df4f8e853c055c0307b5c1585765c352a275dba6fdbb062f5ceb0349e4024ec3139c19b381f037bc73f9c6f46cee74eacb1a34bea091b29a4c986df4d88b3fd999d86403521f80167a72fa0779badba52d385320f674d"}, @pad1]}, @fragment={0x2f, 0x0, 0x90, 0x0, 0x0, 0x5, 0x64}, @dstopts={0x32, 0x0, '\x00', [@jumbo]}, @srh={0x4, 0xe, 0x4, 0x7, 0xb, 0x8, 0x7, [@private1={0xfc, 0x1, '\x00', 0x1}, @private2, @dev={0xfe, 0x80, '\x00', 0x3b}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @private0]}, @fragment={0x33, 0x0, 0x9, 0x0, 0x0, 0x9, 0x65}, @fragment={0xe, 0x0, 0xd, 0x1, 0x0, 0x3, 0x64}], "3b7d66fd0816a17cdb6ad4668227c8542cc703465b147404de018fc5d519453e631170f828d38e5d98a2f50d568b02ee82a7db8fc37cde7dd80e580c3ea7d65d75200f63439d085e3b282192d2052c1bdb12a3b82c06bf0cf6edde46555bdc4212ec454d6db67b6c861c5a852ce3c03bd8e26ed0a582ac337bc88ed4fdff89d0e402fb5dbe470d76ed1c5450261463910bfd760b2a68a086a43a01ad37a72b879b0c0da2d0de051022e67d0a2b6515cbed0669e5e860b33c426592b1f398bb076f6f13da91c28bbdb9"}}}, 0x31b) syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000024c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1837, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf8, 0xa0, 0xfa, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x65, {0x9, 0x21, 0x4, 0x19, 0x1, {0x22, 0x8d8}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0xfe, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7, 0x2, 0x7f}}]}}}]}}]}}, &(0x7f0000002700)={0xa, &(0x7f0000002500)={0xa, 0x6, 0x300, 0x5, 0x62, 0x0, 0x20, 0x47}, 0xcd, &(0x7f0000002540)={0x5, 0xf, 0xcd, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x14, 0x9, 0xbc, 0x235, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x9, 0x3}, @generic={0xa2, 0x10, 0x4, "d21ee00e03bdc08bfd7598ca85ec45fb1a080281fc4c3d379a8af36f22ceb0f297b222f53d003fb6b95484a8dc35468fe105340e3e558d3f1f5f19f36f835bb70696c4623d2ffb5502c0bdef1166cd91a66a1bc886d883afde67e7172d6a86af87f06aa20bedcd287e480204d0c51a8720d16a6b1c2da97d619d7ef909910b0d3a25a197e8ed5453f4ad63cfcbba1041cc11ceac78a651d3e5f1a57781b5e7"}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "c7f7f7bd88fcdc3c18337de6343cd588"}]}, 0x3, [{0x1f, &(0x7f0000002640)=@string={0x1f, 0x3, "8eae8dfd1e1921ff95f53afbe7e5bdcd8089ea2a1993a30bea8ea86259"}}, {0x4, &(0x7f0000002680)=@lang_id={0x4, 0x3, 0x41b}}, {0x37, &(0x7f00000026c0)=@string={0x37, 0x3, "e19ad90fba3344f9faea14683f9acdc3b3d60e1c9c14ce1575a8432b78579e64b4c60e9d64a0a0491959186c4ec47e2a46a757fac4"}}]}) (async) syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000024c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1837, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf8, 0xa0, 0xfa, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x65, {0x9, 0x21, 0x4, 0x19, 0x1, {0x22, 0x8d8}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0xfe, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7, 0x2, 0x7f}}]}}}]}}]}}, &(0x7f0000002700)={0xa, &(0x7f0000002500)={0xa, 0x6, 0x300, 0x5, 0x62, 0x0, 0x20, 0x47}, 0xcd, &(0x7f0000002540)={0x5, 0xf, 0xcd, 0x4, [@wireless={0xb, 0x10, 0x1, 0x2, 0x14, 0x9, 0xbc, 0x235, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x9, 0x3}, @generic={0xa2, 0x10, 0x4, "d21ee00e03bdc08bfd7598ca85ec45fb1a080281fc4c3d379a8af36f22ceb0f297b222f53d003fb6b95484a8dc35468fe105340e3e558d3f1f5f19f36f835bb70696c4623d2ffb5502c0bdef1166cd91a66a1bc886d883afde67e7172d6a86af87f06aa20bedcd287e480204d0c51a8720d16a6b1c2da97d619d7ef909910b0d3a25a197e8ed5453f4ad63cfcbba1041cc11ceac78a651d3e5f1a57781b5e7"}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "c7f7f7bd88fcdc3c18337de6343cd588"}]}, 0x3, [{0x1f, &(0x7f0000002640)=@string={0x1f, 0x3, "8eae8dfd1e1921ff95f53afbe7e5bdcd8089ea2a1993a30bea8ea86259"}}, {0x4, &(0x7f0000002680)=@lang_id={0x4, 0x3, 0x41b}}, {0x37, &(0x7f00000026c0)=@string={0x37, 0x3, "e19ad90fba3344f9faea14683f9acdc3b3d60e1c9c14ce1575a8432b78579e64b4c60e9d64a0a0491959186c4ec47e2a46a757fac4"}}]}) r3 = syz_usb_connect(0x4, 0x3d7, &(0x7f0000002740)={{0x12, 0x1, 0x110, 0x7f, 0x55, 0x28, 0x40, 0x403, 0x9868, 0xb4e9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c5, 0x2, 0xff, 0x8, 0x20, 0x1, [{{0x9, 0x4, 0xee, 0x1, 0x2, 0xb2, 0x95, 0x51, 0xfd, [@generic={0x41, 0xe, "c5147119dbb0e971f61f9acbfb6496ab876ff0a4d718c23908b171310c7ef411f671d47f4335c639f817d4db6e036d6cd8ffd2052c9cea09d5ecd832535d43"}], [{{0x9, 0x5, 0x0, 0x3, 0x10, 0x3, 0x7, 0x6, [@generic={0x19, 0xe, "208d235c75bbe145b202b81c4d371aed39c5e6a5d02c1b"}, @generic={0x3f, 0x6, "721c70c36f468c9070cc309bb76749edd303aa2f5fe4fcfe94eba7655a64d99677b5a02b6c49d9730e9210ead8da15f3bc18c34b4ad880fb176add9bab"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x40, 0x19, 0xf, [@generic={0x9f, 0x18, "0c898866d057a207dd15a3223c5301ce3c92d44a51d599224cc29b924d506671b05008e13ba960db09a8419008fba44d64dbf398810c5f511b0de58070620c3331568ac7eec6907d408edc36189dfec36e99bcc21792697cb04007a1b92be1f272252942e19977469c97fac45ba87b4924ba83398c22d4fdab973cc02fe6358465c19f862ded80c91c6b549aa10aa28b0f9b9d94b160e06de7cf0f31e6"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x2}]}}]}}, {{0x9, 0x4, 0x62, 0x10, 0x5, 0x23, 0x56, 0xea, 0xc, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x8}, [@feature_unit={0xd, 0x24, 0x6, 0x2, 0x2, 0x3, [0x9, 0x1, 0x5], 0x8}]}, @cdc_ecm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x8001, 0x7, 0x3}, [@mbim={0xc, 0x24, 0x1b, 0x8, 0x7, 0x1, 0x0, 0x8, 0x1}, @mdlm_detail={0x98, 0x24, 0x13, 0x1, "f5d19bb822cd5472d120727f9e56c2d3b1de721e44f64f3e3dad5263db6389d1874155c771785bdc1bffee64a5163dc42414c1910bcaf341a707e43e04f2ca0b6e653762f528f15302b8145f5b524e5cddae1dc8483f24f82cf53940e3bbf32779e0f146c29d0f767b8ae2a1c9319c69b659c002628f2adaf36a68e3a441cdb5173398e13cf294f86930aeb4ef6a9b5daf8295d6"}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0x1, 0x6}, @ncm={0x6, 0x24, 0x1a, 0x1, 0xc}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x9}]}], [{{0x9, 0x5, 0xf, 0x1, 0x400, 0x2, 0x3, 0x5, [@generic={0x90, 0xa, "d358f53ce0c48a6506abce02edfe255ae32195b83c2fe849b8dcf7e85ba32bd0dbec8f7b87455fec90c32b8d68814dd589bd8fc643ad993a76b71b0efa2b084ac635b934330591af9de47704c5792a19aed439b67ab05f11e7b054de5c3065f1f710c57aae53a61416a7c76bf1cd3fb7ddacade167b19f77eb949d38ab4b5829827f012faa4c706807bd285f5f9b"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x400, 0x6, 0x6, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x1}, @generic={0x56, 0xb, "58675e960d0188507a2625fc7be2e2eb7158d54e8c59035e7feaba7346217188004cf47286b808522656e72c1c3665e80e6d55f4829e6830692902114b8cb90eb4af2f88227657c638b2a977b918b50ea1012d13"}]}}, {{0x9, 0x5, 0xe09a910fabc33f74, 0x1, 0x40, 0x3, 0xd, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x41b0}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x4, 0x1, 0x3, [@generic={0x19, 0x6, "0a1662f74878b0cfc994bf639f5f2a5d4b03a33b627ee9"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0x9, 0x0, 0x3, [@generic={0x3b, 0xf, "6d2bafce18243157989e8f482678891124852e386f9531830f3a8f6d1c47260f079429fbca4ad3600d43a4f0d1484fdccf9f97c7f6b0079e44"}]}}]}}]}}]}}, &(0x7f0000002cc0)={0xa, &(0x7f0000002b40)={0xa, 0x6, 0x110, 0x81, 0x9, 0x3, 0x20, 0x6}, 0xd9, &(0x7f0000002b80)={0x5, 0xf, 0xd9, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "68976f684ff2dc9a90f6a845aaa0fb21"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xb, 0x5}, @generic={0x75, 0x10, 0x3, "a140538143922216be23b6471f0ac66aa6587305da33cd29be42e7e05b2a02843039c79e7421c45de59da4c242f3aa6336c1213cdf6c4f8efffd2ac35b22925bc1e4d83bdc5c32160d39281dba238fb13d75d9350518d3bf90344f3a361a8d6a4a2b719635d3f419e65665a60e2f676a5631"}, @ssp_cap={0x20, 0x10, 0xa, 0xd9, 0x5, 0x6, 0xf, 0x1e2, [0xff000f, 0xffc030, 0xc00f, 0x0, 0xff3fcf]}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x6, 0xe10f, 0x5, [0xc00f, 0x0, 0x2040, 0xc0, 0xff0000, 0xcf]}]}, 0x1, [{0x4, &(0x7f0000002c80)=@lang_id={0x4, 0x3, 0x42a}}]}) syz_usb_control_io$uac1(r3, &(0x7f0000002e80)={0x14, &(0x7f0000002d00)={0x0, 0x5, 0x74, {0x74, 0xf, "3e20b5ead318993d5cf6c1612b3dd1916d949336da8603a014417dded2b6192bd21b3bf6abec8bb73f0d333e3aae0d0ce9e63d79f2cc1baa8ce208b24eaccf11b457d09c6887a234243a493364c617a83517f86cf23c8284e3664cc070c64ca78022bc4b7370b7e3806daa7041ca1ad9d26f"}}, &(0x7f0000002d80)={0x0, 0x3, 0xf0, @string={0xf0, 0x3, "374bb7b08cfbe17414b6d4fa9d71d9d446ebcfe9e18e09fe5245389081c0c80a3550ed0a8644ab66c1f99863294b3b83010372cc8ecf401753bdc4d3c75eb473a0455853ea1394e1ff7427e52953f3c5c9293831695a816d51fecb24d6a06c5e61e6a3b134c604b27ed606abedef31f29b4da082a2e5478388785fe4ed403b7b948e2c0b50e1e302cdfe51494bc7b672a090dbe5a5e69f5b36740b4a732cbbf8f5685f7bf19bf2dc45b331f279d37f494694bea4b39ff4f2f89721a93bf3d5afe6d9d268f42213e9e9691cfc4ab31aead5cd1b94452827e2d42a871761d0b7c2d84fb2a4945fd65c4c7c2931dec2"}}}, &(0x7f0000003100)={0x44, &(0x7f0000002ec0)={0x20, 0xc, 0x6b, "7fd20b84a5aeb5c75ee0ce7eea6b56e8c22bd2d651779cc2a3df7103bc385c68b37cc3bfa3a9d6a35ffe3a680f758e7473fa2ecbbfb68bf09da3f763be5dce76f2aeb0d824521c2b8c1e1e96ef00e365dd4d2f12f0f1c26337ec39184220d016ce74293ad2510e1af5f118"}, &(0x7f0000002f40)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000002f80)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002fc0)={0x20, 0x81, 0x3, "aa0536"}, &(0x7f0000003000)={0x20, 0x82, 0x1, "de"}, &(0x7f0000003040)={0x20, 0x83, 0x1, "02"}, &(0x7f0000003080)={0x20, 0x84, 0x4, "2ce5429c"}, &(0x7f00000030c0)={0x20, 0x85, 0x3, "cbff73"}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000003240)={'erspan0\x00', &(0x7f0000003180)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x2, 0xb9, {{0x23, 0x4, 0x3, 0x8, 0x8c, 0x68, 0x0, 0xb0, 0x2f, 0x0, @private=0xa010100, @loopback, {[@timestamp_prespec={0x44, 0x3c, 0xbe, 0x3, 0xa, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xcc}, {@rand_addr=0x64010100, 0xd}, {@private=0xa010102, 0x8}, {@local, 0x9}, {@empty, 0x6}, {@empty, 0x605d}, {@multicast1, 0x1}]}, @ssrr={0x89, 0x1b, 0x1a, [@private=0xa010101, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010100, @loopback, @local, @multicast2]}, @timestamp={0x44, 0x10, 0x97, 0x0, 0x5, [0xe, 0xc, 0x40]}, @timestamp={0x44, 0x10, 0x3e, 0x0, 0x3, [0x1, 0x401, 0x1]}]}}}}}) getpgrp(0x0) (async) r4 = getpgrp(0x0) r5 = gettid() setpgid(r4, r5) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f00000032c0)={{0x8, 0x6, 0xe, 0x3, 'syz1\x00', 0xc}, 0x3, 0x10000000, 0x2, r4, 0x1, 0x5, 'syz0\x00', &(0x7f0000003280)=['binfmt_misc\x00'], 0xc}) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000003400)={0xf1, r0, 0x1}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000003400)={0xf1, r0, 0x1}) ioctl$HIDIOCGREPORTINFO(r6, 0xc00c4809, &(0x7f0000003440)={0x2, 0x200, 0x34000}) syz_usb_disconnect(r1) ioctl$HIDIOCAPPLICATION(r6, 0x4802, 0xffffffffffffffff) r7 = syz_open_dev$evdev(&(0x7f0000003480), 0x2, 0x100) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000003500)={0x3, 0x3e, &(0x7f00000034c0)="ae3ee6fd4b5261368ae68861a94778fef0a8576280f536ec098bb0b0b2d46821c599f8b9c39b956613c9c57fecc5a102f123b87901144bbd73441c653edf"}) (async) ioctl$EVIOCSMASK(r7, 0x40104593, &(0x7f0000003500)={0x3, 0x3e, &(0x7f00000034c0)="ae3ee6fd4b5261368ae68861a94778fef0a8576280f536ec098bb0b0b2d46821c599f8b9c39b956613c9c57fecc5a102f123b87901144bbd73441c653edf"}) syz_usb_control_io$uac1(r3, &(0x7f0000003600)={0x14, &(0x7f0000003540)={0x0, 0x24, 0x50, {0x50, 0x22, "eb38c91eea0c7035595361db0016641ad570313773cd7118ef2c1a70e102f541ae36fb450f78e4176a4276206a969bf34047ef4e846d2d50da3235ef5796ce224d3e652e84026465fe834b5198f9"}}, &(0x7f00000035c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}}, &(0x7f0000003840)={0x44, &(0x7f0000003640)={0x0, 0x6, 0x1a, "680bbcd0a703389d2a1c54d52b8fe2eab14b534b70e2131ba3af"}, &(0x7f0000003680)={0x0, 0xa, 0x1, 0x1c}, &(0x7f00000036c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000003700)={0x20, 0x81, 0x3, "856702"}, &(0x7f0000003740)={0x20, 0x82, 0x3, "caca69"}, &(0x7f0000003780)={0x20, 0x83, 0x1, "16"}, &(0x7f00000037c0)={0x20, 0x84, 0x2, "8658"}, &(0x7f0000003800)={0x20, 0x85, 0x3, "6426ab"}}) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f00000038c0)={0x6, 0x6, 0x1, 0xffff, "ba88fd4e193791180b197168b6d06ad005d872524a504153e509be97e37f16cf"}) (async) ioctl$EVIOCSKEYCODE_V2(r6, 0x40284504, &(0x7f00000038c0)={0x6, 0x6, 0x1, 0xffff, "ba88fd4e193791180b197168b6d06ad005d872524a504153e509be97e37f16cf"}) write$binfmt_format(r2, &(0x7f0000003900)='1\x00', 0x2) fsetxattr$security_ima(r0, &(0x7f0000003940), &(0x7f0000003980)=@v2={0x3, 0x3, 0x6, 0x4, 0x47, "f81f5e31c69aff070e1be60e1b539eb41a0256d46cc3c085b0316f5188d7ba4880c4e4522d776c204a50acfbeee4b5d971c971af92f0f867cd44f91cd44d52540006ca0901bda8"}, 0x50, 0x1) write$char_usb(r2, &(0x7f0000003a00)="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", 0xfe) (async) write$char_usb(r2, &(0x7f0000003a00)="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", 0xfe) fsetxattr$trusted_overlay_opaque(r7, &(0x7f0000003b00), &(0x7f0000003b40), 0x2, 0x1) 59.324735913s ago: executing program 6 (id=1631): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r2 = msgget$private(0x0, 0x790) msgsnd(r2, &(0x7f0000000800)=ANY=[@ANYRES8], 0x401, 0x800) openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi0\x00', 0x76ab80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r4, r4, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000140)={0x6, 'veth1_virt_wifi\x00', {0x4}, 0x3}) socket(0x10, 0x2, 0x0) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000840)) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r5) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00', @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x24, 0x9, 0xaa, 0xfffff004}, {0x6}]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'tunl0\x00', 0x0}) r7 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1, 0x100000005, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r9, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x4}, 0x68) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', r10, 0x0, 0x80, 0x3, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x4, 0x0, @rand_addr=0x64010101, @multicast1}}}}) r11 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r11, &(0x7f0000000200)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41, 0x3}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x28040845}, 0x4000000) write(r0, &(0x7f0000000000)="0600e5ff2914d5f6c74f39", 0xb) 59.243662987s ago: executing program 6 (id=1632): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x8000, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x6) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) (async) ioctl$COMEDI_CHANINFO(r0, 0x80306403, &(0x7f0000000040)={0x1000, 0x0, 0x0, 0x0}) 59.179835474s ago: executing program 6 (id=1633): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind(r1, &(0x7f0000000040)=@llc={0x1a, 0x10e, 0xe2, 0x2, 0x9, 0x5, @random="919b276c3648"}, 0x80) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f00000002c0)=@ready={0x0, 0x0, 0x8, "6ddb21ec", {0x1, 0x12, 0x6, 0xc, 0xbd}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f0000000d00)=@conn_svc_rsp={0x0, 0x0, 0xa, "c8f33be6", {0x3, 0x100, 0x0, 0x7, 0x9c, 0x24, 0x8}}) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, "a653242f", {0x1, 0x4, 0x5, 0x6, 0x7f}}) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) getpid() syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x12, &(0x7f00000001c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "b8a6614e", {0x3, 0x104, 0x0, 0x9, 0x9, 0x9, 0x60}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000002c80)={0x2020}, 0x2020) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x3000, 0x4, 0x4, 0x8, 0x0, 0x1, 0x0, 0x20, 0x0, 0x4, 0x10}, {0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x6, 0x2}, {0xdddd1000, 0x5000, 0x3, 0x1, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x3000, 0xeeeed000, 0x0, 0x0, 0x2}, {0x0, 0x5000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x75}, {0x0, 0x0, 0xa, 0x0, 0x0, 0x7, 0x2}, {0x10000, 0x5000, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x10}, {0x1000}, {}, 0xfdfcffdf, 0x0, 0x2000, 0x302034, 0x0, 0x500, 0x0, [0x0, 0x0, 0x1, 0xfffffffffffffffd]}) mount(&(0x7f0000000100)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='9p\x00', 0x808000, 0x0) 56.828727362s ago: executing program 6 (id=1649): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='exfat\x00', 0x200000, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 52.692544075s ago: executing program 5 (id=1671): mknod(&(0x7f0000000280)='./file0\x00', 0x2, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000440)={0x4300, 0x2}, 0x18, 0x0) symlink(&(0x7f0000000000)='.\x02\x00', &(0x7f0000000080)='.\x02\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x101000, 0x110) landlock_restrict_self(r0, 0x0) renameat2(r1, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000300)='.\x02\x00', 0x2) creat(&(0x7f0000000140)='./file0\x00', 0x71) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x94, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x78, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x26}}, @mesh_hwmp_psel={0xd, 0x1, {@val={0x82, 0x1a, {{0x0, 0x1}, 0x7, 0x9, 0x0, @device_b, 0xf, @void, 0x0, 0x3b}}, @val={0x83, 0x25, {{0x0, 0x1}, 0x5, 0x7, @device_b, 0x2, @value=@device_b, 0x9, 0x400, @device_a, 0x5}}, @void, @val={0x7e, 0x15, {{0x0, 0x5d}, 0x7, 0xe9, @device_a, 0x6, 0xc8, 0xd659}}}}}}]}, 0x94}}, 0x0) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 52.523469587s ago: executing program 5 (id=1680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000000c0)=0x1000, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="b9004b8008002600640101029d22b474f06aa390796f0c97a104000380040058802e4e2d78c9fabc763204df87719f05226c07bd17c74f678979bfa942432b1b4eb1d670d2dca1ea8d469a358fbe6185bcc8dedd8600ef02e9e74769d405d323a4587fa61b516e9f8ce39e86142abd83e3bfb0a858dc1f129debf9db8f261b25b195178cdf8467279d97d70e6b37b91633896145be9362db58115a4b14c1a040ed56771917ce726bfa89f5d08d093be00727b91e7a04007d80000000000000"], 0x1d4}, 0x1, 0x0, 0x0, 0x4000}, 0x24000091) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000340)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, @val={@void, {0x8100, 0x2, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x4f1c, 0x1b59, 0x8}}}}}}}, 0xfdef) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000002ac0)=[{{&(0x7f0000000a80)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000980)="81", 0x1}], 0x1}}], 0x2, 0x4000001) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f00000001c0)={r9, 0x9}, 0x8) write(r4, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) 52.270573287s ago: executing program 5 (id=1674): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x100, 0x378bfc1c806e5296) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f00000000c0)=""/74) creat(&(0x7f0000000080)='./file0/file0\x00', 0x2f) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x10) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 52.148711658s ago: executing program 5 (id=1676): syz_usb_connect(0x0, 0x2d, &(0x7f0000000700)=ANY=[], 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001840)="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", 0x18b}], 0x1}}], 0x1, 0x20048041) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x6, 0x1, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x40000) splice(r2, 0x0, r0, 0x0, 0x3, 0xb) 49.093828632s ago: executing program 5 (id=1691): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x1}}, 0x10, 0x0}, 0x40080) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@loop={'/dev/loop', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000100)="c24303f84009bbda99e3", 0xa}], 0x1, 0x0, 0x0, 0x58}}], 0x1, 0x31) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x52, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r10}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', r10, 0x4, 0x0, 0x0, 0x6da, 0x40, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x8, 0x1, 0x7}}) connect(r1, &(0x7f0000000180)=@qipcrtr={0x2a, 0x2, 0x4000}, 0x80) 46.777260669s ago: executing program 5 (id=1700): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x48a40, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x57) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0xf648e000) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x90, 0x5e, 0x17, 0x20, 0x557, 0x2002, 0xb6ad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x17, 0x7, 0x0, 0xc8, 0x88, 0x11}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) rename(0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcc) setsockopt$ax25_int(r4, 0x101, 0x5, &(0x7f0000000000)=0x780a, 0x4) 41.342019223s ago: executing program 35 (id=1649): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='exfat\x00', 0x200000, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 31.080793496s ago: executing program 36 (id=1700): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x48a40, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x57) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0xf648e000) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x90, 0x5e, 0x17, 0x20, 0x557, 0x2002, 0xb6ad, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x17, 0x7, 0x0, 0xc8, 0x88, 0x11}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) rename(0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcc) setsockopt$ax25_int(r4, 0x101, 0x5, &(0x7f0000000000)=0x780a, 0x4) 22.887159407s ago: executing program 7 (id=1773): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000f4c000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 22.740294035s ago: executing program 7 (id=1774): mkdir(&(0x7f0000000180)='./file0\x00', 0x334) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000f800030000000000fb15024100000800"/32], 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x24040, 0x0) fadvise64(r1, 0x3, 0x0, 0x5) ioctl$BLKRRPART(r1, 0x125f, 0x0) read$FUSE(r1, &(0x7f0000004380)={0x2020}, 0x2020) r2 = syz_open_procfs(0x0, &(0x7f0000000580)='attr/exec\x00') read$FUSE(r2, &(0x7f0000001180)={0x2020}, 0x2020) pread64(r2, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) read$FUSE(0xffffffffffffffff, &(0x7f00000004c0)={0x2020}, 0x2020) getegid() r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x15, 0x0, "285d0e650926a96ecc136e7fb980e989db9e8bf9b931292f5abb6eaf850dad0f46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df600"}, 0xd8) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0xc, 0x0, &(0x7f0000000180)=[@dead_binder_done], 0x0, 0x0, 0x0}) openat$nullb(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) r5 = socket(0x2, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000200)=[{&(0x7f00000031c0)="44b55d6e2161b57b09b8058211c053ce2d7fc7952ac5a2c31a0dd3e9b0482393ce31228874266867803638d10ce1733ba570873efb863b99c50cb659bfc44ff1248ee7973a95ac6590dab354bdf197162e472884f9f2f413087f8657f4159aebe13256b1e4f729405887d5887ab4d4cea9488f2ca4e982e6a906d52c1b02222b533bfd9d415bafaec2eaa6a5e1582c035048114593f0075ea53fa74357223b2336e758eae3333a2b09", 0xa9}], 0x1, &(0x7f0000003500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}, @ip_retopts={{0xfc, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x75, [@dev={0xac, 0x14, 0x14, 0x2c}, @private=0xa010101, @remote, @dev={0xac, 0x14, 0x14, 0x8}]}, @rr={0x7, 0xb, 0x35, [@dev={0xac, 0x14, 0x14, 0x2f}, @local]}, @timestamp_prespec={0x44, 0x44, 0x83, 0x3, 0x1, [{@local, 0x4}, {@empty, 0x4b2}, {@private=0xa010100, 0xa9}, {@dev={0xac, 0x14, 0x14, 0x28}, 0x8}, {@multicast2, 0x3}, {@local, 0x7d76}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x1000}, {@rand_addr=0x64010100, 0x1}]}, @cipso={0x86, 0x1f, 0x2, [{0x6, 0xf, "8970b32a82436293e3dc7e4cb3"}, {0x5, 0xa, "8c5e37e6e6108c56"}]}, @lsrr={0x83, 0x17, 0x6, [@rand_addr=0x64010101, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast1, @broadcast]}, @lsrr={0x83, 0x13, 0xfb, [@remote, @dev={0xac, 0x14, 0x14, 0x39}, @loopback, @local]}, @lsrr={0x83, 0x23, 0x52, [@dev={0xac, 0x14, 0x14, 0x43}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @multicast1, @loopback, @multicast2, @remote, @broadcast]}, @timestamp={0x44, 0x1c, 0xdd, 0x0, 0x0, [0xd80, 0x8, 0x8, 0x6, 0xff, 0x6]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9c}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ab}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4d}}], 0x1d8}}], 0x1, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x0, 0x6, 0x8001, r7}, 0x10) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x4a, &(0x7f0000000300)=ANY=[@ANYBLOB="26011001d4f86140d804830047da010203010902"], 0x0) ptrace(0x10, r8) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000003b80)={0x48}) 21.402277314s ago: executing program 7 (id=1779): socket$inet(0x2b, 0x801, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r0, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}, 0x53}], 0x1, 0x120, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x14, 0x601, 0x0, 0x0, {0x2b, 0xfa}}, 0x14}}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000902000073797a310000fdff0900010073797a30000000000800054000000006340000001e0a05010000000000000000070000000900020073797a31000000000900010073797a30000000000800038004000d80140000001000010000000000000000000084000a00000008000000"], 0xb8}}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}}, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x4002004c4, 0xffe, 0x0, 0x0, 0x0, 0x900f, 0x0, 0xd57b, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) 21.062694618s ago: executing program 7 (id=1782): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xb48) recvmsg$kcm(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x12100) r1 = syz_usb_connect$printer(0x6, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x355, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0xb8, 0xba, 0xca, 0x10, 0x7392, 0x7717, 0x3b91, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x343, 0x3, 0x6, 0x7, 0x30, 0x5, [{{0x9, 0x4, 0x63, 0xf8, 0x0, 0xdf, 0x96, 0x33, 0x3}}, {{0x9, 0x4, 0xf, 0x99, 0x9, 0xde, 0x5f, 0xca, 0x8, [], [{{0x9, 0x5, 0x80, 0x10, 0x400, 0x10, 0x9, 0x5, [@generic={0xa4, 0xc, "d19335cd9892cc2bfb72dab38fcceeb84d0a55c4a80c52b3306a41e18478ea0b9a04133ec5b1b775a74c5562540e8c4bb7181588eedcdd740f3dfc5890c57bf7ff1f85352a7b0351d0bbbb63eb2e2da0d48970ccf142a28d5de749b6903884035fc27516f934457a0fca7029aaa288d6d7f41f20613bc8dc0da9a8ad11209bd779f6692a919cfff79ce8b9f095074f5db463f36bbfcd1c22c1812c4596b8ea1d7dc4"}, @generic={0x3a, 0x7, "292e326fef3e27d32d22aa6611b89555771efc23953a8090f135b9b7a025994b92672dfb33efa502b1dc7cc7a9a6ea6d1f8fd7c742fe713e"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x8, 0xbf, 0x2, 0x6}}, {{0x9, 0x5, 0x6, 0x8, 0x8, 0x40, 0x1, 0x5}}, {{0x9, 0x5, 0x88, 0x3, 0x40, 0x9, 0x76, 0x3, [@generic={0xb8, 0x4, "c90df134402ce9f525baa9d92ef4c61e001097eab0b73ab71c9a532a5ad69726c7a20b2423e024d5d1773969476fe114d528b86c87cd8c64ef20cf07591c27e7a0b06ab49c07bd6322965218da9435011a5a36ddb9d0d0ede6e73d1e06700f74e881a53eca860ebc6716bd23e0a6fc792a68f13517bb0fdad9e8b4d903cd9d9cbd6c47496a9ae23207103c96086cbac8497d83161027ce297119835bfb98382984ba5126b7c8e6d5a16fa7933986e8b119fdf24c69a4"}, @uac_iso={0x7, 0x25, 0x1, 0x181, 0x3, 0x2}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0xf7, 0x4, 0x94, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xbf, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x24}]}}, {{0x9, 0x5, 0x80, 0x2, 0x200, 0x6, 0xf, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x2, 0x4, 0xa2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x5062}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x28}]}}, {{0x9, 0x5, 0x9, 0x2, 0x8, 0xb3, 0x2, 0x4}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x6, 0x95, 0x4}}]}}, {{0x9, 0x4, 0x4b, 0x5, 0x2, 0x65, 0x76, 0xde, 0x3, [@hid_hid={0x9, 0x21, 0x9785, 0x7, 0x1, {0x22, 0xe7e}}, @uac_as={[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6, 0x7471, 0x4, "0b3e2cf61241"}]}], [{{0x9, 0x5, 0x1, 0x1, 0x8, 0x7, 0x1, 0x80}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x40, 0x5, 0x9, [@generic={0xe4, 0x9, "671357fd7a47c1b49a8bfa09c4fc0c7b9d1b5f53d74267594c90643b29651c676a6136daa7984bffbaa3fb7995457379a24dabb5521e952d10813098583404f9149c856c5fcccc6b245941ca7c194bf85398dfa37100eaf087ad0d8d6e48852ffdf2d4cc445a15682b534d1f7b3d712f62f2a1472924b8339d5e3002b48e7462e0d2fc0860ce43b1ba9c6efe9bdda7f68f986acfd14bb248bbcdbc253f0b9a6f85b79ca071f839cee4a41c859c1be8479cc2874227e00d5d99ac2fc28aa72555bdb0867e72ecf9bbaf02805dd340d13be32881011c135b3c5fc176526c5726e84ed9"}]}}]}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0xee, 0x3, 0x1, 0xff, 0x8}, 0x3c, &(0x7f0000000500)={0x5, 0xf, 0x3c, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x91, "7e5d46d30ea4d7330de9d4d695b3faa2"}, @ssp_cap={0xc, 0x10, 0xa, 0xb, 0x0, 0x200, 0xf, 0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x14, 0x1, 0xc83}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x18, 0x3, 0x2c, 0x3}]}, 0x2, [{0x59, &(0x7f0000000540)=@string={0x59, 0x3, "e50935a633c6015386bc0af1673face1744cc10476df3cdc90f10ecde8d4db3c0615ccbc41f8c45a372c33ac396cb06219829c20e8486a7980211494076b3530c9b984129934a4b286c5d3acab50cc38a4574ed02592d6"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x439}}]}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="a92f4d53d06d01aa3c20fa15e0d4ab77c3b62df4bc109def3cbf6468ab0cf04ec4c5cef9af43919546f28738bfbf6663a754dc6a18ae27a6f80f2103cb69f6bceb7e82588956a51e95b9aa091322453ba4e6fe5426a9d178fe488c1b5753bb08173fc55b45e4c172ba925f6fea1d94a6519bc6a3d84601240ed3aab207147f8e4778649d38046bc6ce9df3f7eacd8292739d680565bde66197fb7161fa80e57c90f7ec6de30887d6052d7f5f620000000000", @ANYRESHEX, @ANYRES16=r1, @ANYRES64=r2, @ANYRESDEC=r2, @ANYRES16=r0], 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r1, &(0x7f00000008c0)={0x14, &(0x7f00000007c0)={0x0, 0x3, 0x7c, {0x7c, 0x3, "ee651fa78a108b3fa471aa76992418259b6b126aa6a0bf2793eaf81569b2d0abb441aa274764aa1d807c4f07cfc34935d256c5a310e7438bbc7d5b81ed28b1a6919011531482a9ccba7b47f20464740ac6c33f85035a133b6bbe87836b424991808b0eb28ad5873393a54e94fb87bd55dd8ec701ea67311930b9"}}, &(0x7f0000000880)={0x0, 0x3, 0x17, @string={0x17, 0x3, "36526b0563ca111d81e29791a92968362d5ec63201"}}}, &(0x7f0000000c80)={0x34, &(0x7f00000009c0)={0x0, 0x31, 0xc7, "f38d10e71138a30883be461579466af4973ab2b8b8a2d94aef257903a5830863966b5cb0c479bef94114836626e47a98f8993d6bde23cd837e488c9972ee861d098a4c11d084e38d8e7ab368e1f1b05ea9bb2eb80941fcd86075af1b130740dab52bc6b931e5526eabf5799b36d6e938aaa6186ce548b87350aa1727fb3d9bc1bc545ad52021e03b28f2634a9a7c892fc6dbdecbf9ea70f12d27a0d30767a083a27b5779c9a0f973cdf1ade26c1d5b17369bc40b1355de9407936aee15a4a3bd6ff38cd9d3c715"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000b00)={0x20, 0x0, 0xee, {0xec, "23cf65b3fda793ada3a15495fb9aabc2af77ab330ed169909af9c0e1cde3c04528dba7b3adf4d12cea4a45b45955c6bf50d5cf595c88078fe2c9da8c650ebb091c07cb4a626dcdf1730cd7007d0c36d3afa5350a3a76601667d38189f1571514859d1a5b858a35b8244bffaebdf9269b3120b64cf85f408c7a14f458cfa443224c93f3389aca78ed21c0a33c14359a39e945437d36f21834bf3a18d1a8aa9ceaa65c4cda57d64121b0c004560fcd1e26db37954f53a9a9096618aaf9c87fa63c72d473966ff1c27e12987d91990bc7597d619c5933c72018546b1fd0acda297f06188dec7db6d80bc136de26"}}, &(0x7f0000000c00)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000c40)={0x20, 0x0, 0x1, 0xb}}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000000)=0x1) ioctl$SNDCTL_DSP_POST(r5, 0x5008, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES16=r3], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) timer_settime(r10, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_delete(r10) ioctl$KVM_CAP_DISABLE_QUIRKS2(r9, 0x4068aea3, &(0x7f0000000080)={0xd5, 0x0, 0x355c69cd7fd13100}) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000040)=""/185) ioctl$EVIOCGBITKEY(r6, 0x80404521, &(0x7f0000000cc0)=""/220) 18.328557902s ago: executing program 7 (id=1795): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) epoll_wait(r0, &(0x7f0000000040)=[{}, {}], 0x2, 0x5) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffc01, 0x0) r3 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x4b4, 0xbca1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x30, 0x40, [{{0x9, 0x4, 0x0, 0xf7, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x20, 0x2, 0x1, {0x22, 0xef9}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x2, 0x0, 0xf2}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x3, 0xc, 0x91, 0xff, 0x2}, 0xfc, &(0x7f0000000180)={0x5, 0xf, 0xfc, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0xc3, 0x5, 0x2, 0xf, 0x3, [0x3f00, 0x0, 0x30, 0xffff, 0xc030]}, @generic={0xbf, 0x10, 0x3, "289e08a35f0687ecd1fb91de6f3a136f6889e27943833bc88837be93dfddb3e30ca0d8472a7303b701c272f16edd091aaf80b03751cd9963694c152f266354244656f87facc3b2c1e9b31327d32ecb72febfaffc3c14fee64f614aebedd731d0f26789a13d9c37751aef43a4c9a296b8082381b826c3c8360055dde5b37333267e244310467be41a59b7ddac846a11441fbd90e8bf378524f733e9aa1c951805a93513b70b79b2ef819929c09659cda0f56be850bbc4478be2f54795"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x98, 0x1, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x6e, 0x3, 0x6, 0xb81, 0xea}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x5c09}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x426}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x414}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x42d}}, {0xb6, &(0x7f00000003c0)=@string={0xb6, 0x3, "91102886a92d68eceddc1b38b6218c972e6d627553da689798296ff8e02d2754212849db5989b6913e1d1b6a6c75b555287261d051154731351b87dd2d205c0ce2abe96f8126672f66b684f7d232c0aaca967968cbc27ec8e40b86dae5e2ac2a6ffb75fda262766bd5ff624d37b877f3584711e52fdab94339c0db727d4b3f92df5549187ae864e46697c77b8512d2ffad778c44970e192ad2ccb437aa2fedddc96d4b92311e5cebd0a60d5884b0d9d108d1de58"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x439}}, {0x16, &(0x7f00000004c0)=@string={0x16, 0x3, "b42b0df727e1eab0bd63bbb748f916fac0f6c788"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000680)={0x24, &(0x7f0000000580)={0x40, 0x5, 0x3a, {0x3a, 0x0, "d042d588ba1ded3c7318512993941dc5146fd724ab6229a115a6941266ab99ef88c2d128c8495a8676bc2d440de9a712ce2680fb5bb2e2c8"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}, &(0x7f0000000600)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0x0, '5'}, @main=@item_4={0x3, 0x0, 0x8, "07b9156c"}]}}, &(0x7f0000000640)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x2, 0x1, {0x22, 0xfc4}}}}, &(0x7f0000000900)={0x2c, &(0x7f00000006c0)={0x20, 0xd, 0x76, "4d8b4116af16edd6c56c952af7e0c5a0cc20e6c51fdc8b339e98a496dd8322482c6ed4742b85fb9e62359ec754a233ffbd60abababc361180fb5c15a8122fa13bb10a16d07e750ed3e4d49d2558a5d3fb8ca35984f15ddfab28e4a4795a61ad0fc43637ca9608ecd900ad5d004f27bfaedab2eeb5b74"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x18}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xa1}, &(0x7f00000007c0)={0x20, 0x1, 0xca, "4cd9bdcf21cc07338213ca903ee48e3f1e8964e3db9d73ff7e122d07f2a14115ec8a7e6ed0f044534aef2a77496574e0d645b88c6ab6842de1070a29c6861389c84bcacd8c49a99e5f2ccd8258bd9effc0fe5e78eca1e5b34181b4d58f232d1ed01e0b621dba75df1ed4c15268a0e2efc9313a04b2bb1f35d0f792456010a6fc32686ff6db4585b6782ef3cb4fa4f75104c3975a55187a34b87fee8fd46c60c6ecc6bf265e7cd2e200139146f06814178bc63ab57284150491e1c632a08f386cc1a3056a927c39223f08"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x44}}) ioctl$LOOP_CLR_FD(r1, 0x4c01) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 18.151582394s ago: executing program 7 (id=1796): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x24044890) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="000629bd7000fbdbdf25170000004800028024000380080001000700000008000200090000000800010000000000080002"], 0x5c}, 0x1, 0x0, 0x0, 0x20000810}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x20010, r1, 0x8000000) 17.848202245s ago: executing program 37 (id=1796): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x24044890) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="000629bd7000fbdbdf25170000004800028024000380080001000700000008000200090000000800010000000000080002"], 0x5c}, 0x1, 0x0, 0x0, 0x20000810}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x20010, r1, 0x8000000) 7.817694272s ago: executing program 3 (id=1828): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) r1 = syz_open_dev$admmidi(&(0x7f0000000080), 0x2, 0x40002) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x40045730, 0x0) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a05311100000000700109022400010000000009040000b20000f7ffffff00000501220500090581030000000000"], 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xbc, 0x453, 0x20, 0x70bd28, 0x25dfdbff, "52935a8a8d068ca640631d09b442b96afbe2bfb12730519b00866e8b1671f9afe48f7b94d76421134740684fb002ae0a27f071324a9d47361bb1892d1b2b293b860a8ca5d7d38f4b8688c7f55e8bff27db285e917d865ea3b71cca7853694a9f067c31f5255c108aa3d7b72814d5de4a5add08b82f925a198d3cbb451d4f395129063e566ccec8dd249f21dd6e942e193b72c3866f61a7f96d7e7b29288c3f940d420486a610087713", ["", "", ""]}, 0xbc}, 0x1, 0x0, 0x0, 0x800}, 0x4000010) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) r3 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r3, 0xd3fc6000) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x33, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x40, 0x9, 0xf, 0x10000, 0x6, 0x8, 0xfffffeff, 0x2174]}}) syz_usb_control_io$hid(r2, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000300)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x6, "04b18b7c"}]}}, 0x0}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r6) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r6) (async) recvmmsg(r6, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/199, 0xc7}, {&(0x7f0000001940)=""/229, 0xe5}, {&(0x7f0000000040)=""/46, 0x2e}], 0x3}, 0x80000000}], 0x1, 0x10102, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000018000902000000000000000002"], 0x2c}}, 0x20000000) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) sigaltstack(&(0x7f00000000c0)={&(0x7f0000002400)=""/4095, 0x0, 0xfff}, 0x0) (async) r8 = gettid() rseq(&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) (async) r10 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x80, 0x0, 0x2b, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x8, 0x0, 0xe}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x9, 0x1, 0x75}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0xd, 0x0, 0x15, 0x40, 0x3e}, 0xe8, &(0x7f00000001c0)={0x5, 0xf, 0xe8, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x62, 0x1, 0x0, 0x8, 0x9a}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "be5cfc4886ec782b5e49a168338dfa66"}, @ss_cap={0xa, 0x10, 0x3, 0x15d347b94e0ae173, 0x0, 0x93, 0x0, 0x2}, @generic={0xba, 0x10, 0x2, "11a41cdd54526168c7facfd1091fb8cb729d87f0c779f83ce7778c4b9b426e1fe850602dd6f2ab43b211fe986bdf70d1c4df25fcad9eadfe0b2624bae62aeba5ba800408a3d2939d99325fe91955fba5323c3c1f83c15b2940727414d8944883a3425997804b7ed6445b2b868219d5302b222abae790891525bfd74113246380a3e78909362dc585e7fa3069d4197be77b3560d90bd6353bd35f6e398a59b536a73805af7f7a7e0ad40cbc70d69a4026a003963b571704"}]}, 0x5, [{0xb1, &(0x7f0000000340)=@string={0xb1, 0x3, "4950b69e1e83736748954a253adf4cdd687fc636e04f21633f40d9fa0c11c362c2cea2eae5380c6814be7f78d6eb46a92de2fa0a50af0801e7768c84629ba0469a697d8d979e29a875897e85038ad8e78a8e288eb052cd34e78befb3e85c4006dc5d4cf46fdebe53065b6cf9a27054df7d07f16ce4fb472f99616a1f7db251c4ff350a70d0f89cd81e307effa44e77aa72c825b20cf783ad90eae95c46f82d77473694c6f811c44e2390b0c5bbe86f"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x100a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x438}}, {0xa1, &(0x7f0000000440)=@string={0xa1, 0x3, "352e743bdcb256776addd5fca651e60f53b032bd6cf09447e19575a4a042ea312ef02987a7243c6d817e7bc5cc24135cf85a222c63d4472abb8d8f962d8623b687a61eadcb90893b5e0af9a4e94574f6e0b29eb43e6750dbfb32093fbb11363dc9f9cc55a59de9d02c64ec5fbac7a0f827185ea8dfff58756e95b8c83a860cd6098e26d19e8760fc37309c360ad212bf07db6a0ccd26b1d208ff0789c4ec97"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x801}}]}) syz_usb_control_io$printer(r10, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x0, 0x2a, 0x60, {0x60, 0xd, "8c47e52501baf547b094ebd31b770000c312bbead2f4805a423819f6e29c6933bcc2eeb6c2f3271ce033375628d5d700f252b05615ca3697000107647f018bc71ccd983c48330b1d2d7e08e1f830cb6e03f25db587ce9a54acad77369c66"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x415}}}, &(0x7f0000000980)={0x34, &(0x7f0000000700)={0x40, 0xf, 0xc7, "3edb1c9017097f834d5679a9a0023c20f56586d00d33b775e6788a83530dda1404ca7fe20e293782fcbbac6619f18a2dfe6b34cd22c6c218bf0a37650468360441f8316e33cee6d18c191f300570c395f59a006760a2b75e15a7907a1d143346445a18937a64c012c42763927288b33aeeaec8f52225bac26c44354670479cd4e9267765f5f7aa4c4b852440bc70619a8de373472ef38ff31119323c9650791b041ed06babe8d742bbe59adc1c5e778d4774568b198ee9d8d0cfb8208b11f2b241c6798ea97db5"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000880)={0x20, 0x0, 0x53, {0x51, "a794e3f571e523d207e6341670089127b0120e9a63042927c92dd9227010064cced05e1c7e70d37585bbf2a949ab84de8060825b1da397fa7923309484d44a075f3f134a45683df7c492ede6b14df5abcc"}}, &(0x7f0000000900)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000940)={0x20, 0x0, 0x1, 0x8}}) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) 7.055284348s ago: executing program 8 (id=1830): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) write(r0, &(0x7f0000000480)="fb196deccf6e578adc0ac247f67bfc78ce240358bcd1000052371b91ee7b011afceb5841d4b4aec7b0d0ca9b0691a0311932f4aa2c23840f5bb6f074a21e9e142d990a442005484e4a560bf8861076326500322b823246d02aa4bada000000000000000000000000000000000068cb0d02be1deb2496e737be7f9ad55e0a6a2146ad7c2792c96f960b27999e9959d4623410599ddea8a9d1c4f7082d735d955c3eab6aefb5ad62067efe84f55cc602fa6d4cf242a0820966ef358e9a5b47a66a57fd4ff78f98320a5133855c3af57a32e4b4b718249b", 0xffffffffffffffee) r1 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12011003000000104f0404b340000102030109022d00010108200309040070020301010f0921becc040122f00409050003000461900209050203ff03040703"], &(0x7f0000000340)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0x5, 0x0, 0x0, 0x20, 0x1}, 0x5, &(0x7f0000000100)={0x5, 0xf, 0x5}, 0x3, [{0xc8, &(0x7f0000000140)=@string={0xc8, 0x3, "84fcf5de28f31ddb789021e408c586db68f6a4914786d25ee602d917ba5258a2e1990f957ff5a1fedbf102a2e5a6bed0f22e94aa1fe975b403c8caee7314d019e649b6979e19fbfd0a4944a156a89669a52c8af9f10ca9350dcf0bb34e22cb2032e3c8d30283827af8c1ff091617de73df5506826928f4ea83045bc40f8377b86280b7fe5854285ca25ba0be2c03bd7f2cb04aa434e57b665ad4fb5decb7afd77e2cdd2b7c1de71a8733d1d0142c1c4ed5427b3bb3eb6d26d605b24ded2fc7321f2bcbb77fc1"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x80c}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x21, &(0x7f0000000000)={[{@nr_blocks={'nr_blocks', 0x3d, [0x39]}}, {@nr_inodes={'nr_inodes', 0x3d, [0x34]}}]}) syz_usb_ep_write(r1, 0x3, 0x51, &(0x7f0000000380)="e81351e9d7cfbe6d3d677297b226b907864c0a9bea2d753af97eb673017b1a238235861f3a883b1be64f778eb32f5147869b5b252fd802f8fe165c7e217de9a4e8868cb9778279a2bfe6d94f4a98ed95f3") 4.696894162s ago: executing program 3 (id=1839): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0x1, 0x0, &(0x7f00000027c0)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) (async, rerun: 32) r4 = syz_usb_connect$hid(0x5, 0x42, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x2}}}}}]}}]}}, 0x0) (rerun: 32) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, &(0x7f0000000080)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000145000000450ef9"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/81, 0xffffffffffffff41}], 0x1}, 0x20000003) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x6, 0x8, 0x4, 0x7f246205, 0x7fffffff, 0xffffffffffffff01, 0x5, 0xfff, 0x2, 0x1, 0x8001, 0xfffffffffffffffa, 0xfff, 0x6, 0x200]}, &(0x7f0000000000)=0x100) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0x9, 0x4, 0x9, 0xff, r5}, 0x10) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r6, 0x0, 0x2, 0x0, &(0x7f0000000040)) 4.524996437s ago: executing program 2 (id=1841): syz_usb_connect(0x0, 0x2d, &(0x7f0000000700)=ANY=[], 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001840)="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", 0x1c0}], 0x1}}], 0x1, 0x20048041) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x6, 0x1, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x40000) splice(r2, 0x0, r0, 0x0, 0x3, 0xb) 3.920640212s ago: executing program 8 (id=1846): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi5\x00', 0xaa0400, 0x0) (async, rerun: 32) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r3, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) (async) write$UHID_CREATE2(r1, &(0x7f0000004040)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x1000) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xe02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x45809000) r5 = getpid() syz_pidfd_open(r5, 0x0) ptrace$poke(0x5, r5, &(0x7f0000000080), 0x8) ioctl$COMEDI_CHANINFO(r0, 0x80306403, &(0x7f0000000040)={0x1000, 0x0, 0x0, 0x0}) 3.849638202s ago: executing program 8 (id=1848): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r1, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xb}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x805}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000080)='syz0\x00') 3.006983464s ago: executing program 8 (id=1850): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek(r0, 0x0, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000001140)=0x10000000) (async, rerun: 64) r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000000)=0x0) (async) r6 = fanotify_init(0x0, 0x80000) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async, rerun: 64) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x8000, 0x81, 0xffffffff}) (rerun: 64) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000440)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f00000004c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000400), r8}}, 0x18) r9 = syz_open_dev$tty1(0xc, 0x4, 0x4) timer_create(0x2, &(0x7f0000000500)={0x0, 0xa, 0x2, @thr={&(0x7f0000000140)="c0ecfb94382bb90b9cf3356e5cbe", &(0x7f0000000180)="d1724530f9fc6c5c2d83ac8fc6"}}, &(0x7f0000000200)=0x0) (async) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) timer_settime(r10, 0x0, &(0x7f0000000300)={{0x77359400}, {r11, r12+60000000}}, &(0x7f0000000340)) ioctl$KDFONTOP_GET(r9, 0x4b72, &(0x7f0000000100)={0x1, 0x0, 0x9, 0x14, 0x1e8, 0x0}) (async) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, r5, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r13, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @short={0x2, 0x2, 0xfffe}}, 0x2, &(0x7f0000000000)={0x0}, 0x7, 0x0, 0x0, 0x4844}, 0x80) r14 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) dup(r14) (async) close(r4) (async) r15 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r15, 0x40345410, &(0x7f0000000040)={{0x0, 0x2, 0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r15, 0x54a1) 2.678998121s ago: executing program 8 (id=1851): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev, 0x0, 0x0, 0x0, 0xfffd, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd}, {0x0, 0xd}, 0x0, 0x0, 0xa, 0x5, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='udf\x00', 0x8000, 0x0) 2.453542982s ago: executing program 8 (id=1854): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="02c92010000c0005001a01080004007f004f0e09"], 0x15) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x9d) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r7, &(0x7f00000000c0)={0x14, &(0x7f0000000680)=ANY=[], 0x0}, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.628568026s ago: executing program 9 (id=1859): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=ANY=[@ANYBLOB="18008000550001002bbd7000000000000200000004002000"], 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.552885204s ago: executing program 3 (id=1860): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x282, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x0, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x5, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fffffff, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x6000004, 0xf, &(0x7f0000000180)=[0x21, 0x6, 0xf909, 0x899d, 0x80, 0xfffffffb, 0x7, 0x10, 0xd, 0x1, 0x4, 0x2, 0x6, 0x8811, 0x0], 0x8, 0x4000007}) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async) write(r2, &(0x7f00000000c0)="8f2a", 0x2) (async) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x2}, &(0x7f00000001c0)="5fc6429bf9c6874f46f916d1bf2fb6167d53af077cf3d150", 0x18, r1) (async) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='exfat\x00', 0x200000, 0x0) 1.348782919s ago: executing program 2 (id=1861): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) write(r0, &(0x7f0000000000)="fb196dec69a10b22", 0x8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x0, 0x4}, 0x6) 1.348550024s ago: executing program 3 (id=1862): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x10000000}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@migrate={0xcc, 0x21, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x0, 0xfffe, 0xa, 0x0, 0x0, 0x32}}, [@migrate={0x50, 0x11, [{@in6=@loopback, @in=@multicast2, @in=@private=0xa010100, @in6=@local, 0x3c, 0x0, 0x0, 0x0, 0xa, 0x2}]}, @user_kmaddress={0x2c, 0x13, {@in=@dev={0xac, 0x14, 0x14, 0x19}, @in6=@local}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000000)={0x6, 0x118, 0xfa00, {{0x3, 0x7, "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", 0x4, 0x35, 0x6, 0xff, 0xa, 0x4, 0x6, 0x1}, r4}}, 0x120) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) 1.320966958s ago: executing program 9 (id=1863): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}}, 0x84) capset(&(0x7f0000000080)={0x20071026}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.204197232s ago: executing program 2 (id=1864): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket(0x1d, 0x2, 0x6) accept4$unix(r1, 0x0, 0x0, 0x80800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) msync(&(0x7f000085d000/0x3000)=nil, 0x3000, 0xc) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r4, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0x1) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r3, 0x7dfff000) 1.080565534s ago: executing program 9 (id=1865): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r0, r0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x8000) setreuid(r0, 0x0) setfsuid(r0) 1.079757656s ago: executing program 2 (id=1866): r0 = syz_clone(0x1000, &(0x7f0000000000)="71f4fc45524280ce1cded00822c7d0977c1b1a8bfd54b63588575d707b57f7a5995fa392933b5675a7105c68373925fee886c0f63973bf90a2b4deb9b839e28c91aa86e95e65fb335b22265eab59d5be2f26cc00c90dbd39d075743ae082f19169057cc693fb69b896f947c0ca5ed87b1420d62bbbbc976217c93d65e3430898b91097a0b178c25b2bc71c8078", 0x8d, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="6d23c4dac9b493dad24fcda527579e52be2692acfd845d85b8780e6d8a6db07e28ede84d8f1998c438ad0b481deab55e9db8b4d41de97435d737a5a9a87505614b38ed66fd88e16d1ab4e02a5a34ed09d3ffcd2de5818c9cf7c5300a77210691ed6e7d2f6d9be22f813330d0649edb199cca89973ec40c2f2cc563db39649804715e854aa45c7cca54d0d8b7494ab295a6d0ace314044c39b3b464ac20b8846a2b2cdfc8a0902a5bb04ae4b383267e771ebc2c6adb63d6a93a1edc5dc82bb507951ee8273a") socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000280)=0x0) r4 = epoll_create(0x9) kcmp$KCMP_EPOLL_TFD(r3, r0, 0x7, r1, &(0x7f00000002c0)={r4, r1}) (async) kcmp$KCMP_EPOLL_TFD(r3, r0, 0x7, r1, &(0x7f00000002c0)={r4, r1}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0xf5, 0x9, 0x6, 0x8, @mcast1, @empty, 0x80, 0x1, 0x8, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0xf5, 0x9, 0x6, 0x8, @mcast1, @empty, 0x80, 0x1, 0x8, 0x3}}) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000440)={0x7, 0x8, {r3}, {0xee01}, 0x8, 0x9}) sendmsg$nl_xfrm(r5, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=@updsa={0x114, 0x1a, 0x200, 0x70bd26, 0x25dfdbfd, {{@in=@empty, @in=@multicast1, 0x4e24, 0x0, 0x4e21, 0xad97, 0xa, 0x100, 0x10, 0x21, r6, r7}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x2b}, @in=@loopback, {0x5, 0x4, 0x2ea0, 0xffffffffffffffff, 0x3, 0xff, 0xffffffffffff7fff, 0x8}, {0x80, 0x1, 0xaf31, 0x8}, {0xb607, 0x101, 0x595d79a2}, 0x70bd2c, 0x3505, 0x2, 0x0, 0x12, 0x8}, [@lifetime_val={0x24, 0x9, {0xb3, 0xfffffffffffffffa, 0x8, 0xfffffffffffffffb}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)=@updsa={0x114, 0x1a, 0x200, 0x70bd26, 0x25dfdbfd, {{@in=@empty, @in=@multicast1, 0x4e24, 0x0, 0x4e21, 0xad97, 0xa, 0x100, 0x10, 0x21, r6, r7}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x2b}, @in=@loopback, {0x5, 0x4, 0x2ea0, 0xffffffffffffffff, 0x3, 0xff, 0xffffffffffff7fff, 0x8}, {0x80, 0x1, 0xaf31, 0x8}, {0xb607, 0x101, 0x595d79a2}, 0x70bd2c, 0x3505, 0x2, 0x0, 0x12, 0x8}, [@lifetime_val={0x24, 0x9, {0xb3, 0xfffffffffffffffa, 0x8, 0xfffffffffffffffb}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r8 = epoll_create1(0x80000) prlimit64(r0, 0x8, &(0x7f0000000640)={0x1, 0x1}, &(0x7f0000000680)) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000006c0)) (async) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000006c0)) fstat(r8, &(0x7f0000000700)) (async) fstat(r8, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r8, 0xffffffff80000802, r9, &(0x7f0000000780)={0x0, 0x6a, 0x8000, 0x8198, 0x0, 0xd, 0x1000, 0xbe6, 0x4}) (async) quotactl_fd$Q_SETQUOTA(r8, 0xffffffff80000802, r9, &(0x7f0000000780)={0x0, 0x6a, 0x8000, 0x8198, 0x0, 0xd, 0x1000, 0xbe6, 0x4}) clock_nanosleep(0x4, 0x1, &(0x7f0000000800)={0x0, 0x3938700}, 0x0) r11 = mq_open(&(0x7f0000000840)='\x00', 0x40, 0x21, &(0x7f0000000880)={0xcac, 0x3, 0x1c, 0x3}) mq_timedreceive(r11, &(0x7f00000008c0)=""/77, 0x4d, 0x1, 0x0) (async) mq_timedreceive(r11, &(0x7f00000008c0)=""/77, 0x4d, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000940)=0x0) ptrace$poke(0x2, r12, &(0x7f0000000980), 0xc) mount(&(0x7f00000009c0)=@md0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='cpuset\x00', 0x80, &(0x7f0000000a80)='syztnl1\x00') (async) mount(&(0x7f00000009c0)=@md0, &(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='cpuset\x00', 0x80, &(0x7f0000000a80)='syztnl1\x00') pwritev(r4, &(0x7f0000000c40)=[{&(0x7f0000000ac0)}, {&(0x7f0000000b00)="ed82961430ff34365e0b2dfc3ae4b2d6a8d26d868c94b44355db3a9bfd860e6d861d002eb14aa8ed30e6ebf364ceecf896e8c0cf7f88e5fff1d4b7755103e356cfd2a3c9286f6588547750d74cb223a4f621711c906260dae557ca9a83", 0x5d}, {&(0x7f0000000b80)="99dd9ea258455bc9fc3618318d5d466fda06e81d0e58263bb48941f2308e44922c68417c307fa9eef1ccd8d3511660487a7d092a5c76c29da3dd7e1d86808e353812f3ebf0f5cd5952e886ee4c2c871bc2c6498b98dc8d94ecb6a7528c58c4a41764a6479bcaec322f2d85c92cc0f5f76b30abdef84afe5205e6ebd633181159f3413a39c06071", 0x87}], 0x3, 0x0, 0x8) r13 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r13, &(0x7f0000000c80)="8c5b5f622d73a2fe46bc332906623331d1dfcb07f2eb70a5033bcd710a4e5e2782385e94204c5874c16a537ab8ff0a8c397952132b90fd2721749ab0", 0x3c, 0x24040000, &(0x7f0000000cc0)={0x11, 0x1a, r6, 0x1, 0x5, 0x6, @multicast}, 0x14) (async) sendto$packet(r13, &(0x7f0000000c80)="8c5b5f622d73a2fe46bc332906623331d1dfcb07f2eb70a5033bcd710a4e5e2782385e94204c5874c16a537ab8ff0a8c397952132b90fd2721749ab0", 0x3c, 0x24040000, &(0x7f0000000cc0)={0x11, 0x1a, r6, 0x1, 0x5, 0x6, @multicast}, 0x14) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x110, 0x5, &(0x7f0000000d00)=[0x0, 0x3], 0x2) r14 = add_key$keyring(&(0x7f0000000d40), &(0x7f0000000d80)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_WATCH_KEY(0x20, r14, r2, 0xad) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r14, &(0x7f0000000dc0)='rxrpc_s\x00', 0x0) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r14, &(0x7f0000000dc0)='rxrpc_s\x00', 0x0) r15 = accept$inet6(r5, &(0x7f0000000e00)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000e40)=0x1c) sendto$inet6(r15, &(0x7f0000000e80)="adc58795655f3b881164f7855e7e507d7b41bedf5b538e23667b7308dd1a793222284a23694a5825bc2519b3c141b0319c2b3eb2a650024290f04f230fbee37c24c95753bc371642", 0x48, 0x4000000, 0x0, 0x0) fchown(r11, r9, r10) 1.065711172s ago: executing program 3 (id=1867): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000000000000450300"]) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="fc010000190001000000000003000000ac141425000000000000000000000000fe8000000000000000000000000000aa00000000000000060a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000044010500fe880000000000000000000000000101000004d62b00000002000000ffffffff0000000000000000000000000000000004030700080000000400000001000000fe80000000000000000000000000004c000004d66c00000002000000fc000000000000000000000000000001013500000200730001800000040000000700000000000000000000000000000000000000000004d33c00000002000000640101020000000000000000000000000635000002030700050000000300000007000000ac1414aa000000000000000000000000000004d43200000002000000fe8000000000000000000000000000bb0235000010"], 0x1fc}}, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) 794.502855ms ago: executing program 9 (id=1868): creat(&(0x7f0000000040)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 504.551731ms ago: executing program 3 (id=1869): syz_usb_connect(0x0, 0x2d, &(0x7f0000000700)=ANY=[], 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001840)="b9d36a510078dc22b8a6f7f44c0bc9d840972b4a1a2da56c9568e46e055f0acc26b2cb082f6d73e4f7ab0e4def6d6e49abd303c1077231ae3114e02f8c8e09337d3904abb618e6ac416a426ff2433eb732fae1ee8b7df395f03cc482a9c57d0ba9a9211500338e3e54ffa802decdc3ddb2d28160c7673e5973b034259479dd7f500e13534a8aae8576497635e4d29fbdc5769e173141ed3c923b67a393d035a3a7551f5f6fc0e02a9b7a891d571859d31061d05891752bd08b8440555728068c5c891620539616ae43c0df55e6668859f62a6add793b845be3672aac5660038be786ce8b042fa1c795cc928286b1eb6c0c0f7430943dde584aa72f08c8d85dca57ffd0f58d483f9dece3c6be609dff1d7080cf0befe2e677f7594cd34bbd46ca99d39a996b39392df1d416d839b0d9656badb37707a356bedab345303656b8d94fec1772374cf5f514d92dbe9848254e731eefc82296e55b8602a69de01c1635b4320d00c4bb35ceffef011977d93086c1927a0686e51d19853be7e1be35d0171d5dcdd190356c3212370227fd3dbea598e41e905b87008237b0e373b4c78ee3f1dcdf35f614790a258d91f27c806a15ccdc94ca01a3513ae73a87adf994fc61", 0x1c0}], 0x1}}], 0x1, 0x20048041) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x6, 0x1, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x40000) splice(r2, 0x0, r0, 0x0, 0x3, 0xb) 432.539056ms ago: executing program 9 (id=1870): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x131282, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000001c0)={0x3, r0, 'id1\x00'}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000780)={0x65, 0x1b, &(0x7f0000000380)="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"}) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1}, 0x6e) (async) bind$unix(r5, &(0x7f0000003000)=@file={0x1}, 0x6e) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@abs={0x1}, 0x4f) (async) bind$unix(r6, &(0x7f0000003000)=@abs={0x1}, 0x4f) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000000000)="29000000140003523f20000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d123a5fbea5", 0x29) (async) write(r7, &(0x7f0000000000)="29000000140003523f20000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d123a5fbea5", 0x29) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_NESTED_STATE(r8, 0xc080aebe, &(0x7f0000001600)={{0x0, 0x0, 0x80}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @private=0xa010102}}}, 0x84) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @private=0xa010102}}}, 0x84) r9 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xfffffffffffffffd, 0x0, 0x0, 0x3ff, 0x0, 0x2, 0x0, 0xe4}) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000040)=0xfd12) capset(&(0x7f0000000080)={0x20071026}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f00000028c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xffc) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r11, 0xaf01, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r11, 0xaf01, 0x0) eventfd(0x4) (async) eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r11, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) 387.290201ms ago: executing program 2 (id=1871): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x7, 0x8}) ioctl$KVM_SET_USER_MEMORY_REGION2(r4, 0x40a0ae49, &(0x7f0000000200)={0x2, 0x2, 0x8080000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0xffffffffffffffff, r5}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x34}}, 0x0) (async) connect(r1, &(0x7f0000000080)=@hci={0x1f, 0x4, 0x3}, 0x80) 401.4µs ago: executing program 9 (id=1872): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) shmdt(0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}}, 0x84) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, 0x400000, 0xfffffffd}) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0x70, "c61ec4d1fc44caef58fa90ced634e5895909acce830c48637ce818529e51d6cd275b6f33449eaa2e3afab931e5c2f66ebd20c9fa4fa2ba276f4acc74f5c011198c50fe758343c2ba4f9d9181b20dc88eec0e8fcaab67a82b1fc70293af3bdb246c357ed74b5d68b790038a951baaa2f4"}, &(0x7f0000000040)=0x78) r4 = dup(0xffffffffffffffff) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000001c0)={0x52, 0x1, 0x0, "600000eef2000020000000ddee4f9100000000000000000000ff0057e31e9400"}) write$9p(r2, &(0x7f0000000300)="ee03d0a56167624d006e643df2eed3894b4f265bea3f9cdd4e52978f335d2c28fa0ee73ef048f2e443a6199eeeeffe94b6fdbf4c1a6e5926b073de17ed0faaed00fb27060585202be82251de0ca8fe1bf9e97b99c1902ac6188aace61c7dadedc150b376b047544b3f81a57d7cc15010084f8d9156071c0c99dd9510a0708df1bfc527ed6275ef0588", 0x89) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={r3, @in={{0x2, 0x4e20, @rand_addr=0x64010101}}, 0x4, 0x1bb1, 0xfffffffd, 0x100, 0x86, 0x3, 0x5}, &(0x7f00000000c0)=0x9c) capset(&(0x7f0000000080)={0x20071026}, 0x0) 0s ago: executing program 2 (id=1873): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x1, 0x4, 0x0, 0x4, 0x9, 0x10}, {0xcccff001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, 0x1, 0x7, 0x4}, {0x2000, 0xdddd0000, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x8}, {0xeeee8000, 0x3000, 0xb, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x5000, 0xd000, 0x0, 0x7, 0xc, 0x0, 0x2, 0x0, 0x4, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2, 0x4, 0x10}, {0x8080000, 0x3000, 0x0, 0x1, 0x7f, 0x4, 0x0, 0x1a, 0x26, 0x0, 0xff}, {0x80ac000}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x1, 0x70, 0x0, 0xdd00, 0x5000, [0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffc]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x6, &(0x7f0000000000)={0xd, 0x8, 0x8}) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000200)=0x1c, 0x80000) sendfile(r3, r4, 0x0, 0x3) ftruncate(0xffffffffffffffff, 0x1) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000140)={0x0, 0xcb, 0x0, 0x0}) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000100)={0x1, 0x9, 0x2, &(0x7f0000000080)={0xa, "d47f2f1586e80ec6fe287e55664c747fb7f8a555af887a15d7d2bdcde95554def4"}}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) kernel console output (not intermixed with test programs): n1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 271.827426][T10520] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1304'. [ 271.839247][T10520] /dev/rnullb0: Can't open blockdev [ 272.112631][T10530] sctp: [Deprecated]: syz.1.1310 (pid 10530) Use of int in max_burst socket option. [ 272.112631][T10530] Use struct sctp_assoc_value instead [ 272.275714][T10533] /dev/rnullb0: Can't open blockdev [ 272.296371][T10534] /dev/rnullb0: Can't open blockdev [ 272.390247][T10538] /dev/rnullb0: Can't open blockdev [ 272.554603][T10543] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1314'. [ 272.610311][T10546] /dev/rnullb0: Can't open blockdev [ 272.639884][T10543] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1314'. [ 272.651008][T10543] netlink: 'syz.1.1314': attribute type 5 has an invalid length. [ 272.671475][T10543] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1314'. [ 272.675770][T10548] /dev/rnullb0: Can't open blockdev [ 272.933504][T10558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.958110][T10558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.321180][ T5915] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 273.493195][ T5915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.511545][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 273.523858][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 273.533972][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 273.548676][ T5915] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 273.558511][ T5915] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 273.566936][ T5915] usb 6-1: Manufacturer: syz [ 273.587324][ T5915] usb 6-1: config 0 descriptor?? [ 273.698027][T10576] input: syz0 as /devices/virtual/input/input24 [ 273.727276][T10576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.737533][T10576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.746259][T10576] netlink: 'syz.2.1325': attribute type 10 has an invalid length. [ 273.774238][T10576] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 273.881209][ T5915] rc_core: IR keymap rc-hauppauge not found [ 273.887137][ T5915] Registered IR keymap rc-empty [ 273.900281][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 273.906343][T10582] /dev/rnullb0: Can't open blockdev [ 273.931198][ T5916] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 273.934905][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 273.964434][ T5915] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 273.978769][ T5915] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input25 [ 273.999199][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 274.041584][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 274.049665][T10588] /dev/rnullb0: Can't open blockdev [ 274.061746][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 274.081412][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 274.093790][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.101318][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 274.107834][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 274.126764][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 274.140164][T10591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.148800][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 274.158904][T10591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.159900][ T5916] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 274.176351][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 274.179887][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.198423][ T5916] usb 2-1: config 0 descriptor?? [ 274.201492][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 274.252218][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 274.291266][ T5915] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 274.313860][ T5915] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 274.322957][ T5915] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 274.408553][T10574] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 274.415790][T10574] /dev/rnullb0: Can't open blockdev [ 274.423848][ T5916] usb 2-1: USB disconnect, device number 95 [ 274.786305][ T5916] usb 6-1: USB disconnect, device number 18 [ 274.804289][T10597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1331'. [ 274.817929][T10597] bridge_slave_1: left allmulticast mode [ 274.825709][T10597] bridge_slave_1: left promiscuous mode [ 274.839023][T10597] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.864246][T10597] bridge_slave_0: left allmulticast mode [ 274.905999][T10597] bridge_slave_0: left promiscuous mode [ 274.920182][T10597] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.961883][T10602] /dev/rnullb0: Can't open blockdev [ 275.097765][T10604] /dev/rnullb0: Can't open blockdev [ 275.215389][T10614] /dev/rnullb0: Can't open blockdev [ 275.698752][T10627] /dev/rnullb0: Can't open blockdev [ 275.896527][T10639] /dev/rnullb0: Can't open blockdev [ 276.002831][T10643] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 276.353542][T10659] /dev/sg0: Can't lookup blockdev [ 276.450837][T10663] /dev/sg0: Can't lookup blockdev [ 276.529765][T10668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.555965][T10670] netlink: 'syz.1.1357': attribute type 1 has an invalid length. [ 276.560322][T10668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.564742][T10670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1357'. [ 276.584664][T10670] nbd: illegal input index 393224 [ 276.586576][T10668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.604753][T10668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.607703][T10670] 9pnet_fd: p9_fd_create_unix (10670): problem connecting socket: ./file0: -111 [ 276.629791][T10670] /dev/rnullb0: Can't open blockdev [ 276.638978][ T30] audit: type=1400 audit(1752387721.454:69): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=10667 comm="syz.2.1356" [ 276.711269][ T5915] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 276.841417][ T5915] usb 6-1: device descriptor read/64, error -71 [ 277.081253][ T5915] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 277.231200][ T5915] usb 6-1: device descriptor read/64, error -71 [ 277.341465][ T5915] usb usb6-port1: attempt power cycle [ 277.498290][T10690] /dev/rnullb0: Can't open blockdev [ 277.682919][ T5915] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 277.725722][ T5915] usb 6-1: device descriptor read/8, error -71 [ 277.773410][T10692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.785816][T10692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.797387][T10692] virtio-fs: tag not found [ 277.971465][ T5915] usb 6-1: new low-speed USB device number 22 using dummy_hcd [ 277.992005][ T5915] usb 6-1: device descriptor read/8, error -71 [ 278.102846][ T5915] usb usb6-port1: unable to enumerate USB device [ 278.208156][T10695] /dev/rnullb0: Can't open blockdev [ 278.317590][T10699] /dev/rnullb0: Can't open blockdev [ 278.381293][ T5916] usb 6-1: new low-speed USB device number 23 using dummy_hcd [ 278.418343][T10705] /dev/rnullb0: Can't open blockdev [ 278.466056][T10706] /dev/rnullb0: Can't open blockdev [ 278.521330][ T5916] usb 6-1: device descriptor read/64, error -71 [ 278.679087][T10717] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 278.771236][ T5916] usb 6-1: new low-speed USB device number 24 using dummy_hcd [ 278.906286][ T5916] usb 6-1: device descriptor read/64, error -71 [ 279.026175][ T5916] usb usb6-port1: attempt power cycle [ 279.187461][T10724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.198880][T10724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.371347][ T5916] usb 6-1: new low-speed USB device number 25 using dummy_hcd [ 279.391860][ T5916] usb 6-1: device descriptor read/8, error -71 [ 279.639093][T10730] ieee802154 phy0 wpan0: encryption failed: -22 [ 279.651587][T10730] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 279.659741][T10730] /dev/rnullb0: Can't open blockdev [ 279.873231][T10737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1380'. [ 280.241128][T10753] /dev/rnullb0: Can't open blockdev [ 281.080560][T10755] /dev/rnullb0: Can't open blockdev [ 281.099149][T10755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.113694][T10755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.938411][T10766] mkiss: ax0: crc mode is auto. [ 282.953948][T10766] /dev/rnullb0: Can't open blockdev [ 283.336663][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'. [ 283.388112][T10768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.403247][T10768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.417924][T10768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.430420][T10768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.514496][T10770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1387'. [ 284.908464][T10782] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 285.205455][T10792] overlay: ./bus is not a directory [ 285.301262][ T5852] usb 2-1: new low-speed USB device number 96 using dummy_hcd [ 285.459049][T10800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.467815][T10800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.483658][ T5852] usb 2-1: New USB device found, idVendor=046d, idProduct=08b1, bcdDevice=6d.2a [ 285.499260][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.510403][ T5852] usb 2-1: config 0 descriptor?? [ 285.520362][ T5852] pwc: Logitech QuickCam Notebook Pro USB webcam detected. [ 286.164294][T10806] /dev/rnullb0: Can't open blockdev [ 286.325211][T10811] /dev/rnullb0: Can't open blockdev [ 287.576011][T10842] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1407'. [ 287.585542][T10841] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1407'. [ 287.597955][T10842] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1407'. [ 287.747213][T10850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.757271][T10850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.047557][ T5852] pwc: send_video_command error -71 [ 288.053435][ T5852] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 288.081504][ T5852] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 288.110123][ T5852] usb 2-1: USB disconnect, device number 96 [ 288.288084][T10862] /dev/rnullb0: Can't open blockdev [ 288.351722][T10864] /dev/rnullb0: Can't open blockdev [ 288.410062][T10866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.686189][T10877] /dev/rnullb0: Can't open blockdev [ 288.782409][T10881] /dev/rnullb0: Can't open blockdev [ 288.845411][T10885] binder: BINDER_SET_CONTEXT_MGR already set [ 288.855774][T10885] binder: 10882:10885 ioctl 4018620d 200000000040 returned -16 [ 289.854412][ T5852] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 289.923321][T10917] /dev/rnullb0: Can't open blockdev [ 290.034144][ T5852] usb 6-1: Using ep0 maxpacket: 16 [ 290.047386][ T5852] usb 6-1: unable to get BOS descriptor or descriptor too short [ 290.056299][ T5852] usb 6-1: config 106 has an invalid interface number: 15 but max is 0 [ 290.065049][ T5852] usb 6-1: config 106 has no interface number 0 [ 290.094668][ T5852] usb 6-1: config 106 interface 15 has no altsetting 0 [ 290.107937][ T5852] usb 6-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=56.45 [ 290.137122][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.161982][ T5852] usb 6-1: Product: syz [ 290.166174][ T5852] usb 6-1: Manufacturer: syz [ 290.173808][ T5852] usb 6-1: SerialNumber: syz [ 290.269079][T10934] fuse: Bad value for 'group_id' [ 290.274177][T10934] fuse: Bad value for 'group_id' [ 290.287321][T10934] syzkaller1: entered promiscuous mode [ 290.295574][T10934] syzkaller1: entered allmulticast mode [ 290.455390][ T5852] cdc_subset 6-1:106.15: probe with driver cdc_subset failed with error -71 [ 290.477206][ T5852] usb 6-1: USB disconnect, device number 27 [ 290.735690][T10944] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.102934][T10949] /dev/rnullb0: Can't open blockdev [ 291.161229][ T5937] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 291.335186][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.353418][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.366705][ T5937] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 291.375871][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.391500][ T5937] usb 6-1: config 0 descriptor?? [ 291.488692][T10956] program syz.1.1443 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.762430][T10961] /dev/rnullb0: Can't open blockdev [ 291.815342][ T5937] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 291.836910][ T5937] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 291.850839][ T5937] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0012/input/input26 [ 291.901741][ T5937] cm6533_jd 0003:0D8C:0022.0012: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 291.927360][T10963] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 292.008021][T10946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.024952][T10946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.042659][ T5890] usb 6-1: USB disconnect, device number 28 [ 292.098718][T10966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1447'. [ 292.116253][T10967] /dev/rnullb0: Can't open blockdev [ 292.256202][T10974] ntfs3(nullb0): Primary boot signature is not NTFS. [ 292.264194][T10974] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 292.831219][ T5937] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 292.971563][T10980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1452'. [ 292.981197][ T5937] usb 6-1: Using ep0 maxpacket: 16 [ 292.987116][T10980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1452'. [ 292.988760][ T5937] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 293.006277][T10980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1452'. [ 293.018956][ T5937] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 293.031759][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.042399][ T5937] usb 6-1: Product: syz [ 293.046570][ T5937] usb 6-1: Manufacturer: syz [ 293.057845][ T5937] usb 6-1: SerialNumber: syz [ 293.066509][ T5937] usb 6-1: config 0 descriptor?? [ 293.080937][ T5937] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 293.090189][ T5937] usb 6-1: Detected FT232R [ 293.226243][T10988] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 293.274718][ T5937] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 293.408356][T10990] /dev/rnullb0: Can't open blockdev [ 293.457441][T10992] /dev/rnullb0: Can't open blockdev [ 293.496212][ T5937] ftdi_sio 6-1:0.0: GPIO initialisation failed: -5 [ 293.513139][ T5937] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 293.700367][ T5937] usb 6-1: USB disconnect, device number 29 [ 293.712893][ T5937] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 293.725934][ T5937] ftdi_sio 6-1:0.0: device disconnected [ 294.231298][T10973] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 294.253879][T11001] /dev/rnullb0: Can't open blockdev [ 294.315326][T11003] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 294.697587][T11016] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.766423][T11019] binder: 11018:11019 ioctl c018620b 200000000000 returned -14 [ 294.835494][T11022] /dev/rnullb0: Can't open blockdev [ 294.847958][T11024] /dev/rnullb0: Can't open blockdev [ 295.119508][T11045] overlay: Bad value for 'workdir' [ 295.129968][T11046] /dev/rnullb0: Can't open blockdev [ 295.424609][T11052] /dev/rnullb0: Can't open blockdev [ 295.432880][T11052] loop2: detected capacity change from 0 to 1 [ 295.447153][ T5997] Dev loop2: unable to read RDB block 1 [ 295.453871][ T5997] loop2: unable to read partition table [ 295.459726][ T5997] loop2: partition table beyond EOD, truncated [ 295.470069][T11052] Dev loop2: unable to read RDB block 1 [ 295.475786][T11052] loop2: unable to read partition table [ 295.482718][T11052] loop2: partition table beyond EOD, truncated [ 295.492450][T11052] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 295.680139][T11058] /dev/rnullb0: Can't open blockdev [ 296.002371][ T5852] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 296.016449][T11065] /dev/rnullb0: Can't open blockdev [ 296.087303][T11067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.096360][T11067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.106082][T11067] /dev/rnullb0: Can't open blockdev [ 296.173046][ T5852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.183994][ T5852] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 296.193266][ T5852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.204228][ T5852] usb 6-1: config 0 descriptor?? [ 296.416362][ T5852] usbhid 6-1:0.0: can't add hid device: -71 [ 296.422610][ T5852] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 296.433077][ T5852] usb 6-1: USB disconnect, device number 30 [ 296.690716][T11070] /dev/rnullb0: Can't open blockdev [ 296.735177][T11072] /dev/rnullb0: Can't open blockdev [ 296.808590][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1483'. [ 296.851215][ T5915] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 296.885352][T11077] /dev/rnullb0: Can't open blockdev [ 297.014722][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.037729][T11084] /dev/rnullb0: Can't open blockdev [ 297.041546][ T5915] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 297.056607][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.077328][ T5915] usb 6-1: config 0 descriptor?? [ 297.186285][T11087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.198234][T11087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.366842][T11093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.378684][T11093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.388389][T11093] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1477'. [ 297.398707][T11093] /dev/rnullb0: Can't open blockdev [ 297.408925][T11093] netlink: 'syz.5.1477': attribute type 2 has an invalid length. [ 297.452103][ T5915] usbhid 6-1:0.0: can't add hid device: -71 [ 297.458146][ T5915] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 297.520393][ T5915] usb 6-1: USB disconnect, device number 31 [ 298.281240][ T5852] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 298.436290][ T5852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.447260][ T5852] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.457090][ T5852] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 298.466211][ T5852] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.476992][ T5852] usb 6-1: config 0 descriptor?? [ 298.890672][ T5852] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 298.898148][ T5852] cm6533_jd 0003:0D8C:0022.0013: unknown main item tag 0x0 [ 298.908184][ T5852] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0013/input/input27 [ 298.931503][ T5852] cm6533_jd 0003:0D8C:0022.0013: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 299.042864][ T55] block nbd0: Possible stuck request ffff888025630000: control (read@0,1024B). Runtime 90 seconds [ 299.053890][ T55] block nbd0: Possible stuck request ffff8880256301c0: control (read@1024,1024B). Runtime 90 seconds [ 299.064824][ T55] block nbd0: Possible stuck request ffff888025630380: control (read@2048,1024B). Runtime 90 seconds [ 299.075728][ T55] block nbd0: Possible stuck request ffff888025630540: control (read@3072,1024B). Runtime 90 seconds [ 299.091182][T11095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.100867][T11095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.113102][ T5937] usb 6-1: USB disconnect, device number 32 [ 299.664747][T11098] /dev/rnullb0: Can't open blockdev [ 299.981194][ T5915] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 300.148346][ T5915] usb 6-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 64 [ 300.161474][ T5915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 300.176819][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 300.196623][ T5915] usb 6-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 300.206256][ T5915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.214288][ T5915] usb 6-1: Product: syz [ 300.218447][ T5915] usb 6-1: Manufacturer: syz [ 300.223220][ T5915] usb 6-1: SerialNumber: syz [ 300.229856][ T5915] usb 6-1: config 0 descriptor?? [ 300.238979][ T5915] usb-storage 6-1:0.0: USB Mass Storage device detected [ 300.250655][ T5915] usb-storage 6-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 300.320140][T11107] /dev/rnullb0: Can't open blockdev [ 300.366272][T11109] /dev/rnullb0: Can't open blockdev [ 300.460615][ T5915] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 300.496051][ T5915] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 300.715478][ T5915] usb 6-1: USB disconnect, device number 33 [ 301.107473][T11130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.141813][T11130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.424837][T11134] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1501'. [ 301.443928][T11134] /dev/rnullb0: Can't open blockdev [ 301.514979][T11132] /dev/rnullb0: Can't open blockdev [ 301.569131][T11139] random: crng reseeded on system resumption [ 302.319678][ T5915] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 302.338703][ T5915] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 302.909715][ T3536] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 304.254157][T11162] CUSE: zero length info key specified [ 304.534671][T11171] /dev/rnullb0: Can't open blockdev [ 305.425069][T11178] /dev/rnullb0: Can't open blockdev [ 305.489391][T11180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.503089][T11181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.512787][T11180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.512929][T11181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.529322][T11180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.538831][T11180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.548566][ T30] audit: type=1326 audit(1752387750.364:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.2.1513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09b698e929 code=0x0 [ 305.650286][T11181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.660354][T11182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.660829][T11181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.680683][T11182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.914293][T11187] /dev/rnullb0: Can't open blockdev [ 305.956026][T11191] /dev/rnullb0: Can't open blockdev [ 305.999679][T11193] /dev/rnullb0: Can't open blockdev [ 306.039331][T11193] 9pnet: Could not find request transport: xen [ 306.050526][T11195] /dev/rnullb0: Can't open blockdev [ 307.525530][ T5857] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 307.535119][ T5857] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 307.544282][ T5857] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 307.554558][ T5857] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 307.563896][ T5857] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 307.727243][T11203] chnl_net:caif_netlink_parms(): no params data found [ 307.806980][T11203] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.814376][T11203] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.822134][T11203] bridge_slave_0: entered allmulticast mode [ 307.829977][T11203] bridge_slave_0: entered promiscuous mode [ 307.838451][T11203] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.846392][T11203] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.853726][T11203] bridge_slave_1: entered allmulticast mode [ 307.860742][T11203] bridge_slave_1: entered promiscuous mode [ 307.892249][T11203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.904562][T11203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.938405][T11203] team0: Port device team_slave_0 added [ 307.947066][T11203] team0: Port device team_slave_1 added [ 307.977868][T11203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.984919][T11203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.012300][T11203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.025869][T11203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.034051][T11203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.060196][T11203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.107252][T11203] hsr_slave_0: entered promiscuous mode [ 308.113932][T11203] hsr_slave_1: entered promiscuous mode [ 308.119939][T11203] debugfs: 'hsr0' already exists in 'hsr' [ 308.125789][T11203] Cannot create hsr debugfs directory [ 308.279939][T11203] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 308.289864][T11203] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 308.299579][T11203] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 308.312611][T11203] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 308.344091][T11203] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.351313][T11203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.358689][T11203] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.366216][T11203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.395124][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.406314][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.446704][T11203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.468995][T11203] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.489626][ T974] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.496826][ T974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.549500][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.556668][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.739653][T11203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.969708][T11203] veth0_vlan: entered promiscuous mode [ 308.980113][T11203] veth1_vlan: entered promiscuous mode [ 309.008637][T11203] veth0_macvtap: entered promiscuous mode [ 309.018756][T11203] veth1_macvtap: entered promiscuous mode [ 309.036370][T11203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.049812][T11203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.066435][ T3536] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.084556][ T3536] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.103153][ T3536] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.113833][ T3536] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.179381][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.196461][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.227535][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.236420][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.592274][ T51] Bluetooth: hci5: command tx timeout [ 309.962220][T11246] /dev/rnullb0: Can't open blockdev [ 310.087256][T11248] /dev/rnullb0: Can't open blockdev [ 310.641493][ T5937] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 310.781330][ T5937] usb 7-1: device descriptor read/64, error -71 [ 311.000755][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 311.010888][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 311.019425][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 311.027547][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 311.031205][ T5937] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 311.036019][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 311.106710][ T6023] raw-gadget.0 gadget.2: failed to queue disconnect event [ 311.192645][ T5937] usb 7-1: device descriptor read/64, error -71 [ 311.225967][T11270] chnl_net:caif_netlink_parms(): no params data found [ 311.311412][ T5937] usb usb7-port1: attempt power cycle [ 311.312797][T11270] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.324514][T11270] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.333548][T11270] bridge_slave_0: entered allmulticast mode [ 311.340672][T11270] bridge_slave_0: entered promiscuous mode [ 311.348364][T11270] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.356158][T11270] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.363611][T11270] bridge_slave_1: entered allmulticast mode [ 311.370659][T11270] bridge_slave_1: entered promiscuous mode [ 311.404761][T11270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.418717][T11270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.452746][T11270] team0: Port device team_slave_0 added [ 311.460320][T11270] team0: Port device team_slave_1 added [ 311.487387][T11270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.495577][T11270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.524010][T11270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.536164][T11270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.543447][T11270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.569493][T11270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.615606][T11270] hsr_slave_0: entered promiscuous mode [ 311.622188][T11270] hsr_slave_1: entered promiscuous mode [ 311.628180][T11270] debugfs: 'hsr0' already exists in 'hsr' [ 311.634348][T11270] Cannot create hsr debugfs directory [ 311.654800][ T5937] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 311.671505][ T51] Bluetooth: hci5: command tx timeout [ 311.681842][ T5937] usb 7-1: device descriptor read/8, error -71 [ 311.780159][T11270] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.835889][ T43] dvb-usb: did not find the firmware file 'dvb-usb-avertv-a800-02.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 311.851866][ T43] dvb_usb_a800 4-1:0.42: probe with driver dvb_usb_a800 failed with error -110 [ 311.875741][ T43] usb 4-1: USB disconnect, device number 84 [ 311.888138][T11270] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.923055][ T5937] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 311.964177][ T5937] usb 7-1: device descriptor read/8, error -71 [ 312.050177][T11270] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.075510][ T5937] usb usb7-port1: unable to enumerate USB device [ 312.144751][T11270] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.211495][ T43] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 312.357196][T11270] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 312.365400][ T43] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 312.378034][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.388729][T11270] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 312.401014][ T43] usb 4-1: config 0 descriptor?? [ 312.407833][ T43] cp210x 4-1:0.0: cp210x converter detected [ 312.418737][T11270] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 312.430088][T11270] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 312.538513][T11270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.560487][T11270] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.574429][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.581703][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.598707][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.605849][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.619932][ T43] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 312.662016][ T43] cp210x 4-1:0.0: querying part number failed [ 312.679285][ T43] usb 4-1: cp210x converter now attached to ttyUSB0 [ 312.698892][T11302] /dev/rnullb0: Can't open blockdev [ 312.729123][T11302] /dev/rnullb0: Can't open blockdev [ 312.731844][ T5957] usb 4-1: USB disconnect, device number 85 [ 312.749807][T11270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.780867][ T5957] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 312.804339][ T5957] cp210x 4-1:0.0: device disconnected [ 312.937816][T11308] /dev/rnullb0: Can't open blockdev [ 313.105021][T11270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.112576][ T51] Bluetooth: hci2: command tx timeout [ 313.154620][T11270] veth0_vlan: entered promiscuous mode [ 313.167605][T11270] veth1_vlan: entered promiscuous mode [ 313.199416][T11270] veth0_macvtap: entered promiscuous mode [ 313.209119][T11270] veth1_macvtap: entered promiscuous mode [ 313.228007][T11270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.243891][T11270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.258307][ T3536] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.268712][ T3536] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.279256][ T3536] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.289212][ T3536] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.324949][ T5937] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 313.377183][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.396834][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.453293][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.463567][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.559110][T11321] /dev/rnullb0: Can't open blockdev [ 313.616732][ T5937] usb 6-1: unable to get BOS descriptor or descriptor too short [ 313.633103][ T5937] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 313.649160][ T5937] usb 6-1: can't read configurations, error -71 [ 313.667516][T11325] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 313.752044][ T51] Bluetooth: hci5: command tx timeout [ 313.780352][T11332] /dev/rnullb0: Can't open blockdev [ 313.943829][T11338] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 313.943829][T11338] The task syz.6.1543 (11338) triggered the difference, watch for misbehavior. [ 314.158721][ T43] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 314.323897][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.335226][ T43] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 314.344380][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.354790][ T43] usb 4-1: config 0 descriptor?? [ 314.501366][ T5937] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 314.559293][T11346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1546'. [ 314.651383][ T5937] usb 6-1: Using ep0 maxpacket: 32 [ 314.659465][ T5937] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 314.677890][ T5937] usb 6-1: config 0 has no interface number 0 [ 314.699338][ T5937] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 314.717095][ T5937] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 314.750815][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.766736][ T5937] usb 6-1: Product: syz [ 314.771517][ T5937] usb 6-1: Manufacturer: syz [ 314.776426][ T5937] usb 6-1: SerialNumber: syz [ 314.796120][ T5937] usb 6-1: config 0 descriptor?? [ 314.808753][ T5937] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 314.820645][ T5937] em28xx 6-1:0.132: Video interface 132 found: [ 314.977388][T11337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.986263][T11337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.021247][ T5957] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 315.174998][ T5957] usb 7-1: config 0 has an invalid interface number: 107 but max is 0 [ 315.183394][ T5957] usb 7-1: config 0 has no interface number 0 [ 315.189510][ T5957] usb 7-1: config 0 interface 107 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 315.201632][ T51] Bluetooth: hci2: command tx timeout [ 315.206463][ T5957] usb 7-1: config 0 interface 107 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 315.219125][ T5957] usb 7-1: config 0 interface 107 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 64 [ 315.220082][ T5937] em28xx 6-1:0.132: chip ID is em2710 [ 315.236370][ T5957] usb 7-1: config 0 interface 107 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 315.246297][ T5957] usb 7-1: config 0 interface 107 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 315.265858][ T5957] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0127, bcdDevice=7b.4a [ 315.276655][ T5957] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.290228][ T5957] usb 7-1: Product: syz [ 315.296247][ T5957] usb 7-1: Manufacturer: syz [ 315.305898][ T5957] usb 7-1: SerialNumber: syz [ 315.314869][ T5957] usb 7-1: config 0 descriptor?? [ 315.320660][T11350] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 315.333428][ T5957] kvaser_usb 7-1:0.107: error -EMSGSIZE: Cannot get software info [ 315.347133][ T5957] kvaser_usb 7-1:0.107: probe with driver kvaser_usb failed with error -90 [ 315.434253][T11341] PKCS7: Unknown OID: [4] 5.25.373.87(bad) [ 315.440097][T11341] PKCS7: Only support pkcs7_signedData type [ 315.460102][T11341] qnx4: no qnx4 filesystem (no root dir). [ 315.552342][ T5937] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 315.554160][T11350] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 315.566453][ T5937] em28xx 6-1:0.132: board has no eeprom [ 315.568830][T11350] VFS: Can't find a romfs filesystem on dev rnullb0. [ 315.568830][T11350] [ 315.586287][ T24] usb 7-1: USB disconnect, device number 6 [ 315.644010][ T5937] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 315.652577][ T5937] em28xx 6-1:0.132: analog set to bulk mode. [ 315.659649][ T5916] em28xx 6-1:0.132: Registering V4L2 extension [ 315.691963][ T5937] usb 6-1: USB disconnect, device number 35 [ 315.720823][ T5937] em28xx 6-1:0.132: Disconnecting em28xx [ 315.726845][ T5852] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 315.819114][ T5916] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 315.828233][ T5916] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 315.835664][ T51] Bluetooth: hci5: command tx timeout [ 315.841179][ T5916] em28xx 6-1:0.132: No AC97 audio processor [ 315.856088][ T5916] usb 6-1: Decoder not found [ 315.860695][ T5916] em28xx 6-1:0.132: failed to create media graph [ 315.867121][ T5916] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 315.880261][ T5916] em28xx 6-1:0.132: Remote control support is not available for this card. [ 315.889742][ T5937] em28xx 6-1:0.132: Closing input extension [ 315.895968][ T5852] usb 3-1: Using ep0 maxpacket: 16 [ 315.915925][ T5937] em28xx 6-1:0.132: Freeing device [ 315.921281][ T5852] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 315.930368][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.942213][ T5852] usb 3-1: Product: syz [ 315.946417][ T5852] usb 3-1: Manufacturer: syz [ 315.951916][ T5852] usb 3-1: SerialNumber: syz [ 315.960965][ T5852] usb 3-1: config 0 descriptor?? [ 315.974201][ T5852] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 316.181207][T11353] gfs2: not a GFS2 filesystem [ 316.201682][ T5852] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 316.233256][ T5852] usb 3-1: USB disconnect, device number 7 [ 316.275325][T11362] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 316.484919][T11370] input: syz1 as /devices/virtual/input/input28 [ 316.751756][T11378] netlink: 'syz.6.1556': attribute type 4 has an invalid length. [ 316.941733][T11382] FAT-fs (rnullb0): invalid media value (0xbb) [ 316.958915][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 316.967597][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.974361][T11382] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 316.975823][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.011603][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 317.028798][ T43] usb 4-1: USB disconnect, device number 86 [ 317.282703][ T51] Bluetooth: hci2: command tx timeout [ 317.778292][T11400] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 317.908680][T11409] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 317.937433][T11409] UDF-fs: Scanning with blocksize 4096 failed [ 318.248700][T11421] overlayfs: failed to resolve './file0': -2 [ 318.324558][T11421] /dev/rnullb0: Can't open blockdev [ 318.539519][T11426] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 318.609575][T11426] VFS: Can't find a romfs filesystem on dev rnullb0. [ 318.609575][T11426] [ 318.932207][T11438] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@q [ 319.341344][ T5937] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 319.361395][ T51] Bluetooth: hci2: command tx timeout [ 319.421336][ T5957] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 319.481387][ T5937] usb 7-1: device descriptor read/64, error -71 [ 319.531227][ T5915] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 319.561668][ T5957] usb 4-1: device descriptor read/64, error -71 [ 319.682692][ T5915] usb 6-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.692910][ T5915] usb 6-1: config 0 interface 0 has no altsetting 0 [ 319.699537][ T5915] usb 6-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 319.711592][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.721357][ T5937] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 319.722296][ T5915] usb 6-1: config 0 descriptor?? [ 319.745378][ T5852] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 319.801136][ T5957] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 319.852386][ T5937] usb 7-1: device descriptor read/64, error -71 [ 319.903439][ T5852] usb 3-1: not running at top speed; connect to a high speed hub [ 319.917520][ T5852] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 319.928539][ T5852] usb 3-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 319.942731][ T5852] usb 3-1: config 1 interface 0 has no altsetting 0 [ 319.951541][ T5957] usb 4-1: device descriptor read/64, error -71 [ 319.958517][ T5852] usb 3-1: New USB device found, idVendor=0eef, idProduct=7224, bcdDevice= 0.40 [ 319.967841][ T5937] usb usb7-port1: attempt power cycle [ 319.977204][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.985985][ T5852] usb 3-1: Product: syz [ 319.990160][ T5852] usb 3-1: Manufacturer: syz [ 319.994961][ T5852] usb 3-1: SerialNumber: syz [ 320.003202][T11461] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 320.061851][ T5957] usb usb4-port1: attempt power cycle [ 320.152098][ T5915] apple 0003:05AC:027A.0016: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.5-1/input0 [ 320.234635][ T5852] usbhid 3-1:1.0: can't add hid device: -71 [ 320.240771][ T5852] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 320.262942][ T5852] usb 3-1: USB disconnect, device number 8 [ 320.321167][ T5937] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 320.342333][ T5937] usb 7-1: device descriptor read/8, error -71 [ 320.402939][ T5957] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 320.421921][ T5957] usb 4-1: device descriptor read/8, error -71 [ 320.581249][ T5937] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 320.602877][ T5937] usb 7-1: device descriptor read/8, error -71 [ 320.671358][ T5957] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 320.696675][ T5957] usb 4-1: device descriptor read/8, error -71 [ 320.723459][ T5937] usb usb7-port1: unable to enumerate USB device [ 320.811759][ T5957] usb usb4-port1: unable to enumerate USB device [ 321.146544][T11472] Can't find a SQUASHFS superblock on rnullb0 [ 322.271532][ T5937] usb 6-1: USB disconnect, device number 36 [ 322.631220][ T5937] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 322.661344][ T5933] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 322.794305][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.805681][ T5937] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.816049][ T5937] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 322.825835][ T5937] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.842476][ T5933] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 322.858964][ T5937] usb 6-1: config 0 descriptor?? [ 322.874787][ T5933] usb 7-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 322.886619][ T5933] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.892514][T11492] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 322.898631][ T5933] usb 7-1: Product: syz [ 322.909916][ T5933] usb 7-1: Manufacturer: syz [ 322.915233][T11492] UDF-fs: Scanning with blocksize 4096 failed [ 322.915604][ T5933] usb 7-1: SerialNumber: syz [ 322.939085][ T5933] usb 7-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 323.088106][T11485] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 323.114682][T11485] CIFS mount error: No usable UNC path provided in device string! [ 323.114682][T11485] [ 323.126394][T11485] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 323.281960][ T30] audit: type=1326 audit(1752387768.094:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11488 comm="syz.3.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f799e18e929 code=0x7fc00000 [ 323.356886][ T5937] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 323.375969][ T5937] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 323.413374][ T5937] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0017/input/input29 [ 323.451836][ T5937] cm6533_jd 0003:0D8C:0022.0017: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 323.573015][T11485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.599171][T11485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.662115][ T5937] usb 6-1: USB disconnect, device number 37 [ 323.721175][ T5915] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 323.786141][ T5933] usb 7-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 323.911348][ T5915] usb 4-1: device descriptor read/64, error -71 [ 324.029749][ T5933] usb 7-1: USB disconnect, device number 11 [ 324.151239][ T5915] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 324.244309][T11508] /dev/rnullb0: Can't open blockdev [ 324.291558][ T5915] usb 4-1: device descriptor read/64, error -71 [ 324.404762][ T5915] usb usb4-port1: attempt power cycle [ 324.411598][ T5937] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 324.581324][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 324.603025][ T5937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.646140][ T5937] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 324.665524][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.681398][ T5937] usb 3-1: Product: syz [ 324.686330][ T5937] usb 3-1: Manufacturer: syz [ 324.690962][ T5937] usb 3-1: SerialNumber: syz [ 324.706663][ T5937] usb 3-1: config 0 descriptor?? [ 324.719531][ T5937] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 324.761314][ T5915] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 324.796100][ T5915] usb 4-1: device descriptor read/8, error -71 [ 324.875964][T11522] netlink: 'syz.6.1604': attribute type 1 has an invalid length. [ 324.885786][T11522] netlink: 'syz.6.1604': attribute type 2 has an invalid length. [ 324.921905][T11506] hpfs: Bad magic ... probably not HPFS [ 324.930340][ T5957] usb 3-1: USB disconnect, device number 9 [ 324.948559][T11524] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1604'. [ 324.970942][T11522] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1604'. [ 324.990317][T11518] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 324.997558][T11518] /dev/rnullb0: Can't open blockdev [ 325.041238][ T5915] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 325.072036][ T5915] usb 4-1: device descriptor read/8, error -71 [ 325.146403][T11531] qnx4: no qnx4 filesystem (no root dir). [ 325.181477][ T5915] usb usb4-port1: unable to enumerate USB device [ 325.325949][T11540] exFAT-fs (rnullb0): invalid boot record signature [ 325.332902][T11540] exFAT-fs (rnullb0): failed to read boot sector [ 325.343787][T11540] exFAT-fs (rnullb0): failed to recognize exfat type [ 325.400471][T11542] sock: sock_timestamping_bind_phc: sock not bind to device [ 325.649645][T11551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.689570][T11551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.871215][ T5933] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 326.031971][ T5933] usb 7-1: Invalid ep0 maxpacket: 16 [ 326.181173][ T5933] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 326.331990][ T5933] usb 7-1: Invalid ep0 maxpacket: 16 [ 326.343069][ T5933] usb usb7-port1: attempt power cycle [ 326.691389][ T5933] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 326.739528][ T5933] usb 7-1: Invalid ep0 maxpacket: 16 [ 326.881177][ T5933] usb 7-1: new low-speed USB device number 15 using dummy_hcd [ 326.911922][ T5933] usb 7-1: Invalid ep0 maxpacket: 16 [ 326.921472][ T5933] usb usb7-port1: unable to enumerate USB device [ 326.932448][T11569] orangefs_mount: mount request failed with -4 [ 327.098813][T11587] program syz.5.1624 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 327.169436][T11589] program syz.5.1624 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 327.181467][T11589] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 327.203994][T11588] gfs2: not a GFS2 filesystem [ 327.281327][ T5933] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 327.375713][T11592] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 327.432994][ T5933] usb 3-1: config 0 has an invalid interface number: 222 but max is 0 [ 327.441693][ T5933] usb 3-1: config 0 has no interface number 0 [ 327.449858][ T5933] usb 3-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd [ 327.459021][ T5852] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 327.466895][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.487665][ T5933] usb 3-1: Product: syz [ 327.492272][ T5933] usb 3-1: Manufacturer: syz [ 327.497208][ T5933] usb 3-1: SerialNumber: syz [ 327.505280][ T5933] usb 3-1: config 0 descriptor?? [ 327.635789][ T5852] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.649548][ T5852] usb 4-1: config 1 interface 0 has no altsetting 0 [ 327.663755][ T5852] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.40 [ 327.673312][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.681439][ T5852] usb 4-1: Product: 㔙굢덤ᾡ王⣪볨ꀕ♮ⰻ䪀ףּ顽㋾哃綛暞桟伕膈Ⰽ쐹齄蘾窥끢粢囐Ὗ䁴䞰틷눰櫸಩䋧딕뫣舐壇狝᳻铙棼餄韣瘩怕 [ 327.701836][ T5852] usb 4-1: Manufacturer: ꩼ횐䴷ガ萿㔢秭E飃｡஗⭽楨퍒ﲃ鑀⫖茑봞껋ᒮ㕑ᘊ䘯ᚒ郠際賘㱭谄Ԃ捆땕ې㚸䵹퀢瑛ߥ㠵䇪胥ệ럡켻홷细쇔ڴເﵟ⣉駥앎ᓺᩑᾗᜯ걣犲﮾䳮囝硑ꆪﺗ捽ꏫｑᅷ裇䩹ꭒ⼼⎪ᒧϣ빐玨觥䢢ド権갾才Ă樇┟瞘ⷿ齐ⱟ䣐廓뿤 [ 327.734319][ T5852] usb 4-1: SerialNumber: 침튛롤뺣睏驍ꕑꑐ噧纗琮姎慥뉗쎒ꭱめᦺ鑡鱞㭕立馶앨憡殢彟詣ᘾ䊍蟡껿ౢ西啳꣛ҩ剖ꠣｑ狈橺岊ӊЫ﷾퓪玌珎弋䋾﫶࠮⯛ऎ楫첗仰꿄 [ 327.736130][ T5890] usb 3-1: USB disconnect, device number 10 [ 328.631613][ T5937] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 328.741238][ T5933] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 328.781236][ T5937] usb 3-1: device descriptor read/64, error -71 [ 328.893747][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.903747][ T5933] usb 6-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 328.913800][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.926820][ T5933] usb 6-1: config 0 descriptor?? [ 329.052739][ T5937] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 329.111557][ T55] block nbd0: Possible stuck request ffff888025630000: control (read@0,1024B). Runtime 120 seconds [ 329.122362][ T55] block nbd0: Possible stuck request ffff8880256301c0: control (read@1024,1024B). Runtime 120 seconds [ 329.135054][ T55] block nbd0: Possible stuck request ffff888025630380: control (read@2048,1024B). Runtime 120 seconds [ 329.146092][ T55] block nbd0: Possible stuck request ffff888025630540: control (read@3072,1024B). Runtime 120 seconds [ 329.157191][ T5916] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 329.174442][ T5933] usbhid 6-1:0.0: can't add hid device: -71 [ 329.182679][ T5933] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 329.208368][ T5933] usb 6-1: USB disconnect, device number 38 [ 329.231137][ T5937] usb 3-1: device descriptor read/64, error -71 [ 329.249431][T11619] /dev/sg0: Can't lookup blockdev [ 329.336183][ T5916] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 329.345894][ T5937] usb usb3-port1: attempt power cycle [ 329.352631][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.360877][ T5916] usb 7-1: Product: syz [ 329.365353][ T5916] usb 7-1: Manufacturer: syz [ 329.370160][ T5916] usb 7-1: SerialNumber: syz [ 329.386629][ T5916] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 329.407327][ T43] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 329.713487][ T5937] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 329.744305][ T5937] usb 3-1: device descriptor read/8, error -71 [ 329.851855][ T5852] usbhid 4-1:1.0: can't add hid device: -71 [ 329.857959][ T5852] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 329.877711][ T5852] usb 4-1: USB disconnect, device number 95 [ 329.991366][ T5937] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 330.023297][ T5937] usb 3-1: device descriptor read/8, error -71 [ 330.030506][T11633] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1638'. [ 330.042975][T11633] gfs2: not a GFS2 filesystem [ 330.141607][ T5937] usb usb3-port1: unable to enumerate USB device [ 330.175032][T11637] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1640'. [ 330.184161][T11637] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 330.217456][T11614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.227320][T11614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.246286][T11614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.260657][T11614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.433751][T11643] 9pnet_virtio: no channels available for device ./cgroup [ 330.598958][ T5852] usb 7-1: USB disconnect, device number 16 [ 330.848591][T11659] openvswitch: netlink: Flow actions attr not present in new flow. [ 330.871260][ T43] usb 7-1: Service connection timeout for: 257 [ 330.887631][ T43] ath9k_htc 7-1:1.0: ath9k_htc: Unable to initialize HTC services [ 330.906637][ T43] ath9k_htc: Failed to initialize the device [ 330.926804][ T5852] usb 7-1: ath9k_htc: USB layer deinitialized [ 331.151324][ T5957] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 331.175441][T11664] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 331.183104][T11664] UDF-fs: Scanning with blocksize 4096 failed [ 331.319223][ T5957] usb 4-1: config 0 has an invalid interface descriptor of length 5, skipping [ 331.319247][ T5957] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.319265][ T5957] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 331.319292][ T5957] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 331.319307][ T5957] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.323498][ T5957] usb 4-1: config 0 descriptor?? [ 331.763563][T11695] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1656'. [ 331.773190][T11688] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1656'. [ 331.773855][T11690] XFS (rnullb0): Invalid superblock magic number [ 331.783518][T11695] /dev/rnullb0: Can't open blockdev [ 331.974551][T11705] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1659'. [ 332.271321][ T43] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 332.421276][ T43] usb 3-1: device descriptor read/64, error -71 [ 332.511327][ T5957] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 332.661180][ T43] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 332.681344][ T5957] usb 6-1: Using ep0 maxpacket: 8 [ 332.687991][ T5957] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 332.696618][ T5957] usb 6-1: config 179 has no interface number 0 [ 332.703133][ T5957] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 332.719076][ T5957] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 332.733719][ T5957] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 332.745404][ T5957] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 332.759763][ T5957] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 332.777185][ T5957] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 332.786932][ T5957] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.800709][T11709] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 332.816354][ T43] usb 3-1: device descriptor read/64, error -71 [ 332.940816][ T43] usb usb3-port1: attempt power cycle [ 333.281327][ T43] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 333.316779][ T43] usb 3-1: device descriptor read/8, error -71 [ 333.561323][ T43] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 333.582221][ T43] usb 3-1: device descriptor read/8, error -71 [ 333.695063][ T43] usb usb3-port1: unable to enumerate USB device [ 333.928601][ T43] usb 4-1: USB disconnect, device number 96 [ 333.937982][ T2129] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 334.065752][T11713] overlay: ./file0 is not a directory [ 334.325148][T11721] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 334.331698][T11721] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 334.358382][T11721] vhci_hcd vhci_hcd.0: Device attached [ 334.369961][T11723] vhci_hcd: cannot find the pending unlink 8 [ 334.428948][T11723] vhci_hcd: connection closed [ 334.429142][ T12] vhci_hcd: stop threads [ 334.446607][ T12] vhci_hcd: release socket [ 334.461399][ T12] vhci_hcd: disconnect device [ 335.031970][ T43] usb 6-1: USB disconnect, device number 39 [ 335.032017][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 335.048080][ C0] dummy_hcd dummy_hcd.5: timer fired with no URBs pending? [ 335.114969][T11736] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 335.606020][T11750] Invalid/unusable pipe [ 336.141322][ T5934] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 336.292397][ T5934] usb 6-1: device descriptor read/64, error -71 [ 336.384223][T11764] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1677'. [ 336.442739][T11764] tipc: Invalid UDP bearer configuration [ 336.442818][T11764] tipc: Enabling of bearer rejected, failed to enable media [ 336.541770][ T5934] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 336.703252][ T5934] usb 6-1: device descriptor read/64, error -71 [ 336.811958][ T5934] usb usb6-port1: attempt power cycle [ 337.090243][T11772] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 337.103788][T11772] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 337.117609][T11773] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 337.174290][ T5934] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 337.201903][ T5934] usb 6-1: device descriptor read/8, error -71 [ 337.461807][ T5934] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 337.487424][T11781] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1684'. [ 337.502551][ T5934] usb 6-1: device descriptor read/8, error -71 [ 337.611688][ T5934] usb usb6-port1: unable to enumerate USB device [ 337.630023][T11786] binder: 11780:11786 ioctl c018620b 2000000002c0 returned -14 [ 337.785421][T11790] vxfs: WRONG superblock magic 00000000 at 1 [ 337.795156][T11790] vxfs: WRONG superblock magic 00000000 at 8 [ 337.803877][T11788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.813886][T11790] vxfs: can't find superblock. [ 337.882570][T11788] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 337.890486][T11788] UDF-fs: Scanning with blocksize 4096 failed [ 338.504912][T11801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.516581][T11801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.751210][ T5937] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 338.894231][ T5937] usb 3-1: device descriptor read/64, error -71 [ 338.996017][T11815] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 339.004861][T11815] syz.5.1691: attempt to access beyond end of device [ 339.004861][T11815] loop5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 339.059687][ T59] Bluetooth: hci6: Frame reassembly failed (-84) [ 339.153725][ T5937] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 339.301383][ T5937] usb 3-1: device descriptor read/64, error -71 [ 339.411929][ T5937] usb usb3-port1: attempt power cycle [ 339.761405][ T5937] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 339.782961][ T5937] usb 3-1: device descriptor read/8, error -71 [ 339.826456][T11828] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 339.833963][T11828] VFS: Can't find a romfs filesystem on dev rnullb0. [ 339.833963][T11828] [ 340.031243][ T5937] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 340.065163][ T5937] usb 3-1: device descriptor read/8, error -71 [ 340.181611][ T5937] usb usb3-port1: unable to enumerate USB device [ 340.351393][ T5890] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 340.491385][ T5890] usb 4-1: device descriptor read/64, error -71 [ 340.731253][ T5890] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 340.871445][ T5890] usb 4-1: device descriptor read/64, error -71 [ 340.994491][ T5890] usb usb4-port1: attempt power cycle [ 341.111423][ T51] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 341.111505][ T5857] Bluetooth: hci6: command 0x1003 tx timeout [ 341.344794][ T5890] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 341.376363][ T5890] usb 4-1: device descriptor read/8, error -71 [ 341.546376][ T5957] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 341.632109][ T5890] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 341.665667][ T5890] usb 4-1: device descriptor read/8, error -71 [ 341.721299][ T5957] usb 6-1: Using ep0 maxpacket: 32 [ 341.730272][ T5957] usb 6-1: config 0 has an invalid interface number: 23 but max is 0 [ 341.738793][ T5957] usb 6-1: config 0 has no interface number 0 [ 341.746329][ T5957] usb 6-1: config 0 interface 23 has no altsetting 0 [ 341.757015][ T5957] usb 6-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=b6.ad [ 341.767305][ T5957] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.775727][ T5957] usb 6-1: Product: syz [ 341.780035][ T5957] usb 6-1: Manufacturer: syz [ 341.784790][ T5957] usb 6-1: SerialNumber: syz [ 341.791431][ T5890] usb usb4-port1: unable to enumerate USB device [ 341.800813][ T5957] usb 6-1: config 0 descriptor?? [ 341.875654][ T5934] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 342.019682][ T5957] kaweth 6-1:0.23: Firmware present in device. [ 342.043375][ T5934] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.054048][ T5934] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.065986][ T5934] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.080251][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.090956][ T5934] usb 3-1: Product: syz [ 342.096939][ T5934] usb 3-1: Manufacturer: syz [ 342.101767][ T5934] usb 3-1: SerialNumber: syz [ 342.210727][ T5957] kaweth 6-1:0.23: Statistics collection: 0 [ 342.216928][ T5957] kaweth 6-1:0.23: Multicast filter limit: 0 [ 342.223494][ T5957] kaweth 6-1:0.23: MTU: 0 [ 342.227986][ T5957] kaweth 6-1:0.23: Read MAC address 00:00:00:00:00:00 [ 342.321548][T11850] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 342.615348][T11842] random: crng reseeded on system resumption [ 342.895292][ T5934] usb 3-1: 0:2 : does not exist [ 342.917445][ T5934] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 342.971967][ T5934] usb 3-1: USB disconnect, device number 23 [ 343.070134][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.360102][T11859] qnx6: unable to set blocksize [ 343.649840][T11862] qnx4: no qnx4 filesystem (no root dir). [ 343.777505][T11864] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1709'. [ 343.788308][T11865] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1709'. [ 343.798234][T11864] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1709'. [ 343.908188][T11867] C: renamed from team_slave_0 (while UP) [ 343.918781][T11867] netlink: 'syz.3.1710': attribute type 1 has an invalid length. [ 343.930261][T11867] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 344.056033][T11871] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1712'. [ 344.441214][ T5890] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 344.595274][ T5890] usb 3-1: device descriptor read/64, error -71 [ 344.851208][ T5890] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 344.986729][ T5890] usb 3-1: device descriptor read/64, error -71 [ 345.114004][ T5890] usb usb3-port1: attempt power cycle [ 345.471340][ T5890] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 345.506598][ T5890] usb 3-1: device descriptor read/8, error -71 [ 345.761849][ T5890] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 345.786002][ T5890] usb 3-1: device descriptor read/8, error -71 [ 345.871148][ T5934] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 345.901406][ T5890] usb usb3-port1: unable to enumerate USB device [ 346.022486][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.033753][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.043568][ T5934] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 346.052683][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.064253][ T5934] usb 4-1: config 0 descriptor?? [ 346.482614][ T5934] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 346.490011][ T5934] cm6533_jd 0003:0D8C:0022.0018: unknown main item tag 0x0 [ 346.500463][ T5934] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0018/input/input32 [ 346.522605][ T5934] cm6533_jd 0003:0D8C:0022.0018: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 346.692864][T11887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.705421][T11887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.718745][ T5934] usb 4-1: USB disconnect, device number 101 [ 346.969557][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 346.980552][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 346.988750][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 346.999353][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 347.007249][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 347.216175][T11890] chnl_net:caif_netlink_parms(): no params data found [ 347.368696][T11901] fuse: Bad value for 'group_id' [ 347.378744][T11901] fuse: Bad value for 'group_id' [ 347.387753][T11902] /dev/rnullb0: Can't open blockdev [ 347.395443][T11890] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.402930][T11890] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.410087][T11890] bridge_slave_0: entered allmulticast mode [ 347.419274][T11890] bridge_slave_0: entered promiscuous mode [ 347.429978][T11890] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.449794][T11890] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.460361][T11890] bridge_slave_1: entered allmulticast mode [ 347.478101][T11890] bridge_slave_1: entered promiscuous mode [ 347.530471][T11890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.543294][T11890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.587536][T11890] team0: Port device team_slave_0 added [ 347.596352][T11890] team0: Port device team_slave_1 added [ 347.601476][ T5890] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 347.644382][T11890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.654402][T11890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.696914][T11890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.715963][T11890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.726017][T11890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.753570][T11890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.761773][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 347.783981][ T5890] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 347.807529][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.815973][ T5890] usb 3-1: Product: syz [ 347.820210][ T5890] usb 3-1: Manufacturer: syz [ 347.831709][ T5890] usb 3-1: SerialNumber: syz [ 347.853262][ T5890] usb 3-1: config 0 descriptor?? [ 347.876962][T11890] hsr_slave_0: entered promiscuous mode [ 347.886426][ T5890] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 347.900323][T11890] hsr_slave_1: entered promiscuous mode [ 347.908198][T11890] debugfs: 'hsr0' already exists in 'hsr' [ 347.923963][T11890] Cannot create hsr debugfs directory [ 348.218050][T11890] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 348.230769][T11890] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 348.249207][T11890] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 348.263398][T11890] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 348.367933][T11890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.392829][T11890] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.406570][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.413761][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.446496][ T974] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.453762][ T974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.788006][T11890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.032015][ T5857] Bluetooth: hci6: command tx timeout [ 349.158131][T11890] veth0_vlan: entered promiscuous mode [ 349.173083][T11890] veth1_vlan: entered promiscuous mode [ 349.208156][T11890] veth0_macvtap: entered promiscuous mode [ 349.218854][T11890] veth1_macvtap: entered promiscuous mode [ 349.244715][T11890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.260235][T11890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.278038][T11896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.302003][T11896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.304230][ T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.333228][ T5890] gspca_stk1135: reg_w 0xf err -71 [ 349.340216][ T5890] gspca_stk1135: serial bus timeout: status=0x00 [ 349.362025][ T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.377607][ T5890] gspca_stk1135: Sensor write failed [ 349.381199][ T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.386122][ T5890] gspca_stk1135: serial bus timeout: status=0x00 [ 349.408131][ T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.416532][ T5890] gspca_stk1135: Sensor write failed [ 349.426870][ T5890] gspca_stk1135: serial bus timeout: status=0x00 [ 349.439666][ T5890] gspca_stk1135: Sensor read failed [ 349.447514][ T5890] gspca_stk1135: serial bus timeout: status=0x00 [ 349.455666][ T5890] gspca_stk1135: Sensor read failed [ 349.460938][ T5890] gspca_stk1135: Detected sensor type unknown (0x0) [ 349.468362][ T5890] gspca_stk1135: serial bus timeout: status=0x00 [ 349.475539][ T5890] gspca_stk1135: Sensor read failed [ 349.482501][ T5890] gspca_stk1135: serial bus timeout: status=0x00 [ 349.489262][ T5890] gspca_stk1135: Sensor read failed [ 349.494985][ T5890] gspca_stk1135: serial bus timeout: status=0x00 [ 349.503016][ T5890] gspca_stk1135: Sensor write failed [ 349.508413][ T5890] gspca_stk1135: serial bus timeout: status=0x00 [ 349.528045][ T3511] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.536764][ T5890] gspca_stk1135: Sensor write failed [ 349.541584][ T3511] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.557403][ T5890] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 349.587880][ T5890] usb 3-1: USB disconnect, device number 28 [ 349.634729][ T974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.654753][ T974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.999894][T11926] /dev/rnullb0: Can't open blockdev [ 350.031363][ T43] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 350.171466][ T43] usb 8-1: device descriptor read/64, error -71 [ 350.395193][ T5934] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 350.411256][ T43] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 350.471543][ T5890] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 350.541157][ T43] usb 8-1: device descriptor read/64, error -71 [ 350.541432][ T5934] usb 4-1: device descriptor read/64, error -71 [ 350.631474][ T5890] usb 3-1: device descriptor read/64, error -71 [ 350.651579][ T43] usb usb8-port1: attempt power cycle [ 350.811303][ T5934] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 350.881279][ T5890] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 350.972332][ T5934] usb 4-1: device descriptor read/64, error -71 [ 350.992342][ T43] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 351.012572][ T43] usb 8-1: device descriptor read/8, error -71 [ 351.021388][ T5890] usb 3-1: device descriptor read/64, error -71 [ 351.081853][ T5934] usb usb4-port1: attempt power cycle [ 351.112566][ T5857] Bluetooth: hci6: command tx timeout [ 351.131470][ T5890] usb usb3-port1: attempt power cycle [ 351.251224][ T43] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 351.272981][ T43] usb 8-1: device descriptor read/8, error -71 [ 351.382350][ T43] usb usb8-port1: unable to enumerate USB device [ 351.425004][ T5934] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 351.451808][ T5934] usb 4-1: device descriptor read/8, error -71 [ 351.471189][ T5890] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 351.491782][ T5890] usb 3-1: device descriptor read/8, error -71 [ 351.691233][ T5934] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 351.711629][ T5934] usb 4-1: device descriptor read/8, error -71 [ 351.731167][ T5890] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 351.752000][ T5890] usb 3-1: device descriptor read/8, error -71 [ 351.825634][ T5934] usb usb4-port1: unable to enumerate USB device [ 351.861475][ T5890] usb usb3-port1: unable to enumerate USB device [ 353.201391][ T5857] Bluetooth: hci6: command tx timeout [ 353.358037][T11952] binder: 11951:11952 ioctl c018620b 200000000000 returned -14 [ 353.641148][ T43] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 353.819861][ T43] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 353.844288][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.884337][ T43] usb 3-1: config 0 descriptor?? [ 354.161247][ T5937] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 354.301210][ T5937] usb 8-1: device descriptor read/64, error -71 [ 354.542468][ T5937] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 354.691338][ T5937] usb 8-1: device descriptor read/64, error -71 [ 354.811400][ T5937] usb usb8-port1: attempt power cycle [ 355.151432][ T5937] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 355.177018][ T5937] usb 8-1: device descriptor read/8, error -71 [ 355.271649][ T5857] Bluetooth: hci6: command tx timeout [ 355.431262][ T5937] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 355.466573][ T5937] usb 8-1: device descriptor read/8, error -71 [ 355.600087][ T5937] usb usb8-port1: unable to enumerate USB device [ 356.787621][ T43] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 356.810909][ T43] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 356.828528][ T43] asix 3-1:0.0: probe with driver asix failed with error -71 [ 356.847019][ T43] usb 3-1: USB disconnect, device number 33 [ 357.243300][T11972] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 357.480426][ T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 357.502746][ T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 357.510597][ T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 357.519643][ T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 357.527582][ T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 357.777079][T11981] sctp: [Deprecated]: syz.2.1742 (pid 11981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 357.777079][T11981] Use struct sctp_sack_info instead [ 358.026507][T11976] chnl_net:caif_netlink_parms(): no params data found [ 358.297908][T11989] hpfs: Bad magic ... probably not HPFS [ 358.754712][T11976] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.767524][T11976] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.779724][T11976] bridge_slave_0: entered allmulticast mode [ 358.788608][T11976] bridge_slave_0: entered promiscuous mode [ 358.807736][T11976] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.812024][ T5937] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 358.822865][T11976] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.823062][T11976] bridge_slave_1: entered allmulticast mode [ 358.825356][T11976] bridge_slave_1: entered promiscuous mode [ 358.937012][T11976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.960315][T11976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.991561][ T5937] usb 8-1: device descriptor read/64, error -71 [ 359.073975][T11976] team0: Port device team_slave_0 added [ 359.095508][T11976] team0: Port device team_slave_1 added [ 359.176973][T11976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.190638][T11976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.221408][ T55] block nbd0: Possible stuck request ffff888025630000: control (read@0,1024B). Runtime 150 seconds [ 359.234295][ T55] block nbd0: Possible stuck request ffff8880256301c0: control (read@1024,1024B). Runtime 150 seconds [ 359.246299][ T55] block nbd0: Possible stuck request ffff888025630380: control (read@2048,1024B). Runtime 150 seconds [ 359.257397][ T5937] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 359.265048][ T55] block nbd0: Possible stuck request ffff888025630540: control (read@3072,1024B). Runtime 150 seconds [ 359.306230][T11976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.349999][T11976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.379916][T11976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.401194][ T5937] usb 8-1: device descriptor read/64, error -71 [ 359.419519][T11976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.435322][T12006] hfs: can't find a HFS filesystem on dev rnullb0 [ 359.534972][ T5937] usb usb8-port1: attempt power cycle [ 359.569463][T11976] hsr_slave_0: entered promiscuous mode [ 359.580836][T11976] hsr_slave_1: entered promiscuous mode [ 359.590725][T12009] omfs: Invalid superblock (0) [ 359.600528][T11976] debugfs: 'hsr0' already exists in 'hsr' [ 359.606693][ T5857] Bluetooth: hci7: command tx timeout [ 359.613890][T11976] Cannot create hsr debugfs directory [ 359.774299][T12011] hfsplus: unable to find HFS+ superblock [ 359.891753][ T5937] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 359.932375][ T5937] usb 8-1: device descriptor read/8, error -71 [ 359.989386][T11976] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 360.033744][T11976] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 360.045587][T11976] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 360.059099][T11976] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 360.181199][ T5937] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 360.202271][ T5937] usb 8-1: device descriptor read/8, error -71 [ 360.225983][T11976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.231314][ T5890] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 360.258672][T11976] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.275365][ T3511] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.275444][ T3511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.287866][ T3511] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.287975][ T3511] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.311809][ T5937] usb usb8-port1: unable to enumerate USB device [ 360.411106][ T5890] usb 4-1: Using ep0 maxpacket: 8 [ 360.418332][ T5890] usb 4-1: config 1 interface 0 has no altsetting 0 [ 360.435454][ T5890] usb 4-1: New USB device found, idVendor=1b96, idProduct=0007, bcdDevice= 0.40 [ 360.450935][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.460567][ T5890] usb 4-1: Product: ጰ뜳㟩ꂊ灣盔港뜔賨꾇꠷ꑦ帻佹⡨ꝺ蝆杵聕뼑ꩊ錊ז뻷᪔ầ୭㗿툣벾꘱迩滏嫩ꐊ鮔悏昫ﶣꁎ呵Ⴟ䐧滃覉셷苠㌼㴅盚ᙄ덂蕕牕︮䛲汭웑벑ấᲽꞎ쐣쇂蚚뛟ߠἀ氽⿒綬묶䧧뵞ⴌ௥涸战 [ 360.490455][ T5890] usb 4-1: SerialNumber: చ [ 360.522872][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1754'. [ 360.526980][T12038] /dev/rnullb0: Can't open blockdev [ 360.538161][T12036] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 360.698897][T11976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.891686][ T5934] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 360.938850][ T5890] usbhid 4-1:1.0: can't add hid device: -71 [ 360.945480][ T5890] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 360.978247][ T5890] usb 4-1: USB disconnect, device number 106 [ 361.010962][T11976] veth0_vlan: entered promiscuous mode [ 361.030491][T11976] veth1_vlan: entered promiscuous mode [ 361.064771][T11976] veth0_macvtap: entered promiscuous mode [ 361.071365][ T5934] usb 3-1: device descriptor read/64, error -71 [ 361.084149][T11976] veth1_macvtap: entered promiscuous mode [ 361.102646][T11976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.121968][T11976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.140332][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.150395][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.166170][ T59] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.177487][ T59] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.254692][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.268573][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.304261][ T3511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.312661][ T3511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.342148][ T5934] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 361.417908][T12051] /dev/rnullb0: Can't open blockdev [ 361.512929][ T5934] usb 3-1: device descriptor read/64, error -71 [ 361.626273][ T5934] usb usb3-port1: attempt power cycle [ 361.671863][ T5857] Bluetooth: hci7: command tx timeout [ 361.731235][ T5933] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 361.871167][ T5933] usb 9-1: device descriptor read/64, error -71 [ 361.991818][ T5934] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 362.033723][ T5934] usb 3-1: device descriptor read/8, error -71 [ 362.111709][ T5933] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 362.241469][ T5933] usb 9-1: device descriptor read/64, error -71 [ 362.291246][ T5934] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 362.322378][ T5934] usb 3-1: device descriptor read/8, error -71 [ 362.351623][ T5933] usb usb9-port1: attempt power cycle [ 362.450309][ T5934] usb usb3-port1: unable to enumerate USB device [ 362.596936][T12075] netlink: 'syz.3.1761': attribute type 4 has an invalid length. [ 362.618003][T12075] netlink: 'syz.3.1761': attribute type 4 has an invalid length. [ 362.703958][ T5933] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 362.731890][ T5933] usb 9-1: device descriptor read/8, error -71 [ 362.926613][ T5937] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 362.991173][ T5933] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 363.011740][ T5933] usb 9-1: device descriptor read/8, error -71 [ 363.084605][ T5937] usb 8-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 363.095806][ T5937] usb 8-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 363.104931][ T5937] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.122572][ T5933] usb usb9-port1: unable to enumerate USB device [ 363.138706][ T5937] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 363.211722][ T5915] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 363.361176][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 363.368607][ T5915] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 363.376273][ T5915] usb 4-1: can't read configurations, error -61 [ 363.512886][ T5915] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 363.672728][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 363.691596][ T5915] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 363.700726][ T5915] usb 4-1: can't read configurations, error -61 [ 363.713536][ T5915] usb usb4-port1: attempt power cycle [ 363.746724][T12083] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 363.751888][ T5857] Bluetooth: hci7: command tx timeout [ 364.055211][ T5915] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 364.082100][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 364.100755][ T5915] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 364.115248][ T5915] usb 4-1: can't read configurations, error -61 [ 364.152163][ T5937] stv0680 8-1:4.0: STV(e): camera ping failed!! [ 364.251342][ T5915] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 364.288401][ T5915] usb 4-1: Using ep0 maxpacket: 8 [ 364.296118][ T5915] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 364.297125][T12085] Mount JFS Failure: -22 [ 364.320555][ T5915] usb 4-1: can't read configurations, error -61 [ 364.331754][ T5915] usb usb4-port1: unable to enumerate USB device [ 364.360183][ T5937] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 364.372954][ T5937] stv0680 8-1:4.0: last error: 191, command = 0xde [ 364.387699][ T5937] usb 8-1: USB disconnect, device number 14 [ 364.475797][T12087] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 364.483157][T12087] VFS: Can't find a romfs filesystem on dev rnullb0. [ 364.483157][T12087] [ 364.587282][T12091] netlink: 'syz.8.1767': attribute type 10 has an invalid length. [ 364.598187][T12091] team0: Device tunl0 is of different type [ 364.606619][T12092] netlink: 'syz.8.1767': attribute type 25 has an invalid length. [ 364.614531][T12092] netlink: 'syz.8.1767': attribute type 9 has an invalid length. [ 364.623391][T12093] netlink: 'syz.8.1767': attribute type 25 has an invalid length. [ 364.631936][T12093] netlink: 'syz.8.1767': attribute type 9 has an invalid length. [ 364.769333][T12097] hpfs: Bad magic ... probably not HPFS [ 364.811521][ T5937] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 364.941988][ T5937] usb 3-1: device descriptor read/64, error -71 [ 365.071161][ T43] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 365.174047][T12110] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 365.174713][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 365.183286][T12110] UDF-fs: Scanning with blocksize 4096 failed [ 365.198561][ T5937] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 365.236672][ T43] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.251174][ T43] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 365.279449][ T43] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 365.295802][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 365.307240][ T43] usb 9-1: SerialNumber: syz [ 365.331340][ T5937] usb 3-1: device descriptor read/64, error -71 [ 365.451613][ T5937] usb usb3-port1: attempt power cycle [ 365.582292][ T5915] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 365.603274][ T43] usb 9-1: 0:2 : does not exist [ 365.618975][ T43] usb 9-1: USB disconnect, device number 6 [ 365.658924][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.753867][ T5915] usb 8-1: config 0 has no interfaces? [ 365.765447][ T5915] usb 8-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 365.774543][ T5915] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.784348][ T5915] usb 8-1: Product: syz [ 365.788558][ T5915] usb 8-1: Manufacturer: syz [ 365.793474][ T5915] usb 8-1: SerialNumber: syz [ 365.800751][ T5915] usb 8-1: config 0 descriptor?? [ 365.801196][ T5937] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 365.832639][ T5857] Bluetooth: hci7: command tx timeout [ 365.841990][ T5937] usb 3-1: device descriptor read/8, error -71 [ 366.013168][ T5915] usb 8-1: USB disconnect, device number 15 [ 366.081444][ T5937] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 366.113986][ T5937] usb 3-1: device descriptor read/8, error -71 [ 366.241432][ T5937] usb usb3-port1: unable to enumerate USB device [ 366.535334][T12123] 9pnet_fd: Insufficient options for proto=fd [ 366.546208][T12123] NILFS (rnullb0): couldn't find nilfs on the device [ 366.627741][T12125] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 366.635614][T12125] VFS: Can't find a romfs filesystem on dev rnullb0. [ 366.635614][T12125] [ 367.362140][ T5934] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 367.485680][T12143] ./cgroup: Can't lookup blockdev [ 367.563261][T12146] nfs4: Unknown parameter 're0' [ 367.616727][ T5934] usb 8-1: not running at top speed; connect to a high speed hub [ 367.632100][ T5934] usb 8-1: config 6 has an invalid interface number: 99 but max is 2 [ 367.640235][ T5934] usb 8-1: config 6 has an invalid interface number: 15 but max is 2 [ 367.740245][ T5934] usb 8-1: config 6 has an invalid interface number: 201 but max is 2 [ 367.764883][T12150] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 367.781425][ T5934] usb 8-1: config 6 has an invalid interface number: 75 but max is 2 [ 367.811524][T12150] UDF-fs: Scanning with blocksize 512 failed [ 367.813784][ T5934] usb 8-1: config 6 has 4 interfaces, different from the descriptor's value: 3 [ 367.842632][T12150] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 367.860301][T12150] UDF-fs: Scanning with blocksize 1024 failed [ 367.871222][ T5934] usb 8-1: config 6 has no interface number 0 [ 367.872742][T12150] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 367.877343][ T5934] usb 8-1: config 6 has no interface number 1 [ 367.894143][T12150] UDF-fs: Scanning with blocksize 2048 failed [ 367.900731][T12150] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 367.909386][T12150] UDF-fs: Scanning with blocksize 4096 failed [ 367.941855][ T5934] usb 8-1: config 6 has no interface number 2 [ 367.947979][ T5934] usb 8-1: config 6 has no interface number 3 [ 367.972182][ T5934] usb 8-1: config 6 interface 15 altsetting 153 has an invalid descriptor for endpoint zero, skipping [ 368.017965][ T5934] usb 8-1: config 6 interface 15 altsetting 153 has 4 endpoint descriptors, different from the interface descriptor's value: 9 [ 368.041045][ T5934] usb 8-1: too many endpoints for config 6 interface 201 altsetting 13: 241, using maximum allowed: 30 [ 368.059366][ T5934] usb 8-1: config 6 interface 201 altsetting 13 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 368.074173][ T5934] usb 8-1: config 6 interface 201 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 368.091651][ T5934] usb 8-1: config 6 interface 201 altsetting 13 has 5 endpoint descriptors, different from the interface descriptor's value: 241 [ 368.105177][ T5934] usb 8-1: config 6 interface 75 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 368.115883][ T5934] usb 8-1: config 6 interface 99 has no altsetting 0 [ 368.122631][ T5934] usb 8-1: config 6 interface 15 has no altsetting 0 [ 368.129394][ T5934] usb 8-1: config 6 interface 201 has no altsetting 0 [ 368.136245][ T5934] usb 8-1: config 6 interface 75 has no altsetting 0 [ 368.151022][ T5934] usb 8-1: Dual-Role OTG device on HNP port [ 368.175450][ T5934] usb 8-1: New USB device found, idVendor=7392, idProduct=7717, bcdDevice=3b.91 [ 368.201070][ T5934] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.205474][T12155] binder: 12154:12155 ioctl c0306201 200000001a80 returned -14 [ 368.213463][ T5934] usb 8-1: Product: syz [ 368.220830][ T5934] usb 8-1: Manufacturer: й [ 368.261816][ T5934] usb 8-1: SerialNumber: syz [ 368.374067][T12163] ./file0: Can't lookup blockdev [ 368.500006][T12138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.524704][T12138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.573454][T12138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.586517][T12138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.627511][T12170] fuse: Unknown parameter 'user_p <&V`g [ 368.627511][T12170] id' [ 368.636515][ T5890] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 368.705337][T12171] No control pipe specified [ 368.785339][ T5890] usb 3-1: device descriptor read/64, error -71 [ 369.052827][ T5890] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 369.151504][ T5934] usb 8-1: USB disconnect, device number 16 [ 369.201303][ T5890] usb 3-1: device descriptor read/64, error -71 [ 369.316223][ T5890] usb usb3-port1: attempt power cycle [ 369.406171][T12173] No control pipe specified [ 369.663095][ T5890] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 369.698897][ T5890] usb 3-1: device descriptor read/8, error -71 [ 369.702787][ T43] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 369.801152][ T5937] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 369.842235][ T43] usb 4-1: device descriptor read/64, error -71 [ 369.894521][ T2129] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.941497][ T5890] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 369.963534][ T5937] usb 9-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 369.972349][ T5890] usb 3-1: device descriptor read/8, error -71 [ 369.975127][ T5937] usb 9-1: config 0 interface 0 has no altsetting 0 [ 369.998234][ T5937] usb 9-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 370.010974][ T5937] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.028864][ T2129] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.044128][ T5937] usb 9-1: config 0 descriptor?? [ 370.101469][ T43] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 370.121639][ T5890] usb usb3-port1: unable to enumerate USB device [ 370.129882][ T2129] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.223089][ T2129] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.252847][ T43] usb 4-1: device descriptor read/64, error -71 [ 370.383765][ T43] usb usb4-port1: attempt power cycle [ 370.441346][ T2129] bridge_slave_1: left allmulticast mode [ 370.453226][ T2129] bridge_slave_1: left promiscuous mode [ 370.459735][ T2129] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.479581][ T5937] microsoft 0003:045E:009D.0019: hidraw0: USB HID v0.00 Device [HID 045e:009d] on usb-dummy_hcd.8-1/input0 [ 370.514252][ T5937] microsoft 0003:045E:009D.0019: no inputs found [ 370.521882][ T2129] bridge_slave_0: left allmulticast mode [ 370.527560][ T2129] bridge_slave_0: left promiscuous mode [ 370.533935][ T5937] microsoft 0003:045E:009D.0019: could not initialize ff, continuing anyway [ 370.544597][ T2129] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.771275][ T43] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 370.796378][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 370.817566][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 370.826797][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 370.845021][ T43] usb 4-1: device descriptor read/8, error -71 [ 370.863951][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 370.872997][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 370.886253][ T5849] usb 9-1: USB disconnect, device number 7 [ 371.099971][ T43] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 371.142922][ T43] usb 4-1: device descriptor read/8, error -71 [ 371.256410][ T43] usb usb4-port1: unable to enumerate USB device [ 371.328361][ T2129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.350650][ T2129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.381747][ T2129] bond0 (unregistering): Released all slaves [ 371.601246][T12205] syz.8.1799: attempt to access beyond end of device [ 371.601246][T12205] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 371.616137][T12205] FAT-fs (nbd8): unable to read boot sector [ 371.932040][ T2129] hsr_slave_0: left promiscuous mode [ 371.948901][ T2129] hsr_slave_1: left promiscuous mode [ 371.955647][ T2129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.963355][ T2129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 371.977485][ T2129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.984969][ T2129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.014197][ T5939] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 372.048608][ T2129] veth1_macvtap: left promiscuous mode [ 372.061535][ T2129] veth0_macvtap: left promiscuous mode [ 372.069243][ T2129] veth1_vlan: left promiscuous mode [ 372.080057][ T2129] veth0_vlan: left promiscuous mode [ 372.161339][ T5939] usb 3-1: device descriptor read/64, error -71 [ 372.443751][ T5939] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 372.598206][ T5939] usb 3-1: device descriptor read/64, error -71 [ 372.634900][ T5957] kaweth 6-1:0.23: Error setting SOFS wait [ 372.641250][ T5957] kaweth 6-1:0.23: probe with driver kaweth failed with error -5 [ 372.719136][ T5939] usb usb3-port1: attempt power cycle [ 372.951926][ T5857] Bluetooth: hci6: command tx timeout [ 373.101734][ T2129] team0 (unregistering): Port device team_slave_1 removed [ 373.133083][ T5939] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 373.177210][ T2129] team0 (unregistering): Port device team_slave_0 removed [ 373.184956][ T5939] usb 3-1: device descriptor read/8, error -71 [ 373.443940][ T5939] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 373.473936][ T5939] usb 3-1: device descriptor read/8, error -71 [ 373.588057][ T5939] usb usb3-port1: unable to enumerate USB device [ 373.921343][ T5939] usb 6-1: USB disconnect, device number 44 [ 374.362737][T12188] chnl_net:caif_netlink_parms(): no params data found [ 374.655835][T12188] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.664517][T12188] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.671779][T12188] bridge_slave_0: entered allmulticast mode [ 374.679453][T12188] bridge_slave_0: entered promiscuous mode [ 374.687746][T12188] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.696953][T12188] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.704466][T12188] bridge_slave_1: entered allmulticast mode [ 374.714229][T12188] bridge_slave_1: entered promiscuous mode [ 374.721406][ T5939] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 374.810342][ T2129] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.862418][ T5939] usb 4-1: device descriptor read/64, error -71 [ 374.887940][T12188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.905848][T12278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1810'. [ 374.916622][T12278] openvswitch: netlink: nsh attr 0 has unexpected len 21 expected 0 [ 374.930680][T12278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 374.942966][T12278] /dev/rnullb0: Can't open blockdev [ 374.969336][ T2129] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.003279][T12188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.031332][ T5857] Bluetooth: hci6: command tx timeout [ 375.102758][ T5939] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 375.199818][ T2129] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.230095][T12188] team0: Port device team_slave_0 added [ 375.239513][T12188] team0: Port device team_slave_1 added [ 375.277114][ T5939] usb 4-1: device descriptor read/64, error -71 [ 375.288433][ T2129] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.327244][T12188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.337053][T12188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.363822][T12188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.372017][ T5890] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 375.376686][T12188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.389578][T12188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.406146][T12285] vxfs: WRONG superblock magic 00000000 at 1 [ 375.425370][ T5939] usb usb4-port1: attempt power cycle [ 375.430838][T12285] vxfs: WRONG superblock magic 00000000 at 8 [ 375.432587][T12188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.437744][T12285] vxfs: can't find superblock. [ 375.531445][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 375.548560][T12188] hsr_slave_0: entered promiscuous mode [ 375.560824][ T5890] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 375.562695][T12188] hsr_slave_1: entered promiscuous mode [ 375.585655][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.586440][T12188] debugfs: 'hsr0' already exists in 'hsr' [ 375.604401][T12188] Cannot create hsr debugfs directory [ 375.620934][ T5890] usb 3-1: Product: syz [ 375.626377][ T5890] usb 3-1: Manufacturer: syz [ 375.631004][ T5890] usb 3-1: SerialNumber: syz [ 375.686340][ T5890] usb 3-1: config 0 descriptor?? [ 375.709092][ T5890] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 375.781876][ T5939] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 375.834305][ T5939] usb 4-1: device descriptor read/8, error -71 [ 375.900014][T12283] /dev/rnullb0: Can't open blockdev [ 375.926223][ T2129] bridge_slave_1: left allmulticast mode [ 375.934064][ T5890] usb 3-1: clie_3_5_startup: get config number failed: -71 [ 375.950030][ T2129] bridge_slave_1: left promiscuous mode [ 375.961732][ T5890] visor 3-1:0.0: probe with driver visor failed with error -71 [ 375.997105][ T2129] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.006774][ T5890] usb 3-1: USB disconnect, device number 50 [ 376.028024][ T2129] bridge_slave_0: left allmulticast mode [ 376.049732][ T2129] bridge_slave_0: left promiscuous mode [ 376.060010][ T2129] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.091385][ T5939] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 376.123822][ T5939] usb 4-1: device descriptor read/8, error -71 [ 376.241904][ T5939] usb usb4-port1: unable to enumerate USB device [ 376.630258][ T2129] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.649158][ T2129] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.663779][ T2129] bond0 (unregistering): Released all slaves [ 376.771583][ T5957] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 376.911173][ T5957] usb 3-1: device descriptor read/64, error -71 [ 377.055389][ T2129] hsr_slave_0: left promiscuous mode [ 377.072995][ T2129] hsr_slave_1: left promiscuous mode [ 377.091797][ T2129] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.107968][ T2129] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.123013][ T51] Bluetooth: hci6: command tx timeout [ 377.129350][ T2129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.151165][ T2129] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.157679][T12323] exFAT-fs (rnullb0): invalid boot record signature [ 377.167150][ T5957] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 377.180770][T12323] exFAT-fs (rnullb0): failed to read boot sector [ 377.189122][T12323] exFAT-fs (rnullb0): failed to recognize exfat type [ 377.207548][ T2129] veth1_macvtap: left promiscuous mode [ 377.215410][ T2129] veth0_macvtap: left promiscuous mode [ 377.221386][ T2129] veth1_vlan: left promiscuous mode [ 377.226739][ T2129] veth0_vlan: left promiscuous mode [ 377.311754][ T5957] usb 3-1: device descriptor read/64, error -71 [ 377.445498][ T5957] usb usb3-port1: attempt power cycle [ 377.821478][ T5957] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 377.862551][ T5957] usb 3-1: device descriptor read/8, error -71 [ 377.988885][ T2129] team0 (unregistering): Port device team_slave_1 removed [ 378.028008][ T2129] team0 (unregistering): Port device team_slave_0 removed [ 378.121323][ T5957] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 378.166680][ T5957] usb 3-1: device descriptor read/8, error -71 [ 378.288521][ T5957] usb usb3-port1: unable to enumerate USB device [ 378.398928][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.405561][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.439547][T12322] tipc: Started in network mode [ 378.446350][T12322] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 378.455768][T12322] tipc: Enabling of bearer rejected, failed to enable media [ 378.547431][T12188] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 378.598516][T12188] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 378.651665][T12188] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 378.691587][T12188] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 378.925561][T12188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.981609][ T5916] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 378.986126][T12188] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.016605][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.023783][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.059825][T12373] vxfs: WRONG superblock magic 00000000 at 1 [ 379.068475][T12373] vxfs: WRONG superblock magic 00000000 at 8 [ 379.077681][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.084842][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.104009][T12373] vxfs: can't find superblock. [ 379.192957][ T5916] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.205033][ T51] Bluetooth: hci6: command tx timeout [ 379.210663][ T5916] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.242080][ T5916] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 379.271271][ T5916] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.287897][ T5916] usb 9-1: config 0 descriptor?? [ 379.541701][T12394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1824'. [ 379.700289][T12188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.724415][ T5916] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 379.746297][ T5916] cm6533_jd 0003:0D8C:0022.001A: unknown main item tag 0x0 [ 379.775819][ T5916] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0D8C:0022.001A/input/input33 [ 379.814112][T12401] vxfs: WRONG superblock magic 00000000 at 1 [ 379.820243][T12401] vxfs: WRONG superblock magic 00000000 at 8 [ 379.839264][T12401] vxfs: can't find superblock. [ 379.849476][ T5916] cm6533_jd 0003:0D8C:0022.001A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.8-1/input0 [ 379.939636][T12357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.973185][T12357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.986004][ T5957] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 380.021976][T12357] netlink: 'syz.8.1821': attribute type 5 has an invalid length. [ 380.077512][ T5916] usb 9-1: USB disconnect, device number 8 [ 380.153756][ T5957] usb 3-1: device descriptor read/64, error -71 [ 380.380538][T12188] veth0_vlan: entered promiscuous mode [ 380.407805][ T5957] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 380.427593][T12188] veth1_vlan: entered promiscuous mode [ 380.479090][T12188] veth0_macvtap: entered promiscuous mode [ 380.495667][T12188] veth1_macvtap: entered promiscuous mode [ 380.502713][ T5939] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 380.535635][T12188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.551642][ T5957] usb 3-1: device descriptor read/64, error -71 [ 380.569005][T12188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.594266][ T59] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.651487][ T5939] usb 4-1: device descriptor read/64, error -71 [ 380.678146][ T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.687957][ T5957] usb usb3-port1: attempt power cycle [ 380.718421][ T36] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.763108][ T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.784455][T12435] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.1829'. [ 380.811957][T12435] /dev/rnullb0: Can't open blockdev [ 380.889661][ T974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.897969][ T5939] usb 4-1: new full-speed USB device number 120 using dummy_hcd [ 380.924275][ T974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.986700][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.004546][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.055553][ T5939] usb 4-1: device descriptor read/64, error -71 [ 381.072626][ T5957] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 381.124967][ T5957] usb 3-1: device descriptor read/8, error -71 [ 381.182887][ T5939] usb usb4-port1: attempt power cycle [ 381.281629][ T5937] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 381.401311][ T5957] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 381.443672][ T5957] usb 3-1: device descriptor read/8, error -71 [ 381.452646][ T5937] usb 9-1: Invalid ep0 maxpacket: 16 [ 381.533009][ T5939] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 381.566518][ T5957] usb usb3-port1: unable to enumerate USB device [ 381.574868][ T5939] usb 4-1: device descriptor read/8, error -71 [ 381.611418][ T5937] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 381.771528][ T5937] usb 9-1: Invalid ep0 maxpacket: 16 [ 381.777559][ T5937] usb usb9-port1: attempt power cycle [ 381.821307][ T5939] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 381.871393][ T5939] usb 4-1: device descriptor read/8, error -71 [ 381.984392][ T5939] usb usb4-port1: unable to enumerate USB device [ 382.122953][ T5937] usb 9-1: new low-speed USB device number 11 using dummy_hcd [ 382.165775][ T5937] usb 9-1: Invalid ep0 maxpacket: 16 [ 382.198432][T12476] /dev/rnullb0: Can't open blockdev [ 382.304150][ T5937] usb 9-1: new low-speed USB device number 12 using dummy_hcd [ 382.339632][ T5937] usb 9-1: Invalid ep0 maxpacket: 16 [ 382.347107][ T5937] usb usb9-port1: unable to enumerate USB device [ 382.418662][T12476] overlay: Unknown parameter 'appraise' [ 382.856424][T12503] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1834'. [ 382.898577][T12502] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 382.905128][T12502] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 382.915601][T12502] vhci_hcd vhci_hcd.0: Device attached [ 382.924800][T12504] vhci_hcd: connection closed [ 382.927037][ T59] vhci_hcd: stop threads [ 382.937111][ T59] vhci_hcd: release socket [ 382.950803][ T59] vhci_hcd: disconnect device [ 383.030597][T12510] /dev/rnullb0: Can't open blockdev [ 383.323930][T12522] /dev/rnullb0: Can't open blockdev [ 383.688660][T12537] /dev/rnullb0: Can't open blockdev [ 383.701571][ T5890] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 383.806351][ T5849] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 383.815577][T12543] /dev/rnullb0: Can't open blockdev [ 383.830629][T12546] /dev/rnullb0: Can't open blockdev [ 383.886640][ T5890] usb 4-1: device descriptor read/64, error -71 [ 383.934264][T12550] binder: 12548:12550 ioctl c018620b 200000000000 returned -14 [ 383.961135][ T5849] usb 3-1: device descriptor read/64, error -71 [ 384.078489][T12556] /dev/rnullb0: Can't open blockdev [ 384.163998][ T5890] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 384.223165][ T5849] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 384.263901][T12568] /dev/rnullb0: Can't open blockdev [ 384.331266][ T5890] usb 4-1: device descriptor read/64, error -71 [ 384.383881][ T5849] usb 3-1: device descriptor read/64, error -71 [ 384.451422][ T5890] usb usb4-port1: attempt power cycle [ 384.511749][ T5849] usb usb3-port1: attempt power cycle [ 384.822159][ T5890] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 384.879462][ T5890] usb 4-1: device descriptor read/8, error -71 [ 384.890070][ T5849] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 384.933174][ T5849] usb 3-1: device descriptor read/8, error -71 [ 385.141156][ T5890] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 385.182328][ T5890] usb 4-1: device descriptor read/8, error -71 [ 385.203551][ T5849] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 385.244455][ T5849] usb 3-1: device descriptor read/8, error -71 [ 385.304240][ T5890] usb usb4-port1: unable to enumerate USB device [ 385.368466][ T5849] usb usb3-port1: unable to enumerate USB device [ 385.408241][T12607] /dev/rnullb0: Can't open blockdev [ 385.505546][T12611] /dev/rnullb0: Can't open blockdev [ 385.542511][T12614] /dev/rnullb0: Can't open blockdev [ 385.685074][T12620] /dev/rnullb0: Can't open blockdev [ 386.065247][T12636] /dev/sg0: Can't lookup blockdev [ 386.142847][ T5933] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 386.209375][T12641] /dev/rnullb0: Can't open blockdev [ 386.311398][ T5933] usb 9-1: Using ep0 maxpacket: 8 [ 386.340387][ T5933] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 386.369877][ T5933] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.411211][ T5933] usb 9-1: Product: syz [ 386.417984][ T5933] usb 9-1: Manufacturer: syz [ 386.427689][ T5933] usb 9-1: SerialNumber: syz [ 386.449298][ T5933] usb 9-1: config 0 descriptor?? [ 386.476505][ T5933] gspca_main: se401-2.14.0 probing 047d:5003 [ 386.561728][T12652] /dev/sg0: Can't lookup blockdev [ 386.794988][T12659] /dev/rnullb0: Can't open blockdev [ 387.139631][T12673] hfs: can't find a HFS filesystem on dev rnullb0 [ 387.751427][ T5933] gspca_se401: write req failed req 0x57 val 0x00 error -110 [ 387.772830][ T5933] se401 9-1:0.0: probe with driver se401 failed with error -110 [ 387.861512][ T5915] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 387.991420][ T31] INFO: task syz.0.904:8947 blocked for more than 163 seconds. [ 388.015856][ T31] Not tainted 6.16.0-rc5-next-20250711-syzkaller #0 [ 388.033240][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 388.037420][ T5915] usb 4-1: device descriptor read/64, error -71 [ 388.051337][ T31] task:syz.0.904 state:D stack:27400 pid:8947 tgid:8946 ppid:5862 task_flags:0x400140 flags:0x00004004 [ 388.087827][ T31] Call Trace: [ 388.097151][ T31] [ 388.107024][ T31] __schedule+0x16f5/0x4d00 [ 388.128770][ T31] ? __lock_acquire+0xab9/0xd20 [ 388.149408][ T31] ? schedule+0x165/0x360 [ 388.166069][ T31] ? __pfx___schedule+0x10/0x10 [ 388.190224][ T31] ? schedule+0x91/0x360 [ 388.214466][ T31] schedule+0x165/0x360 [ 388.235844][ T31] schedule_preempt_disabled+0x13/0x30 [ 388.254853][ T31] __mutex_lock+0x724/0xe80 [ 388.259392][ T31] ? __mutex_lock+0x51b/0xe80 [ 388.281099][ T31] ? bdev_open+0xe0/0xd30 [ 388.301113][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 388.314682][ T31] ? __pfx_bd_prepare_to_claim+0x10/0x10 [ 388.340635][ T5915] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 388.348801][ T31] ? alloc_file_pseudo_noaccount+0x203/0x2c0 [ 388.361101][ T31] ? disk_block_events+0xab/0x120 [ 388.381089][ T31] ? bdev_open+0xbe/0xd30 [ 388.391343][ T31] bdev_open+0xe0/0xd30 [ 388.395562][ T31] bdev_file_open_by_dev+0x1be/0x240 [ 388.400879][ T31] setup_bdev_super+0x5a/0x5b0 [ 388.428510][ T31] get_tree_bdev_flags+0x366/0x4d0 [ 388.433802][ T5849] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 388.454611][ T31] ? __pfx_cramfs_blkdev_fill_super+0x10/0x10 [ 388.474450][ T31] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 388.481509][ T5915] usb 4-1: device descriptor read/64, error -71 [ 388.496651][ T31] vfs_get_tree+0x8f/0x2b0 [ 388.508564][ T31] do_new_mount+0x2a2/0x9e0 [ 388.522360][ T31] ? ns_capable+0x8a/0xf0 [ 388.531781][ T31] ? __pfx_do_new_mount+0x10/0x10 [ 388.541484][ T31] ? path_mount+0x61c/0xfe0 [ 388.550471][ T31] ? user_path_at+0x44/0x60 [ 388.568174][ T31] __se_sys_mount+0x317/0x410 [ 388.578546][ T31] ? __pfx___se_sys_mount+0x10/0x10 [ 388.589454][ T31] ? rcu_is_watching+0x15/0xb0 [ 388.599993][ T31] ? do_syscall_64+0xbe/0x3b0 [ 388.604858][ T5849] usb 3-1: Using ep0 maxpacket: 16 [ 388.611832][ T5915] usb usb4-port1: attempt power cycle [ 388.629139][ T31] ? __x64_sys_mount+0x20/0xc0 [ 388.643223][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.658854][ T31] do_syscall_64+0xfa/0x3b0 [ 388.676020][ T5849] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 388.687363][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 388.707994][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.715059][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.741149][ T31] ? clear_bhb_loop+0x60/0xb0 [ 388.751974][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.760130][ T5849] usb 3-1: config 0 descriptor?? [ 388.775690][ T31] RIP: 0033:0x7fa427f8e929 [ 388.792099][ T31] RSP: 002b:00007fa428d61038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 388.805087][ T31] RAX: ffffffffffffffda RBX: 00007fa4281b5fa0 RCX: 00007fa427f8e929 [ 388.815785][ T31] RDX: 0000200000000400 RSI: 0000200000000040 RDI: 0000200000000080 [ 388.828284][ T31] RBP: 00007fa428010b39 R08: 0000000000000000 R09: 0000000000000000 [ 388.843000][ T31] R10: 000000000000c400 R11: 0000000000000246 R12: 0000000000000000 [ 388.860226][ T31] R13: 0000000000000000 R14: 00007fa4281b5fa0 R15: 00007ffd36c04b58 [ 388.879424][ T31] [ 388.889993][ T31] [ 388.889993][ T31] Showing all locks held in the system: [ 388.907604][ T31] 2 locks held by kworker/u8:0/12: [ 388.915245][ T31] #0: ffff8880b8639fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 388.961138][ T31] #1: ffffc90000117bc0 ((work_completion)(&(&krcp->krw_arr[i].rcu_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 388.985293][ T5933] usb 9-1: USB disconnect, device number 13 [ 388.995265][ T5915] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 389.029546][ T31] 1 lock held by khungtaskd/31: [ 389.049238][ T31] #0: ffffffff8e53c5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 389.068988][ T5915] usb 4-1: device descriptor read/8, error -71 [ 389.081273][ T31] 2 locks held by getty/5612: [ 389.085999][ T31] #0: ffff88814d3050a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 389.101081][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 389.121967][ T31] 5 locks held by kworker/0:3/5849: [ 389.127219][ T31] #0: ffff888021ec4d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 389.162846][ T31] #1: ffffc90003ff7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 389.180296][ T31] #2: ffff88802858f198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 389.190246][ T31] #3: ffff888044a85198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 389.206614][ T31] #4: ffff8880242c9160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 389.217287][ T31] 6 locks held by kworker/0:5/5915: [ 389.231294][ T31] #0: ffff888021ec4d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 389.251906][ T31] #1: ffffc90004447bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 389.273651][ T55] block nbd0: Possible stuck request ffff888025630000: control (read@0,1024B). Runtime 180 seconds [ 389.273990][ T31] #2: [ 389.284514][ T55] block nbd0: Possible stuck request ffff8880256301c0: control (read@1024,1024B). Runtime 180 seconds [ 389.298443][ T55] block nbd0: Possible stuck request ffff888025630380: control (read@2048,1024B). Runtime 180 seconds [ 389.303416][ T31] ffff888144b97198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 389.309565][ T55] block nbd0: Possible stuck request ffff888025630540: control (read@3072,1024B). Runtime 180 seconds [ 389.331545][ T5915] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 389.350682][ T31] #3: ffff888144ba2518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21a3/0x4a00 [ 389.382141][ T31] #4: ffff8880284f5468 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21cb/0x4a00 [ 389.394728][ T5915] usb 4-1: device descriptor read/8, error -71 [ 389.428969][ T31] #5: ffff8880b8639fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 389.462112][ T31] 1 lock held by udevd/5986: [ 389.483219][ T31] #0: ffff888025543358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 389.501690][ T31] 2 locks held by syz.0.904/8947: [ 389.518912][ T31] #0: ffff8880771aa0e0 (&type->s_umount_key#54/1){+.+.}-{4:4}, at: alloc_super+0x204/0x970 [ 389.548312][ T5915] usb usb4-port1: unable to enumerate USB device [ 389.561107][ T31] #1: ffff888025543358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 389.586564][ T31] 1 lock held by syz.1.1443/10956: [ 389.595436][ T31] #0: ffff88802425e428 (sb_writers#3){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160 [ 389.618451][ T31] 1 lock held by syz.8.1854/12617: [ 389.631550][ T31] #0: ffffffff8e541fc0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 389.649976][ T31] 2 locks held by syz.2.1866/12681: [ 389.658254][T12706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.671419][ T31] 1 lock held by syz.2.1873/12706: [ 389.676560][ T31] 2 locks held by dhcpcd/12719: [ 389.684702][T12706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.701319][ T31] #0: ffff88807d5a2258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 389.706929][ T5849] usbhid 3-1:0.0: can't add hid device: -71 [ 389.718596][ T5849] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 389.726536][ T31] #1: ffffffff8e5420f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 389.749966][ T31] 2 locks held by dhcpcd/12723: [ 389.753313][ T5849] usb 3-1: USB disconnect, device number 63 [ 389.768346][ T31] #0: ffff8880490e6258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 389.779953][ T31] #1: ffffffff8e5420f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 389.831166][ T31] 1 lock held by dhcpcd-run-hook/12726: [ 389.842160][ T31] [ 389.844516][ T31] ============================================= [ 389.844516][ T31] [ 389.866710][ T31] NMI backtrace for cpu 0 [ 389.866732][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-next-20250711-syzkaller #0 PREEMPT(full) [ 389.866753][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 389.866764][ T31] Call Trace: [ 389.866771][ T31] [ 389.866778][ T31] dump_stack_lvl+0x189/0x250 [ 389.866806][ T31] ? __wake_up_klogd+0xd9/0x110 [ 389.866825][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.866850][ T31] ? __pfx__printk+0x10/0x10 [ 389.866887][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 389.866916][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 389.866939][ T31] ? _printk+0xcf/0x120 [ 389.866968][ T31] ? __pfx__printk+0x10/0x10 [ 389.866994][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 389.867017][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 389.867045][ T31] watchdog+0xfee/0x1030 [ 389.867065][ T31] ? watchdog+0x1de/0x1030 [ 389.867090][ T31] kthread+0x711/0x8a0 [ 389.867109][ T31] ? __pfx_watchdog+0x10/0x10 [ 389.867125][ T31] ? __pfx_kthread+0x10/0x10 [ 389.867142][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 389.867168][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.867184][ T31] ? __pfx_kthread+0x10/0x10 [ 389.867200][ T31] ret_from_fork+0x3f9/0x770 [ 389.867224][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 389.867251][ T31] ? __switch_to_asm+0x39/0x70 [ 389.867266][ T31] ? __switch_to_asm+0x33/0x70 [ 389.867280][ T31] ? __pfx_kthread+0x10/0x10 [ 389.867296][ T31] ret_from_fork_asm+0x1a/0x30 [ 389.867324][ T31] [ 389.867331][ T31] Sending NMI from CPU 0 to CPUs 1: [ 390.031250][ C1] NMI backtrace for cpu 1 [ 390.031266][ C1] CPU: 1 UID: 0 PID: 2129 Comm: kworker/u8:6 Not tainted 6.16.0-rc5-next-20250711-syzkaller #0 PREEMPT(full) [ 390.031287][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 390.031305][ C1] Workqueue: bat_events batadv_nc_worker [ 390.031336][ C1] RIP: 0010:__lock_acquire+0x332/0xd20 [ 390.031359][ C1] Code: e5 15 09 d5 09 cd 44 09 f5 41 89 6c c7 20 45 89 44 c7 24 4c 89 7c 24 10 4d 8d 34 c7 81 e5 ff 1f 00 00 48 0f a3 2d 3e d9 52 12 <73> 10 48 69 c5 c8 00 00 00 48 8d 80 30 d3 91 93 eb 40 83 3d a5 68 [ 390.031374][ C1] RSP: 0018:ffffc9000547f880 EFLAGS: 00000003 [ 390.031388][ C1] RAX: 000000000000000a RBX: ffffffff8e53c5a0 RCX: 0000000000000007 [ 390.031399][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888029d78000 [ 390.031410][ C1] RBP: 0000000000000007 R08: 0000000000000000 R09: ffffffff8b4f815a [ 390.031421][ C1] R10: dffffc0000000000 R11: fffffbfff1fc9ba7 R12: 0000000000020000 [ 390.031433][ C1] R13: 0000000000000000 R14: ffff888029d78b40 R15: ffff888029d78af0 [ 390.031446][ C1] FS: 0000000000000000(0000) GS:ffff88812588f000(0000) knlGS:0000000000000000 [ 390.031460][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.031471][ C1] CR2: 00007f1389f4dff8 CR3: 000000007f8f6000 CR4: 00000000003526f0 [ 390.031488][ C1] Call Trace: [ 390.031494][ C1] [ 390.031504][ C1] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 390.031521][ C1] lock_acquire+0x120/0x360 [ 390.031539][ C1] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 390.031560][ C1] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 390.031576][ C1] ? __pfx_batadv_nc_fwd_flush+0x10/0x10 [ 390.031593][ C1] batadv_nc_process_nc_paths+0xdb/0x3a0 [ 390.031609][ C1] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 390.031626][ C1] ? batadv_nc_process_nc_paths+0xba/0x3a0 [ 390.031644][ C1] batadv_nc_worker+0x429/0x610 [ 390.031669][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 390.031692][ C1] process_scheduled_works+0xade/0x17b0 [ 390.031725][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 390.031754][ C1] worker_thread+0x8a0/0xda0 [ 390.031777][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 390.031808][ C1] ? __kthread_parkme+0x7b/0x200 [ 390.031835][ C1] kthread+0x711/0x8a0 [ 390.031851][ C1] ? __pfx_worker_thread+0x10/0x10 [ 390.031872][ C1] ? __pfx_kthread+0x10/0x10 [ 390.031887][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 390.031913][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.031928][ C1] ? __pfx_kthread+0x10/0x10 [ 390.031946][ C1] ret_from_fork+0x3f9/0x770 [ 390.031968][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 390.031990][ C1] ? __switch_to_asm+0x39/0x70 [ 390.032006][ C1] ? __switch_to_asm+0x33/0x70 [ 390.032020][ C1] ? __pfx_kthread+0x10/0x10 [ 390.032035][ C1] ret_from_fork_asm+0x1a/0x30 [ 390.032057][ C1] [ 390.329545][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 390.336438][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-next-20250711-syzkaller #0 PREEMPT(full) [ 390.347743][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 390.357794][ T31] Call Trace: [ 390.361081][ T31] [ 390.364026][ T31] dump_stack_lvl+0x99/0x250 [ 390.368621][ T31] ? __asan_memcpy+0x40/0x70 [ 390.373219][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.378425][ T31] ? __pfx__printk+0x10/0x10 [ 390.383028][ T31] vpanic+0x281/0x750 [ 390.387010][ T31] ? __pfx_vpanic+0x10/0x10 [ 390.391519][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 390.397091][ T31] ? preempt_schedule+0xae/0xc0 [ 390.401939][ T31] ? preempt_schedule_common+0x83/0xd0 [ 390.407409][ T31] panic+0xb9/0xc0 [ 390.411137][ T31] ? __pfx_panic+0x10/0x10 [ 390.415567][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 390.420943][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 390.427475][ T31] watchdog+0x102d/0x1030 [ 390.431813][ T31] ? watchdog+0x1de/0x1030 [ 390.436250][ T31] kthread+0x711/0x8a0 [ 390.440338][ T31] ? __pfx_watchdog+0x10/0x10 [ 390.445016][ T31] ? __pfx_kthread+0x10/0x10 [ 390.449606][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 390.454813][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.460003][ T31] ? __pfx_kthread+0x10/0x10 [ 390.464588][ T31] ret_from_fork+0x3f9/0x770 [ 390.469180][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 390.474322][ T31] ? __switch_to_asm+0x39/0x70 [ 390.479084][ T31] ? __switch_to_asm+0x33/0x70 [ 390.483843][ T31] ? __pfx_kthread+0x10/0x10 [ 390.488512][ T31] ret_from_fork_asm+0x1a/0x30 [ 390.493282][ T31] [ 390.496646][ T31] Kernel Offset: disabled [ 390.501019][ T31] Rebooting in 86400 seconds..