last executing test programs: 28m43.492239271s ago: executing program 32 (id=200): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fddbdf25010000000000000002410000000c0013", @ANYRESHEX=r0], 0x28}, 0x1, 0x0, 0x0, 0x4000802}, 0x4008000) r2 = syz_usb_connect(0x2, 0x4a, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0003020000000213"], 0x0, 0x0}, 0x0) mprotect(&(0x7f000064d000/0x2000)=nil, 0x2000, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000280)=0x27f, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @aes256, 0x16, '\x00', @b}) r5 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) ioctl$EVIOCGLED(r5, 0x80284504, &(0x7f0000000000)=""/56) setsockopt$inet6_tcp_int(r4, 0x6, 0x25, &(0x7f0000000000)=0xd07b627b, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fcdbdf250900000008000300", @ANYRES32=0x0, @ANYBLOB="05000800070000000c0006010300000000000000080001000100000005000800130000000500070013"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x44044) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000003, 0x12, r8, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4b44c1, 0x0) r10 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x121301) ioctl$USBDEVFS_FREE_STREAMS(r10, 0x80045519, &(0x7f0000001840)=ANY=[]) symlink(&(0x7f0000001180)='./file1\x00', &(0x7f0000000040)='./file0\x00') symlink(&(0x7f00000024c0)='./file0/file0\x00', &(0x7f0000002500)='./file1\x00') open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r9, 0x45809000) r11 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r11, &(0x7f0000000180)={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) 26m18.00162746s ago: executing program 33 (id=922): r0 = eventfd(0x3) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000680)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x3f3981, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0xffffffffffffffa2) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000840)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x1, 0x20, 0x9, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xfffffffffffffffd, 0x9, 0xfffffffb, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000380)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r6, 0x404c534a, &(0x7f0000000ac0)={0x0, 0x8, 0x9}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r8 = accept4(r2, 0x0, 0x0, 0x80000) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000080)=0x81, 0x4) sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/223, 0xdf}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0x1a}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, 0x0, 0x0, 0xffffffffffffff9c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) 24m45.005860025s ago: executing program 34 (id=1369): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x80) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCSETD(r1, 0x5414, &(0x7f0000000100)=0x18) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 20m42.92877365s ago: executing program 35 (id=2902): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x80800, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@afid}], [{@measure}, {@subj_type={'subj_type', 0x3d, '--$R/'}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, '{\':\'),&'}}, {@uid_gt={'uid>', r4}}, {@pcr={'pcr', 0x3d, 0x3c}}, {@permit_directio}, {@fowner_gt={'fowner>', r5}}]}}) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 20m33.610366302s ago: executing program 36 (id=2950): open(&(0x7f0000000140)='./cgroup\x00', 0x400000, 0x100) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r1, @ANYBLOB="0600000021a500000c003a80050004"], 0x2c}], 0x1}, 0x0) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x2a0000, 0x0) (async, rerun: 32) r2 = memfd_create(&(0x7f0000000040)='-\x00', 0x2) (rerun: 32) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) (async) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000001c0), 0x408000, 0x0) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001080)='/sys/power/sync_on_suspend', 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ppoll(&(0x7f0000000000)=[{r4, 0x24}, {r5, 0x80}], 0x2, 0x0, 0x0, 0x0) (async) r6 = syz_open_pts(r4, 0x556341) r7 = dup3(r6, r3, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xd) (async) write$UHID_INPUT(r7, &(0x7f0000002440)={0xa, {"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", 0xe24}}, 0xffffff5c) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) (rerun: 64) fsopen(&(0x7f0000000100)='sysfs\x00', 0x1) (async) quotactl_fd$Q_QUOTAON(r2, 0xffffffff80000200, r8, &(0x7f0000000180)='./cgroup\x00') 20m22.159044573s ago: executing program 2 (id=3038): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000001bbbbbbbbbbbb00000600000086dd67f8463b00280000fe80000000000000000000faffffff1ffc020000000000000000000000000001000400"], 0x62) 20m21.605539729s ago: executing program 2 (id=3044): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040b827ed0100000000000109022400010000000009040000010300000009210000200122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000b00)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "efb9ce47"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000180)={0x0, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f00000000c0)={0x20, 0x23, 0x76, {0x76, 0x2, "69f431588ed80ce7d07ea397b87a2f4f3c6851927d1c43406f4c638f8e762fe362e516f443ecf04069968d6227fbf8bdd1b8fb66d0630297e790d78c8e24a6b7f82398d53f75aaf8d4b27ddfcb7a6c2d28fe42bb83f1e5e7bc99216ed7557e7537def70302597956f85ff8408e869864cb7a11ed"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, &(0x7f0000000140), &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x67, 0x1, {0x22, 0x4d7}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x20, 0x0, 0x27, "62a3fe15586ffe10aff053cbf9d72b4b5307f80cd27fb03fdf70e84fa2c0972a12f9d54f8387c6"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2c}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000400)={0x20, 0x1, 0xa, "718b808ee1e0e1ec1144"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x7f}}) 20m19.352391243s ago: executing program 2 (id=3054): r0 = fspick(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) (async) creat(&(0x7f0000000140)='./file0\x00', 0x71) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) ioctl$VIDIOC_ENUMSTD(r2, 0xc0485619, &(0x7f0000000240)={0x0, 0x0, "6386fa66717e0aff1de532af2cb403d7bbd04558880256a3"}) (async, rerun: 64) setsockopt$inet_mreqn(r1, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) (rerun: 64) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) (async, rerun: 32) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) (async, rerun: 32) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) (async) r4 = memfd_create(&(0x7f0000000b40)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x84\xcdN\xf7\xf6\b~\xed_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xadNaC\xa6\xf9\xa7>c\x84\xd8\xfa\xf1\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8g8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xd8\x12\x8cXc5%\x03\x8d`\xdayC\x9b\x9a\xd9c\xe9\xb4\v\x99\x87\xe4\x00\x8a\x8eS\x8e\f\x05ZH\xa2\x0e\xbc\x9c\x95\b2Cf6\x9a\xe7\xb9\x86\xbe\xd0\xda\x91\xc1sl\x11PA\x93\xa5\x93\xc8\xf1w\x7fp6z\xbf\xe8[\'u\xb8\xd2$K\x12\rt\x87\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00r\xe2`\xdf\xd2\xb3\xaf\xe9\xc4!Z\xb4&\xa2\x12\xe2i\x91kC$A\xafR\xb3\xff\x1d=Z\x0e\xde\x99\xec\x10\xb4+\x13\'\x92>\x14\x00\a\xb6R\x8b\xdcz\xc3\xd1Y\xd6\xd9;s \xb0\x938\xb7D9\xdcN\xbd\xdbn\xe35\xa7\x02\x9c\xc1\xd9\x13?\xc9\xd7\xab\x9c\xf3\x82\xd1\xee^kk\xce\xdbn\x02\x1f\x80\t\xdbr\xa9\xcc\xf1\xcb\x9f@\x8c\xfc\x02W/p\x97\xb0\xbd\x8f\xdb|n2a\xee\x95u\x83\xca\x8a>}\xd3\xd0\xff6.pa\x17\xe3e\xd2\x7f\xf6\xbc\x9d\x112\x1b\x14p\xa1\xd6u\xefn\xb4\xa3\x05D\x8c\xc5l\xcc\b\xeb\xf42\xe9\xf15\xf3\xf2\xee\xd6\xed\t\xb3\xf7\x1a\x7f\xe6\xb4z\x19\xe1\xb4w\xf7\xa6\xd7\\\xfa\x96\xe2\xf9\xb1\x81\xba\xdfg\xadI\x1c\xde*_\xd5\xdf\xeeA\xcd \x91\xc9\xd4\xd1\xcd*.t\x80]\xd5~\xfb\xfb>\x9d\x91Kq]N\x87\x0f\x04L\xd4(\xf2G \xfdr~:\xc4\xc3\xfe\x14G\xadG~^l\xe0:(Y`\x0e\x90\xfa\x1c\xb6\f6\x92B\x92\xd3\xa9BG\xd2*AB\x1e\x01\xf0m+\x02\x87\x81aj;\xb6y.g\xeb\xc4\x0f\xd3\x85\xa5\x00\xa1\xa6iP\x0f\x02\x14\x90q\x94\xab\xb3\x0f\x01=\x06\x98\xa8\x87\xd9=\xce\xbef<\x1d\v\xba[\xd8]\x9e\xf30\xb8\xf1\b\x06M\x18w\xdc\x0e\x98?\x04G\xf9\x99\xab\xc1\xc0z\xe9Fu\x03\x9aj\xc0]\xb47\xd5\xb8]\x98y@\x8c\x8fM\x8c],\x1b\x03\xaa\'gv\xeb\xbf\xa8d\"\x94e3Q\xfci\xdf\xad\x819\xd1\xf3\xaa\xc8i\xf2\x8a\xc4CU3\x87Ns\x9f\x9f\xcd\x05\x06g\x9aRBg\x98\x10Ch\x1c\x96\xd3\xce', 0x7) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0x10012, r4, 0x0) read(r4, &(0x7f0000000000)=""/269, 0xfffffdef) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='ocfs2\x00', 0x12400a0, 0x0) chroot(&(0x7f0000000080)='./file0\x00') (async) membarrier(0x40, 0x0) 20m18.788346967s ago: executing program 2 (id=3056): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000001bbbbbbbbbbbb00000600000086dd67f8463b00280000fe80000000000000000000faffffff1ffc02000000000000000000000000000100040031"], 0x62) 20m17.900065032s ago: executing program 2 (id=3059): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000aab000/0x1000)=nil, 0x1000, 0x3000005, 0x5e839b2fddce603b, r0, 0xf648e000) r1 = syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r2, 0x400454e2, &(0x7f0000000440)=0x1) madvise(&(0x7f0000656000/0x3000)=nil, 0x3000, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet_sctp(r6, &(0x7f00000067c0)=[{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000440)="888d", 0x2}], 0x1, 0x0, 0x0, 0x90}], 0x1, 0x4004010) r7 = socket$unix(0x1, 0x2, 0x0) r8 = dup2(r7, r4) close_range(r8, 0xffffffffffffffff, 0x0) 20m16.551389923s ago: executing program 2 (id=3064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3314) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000010001c0"]) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000001bbbbbbbbbbbb00000600000086dd67f8463b00280000fe80000000000000000000faffffff1ffc020000000000000000000000000001000400c2"], 0x62) r6 = syz_open_dev$I2C(&(0x7f0000000100), 0x8000, 0x80) ioctl$I2C_PEC(r6, 0x708, 0x131) 20m1.502290146s ago: executing program 37 (id=3064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3314) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000010001c0"]) write$tun(r0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a000001bbbbbbbbbbbb00000600000086dd67f8463b00280000fe80000000000000000000faffffff1ffc020000000000000000000000000001000400c2"], 0x62) r6 = syz_open_dev$I2C(&(0x7f0000000100), 0x8000, 0x80) ioctl$I2C_PEC(r6, 0x708, 0x131) 16m52.87209171s ago: executing program 9 (id=4212): r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000200), &(0x7f0000000280)=0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000ae1000/0x2000)=nil, 0x2000, 0x3000001, 0x1010, r1, 0xf648e000) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) madvise(&(0x7f00005b2000/0x1000)=nil, 0x1000, 0x14) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f00000c1000/0x3000)=nil, 0x3000, 0xe) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$tipc(0x1e, 0x5, 0x0) (async) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000200), &(0x7f0000000280)=0x4) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000ae1000/0x2000)=nil, 0x2000, 0x3000001, 0x1010, r1, 0xf648e000) (async) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) (async) madvise(&(0x7f00005b2000/0x1000)=nil, 0x1000, 0x14) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f00000c1000/0x3000)=nil, 0x3000, 0xe) (async) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) 16m52.408241733s ago: executing program 9 (id=4215): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0xfb7f, 0x0, 0x2, 0x2000, &(0x7f000000b000/0x2000)=nil}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, 0x0, 0x50) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0xffffff8b}], 0x2}, 0x0) bind$inet6(r5, &(0x7f0000002140)={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7}, 0x1c) sendmmsg$sock(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000700)=@vsock={0x28, 0x20, 0x0, @my=0x0}, 0x80, 0x0}}], 0x1, 0x48094) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000202, r7, &(0x7f0000000080)='./cgroup\x00') 16m52.153793147s ago: executing program 9 (id=4218): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000) r1 = syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x0) ioctl$VIDIOC_G_FBUF(r1, 0x8030560a, &(0x7f0000000080)={0x8, 0x20, &(0x7f0000000000)="8404228b3b0c98a56f005d2fd13727801395d47df8865dbcad0e88c555410270071cca725dd427b238d38fd414750aa265d991a99e69c58dfa56e17867e0ec8ca3d56b248666eeb79b888bf30fcb041dcb3a196a05f17f0e7597c65b7c4f825d7eeaef824d16f370b5968136d5e8a6c4b5c1f03c", {0x1, 0x5, 0x30314742, 0x9, 0x0, 0x8000, 0x6}}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 16m51.109970672s ago: executing program 9 (id=4223): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_CLEAR_DIRTY_LOG(r2, 0xc018aec0, &(0x7f0000000040)={0x1, 0x7, 0x89, &(0x7f0000000340)=[0x5, 0x0, 0xa, 0x4, 0xe6b4, 0x0, 0xfffffffffffffffc, 0x4, 0x8, 0x2, 0x2, 0x400000000008, 0x3, 0x10000000002, 0xffffffffffff8001, 0x5, 0x7fffffff, 0x7, 0x3, 0x9883, 0x5, 0x106, 0x8, 0x2, 0x7, 0x5, 0x1, 0x1fd, 0x5, 0x6, 0x1, 0x5, 0x5, 0x2, 0x101, 0x40, 0xfffffffffffffff8, 0x4, 0x9, 0x81, 0x0, 0x6, 0xc00, 0x2e2, 0x101, 0x6, 0x3, 0x8, 0xf7, 0x400, 0x2, 0x9, 0x7fff, 0xec, 0x1, 0x8, 0x94f, 0x5, 0x7fffffffffffffff, 0x0, 0xffffffffffffffff, 0xa, 0x12, 0xa, 0x5, 0xa8, 0x1, 0x7, 0x7fffffffffffffff, 0xc9, 0x7, 0xe54, 0xae8e, 0x1e30fa4c, 0x8, 0xfffffffffffffffd, 0x4, 0x9f, 0x10003, 0x7, 0xfffffffffffffad7, 0x4, 0x10000, 0x3, 0xd, 0x4, 0x1, 0x100, 0x7, 0xe, 0x3, 0x400000403, 0x5, 0x21, 0xfffffffffffffbff, 0xfffffffffffffffe, 0x401, 0x8, 0x6, 0x2, 0x79, 0x2000000000b, 0x10000, 0xe, 0x2, 0x48, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x2, 0x9, 0x4, 0xfffc, 0x1, 0x8, 0xd, 0x4, 0x22, 0x6, 0x80000000, 0x401, 0xfffe, 0x300, 0x80000000007, 0xea8, 0x1]}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB=')']) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x3b, 0x0, 0x100000001}]}) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 16m50.57089068s ago: executing program 9 (id=4228): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@getsadinfo={0x14, 0x23, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8051}, 0x200040c0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x18d1, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0xc, 0x0, 0x1000, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0xfffffffffffffe3e, 0x3) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)) ptrace$cont(0x9, r4, 0x10000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, 0x0) read$FUSE(r3, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x29, 0x0, 0xffffffff80842840, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x150, 0x0, 0xa1, [{{0xa, 0xffffffffffffffff, 0x3, 0x1, 0xe, 0x5, {0x80000000000002, 0x9, 0x20000000000000cf, 0x1, 0x80000001, 0x10008, 0x6629, 0x6, 0x8, 0x8000, 0x7c, r8, r9, 0xc3, 0x1}}, {0x0, 0x7, 0x1, 0x6e4bd64b, '\x00'}}, {{0x6, 0x2, 0x3, 0x7, 0x6b4, 0xa, {0x8000000, 0x6, 0x5, 0x5, 0x2000005, 0x0, 0x6e, 0x30, 0x3, 0x1000, 0x10000, r8, 0xee01, 0xd0, 0x400}}, {0x6, 0x80000000, 0x1, 0x8, '\x00'}}]}, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000140), &(0x7f00000001c0)=0x0, &(0x7f0000000200)) mount$bpf(0x0, &(0x7f00000000c0)='./file1/file0\x00', &(0x7f00000004c0), 0x2000000, &(0x7f0000000500)={[{@uid={'uid', 0x3d, r5}}, {@mode={'mode', 0x3d, 0x8}}, {@uid={'uid', 0x3d, r8}}, {@gid={'gid', 0x3d, r10}}], [{@smackfsroot}, {@flag='rw'}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfshat={'smackfshat', 0x3d, '&[('}}, {@dont_appraise}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/rnullb0\x00'}}]}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)={0x24, 0x3e, 0x100, 0xfffffffe, 0xfffffffc, {0x1, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000c000}, 0x8c010) syz_usb_control_io$hid(r1, 0x0, 0x0) writev(r6, &(0x7f00000008c0)=[{&(0x7f0000000440)="fa3e659ad0f3d61d5d2e25c77761d0b04b79385f07c0ae181a7d5dbabafca489d603af34270abde49f6180f5f0eb1ab1528553735d3b0619eac2c25bcde8d8871159d8da25116cf909e0ef2d4686962f11b0f90f8e0bb2252be30cc8297841d4c5378ee70525", 0x66}, {&(0x7f00000005c0)="dd024ef4a12321d68a31b9fa0fb445495fc2a2f26ff6d70635e491331254dd23a1fcc562b8ca555abdeb73746fe625f09972130c82f54952b3f2345cd819d5a10af38387dd6f9ce9f3b0becb4ad6d2b97afed38de2d4c8cb9bc132c976796aa24f5491e8bcc65010c635e9e05039fb6de4b25523abe9a6d0808e799c1944133bce8791aa5d7862", 0x87}, {&(0x7f00000003c0)="e8dc74", 0x3}, {&(0x7f0000000680)="63c0640a7c4b06b1be999a5cb8c884de2d276f9aa143666a7dc7be369744f816f5f517ee8f76346dda45b628", 0x2c}, {&(0x7f00000006c0)="ddfdaa00e8a2def8efe13847c78ed0b34213b9e1a84490204d8ab8c2b9d21ba265ba64cd8ee2d10baf1b6d7c86bc0db464db5b1c90b067be21f7bb4fe48a7ee50241d26a220a64d7a672743310679b1559a4669b03f80cefe87bef37febb6cea09815e3a22d069168e872f30801bc8e9e5c42b4701e01db48ecbb35219377a69a0ecfba2d43dedc3be442bd8d905032f6f60c550d677430a81103e9fb74f41fbdea10c09961c1177f23266435df0d5e23f00a0ccff8e891806790c1fb6c25e25ad73829a25f3673e28d1020258c0b5e84191454df95239abb04cf5a3988eae854b8acfd9938e6d37603e1907f1dd16", 0xef}, {&(0x7f00000007c0)="5b0943bffb7b0fcfa2459f9a04a77183da6926c0db2635787a6d27670871de5e3bea0ee978d28cc48e9dbea66c54b60d45ba870d24f2896e54955ac1e85290bf42dfbfae48cb4915b63d705cda6be289a3d27e6160b2385a57c20f92a3", 0x5d}, {&(0x7f0000000840)="fc8d66c6943bda55a69b3dce4c3a77da9a57861da95e743bef4c7205d457accbdc2b23fb587b6f66625441ec14d1cad5f172cd98102f6588db425dcb5da64cadb5241b1511b2fb4d2b30fe8a4c8a0d71aeb9f1f9991a95b2ca39ae6c958b5b", 0x5f}, {&(0x7f00000031c0)="788cf317acd7c49955b2cef9833bc50385c9e3e3d6f1ed808e9de84fbf1f868f1d1b3db9f21a065fdb729556f33415cc2b69ef239f610bc0ee6f6068004a5d5cbc685738d32170e27d6b47b99412ee43c6090f0b4144b98396d995728c24d8fd151067aba6c3f216866c7b443f66f0e547864b3ddd90ac6b12443899b877715036d314d5b12208b04e2345c680b72fdd800315b34911d3ecd4b554f060d8a09162f595ce8d7d10808b6b8180960d60e42f45bf831c139d6e290e828e4e30bc429b173ef6e92dfda81f8ea73a1210996a0ef4060897dce3e9114ea178ad25f282223456322720d7bfccdcb15fe81f18d72f7fecb8256f803c98999fa62f740db2b1fde9819684e9c9f41b569e0cb9db65cfe2a3829fdc0744b41d9cb4bdaf82c7e3a37e72ae8a4306b80906893bbac25bcc0adffbfe1df3df65dea205b7b884eb446e737033de00c310306a3f090c53f479cedf496b3964ced2534d86ba34deeed14f2215854e646f46f4fe43e50fbffef17c4f8f7da9c64bd63c55bcd584b3e9388032fc8ad23345f9c1c98323885105dfa30b7414ca29fa8d64680424dbc1739c7c7e2483ec577386d95dc6733a41c7523d1bcb4607eb38e793dd60ded1f86fcea7174b47abb15b149662389b93ea434fc009c7653ec2586907e038f954f0591957c0501e4d195446ecb9830250f870e383e78f8c7fe3e751707514bfe4ac7e9ec3bbc70dcc0abd0ae4d31780c9cb93d05b5c5dbd85d15ccec873036ae9e4ff60285e12e802314930c9ef6689af21505ff4d2e3fa8acca1d215b05337f0dfdd70debdda48294ef16ab269af76657176e5de890823fe17af30a5bbc6df4d0bcc816de58c202fd2ba81a04cd0c2803764b8b432f90672cff30c2f43be626c9edc192e3641aa8309a2bd6c9348f1ea51df5327a4d25d969322b45a2ac9cd80e40d6d36dcde9585ada765d51efd16131e877dac88c0693c6fed4c1c4be9eb4c3857d8b9e8c28f391e72a462d81cc6ceb73ff51ae4f4dbf416c3a04d2f1bb00de421166396bbea6eef107bafce61f02932715c2f0b0a62f13aee099add1a5ca3e25a667951740d9cff6e53d3f00b2220c9dbc35d47d8daab3a34cb8c7321473c0b67ab0e52458abb2df0ea760285140354f3f36730f6efcceb4398d2429d8b7c324484b626fa04d249987d837599724fc70e5d5d96e34ac965e68a0958982383182374ce5f1f8d0dc70bca8644c87fbbb3dbae24ef8568287387d81d54098044471b073726e1834a7888fc13b87e7925c76ae6f929345f9d636e805f714a0076d6964dc698d8b05e59a3521f9934d621745edb4c7f4717f9547ffab35cd931f502efd79fc10d0ecdacb6e14b5f31f8aa4a29d32748666c5684f5aef91faea17ab8f0c028166ec60f39108569d152a30112c4c422d7ab8514687d75e4b3f23cb29cceeedb548ef6b965c1c8666151549e6a34978245987cf8d4e6023033cfdd1a8f9882dba88e838b064fca2ec50eb531805a27b4d6b7834d1397f8cbaffcda045d6d4ab4b74e430920312f525544ed83ed16c76c45b279e7ba9b09f398357e1fcd65d21924a3af558670ca5e21d962ee17e87ed02b1da45e6995d43d8aafb164ba14030d37d8879a71a450c783deb9a194a60fd91b216b4fec4a9dad67ef6e58033749a4d3725dad8ecd21ea0fe8b072ecbb74d7cfbbd6c70d89490ee57981e2edf5cbc1d9a077e9b4d52046841e596959baa40999c87fdec0b8e5250ac29d978664570a68f3e975f8416141421099f3590c1764fa74055a32ed6aaf339fd3880e7ffaa1006c3032bbce5294e1ca055a3a197a769bbdca66a6b2dd14504c9d8df542ee8044d4d19b6a7949da4dfa9d945a85b367cf84839a4fa69cfa49751b9a5397bdbe6fc025725d8f46c62c9f260d76b99d55be19407ef82acc0c6cb2e8d0dd538f19e0524f78560d6ef9feba5548fb91c219f1fe4fe98952fd3d8068166d56c2f6d115b6d8d24f540cd7c39eb30557ad7b340326a572dd0a7693640f5aebe6195d36d41ff3b4e869ce1346da3f36676095df871d3bc39419d77983326bc8966089d4f65cc89dd3d7108ed6653435bd9b1abb4641c8ea718cf375500463a08460f2caeb1c12f866bdcc9da383e864016d5e813ec8904de479a1d38c43866f8aa7d2b03daad25efe840d04e30ac048e6eacc7ae9176685b2b581ae6d13c0074911b93c83aa8b761c87fe3d4549f6e8b6c96a37e6b12b569019736888ef7556851aadcad69694bcaad4106d4cec772d5e18b99569f5d58eefd373fab86852c3db6494f1e3b5d2a63fc1912d5dc150520575d5d4b15d4b245f593da2c8dbd5e5e07e6d6ba8748a55385381c24c369a96c87e77cd889803ec69471fbbd49da31073a16232824730c6a40c5cccd752934801ae85a2e84d07ae4ff15d6648c5f90c9c3979b9833672c1345f78f852e52183b01530b5f19bbb3233a8159a3d87c9ee49c0a95193cedb3a8ec254775409a6f847943a0dec566cfe43046b338d12dceb9c4b1131f39c761f1b0564b0bb3cb5732bff7fa26c1372dfe84893f27d65ecad3db1aba51a60011b5ad3fc05cdc77c1ac2ed1b530403884c2f02ad0800e3e07d4d0ed3d32ad0262398f25ab57921e3cf629d7fa83edbf1c6aa1584440c207485ad59b9b9019a28905d426755c4bec28cdd56db30aeae1b79581dd5e27afb4e4595f3f61aa983f8b59da8348a9c66702f6a94e53df02b0fd9fcd44eca3868d1ed2d853ce78eae0b617baf0d4b5bfaaa19c910f7204cc3c528f07019c87ebf23709b90c766f538c65ebbbeeb5b219d0df49e5f536bb8d220fc14319df86168537745a7e6466cca6d0a864080d839f08d209cc4f5ac773840b8440555b986aff48c11a5cb0f2de00b55681117b20dcc49434c312a984f2e5f0a38f37fe7e327044bd4b4d376fe35b146b7f8d66958b19aa949576cf1e7e34b73a74d484c0a3068017bb4b8066f17fcef09fc9f518be847e2eaab8f119bba1e0b9d39c5e7f800916d77354dbc53113aef4bb719684ecc685b7079d4a3d1681fda46dff0d56884c50c9e96935eda3a253801565a1b2b71e4040f002addcbd4da88cf1011bc7912bdf54a185ebcd484e7baae0c429ab7b0963005e71aa6dc633dfa35efa9c6b4adbd867e5e02dbd51f6904e9829e778ace1228e6716579c3405c25b7f960b337f683ee720ccafbdf4327585095f4e92ffbff1bf6bc756ede70b6d751a5fb5476dc0101c2fef777f3a7fee5c5a0d12d0c19f7f63a9747b35c358e5b46c5785f7706d9e57dc6ebadcfc2f09469b0ebd2cd05abb561046ac511b967e5eecc9314f121a0e36af2a900bfc21eda35fcc49d56b028b096b5c2a45ddc153ff3752f2d6367d4e42dfbdd82ad11d9391101ea8123ae73bc6cf6d7b9d0c5f12237deaa96cd3b79a60c1b1eee04d3837aae42e4be9ce59e88f9b9e998626386553aae5e5bfe0bee3212e2d354adf2f8727a29c68bde5ce22092c9c09c97c54b91cf32514ebb2c354389bfa11c4104f49a3c9d456e84773a9add598eb189f198c221bf641972d814a81bdc8b0efdbcf6f9ceeb83fd1aa825ed825849bb26ef1c242d9e602d5200e92ca132a4031dead232865ff1564f21f6cb12b91f433bb9d0ef55de694fed2f8a928701fd3cec23934a19322199fd84fb7844d031a47fefbf04c506a94d3b217df05d474ad7907fc4ee256ea5cc057f413ca85f9e2039007b62df8bb54b4c4b3c3a5561c4f08568317e510b273dfaadab201657942db00d1c122c90e9cda928fa4771406cd6ee810ba81a0e48024868e5c2fe790d05d250462bc8f78feeee05e6193db2bf59af5e529051daffea4446edd9dea2f46e0fccfd95ac4010be8c70ca5956e08613add1b49649e99ba01b2387a5bc5d63728561df3a792d73adf24983d83171b868ebaf2999187cdb908a57dd24a846b956e3d745c50ae0a8fd0fd89d6f05e0141d400ea9ca316f3918dde830ee14bcd980675ae407213025a6040da874291494f462a5bdba72f455f41e00577103ec7bc17d48494b437ae6588f81736e840fcc11e7a7480f9abaf0d9483a3c73add2b629474656169421c31ba80680033b9fd792c838e54103b0b8c265434177d19d15212514c47843c96b9f44d49229e6020464efa1a185c31862b7d254de5b4cdc067e905667fa75ad223923e84b4fb5a77acdc8f02a7c278d94e59f17b57dcfff571c36c49e460581086252182b1ad4bb24a280e9060f9797c2346c002c374f2e9956d99ef3ec75f48068db94c994c1db4c674608db8d7c5eeb0f9291d17c911b091acc7105644777d8d99b7989f0067c9b6748db4ac0eed06c875af1f83039c57dabe28ba079fd82bef444132bbaaeb5d91a855bf521a4669fa91d3ea885ceb7c51ee6fa67df79d70dc8cc33a9734d8ffb787e73421837c7770000b56ef5c6cdcaf30004cb75adfae742d93167dea551d6d3131978dd758677123c9fd192bd5ae3134b99273b1f6d00a5f1efd6c878ceda0144b95eddaa646369243f4cd6fa18a78454aea6678c6d659ed84f453ba297b396fd54448c691a7a27b86525f4af54c8b3cd44530907ddd8e031db510ade94f0dc856742f0522dbe020ffd39417169e8d5af9dfb32a080646b5c67479d77bc0488d7e4470efabdf6c8d1c057c80ecee11fb78d33a4840b4dda1479ab0f2e5075b8791f02563e46621c2089526892fbeaaa334670f700ff8ff8f7244b4e10bfd92b7d9722e9629922d918ccb9e81711285e7b65956e4e171492f3a016d9f78620b0cd0f93805c54679720aa5752ba07e5de50c3384df8dfc487d89e2573d5daea0a01aacffde5e712c42a0a207b9a7ed23d2ef8209a0e9b2c7c1fe413fba6514f46b809539a2f75611fa64960dab5f490574a8e05a15890bcf3ea97add1e6c6298e2c9cbe40227c46aed815c2f20d59c1fadc536bd8ad2c36222d3969609386e691ebb38556babf9f3d24735222a7f3b516f049df86b9bdcc03d6a227204376ced8765122bf4b033737c03ac294797d3a95de3fdfbcbc1cf71ab11c100c6f889baa0fe2095b3118f1ecf2caf67a0e866dab7d176508d846a9b4354ba32723b69d6b943956078ec234fcf8245c9b7caa15b2c9708397dee201fe6de2617ac464796e6657f311cd3a27a723c51da7f500a1ed22d273dbf8342e0210a99a5ece556f2eba9a83271e65671f79d1ce5e395386cd96a223cd7fa3db57d855c4cf30749958982319c501ad454abac76ae1b26c6f354020e9cc713c3d2d534fbcae69b16c0eca8ca63c68cf90bda8588c749eb0ba2a93f8126c3b09bf20e03ff36844e32cd5135531e05e253e73c1ffcc26bb7799322a13eea5c3bb65902dfa3ccbf181f5facf4f2789ea1d27f04223792138eafb22871db9af2db0a110860576642c2d1438ea23cb48d73644b080d611bf60373b69ef63ec113909f922c843d4d40fff62f213c007b8359749b9b26e8d15900c8c4c088f6cf688f32e916340c1d3578133ed97117e7e55d4abd2bfc5aa6f49a58331fb9afc771d1a153c20ced44cf86bb91a0c2429b2215a514f8b62112d59b900a3752a928427ad5e5e43c41fdf1e137e0364b88c8566a27cf324913edce058d215bd2d9268dc153f38ead0a16168d31c3d45d4a04521d9d35dd8aba176b64f8fbdd103d99f1c2d57695bcecc624e89bbbbd462f5f8534ecee92a00ba8ee717215bce34ef3f7c8aa15d58d5fa73770abd523c7dad1e1a24db0bd98dd5f1c081d83f88d4f07f19a7101187f0f45fe861", 0x1000}], 0x8) 16m47.420521584s ago: executing program 9 (id=4243): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)={0x24, r2, 0xf, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r4, &(0x7f0000000180)={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}]}, 0x68}}, 0x4008001) 16m32.333425809s ago: executing program 38 (id=4243): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000000)={0x24, r2, 0xf, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r4, &(0x7f0000000180)={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, r2, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x2}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x7}]}, 0x68}}, 0x4008001) 15m18.241743616s ago: executing program 1 (id=4679): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/igmp\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x129003, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bff000/0x400000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r5, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) r6 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000003c0)={0x0, &(0x7f0000000040)=[@cpuid={0x2, 0x18, {0xba000000, 0x645}}], 0x18}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000030000005a5ecb015aa2000000090000cd00000000"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/163, 0xa3}, {&(0x7f0000000240)=""/71, 0x47}], 0x2, 0x1, 0xe3d0) creat(&(0x7f0000000080)='./file0\x00', 0x1) mknod(&(0x7f00000000c0)='./file0\x00', 0x8, 0x200) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x8001, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}]}]}, 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000010000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c"], 0x184}}, 0x0) 15m17.8581303s ago: executing program 1 (id=4682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) (async) r1 = socket$kcm(0x29, 0x0, 0x0) (async) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x20, 0x0, 0x1, 'B'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000000c0), 0x4) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:\x88\xfe\xf7\x01') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) (async, rerun: 32) r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) (rerun: 32) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)) (async) mount(&(0x7f0000000300), 0x0, 0x0, 0x2200890, 0x0) (async, rerun: 32) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 32) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_control_io$uac1(r2, &(0x7f0000002280)={0x14, &(0x7f00000001c0)={0x0, 0xa, 0x1d, {0x1d, 0x11, "d73965e64ed8ea2b1a7a3b6c8721fc2611e1ce797b6ba2060207ed"}}, &(0x7f0000002240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x412}}}, &(0x7f00000024c0)={0x44, &(0x7f00000022c0)={0x20, 0x13, 0x10, "6cf3ffe0c39d1230313e8e3a377bf383"}, &(0x7f0000002300)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000002340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000002380)={0x20, 0x81, 0x1, "d2"}, &(0x7f00000023c0)={0x20, 0x82, 0x2, "6717"}, &(0x7f0000002400)={0x20, 0x83, 0x3, "3ecd27"}, &(0x7f0000002440)={0x20, 0x84, 0x2, "82f6"}, &(0x7f0000002480)={0x20, 0x85, 0x3, "44b4bd"}}) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) dup(r4) (async, rerun: 32) setsockopt$inet6_tcp_int(r7, 0x6, 0x18, &(0x7f0000000040)=0x9, 0x4) (rerun: 32) getsockopt$inet6_tcp_int(r7, 0x6, 0x18, 0x0, &(0x7f00000000c0)) getsockopt$llc_int(r4, 0x10c, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 15m16.615726339s ago: executing program 1 (id=4688): creat(&(0x7f0000001380)='./file0\x00', 0x0) (async) r0 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 15m16.342712453s ago: executing program 1 (id=4690): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x135c02, 0x0) 15m16.089823124s ago: executing program 1 (id=4691): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x642000, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1930bd, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) lsetxattr$trusted_overlay_redirect(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x8, 0x2) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_access\x00', 0x0, 0x9, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x810, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) ptrace$cont(0x9, r0, 0x10000, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000580)=""/149, 0x95, 0x40000020, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000000)=0xc) chdir(&(0x7f0000000080)='./file1\x00') chdir(&(0x7f0000000200)='./file1\x00') openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = syz_clone(0x8050a000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00'/10, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffffd}}, 0x28) setpgid(r4, 0x0) 15m15.498497513s ago: executing program 1 (id=4695): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000000000000850000000000000065f30f0948b8a2992d438e9d"], 0x85}) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000680)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x40, r4, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x10000010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}}, 0x84) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r7) sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r8, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) capset(&(0x7f0000000080)={0x20071026}, 0x0) 14m59.940584985s ago: executing program 39 (id=4695): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0100000000000000850000000000000065f30f0948b8a2992d438e9d"], 0x85}) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000680)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x40, r4, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x10000010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010102}}}, 0x84) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r7) sendmsg$IEEE802154_LIST_PHY(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r8, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) capset(&(0x7f0000000080)={0x20071026}, 0x0) 7m14.807219114s ago: executing program 8 (id=7273): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6a83, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4142, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0x400) 7m14.736848402s ago: executing program 8 (id=7274): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) 7m14.648245661s ago: executing program 8 (id=7276): rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3df5, 0xffffffffffffffff, &(0x7f0000000080)="753b7a556f37bef3ce7a1d7bf1042dafc22e7306337d8f188e78adf9f770a70d68e8", 0x22, 0x0, 0x0, 0x1}]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000000)=@x86={0x9, 0x5a, 0x1, 0x0, 0x7f, 0x3, 0x40, 0x5, 0x7e, 0x3, 0x5, 0xfe, 0x0, 0x0, 0x1ff, 0xc, 0x1b, 0x4, 0x6, '\x00', 0x8, 0x406}) 7m14.172316104s ago: executing program 8 (id=7278): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000380), 0x0, 0x2) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) listen(r1, 0x6) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 7m13.812381656s ago: executing program 8 (id=7279): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="5c020000", @ANYRES16, @ANYBLOB="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"], 0x25c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) socket$xdp(0x2c, 0x3, 0x0) 7m9.520663963s ago: executing program 8 (id=7292): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 6m53.686378506s ago: executing program 40 (id=7292): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x5, @none, 0x0, 0x2}, 0xe) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4m50.764054765s ago: executing program 7 (id=8041): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/igmp\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x129003, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000bff000/0x400000)=nil) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r5, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) r6 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000003c0)={0x0, &(0x7f0000000040)=[@cpuid={0x2, 0x18, {0xba000000, 0x645}}], 0x18}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000400)=ANY=[@ANYBLOB="01000000030000005a5ecb015aa2000000090000cd00000000"]) ioctl$KVM_RUN(r6, 0xae80, 0x0) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/163, 0xa3}, {&(0x7f0000000240)=""/71, 0x47}], 0x2, 0x1, 0xe3d0) creat(&(0x7f0000000080)='./file0\x00', 0x1) mknod(&(0x7f00000000c0)='./file0\x00', 0x8, 0x200) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x8001, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000}]}]}, 0xfc}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000007000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c01a8000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac1414bb000000000000000000000000fc02000000000000000000000000000064010102000000000000000000000000fe8000000000000000000000000000323c"], 0x184}}, 0x0) 4m50.537627884s ago: executing program 7 (id=8044): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000080009a60d000000", 0x24) (async) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x6e, 0x80800) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={r2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) 4m49.422856247s ago: executing program 7 (id=8049): creat(&(0x7f0000000040)='./file0\x00', 0x4) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000110007000000000000000000ff0200"/30], 0x104}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'team0\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 4m49.326828391s ago: executing program 7 (id=8050): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) cachestat(r0, &(0x7f0000000000)={0x10, 0x9}, 0x0, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x60440, 0x0) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000080)={'\x00', 0x4, 0xd94e, 0x0, 0xffff, 0x4000000000080}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000400000001c0"]) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r6, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o\b', 0x2}], 0x1}}], 0x1, 0x24008011) socket$nl_xfrm(0x10, 0x3, 0x6) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) cachestat(r0, &(0x7f0000000000)={0x10, 0x9}, 0x0, 0x20) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x60440, 0x0) (async) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000080)={'\x00', 0x4, 0xd94e, 0x0, 0xffff, 0x4000000000080}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000400000001c0"]) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) (async) sendmmsg$inet(r6, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o\b', 0x2}], 0x1}}], 0x1, 0x24008011) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) (async) 4m49.132293528s ago: executing program 7 (id=8051): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) acct(&(0x7f0000000580)='./file0\x00') socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0xfffffffd, 0x33}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2cbc22, 0x0) syz_usb_connect$uac1(0x2, 0xb2, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x3, 0x1, 0x56, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xbb}, [@feature_unit={0x11, 0x24, 0x6, 0x1, 0x4, 0x5, [0x7, 0xa, 0x8, 0x3, 0x2], 0x5}, @selector_unit={0x5, 0x24, 0x5, 0xe, 0xf}, @feature_unit={0xf, 0x24, 0x6, 0x2, 0x5, 0x4, [0x2, 0x2, 0xa, 0x9], 0x4}, @mixer_unit={0xa, 0x24, 0x4, 0x2, 0x1, "339cef1518"}, @feature_unit={0x9, 0x24, 0x6, 0x5, 0x2, 0x1, [0x6]}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x303, 0x5, 0x5, 0xf5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x93, 0x1, 0x9, {0x7, 0x25, 0x1, 0x0, 0x3, 0xf48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd, 0x2, 0x4, {0x7, 0x25, 0x1, 0x91e8570469aa5526, 0x8, 0x3}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r4, 0x2000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r5, 0x400c0930, 0x8) ioctl$USBDEVFS_GET_CAPABILITIES(r5, 0x8004551a, &(0x7f0000000000)) 4m48.94918056s ago: executing program 7 (id=8052): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x20004810) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xbc, 0x0, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}]}, @CTA_NAT_DST={0x68, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x100}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1, 0x1}}]}}, @CTA_LABELS={0x4}, @CTA_TUPLE_MASTER={0x4}, @CTA_MARK_MASK={0x8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) ioctl$TIOCL_SETSEL(r3, 0x541c, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 4m48.328370095s ago: executing program 41 (id=8052): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, 0x0, 0x20004810) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xbc, 0x0, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}]}, @CTA_NAT_DST={0x68, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x100}]}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0xc, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x1, 0x1}}]}}, @CTA_LABELS={0x4}, @CTA_TUPLE_MASTER={0x4}, @CTA_MARK_MASK={0x8}]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x800) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) ioctl$TIOCL_SETSEL(r3, 0x541c, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 3m21.734923038s ago: executing program 4 (id=8556): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') (async) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r1, 0x0, r1, &(0x7f0000000080)='./mnt\x00', 0x214) r2 = syz_open_dev$video4linux(&(0x7f0000000140), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58504"]) (async) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58504"]) listxattr(&(0x7f0000000100)='./cgroup\x00', 0x0, 0x0) (async) listxattr(&(0x7f0000000100)='./cgroup\x00', 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) (async) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) mkdir(&(0x7f0000000640)='./cgroup\x00', 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x149080, 0x0) (async) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x149080, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$SOUND_PCM_READ_CHANNELS(r7, 0x5008, 0x0) (async) ioctl$SOUND_PCM_READ_CHANNELS(r7, 0x5008, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) preadv(r6, &(0x7f0000002380)=[{&(0x7f0000000200)=""/113, 0x71}], 0x1, 0x6a, 0x0) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x301000) (async) r9 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x301000) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@initdev, @in6=@remote}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) (async) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8) quotactl_fd$Q_GETNEXTQUOTA(r9, 0x0, r10, &(0x7f00000005c0)) (async) quotactl_fd$Q_GETNEXTQUOTA(r9, 0x0, r10, &(0x7f00000005c0)) 3m21.514620729s ago: executing program 4 (id=8557): r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './cgroup\x00'}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'vxcan1\x00', &(0x7f0000000140)=@ethtool_eee={0x45, 0x2, 0xc, 0x879, 0x6, 0x81, 0xf73, 0x9, [0xfffffffe, 0xdcc3]}}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$binfmt_aout(r2, 0x0, 0x20) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x107001, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000800)=""/4096) 3m21.340293323s ago: executing program 4 (id=8558): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="93fb26bd7000fcdb9f2505"], 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000040) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x34, r3, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xffffffffffffffde}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4880) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x5c}, 0x1, 0x6c, 0x0, 0x4}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)=0x0) syz_open_procfs(r5, &(0x7f0000000300)='net/rt_acct\x00') r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe0000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="c4c1b5f919c4c2a1a8a80f000000f2d1b300005915c4e1a9c611000fc76ebd0f200ce0e0020000000f22e00f352701f9b90f0a00000f3235200000000f22d8c74424000e000000c7442402afe90000757544310600000f01ca0f011c24", 0x5d}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) ioctl$KVM_RUN(r7, 0xae80, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='minix\x00', 0xa00a4, 0x0) 3m21.088559689s ago: executing program 4 (id=8560): creat(&(0x7f0000000140)='./file0\x00', 0x71) (async) r0 = getuid() (async) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async) setuid(r0) (async) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 3m20.944403872s ago: executing program 4 (id=8562): creat(&(0x7f0000000040)='./file0\x00', 0x4) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000110007000000000000000000ff020000000000000000000000000001e0000002000033"], 0x104}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'team0\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r5 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = gettid() setpgid(r6, r6) setpgid(r6, r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) setpgid(0x0, r5) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3", 0xd}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) utimes(&(0x7f0000000000)='./file0\x00', 0x0) 3m20.76861853s ago: executing program 4 (id=8564): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x2000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x2000) (async) 3m5.637682984s ago: executing program 42 (id=8564): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x2000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x2000) (async) 9.326584294s ago: executing program 6 (id=9673): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x26, 0x80000, 0x5, &(0x7f0000000600)) fsopen(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) dup(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$IPC_INFO(r2, 0x3, 0x0) clock_gettime(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 8.474219488s ago: executing program 6 (id=9684): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x1000}], 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x8000, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f0000000000)={0x8000, 0x9c09, 0x7, 0x1000}) syz_usb_connect(0x0, 0x9ed, &(0x7f0000001180)={{0x12, 0x1, 0x300, 0x48, 0xae, 0xff, 0x8, 0x257a, 0x2603, 0xa455, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9db, 0x3, 0x5, 0xd, 0xe0, 0x6e, [{{0x9, 0x4, 0x6b, 0x20, 0xc, 0x27, 0x7, 0xdc, 0xc, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0x4}, [@selector_unit={0x7, 0x24, 0x5, 0x3, 0x0, "22f4"}, @selector_unit={0xa, 0x24, 0x5, 0x3, 0x9, "dfcf054344"}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0x81, 0x8f, "9943b2d24ba6"}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "ac71"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x9, 0xfff5, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0x2, 0x8, 0xc, 0x3, 0xa, 0xfd}, @country_functional={0x12, 0x24, 0x7, 0x3, 0xdaf7, [0x1000, 0xfff2, 0x2, 0x3, 0x1, 0x170f]}]}], [{{0x9, 0x5, 0xf, 0x0, 0x47862357f3114d53, 0x5, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x2, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x182, 0x3, 0x5f}, @generic={0x46, 0x6, "584fecbc9b93597e3f5532eef24b7064398dae97d12859fbea8aa61dd03b20bb5487b94328a897f61c15f72772606b497636d4cfbaa30222457949a1b7226d8613ba2958"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x4, 0x0, 0xa, [@generic={0xe0, 0x7, "84905af2e9e2c3b856fbd165906c84a6a3928d7df28bce6ab72eb7bdc4983ce7fdc2c87a5fa01f759be91f5f9b129fbb87f20720623b8cd7f9e656b85d64c30fd4a4bd4758f980d55d9545d65a9481f46466ff990fccaa20659960bb0eeccea8e0a5eab312b90d5bc793b7935686271af81fbfb029964ba41c2da13dd488ecf1bc62ed216701ee7c622588733e398e8d762c8704c95a7916f6611ce24ad7fb7a8979e13891a81d4eb5ff33a9f2499ac642851a93248b585f9cbd5c2df9f0f4491c7f3a4cf7cd5a92f8f7dd5d71915960583c287431663263bc4fd463ab84"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x200, 0x5, 0x8, 0xc}}, {{0x9, 0x5, 0xb, 0x10, 0xe770259532b2beab, 0x4, 0x9, 0x5}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0xe, 0x2, 0xd, [@generic={0x88, 0x22, "25c357610d2aa6bc8a78bbf7f429628f21ef078a3068edafdcd679ed2c8b0a12ba33e1141c1c238e9147cbccff5cdec011d07d375ec303cb38235303377acd993e388fe19670cd397ec2ecc8b1465a2b599408442c5caa5549a39be54b681b746ffa695ecc8bd885c6701a230c4570e977d78204a77b20994c113a1533410f68f926e51ba8e4"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0x9}]}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0xfe, 0x4, 0x7, [@generic={0xd5, 0x23, "915026e063ebeac3d142a184f810a35b698068e632e3262810ee0dd1d04ecbce1eb36b5f9f16466fad6573836d3774537d90cbe67cb6d0b7b6e1848c12f02df6b05b9755bb2ba0c7e763ad4be6a1198ef997ed68c9f31912c1e55f1c4e41529d18fdf86387eaf6c031723f37c863cfef43610e8b997180a0c2c7211ec5bd57cdc695eec88e42cf9aab018e009eb2a456f069835d982bf4362b552c86e24f033d1d5311b04d65a8ef6b7ff907ebf3decb3e7909b5d0c4f34e7f3cecc60a2aefb766d683d89390f07624003e36c44dcf409dd7fb"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0xa, 0xd, 0x6, [@generic={0xab, 0x1, "9da0969e1cb14bad37b7eb6e047a35701048c0474f5a895535848913c7bb171d9cfbbb063dc5142cd31b722c6e471ec71b256117aa49bc11a8a0d005a29cf79e9da7b63adfa049283bea235a70fffae8ee249e506951518cb1720431ce0f5670e240fbf63f2a7221c8e7633e2df4a4f3b76d125b8717818437f0eb3ea9a2dc613c5d98e4647bba9806f49f3b1ee8f38d777efdca628c4e2193a9b6f0a133d0cb169ac1152cdabea655"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x7, 0xc4, 0x7}}, {{0x9, 0x5, 0xf, 0x2, 0x400, 0x6, 0x3, 0x5c, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7f, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x382}]}}, {{0x9, 0x5, 0xc, 0xb88c46056bdd50a9, 0x10, 0xf, 0x7, 0x1, [@generic={0x42, 0x3, "b6df1e1e45614ba3420005991f75bd574e67255a8074c430cc3d3b4f83b5a5b6c620f9cc4cc063dd710d9949d8d67110fe426fc2d6207ebb272dc8f4e4565ec2"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x40, 0x8, 0x1, 0xf9}}]}}, {{0x9, 0x4, 0x3d, 0x1, 0xc, 0xff, 0xff, 0xff, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0xe86a, 0x7}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x205, 0x3, 0x81, 0xff6b, 0x4, 0x4b}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x204, 0x3, 0x3, 0xd, 0x1, 0x5}]}], [{{0x9, 0x5, 0x5, 0x6, 0x30, 0x78, 0x63, 0xfd, [@generic={0x89, 0xc, "ff28b32d947dbeb5e47efceff037bc858e7a378dbf786d1bc7c31eba2172c0d8967d61cde3bcf58852fe29f19de0b4bb0544b82ec55e9424edcbc77838d568c5eaf9fab9b676f86bf4cc04140a6d7573174524c219c744227843e670ab6961eeacdb7392f8b62a540771d9f01796bf1c56ae467610df3d87edecdd244f3a22293eb2815c7f1321"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x3, 0x3, 0x3}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0x10, 0x4, 0xf1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x3}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x2, 0xfc, 0xb, [@generic={0xd5, 0x11, "94190b571d0cd1b78b48c45a1cb2e3198f0dbe0db9c8f571981ed534f893ec5bce3a117a55878ee9fb2a6cfc2d5167bed2fa667ff2bd6234b1ba8981c666c8fbeeb64381afdad8d5bc59b6980f051aa38deb306e948be77448b9e6a91024acfaec179463a2948cc503eab8e4e2e689606f958d66ac89e6d2b55e05a8130aec431f798800ca5aad34cd0e04728f99ca2f201451a52dbf445b13446a37e3ab7e3f5295a62d20d717e76cabc34c2807d00723a3cc62ad4450105b050380bd4c035da2567b5689e6f0895d1c4fcc46cb5cded6d2e7"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x2}]}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x0, 0x1, 0x3}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x80, 0xf, 0x6f}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x13, 0x65, 0x78, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x7, 0x5, 0x1}}, {{0x9, 0x5, 0x80, 0x2, 0x20, 0x0, 0xff, 0x36, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x6}, @generic={0x8a, 0x4, "bd248d9848f2e1a40c872586e009fdb209f9112804cbb60c262f9b0bb4cfcdff49abb6170b3d2dd114295dc875298034cec201a6da351a5cfff9a67b89da5c3bbba9bb440e264ce21280c1327b29129936b09a8efcf2a5803661ae36e860f73a25e469fe43fa64a05ecef3f91165bdd7929a2523eb98013dd68b2ff949a4589876fa3315f44cced7"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x10, 0x90, 0x39, 0x2, [@generic={0xcd, 0xf, "1f31f1c59c7465447598508c65a6e5feea7dbf6e4cacba5116323d3e993883f4cc03f6a698358025ef33e947ce0b4c8a215d92558dff575beb0ea03d942cd4a6ef014fbbcf4264359875548901f6c16213ae4cde912df457ff83c7a00d25b0dffe9bbf90daeb9df105ec9150a69e0ee1d358603dc7202d765b50d7554fb05c5afc8d43a5bffa814220d850547bf36ea24a584cb62eac69275e222c061c4a47ec88a08bcb05c1488ee399e66f2318aed1b3f989bf0db7ddc83970dc1538811dc4d3b78767d8e13886b9b774"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x3, 0x3, 0xfd}}, {{0x9, 0x5, 0x7, 0x0, 0x400, 0x3, 0x9, 0x7}}]}}, {{0x9, 0x4, 0x55, 0x4, 0xb, 0x55, 0x94, 0xaf, 0x5, [], [{{0x9, 0x5, 0x80, 0x4, 0x248, 0x5, 0x3, 0x28}}, {{0x9, 0x5, 0xe, 0x12, 0x10, 0x44, 0x1, 0x4, [@generic={0xd2, 0xd, "bd81fff67371833b877d156b1250cce659af11919b542905de89fc36fdf55717f8860bd1c24315cd234b82d2eaafed2f827a64886263e68ff2a1c906649ec0bc29969c5ac545c519634db32933f0210cf50322ab84bcf29ae8128294d55fa07820ed50eac31d633d7fe41e6658cee0d2aec7aff74d74e661cb815e20ab47e868520e52953e7fe26dc2388d65e8532d0de758f7a500d38c77c55f032bdb396ebfcb1ac0fa1f241ec1ab804d9999be0fb2b392193ded0eff7fb570c53fe2776b72386a53c636544b6016df9340acf872a5"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x3, 0x9, 0xb3}}, {{0x9, 0x5, 0x0, 0x2, 0x210, 0x7, 0xff, 0x3, [@generic={0x62, 0x22, "979bf1a63a32ef2ea9b70435e5e7449e33eb43cc2dfad312ffe40f87811b473e39ef2644dd7837ae4278bce6f9c8892b3fcde1d9759bf685d59f04013eb815c440c7ab04e4f603e5fababb1588dee4acb5ef287d484d7806c2233700273f3ea8"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0xf, 0x3, 0x7}}, {{0x9, 0x5, 0x1, 0x4, 0x0, 0x8}}, {{0x9, 0x5, 0x0, 0xc, 0x10, 0x7, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x5}]}}, {{0x9, 0x5, 0xf, 0xc, 0x8, 0x7, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x3}, @generic={0x49, 0x24, "6153f292edbc12669fd3c11b44fdd3e07dfe8652aa03cd456621de58dbeb7498a35789e5dc40c9d38f159b9ad509cf3ed8b74ac4cff01be453fe9674b2fb7012367d6f5fd2bc27"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x35d94e19fac2a3a2, 0xae, 0x2, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0xfffb}]}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0x24, 0x5, 0x3}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0xec, 0xe6, 0x80}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x3, 0x2, 0x7, 0x365fded3eda94126, 0x6}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x3, [{0xa0, &(0x7f0000000100)=@string={0xa0, 0x3, "bc18e51952621548dbfe9598383d81b761e1739b17b512c169d1252d680bd844cbbf3b10cf3da420e0e0a7c3554179549c315bc2322ff93b60b80fa8b118d9a771ea73867763477ad1fbe804f2053bc565d8f82730c31a82f8569800c49307b86f3ec5acc95424963064be1f0c4da07e9d41b2ee85aef3e4ef0e299f90240727077ba32e221d9172e36df0d51b50281cffe9b4a3dc7ba0afe504af9fc537"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2c01}}]}) 5.271455011s ago: executing program 3 (id=9694): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1040, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1040, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x474082, 0x5c, 0x8}, 0x18) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x881, 0x0) r1 = getpgid(0x0) syz_pidfd_open(r1, 0x0) (async) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x39, &(0x7f0000004dc0)={0x3f, 0xab9, 0x80}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) write$P9_RGETLOCK(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="26000000370100027f00"/24, @ANYRES32=r3, @ANYBLOB="08005c2a402a233a2d3a103c2febf67b31b5a2f3b2d7c5782e68c92b6899a17297b2168cb6cf077d5beec6535eec9b29a35f239450b909d19fca28d876d0b53ee7dfd2743e8843fa004bd507662859b962da775f87fbe1293e89bbc63163a9fd621c603ca53d773b42e5621c352db07730d7d58ef455395e8a5fbf50bf01a78919ee5b8f20435a15a78db656"], 0x26) 5.060374869s ago: executing program 3 (id=9695): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r1, &(0x7f0000000000)=""/80, 0x50) r2 = openat$kvm(0xffffff9c, &(0x7f0000000400), 0x432ca0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae03, 0xc3) r3 = gettid() r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c000}, 0xd000) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r3, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xffffffff}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0xdc39c000) r6 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000400620180100000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000380)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="203108000000e09ae70ab3"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet_buf(r5, 0x0, 0x2f, &(0x7f00000001c0)="3f99995964ce50fde199d508c7ab9db93c79896f555f86843493272581a641fa6dbd33fa3dcd76de9fc83b7d106dcf733fbf691aa703e6a499d3ce2ab9b3861c3658a6c579a12cba12aa9e7e39f83aa1771ba729f9350a121b4fd2483fd73956df4682de2d6fe8ce6d415ae6031055c0f20be125949fe8ab9b41946c0a4b2b2d2467c695cd70134fb8e23a9e9c713fe4a580e79baaf8c1ee9630472e2cb88c1c87966917", 0xa4) syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000abd0a72baa20ddcbb8cb010203010902120001040020000904e700002001d600a80ea912426470352800"/68], 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 4.112605064s ago: executing program 6 (id=9697): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000700), 0xa00, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000740)=0x7f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000) ioctl$LOOP_CLR_FD(r0, 0x4c01) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) r2 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="8e", 0x1, 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x200481c4}, 0x20000800) pipe2$watch_queue(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0) keyctl$chown(0x4, r2, 0x0, 0xee01) signalfd(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f0000001cc0), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x8ffffff8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000001000000000000000000000000fe00000004002000f198bea6c23b4ae253ac9d8a47dde7d9370ef173ad3fc281ea914cdd1ce3efd087d396a254784ce620459a56527985b47bbc7874879ffc6cd7a2a975a9f79f60be53c91ebf288ec43a0111f8e9d0c125dc50ba1ea658204288bec0190f7b74d310492db8e315a01ed386ebe51fb5ed4921f7039349ec9c4f337d2e1b7a0ae2897e2a9480c6cc7967d5b581e784e466756148b063faedc932bd2a71eeec64c7103508934be5af392330de727277c27fddef14"], 0x18}, 0x1, 0x0, 0x0, 0x4c544}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCFLSH(r6, 0x80045430, 0x2000000000002) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x32}) 4.035041414s ago: executing program 6 (id=9698): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f00000034c0)={0x2020}, 0xcac) lseek(r1, 0xa, 0x3) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 3.828735944s ago: executing program 6 (id=9699): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001ff, 0x101301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff8, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x3, 0x11, 0xfffd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x20007, 0x0}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000000)=0xf, 0x4) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r1, 0x2000) 3.531667629s ago: executing program 5 (id=9701): creat(&(0x7f0000000040)='./file0\x00', 0x4) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="04010000110007000000000000000000ff020000000000000000000000000001e0000002000033"], 0x104}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r3}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r6}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0xefff, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000018007bf6e00212ba0d8105040a600000000f040b067c55a1bc0009003e0006990600000015000500fe800000000000000300014002000c0901ac040098007f6f94007100a007a288747f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d345ef464095cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3099ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d7f452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x4000004) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f00000000c0)={0x1d, r11}, 0x10) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000002c0)={{@hyper, 0x800}, 0x0, 0x0, 0x5, 0x7f, 0x400, 0x48, 0x1ff, 0xa3}) sendmsg$can_bcm(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x4, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x80, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000380)={0x100000000000fff, 0x100000000, 0x1000, 0x7fffffff, 0x609b, 0x401}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000200)={&(0x7f0000000780)=[0x0, 0x2, 0x7, 0x5f, 0x100, 0x8, 0x9, 0x80000000, 0x8, 0x1b, 0x4bfbf94c, 0x1, 0x3, 0x400, 0x0, 0xfffffffa, 0x8, 0x4, 0x7fff, 0x1, 0xc31, 0x2, 0x375c, 0x3a, 0x8, 0x1, 0x0, 0x80000001, 0x7, 0xffff, 0x80, 0x6, 0x7, 0x1, 0x0, 0x1000, 0x9, 0x9dbd, 0x5, 0xfffffffd, 0x3, 0x9, 0xffffffff, 0x4, 0x6, 0x4a28, 0x7, 0x4, 0x401, 0xd, 0x984, 0x7, 0x3, 0x3, 0x8000, 0x400, 0xfffffff8, 0x3, 0x8, 0x2, 0x80000001, 0x8, 0x81, 0x3, 0x81, 0x7, 0x8, 0x7, 0x3, 0x4, 0x7fd, 0x7, 0x5, 0x6, 0x5, 0x1036, 0x8, 0x5, 0x2, 0xfffffeff, 0xf, 0x8, 0xc6b, 0x2, 0x2, 0x6, 0x1000, 0x5, 0x3, 0xff, 0x1, 0x3, 0x3, 0x2, 0x2, 0xef, 0x7, 0x1ff, 0x4, 0x80, 0x0, 0x8, 0xd9d, 0x2, 0x3000, 0x80000000, 0x8, 0x1, 0xc, 0x0, 0x3, 0x9, 0x4, 0x55, 0x6, 0x7ff, 0x4, 0x5, 0x80000000, 0x37, 0xcf5d, 0x6, 0x9, 0x1, 0x1, 0x1, 0x80000001, 0x9, 0x7f, 0x5, 0x9, 0x6, 0x0, 0x3, 0x80000001, 0x3, 0x1400, 0x4, 0x1b9b76e2, 0x5cb8, 0xff, 0x101, 0x2, 0x3, 0x101, 0xfff, 0x3, 0x7ea0e6d5, 0x1, 0x3, 0x5, 0x8001, 0x9, 0x1000000, 0x3, 0x4, 0x7, 0x1, 0x9, 0xffffffff, 0x765f, 0x5, 0x200, 0xfb1c, 0x1, 0x7fff, 0x8, 0x6, 0xffffffff, 0x3, 0x1, 0x5, 0x858, 0xaf71, 0xfff, 0x5, 0x5, 0x2, 0x43, 0x7, 0x1, 0x1619, 0x5, 0x200, 0xa, 0x4, 0x30, 0x9, 0x7, 0x6, 0x9, 0x400, 0x7, 0x4, 0x0, 0x5, 0x5b, 0x4, 0x4, 0xfffffff8, 0x7, 0xffff9bcf, 0x8, 0x80, 0x400, 0x7f, 0x200, 0x6, 0xb, 0x4, 0x4fee, 0x8, 0x3, 0x7, 0x6, 0x2, 0x0, 0x9, 0x3, 0x3, 0xffff1e62, 0x4, 0xe29, 0x6, 0x4, 0x1, 0x6, 0x1, 0xfffffffe, 0x0, 0x40, 0x1000, 0x7fffffff, 0x3, 0x10001, 0x0, 0x200, 0x0, 0x6, 0x4, 0x5, 0x8, 0x7, 0xf, 0xe, 0x7, 0x6c8e, 0x80000001, 0x10000, 0x4, 0x5, 0xfffffffc, 0x8, 0x8, 0x1, 0xa7b8, 0x3, 0x4292, 0x8001, 0xef86, 0x9f4, 0x0, 0xf, 0x3, 0x21, 0xf, 0x0, 0x80000000, 0x9, 0x4, 0x5, 0x1, 0x0, 0x3, 0x7b, 0x80f7, 0x6, 0x9, 0x800, 0x9, 0x2, 0xcc1, 0x7b, 0x2, 0x1, 0x2, 0x10000, 0x710, 0xd5ab, 0x4, 0xf5f4, 0x9, 0x800, 0xc0b9, 0xd3e, 0x0, 0x9c, 0xfffffffe, 0x4f, 0x6, 0x4, 0xfe11, 0x66be, 0x2, 0x6, 0x75d6, 0x5, 0x1, 0xff, 0x6, 0xe2, 0x6, 0x9, 0x3, 0xa, 0x200, 0x5, 0x6, 0x3, 0x2, 0xe, 0x4, 0x1, 0x9, 0x4, 0x4, 0x1ff, 0x4, 0x3ff, 0x5, 0xc25, 0x2, 0x9, 0xc3, 0x8001, 0x39000000, 0x40, 0x4, 0x9, 0x7, 0xb, 0xffffff37, 0x10000, 0x0, 0x8, 0xca, 0x6, 0x1a9, 0x0, 0x1, 0x47479522, 0x2, 0x1, 0x9, 0x5fbff062, 0x588, 0xc, 0x3, 0x9, 0x0, 0x9, 0x8, 0x101, 0x1, 0xffffffff, 0x9, 0x2, 0x7, 0x3, 0x7fff, 0x6065, 0x8000, 0x80000001, 0x2, 0x3, 0x7fffffff, 0x3ca, 0x5, 0x8, 0x0, 0x7, 0x1, 0x9, 0x0, 0x0, 0xa, 0x0, 0x2, 0xffffffff, 0xfff, 0x7fffffff, 0x3ff, 0x1, 0x4, 0x4, 0x3, 0x5, 0x8, 0x9, 0x3, 0x2, 0xa6, 0x7, 0x0, 0x8, 0x10001, 0x7, 0x28, 0x7, 0xfffff78a, 0x4, 0xeb4e, 0x154d, 0x9, 0x4, 0x10, 0xb, 0x10001, 0x0, 0x40, 0x80000001, 0x8, 0x3, 0x5, 0x9, 0x9, 0x7ff, 0xffff9d5d, 0x3, 0x9b, 0x1, 0x6, 0x7, 0x6, 0x314, 0x800, 0x3, 0x9, 0x86, 0x1, 0x1, 0x5, 0x2, 0x81, 0x3f8, 0x400, 0x3ff, 0xff, 0x1000, 0x95f, 0x5aa40ef6, 0x22, 0x9, 0x0, 0x9, 0xfffffffc, 0x3, 0x8000, 0xfffffff7, 0x9, 0xffffffff, 0x8, 0x4800, 0x1, 0x4, 0x80, 0x5, 0x1, 0x1000, 0xe4, 0x6, 0x401, 0x8000, 0xff, 0x3ea, 0x1000, 0xb, 0x0, 0x4, 0x7fffffff, 0x8, 0xe4a, 0x8, 0x5, 0x3337, 0xd46c, 0x3323, 0x1a7e, 0xffffffff, 0x1, 0xa287, 0x9, 0x9, 0xe7, 0x5, 0x0, 0x3ff, 0x8, 0x6, 0x7, 0xa0, 0x7, 0x7, 0x0, 0x9, 0xfff, 0x0, 0x7, 0x7, 0xfffffffc, 0x8, 0x4, 0xfffffffc, 0xf1, 0x9, 0x800, 0x3ff, 0x401, 0x2, 0x40, 0x800, 0x18, 0x2, 0x10, 0x4, 0x89, 0x4, 0x80000001, 0x7, 0x5, 0x9, 0x4, 0x2, 0xa12, 0x1, 0x4173, 0x8, 0x7, 0xa, 0x1fffc0, 0xfffffff0, 0x8, 0x4, 0x2, 0x971, 0x6, 0x0, 0x3, 0x4, 0x8, 0x0, 0x0, 0x4, 0x0, 0xfffffff9, 0xa7, 0x4fd, 0x4, 0x9, 0x2, 0x1, 0xfffffff8, 0x7, 0x1edc, 0x7, 0x0, 0x2, 0xa86, 0x6, 0x6, 0x8, 0x7, 0x100, 0x5, 0x3, 0x8, 0x7, 0x458, 0x5, 0x9, 0x200, 0xfffffff8, 0x8001, 0x7ff, 0x3, 0x5, 0x3, 0x6, 0x9, 0x10000, 0x24, 0x4, 0x5e, 0x8, 0x80000000, 0x5, 0x4, 0x1, 0x0, 0x0, 0xe, 0x8, 0xfff, 0x8, 0x942, 0x6, 0xd, 0x2, 0xfffffffc, 0x101, 0x38a, 0x7, 0x9, 0xef, 0xfffffff6, 0x1, 0x401, 0x0, 0x80e, 0x0, 0x1, 0x4, 0x800, 0x0, 0x4, 0x5, 0xc, 0x1, 0x4e, 0x7, 0x2bfd, 0x0, 0x8, 0xc, 0x7f, 0x7ff, 0x0, 0x2, 0xb1ab, 0x4, 0x6, 0xa7f, 0x6, 0x0, 0xa1c2, 0x10, 0x8, 0xfffffffd, 0x59d, 0x7, 0x5, 0x8, 0x40, 0x4a5, 0xfddf, 0xfe, 0x6, 0x2, 0x5, 0x8, 0x5, 0x4, 0x0, 0x10000, 0x2, 0x14d, 0x7, 0x8, 0x9, 0x0, 0x7, 0x8001, 0xe, 0x7, 0x8, 0x3, 0x2, 0x0, 0x101, 0x5, 0x9, 0x1, 0xff, 0x4, 0xd9, 0x7f, 0x200, 0x9e10, 0x8f, 0x7c, 0x7fffffff, 0x80000000, 0xa, 0x9, 0x7, 0x2, 0x97, 0x9a, 0x1, 0x10, 0xffff, 0xfffffffa, 0x3ff, 0x6, 0x333, 0x2, 0x4, 0x9, 0xffffffff, 0x9, 0x8, 0x55a4, 0x4, 0x7, 0x0, 0x0, 0xe410, 0x81, 0xfffffff8, 0x4, 0x7, 0x5, 0x2, 0x0, 0x7fffffff, 0x10, 0x7, 0x1, 0x51, 0xf87, 0x5, 0x32, 0x4, 0x5, 0x2, 0x4, 0x6, 0x3, 0x8, 0x4, 0x8, 0x4, 0x0, 0x80000000, 0x9, 0x8876, 0x2, 0x2, 0xa, 0x577, 0x6b, 0x1, 0x7, 0x2, 0x401, 0x8ee0, 0x8, 0x1, 0xf, 0x1, 0x9, 0x80000001, 0x5526, 0x9, 0x2, 0x4, 0x40, 0x3, 0x7f, 0x1, 0x81, 0xffffffff, 0x11f, 0x6, 0x9, 0x2, 0x4, 0x2, 0x3, 0x1, 0xffff26fb, 0x1, 0x2, 0x31aa, 0x8fcf, 0xa, 0x8000000, 0x30000, 0x10000, 0x1000, 0x1ff, 0xe, 0x5, 0x3, 0x7, 0x2, 0x2f5298dc, 0x31, 0x2ab, 0x8001, 0x6, 0x7, 0x9, 0x99c, 0x7ff, 0x81, 0x3c6, 0x7, 0x2, 0x8000, 0x3, 0x100, 0x9, 0x200, 0x400, 0x7, 0x3cc9, 0x4, 0x7, 0xf662625, 0x20, 0x3, 0x5, 0xfffffffc, 0x5, 0x5, 0x5, 0xff, 0x9, 0xe43, 0x9, 0x1, 0x5, 0x3, 0x7, 0x5, 0x3, 0xd8, 0xa612, 0x0, 0x8, 0x5, 0x9, 0x9, 0xd1, 0x9, 0x7ff, 0xb, 0x7, 0x1, 0x2, 0x66, 0x2, 0x9, 0x100, 0x10001, 0x2, 0x523, 0x401, 0xfffffff8, 0x3, 0x3, 0x200, 0x7, 0xa, 0xf791, 0x8, 0x5, 0xee, 0xb, 0x50, 0x7f, 0x4, 0xa0, 0x81, 0x800, 0x4, 0x9, 0xfffffff1, 0x4, 0x3, 0x7fffffff, 0x10, 0x8, 0x80000000, 0xfffffffb, 0x0, 0x3, 0x401, 0x9, 0x401, 0x7f, 0x9, 0x9, 0xd, 0x4, 0x3, 0x3, 0xffffffc0, 0xfffffffd, 0x81, 0x0, 0x0, 0x8001, 0x4, 0xd73, 0xfffffffa, 0xfd7, 0x0, 0x6741, 0x7ff, 0x101, 0x0, 0x1ff, 0x73e10, 0x7, 0x7, 0x9, 0x3, 0x1ff, 0x3, 0x10000, 0x4, 0x1, 0x5, 0x6, 0x2, 0x8, 0x7, 0x400, 0xffff, 0xaf, 0x3, 0xfffffffe, 0x5, 0xdb37, 0x2, 0x4, 0x9, 0xffffff3a, 0x3, 0x4, 0x1, 0x6, 0xa57, 0xe, 0x6, 0x60, 0x1, 0x12d, 0x5, 0xfffffffd, 0x1, 0xfffffffb, 0x6000, 0xffff, 0xfffffff8, 0xf, 0x5, 0x1, 0x6, 0x4, 0x3, 0x1, 0x80000000, 0x7, 0xad0, 0x8, 0x7, 0xae4, 0x0, 0x0, 0x6, 0x3, 0x0, 0x72d, 0x0, 0x20, 0xa, 0x6, 0x0, 0x0, 0xaf8, 0xf, 0x1, 0x3, 0x6, 0x3, 0xe44, 0xb, 0x7fff, 0x80, 0x9, 0x6, 0x2, 0x8000, 0xec58, 0x3, 0x9, 0x2, 0x5, 0x1, 0x7, 0x1000, 0xcf, 0x2c, 0x9, 0xd, 0x0, 0x200, 0x5, 0x0, 0x3, 0x7, 0x7, 0x7f, 0x5, 0x6, 0x28, 0x80, 0x7, 0xc8, 0xfc4d, 0xb702], 0x2, 0x400, 0x3}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) mount(&(0x7f0000000180)=@md0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000140)='pstore\x00', 0x803022, 0x0) 3.380288509s ago: executing program 5 (id=9702): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)={0x18, 0x55, 0x1, 0x70bd2b, 0x0, {0x2}, [@typed={0x4, 0x120}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000019000100000000000d000000e00000020000000000000008000000006401010200000000000000000000000005000000000000000a"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000030000e00000020000000000000000"], 0xb8}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.075253581s ago: executing program 3 (id=9703): mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_80211_inject_frame(&(0x7f0000000240)=@device_b, &(0x7f00000001c0)=ANY=[], 0xb5) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x200448c1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) landlock_create_ruleset(0x0, 0x0, 0x3) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="98010000", @ANYRES16=r2, @ANYBLOB="010226bd7000fcdbdf250c000000180001801400020076657468315f766c616e0000000000006c010380080002000104000072000500d99f9dc25b71fa0c6daf7c4bd8bbd88344838a2e49872f20f5c079df6ed6cc0aa74915fb215d5c154efad4d27417b41ccd0f5ca3071b1ac6d50cfd8a53dbe53fd8a9ccc3ce1db4bdf71f62053c9dbb8b9b1034fd5dcf117ac883c46de2322802ae01a55fa3b4be74f3a7d6235936000004000100100003800c00018008000100ffffffffd8000380"], 0x198}, 0x1, 0x0, 0x0, 0x20000094}, 0x404c004) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r4, &(0x7f0000000140)=@name, &(0x7f0000000180)=0x10) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x5c3000, 0x0) 2.821428947s ago: executing program 6 (id=9704): r0 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e27, 0x41200003, @empty, 0xb}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009042200010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "fe9e2572"}]}}, 0x0}, 0x0) r2 = epoll_create1(0x80000) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f0000000380)={{0xfffffff8, 0x7afe}, 0x100, './file0\x00'}) r3 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000340)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="001006000000046ca16cc104b7433802ba79301b0692c3cf4c7765ca6e03be03038634d1040e556849b795ada84358f24fe9c5c05b3b1e862cc2cefeb49ebef3a3e13b96e537f321c53e02b475df102f5a40780cb2aa625fa4b488a8d013fb098c4ab6a65b8727b05d8dcb317c0942dc44df8dcdd145c81b42be47085ac76227fd3e7e9c13fac07fc8d6cf0134add2470239b493dad8aff0899003"], 0x0, 0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES8=r5], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x8}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x78}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x40) mount(0x0, 0x0, 0x0, 0x8000, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) write$UHID_INPUT(r3, &(0x7f0000001480)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe0}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f00000004c0)='ext3\x00', 0x0, 0x0) 2.460346396s ago: executing program 5 (id=9707): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x21, 0x16, 0x64, 0x0, 0x4, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x30}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x1, 0x0, 0x34}}}}, 0x36) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x4, 0x0) shutdown(r3, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0xb8, 0x40000}], 0x1, 0x40800) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x10, &(0x7f0000000240)=ANY=[]) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) r7 = accept$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c) ioctl$FITRIM(r7, 0xc0185879, &(0x7f0000000100)={0x1f0e, 0x7bb, 0x5}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) 2.277253576s ago: executing program 3 (id=9709): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, 0x0, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0x20, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_MRU={0x0, 0x1d, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x292}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040845}, 0x20000001) (async) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0x20, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x800, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_MRU={0x0, 0x1d, 0x2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x292}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040845}, 0x20000001) 2.144392598s ago: executing program 3 (id=9711): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x19c5498d, 0x103902) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000340)=0x4b374e0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$inet(r2, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000cc0)="af", 0x1}, {&(0x7f00000001c0)='0', 0x1}], 0x2}}], 0x1, 0xc4) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) 2.048951116s ago: executing program 3 (id=9713): r0 = getpid() r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8}, 0x20) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 743.776009ms ago: executing program 0 (id=9718): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x34) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) 737.667479ms ago: executing program 0 (id=9719): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'gre0\x00', r1, 0x7, 0x8, 0xffff, 0x7f, {{0xb, 0x4, 0x0, 0x9, 0x2c, 0x68, 0x0, 0x3, 0x4, 0x0, @empty, @multicast2, {[@timestamp={0x44, 0x14, 0x95, 0x0, 0x6, [0x7ff, 0xff, 0x80000001, 0xc6]}, @end]}}}}}) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x90201) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r2, 0xc01064c5, &(0x7f0000000280)={&(0x7f0000000240)=[r3, r4, r5, r6], 0x4}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r7, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x62}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffff3628}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c801}, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) r9 = accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000004c0)=0x14) sendto$packet(r9, &(0x7f0000000440)="557c97e55880456657f3786accc338ffcd3830f6af39feccd4f8f427b0844742c901696af03b2a97373b2894", 0x2c, 0x1, &(0x7f0000000500)={0x11, 0x1c, r10, 0x1, 0x9, 0x6, @local}, 0x14) r11 = request_key(&(0x7f0000000680)='big_key\x00', &(0x7f00000006c0)={'syz', 0x1}, &(0x7f0000000700)='\x00', 0x0) add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x3}, &(0x7f00000005c0)="d5088ef0f5c56d076258b2eed443633fb78c7723b4dabd0e44b310ce5594496a55e7131ae5f7784c2a08fec7b398453283df462390c529ae7b28566c579275855b583a33333d559c245428c0ce3c30b83685c52c9d941958b70b01b8a3bab58880f5c280b98e1401fe90a032dfba182242b496103af188e552216a014297b1565776ff157b7433d863b27252", 0x8c, r11) r12 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000740), 0x444202, 0x0) r13 = openat$null(0xffffffffffffff9c, &(0x7f0000000780), 0x40000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r12, 0xc01064c2, &(0x7f00000007c0)={0x0, 0x1, r13}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000800)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r13, 0xc01064c2, &(0x7f0000000840)={0x0, 0x0, r13}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r12, 0xc01064c2, &(0x7f0000000880)={0x0, 0x0, r8}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r13, 0xc01064c2, &(0x7f00000008c0)={0x0, 0x1, r13}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r12, 0xc01064c2, &(0x7f0000000900)={0x0, 0x1, r13}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r12, 0xc02864c3, &(0x7f0000000980)={&(0x7f0000000940)=[r15, r3, r16, r5, r17, r14, r18, r5, r19], 0x8, 0x9, 0x1}) preadv(r12, &(0x7f0000000d40)=[{&(0x7f00000009c0)=""/13, 0xd}, {&(0x7f0000000a00)=""/36, 0x24}, {&(0x7f0000000a40)=""/158, 0x9e}, {&(0x7f0000000b00)=""/218, 0xda}, {&(0x7f0000000c00)=""/106, 0x6a}, {&(0x7f0000000c80)=""/151, 0x97}], 0x6, 0x6c3b, 0xf24) r20 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r20, &(0x7f0000001280)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001240)={&(0x7f0000000e00)={0x428, 0x3f4, 0x300, 0x70bd29, 0x25dfdbfe, {0x0, 0x2, 0x3f, [0x1, 0x4, 0xfffffff9, 0x3, 0x1, 0x6, 0x7, 0x9, 0x0, 0x0, 0xfffffff1, 0xed, 0xfffffffe, 0x80000001, 0x7, 0xfffffff8, 0x8, 0x6549, 0x7, 0xbb, 0x5, 0x8, 0xad, 0x1, 0x1, 0x5, 0x7, 0xfffffff9, 0x8, 0x3, 0x2, 0x8, 0xe, 0x8001, 0x600, 0x401, 0x7f, 0x100, 0x6, 0x1ff, 0x7fff, 0x1, 0x9, 0x8, 0x3, 0x7d6, 0xbf0, 0x8000, 0x8, 0x6, 0x5, 0x7fff, 0x10001, 0x7fffffff, 0x5, 0x60b8, 0x401, 0x4, 0x0, 0x3, 0x8, 0xffffffaa, 0x1], [0x8, 0x9, 0x800, 0x9ee, 0x6, 0x5, 0x7, 0x0, 0x8, 0x6, 0x521, 0x6, 0xa8e4, 0x5, 0x200, 0x1, 0x7, 0xf7a, 0x0, 0x8f7, 0x1, 0x2, 0x8000, 0xa, 0x5, 0x6, 0xd, 0x7212ec36, 0x2, 0xa5, 0xfffffffd, 0x602, 0xfff, 0x4, 0x3, 0x0, 0x9, 0x9, 0x61d, 0x4, 0xfc08, 0x9, 0x4, 0x0, 0x7f, 0x1, 0x3, 0x1, 0x3, 0x3f5, 0x3, 0x0, 0x5e, 0x9db8, 0x9, 0x8001, 0x80000001, 0x0, 0xfffff801, 0x4, 0x3, 0xa568, 0x5, 0x8c], [0x6, 0x0, 0x5, 0xfffffffe, 0x82, 0x5, 0x0, 0x1b5, 0x8000, 0x7, 0x1, 0x7fffffff, 0x9, 0x8de, 0x7, 0x101, 0x7, 0x7, 0xffff, 0x7, 0xffff, 0x8, 0x5000000, 0x4, 0xa6, 0x10000, 0x795, 0xa, 0x10, 0x2, 0x1, 0x40000000, 0x1000, 0x3, 0x1, 0x2, 0x101, 0x2, 0x1ff, 0x9, 0x0, 0x8122, 0x4, 0x7, 0x7, 0x6, 0x52f, 0x86, 0xd7, 0xffff, 0x2, 0x80, 0xffff, 0x7, 0x8dd, 0x9, 0xffffffff, 0x180000, 0x0, 0x5, 0xfffffff5, 0x6, 0x10, 0x80000001], [0x3, 0x4, 0x5, 0xfffffff7, 0xd, 0xfffffffc, 0xff5, 0x6, 0x69, 0x6, 0x0, 0x10, 0xeca, 0x10, 0x5, 0x2, 0x3ff, 0x0, 0x1, 0x2, 0x0, 0x1, 0x9, 0x7ff, 0x8, 0x1ff, 0x4, 0x9, 0x7, 0x7, 0x959, 0xc4, 0x9, 0xb5, 0x8, 0x4, 0x5, 0x8, 0x7, 0x401, 0x7ff, 0x14157030, 0x2, 0x1, 0x100, 0xffff8000, 0xf2, 0x0, 0x3, 0xa, 0x7, 0xe78, 0x7, 0x9, 0x6, 0x3c0000, 0x8, 0x8000, 0x3726bd84, 0x10001, 0x7fffffff, 0x6aca, 0x7, 0x3], 0x8, ['%-+\xed\x00', '/-\x00']}, ["", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x240400c0}, 0x4) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x20, 0x140e, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x24000001) 624.379251ms ago: executing program 5 (id=9720): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xf6c52000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x8, &(0x7f0000000040)="11a3a309", 0x4) creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000000)=',', 0x1}, {&(0x7f0000001280)="c717644563c1f45396945bbddfc3c8222150b1313539c8ecc325fc4ddae402700d5bfb9d8b458d33ba6e1041fbc70d08bad22ef81739c9470ac4120300000000000058fe3865b0d9dbe5f8554644425c3f62ec969e7031e53f39b45058a95a7b13f028ddb039d8c2010074c1302905000065961521c46ca7290200000046d9becf00000000000000000000000000000000a4ab94199ba3026287a5ccb161b50800000000e752508084b98eab8e987bf36302d4d5e9cada3378503f3f0a8009071e7e93de61230605fb049a69c0cf8e8a1f07013540ca229f016727d19a494569f1ace5d542252cd8b13fb249791b938d2ce8b306ea8da885cc1f4eaf065a5dd0347b0f434dc6dffc30cb87ebaf3777d0dff74b20eab2847d6a55c444169dbb3ded6c8ca19d2683e7ff7200"/310, 0x136}, {&(0x7f0000000180)="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", 0x44e}], 0x3, 0x0, 0x0, 0x2c}, 0x40804) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff01000000000000001b000000000001e000040100000400000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000020000000000010510000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e30000000000200000000000003f"], 0xb8}, 0x1, 0xfffff000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r3) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x18, r4, 0x1, 0xfffdffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r6 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x3, r6, 0x2}) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b8000000140001000000000000000000ff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00?'], 0xb8}, 0x1, 0xfffff000}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 556.394093ms ago: executing program 0 (id=9721): openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x80240, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x80240, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000"], 0x14}}, 0x10) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000180)={0x1, 0x0, [{0x4, 0x0, 0xc2}]}) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0) 416.679947ms ago: executing program 0 (id=9722): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x2) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x1, r1, 0x0, 0x80, 0x5}) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 339.894946ms ago: executing program 0 (id=9723): r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[{0x2, 0x2, 0xc, 0xa}, {0x9, 0x4, 0xa9, 0xe}, {0x6, 0x85, 0x40, 0x7fff}]}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x3, @private1, 0x6}, @in={0x2, 0x4e22, @private=0xa010100}], 0x2c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r4, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000841) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) read$FUSE(r5, &(0x7f00000002c0)={0x2020}, 0x2020) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002340)={0x2, &(0x7f0000002300)=[{0x0, 0x0, 0x7d}, {0xd845, 0x6d, 0x32, 0x3}]}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000023c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x20002208}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x30, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x1, 0x40}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x2ac2}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x4048814) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000002500), r3) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x20, r8, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x20}}, 0x4000040) r9 = signalfd(r2, &(0x7f0000002600)={[0x6]}, 0x8) ioctl$BTRFS_IOC_ADD_DEV(r9, 0x5000940a, &(0x7f0000002640)={{r0}, "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"}) r10 = openat$null(0xffffffffffffff9c, &(0x7f0000003640), 0x10000, 0x0) ioctl$SIOCAX25DELFWD(r10, 0x89eb, &(0x7f0000003680)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast}) getxattr(&(0x7f00000036c0)='./file0\x00', &(0x7f0000003700)=@random={'security.', '\x00'}, &(0x7f0000003740)=""/45, 0x2d) write$apparmor_current(r10, &(0x7f0000003780)=@profile={'stack ', '\x00'}, 0x7) syz_genetlink_get_family_id$ieee802154(&(0x7f00000037c0), r3) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003840), r10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000003880)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000003940)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003900)={&(0x7f00000038c0)={0x20, r11, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x840) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r9, 0x6, 0x21, &(0x7f0000003980)="968b9e0b67f651cb8664bca23d62566a3ad9316ab5b0d1895f4ab46ce6694d39740ce9a467001d16a850e69d29f1067f69409f35f6294d1b60dd8ea3215b98572c1aa05edf7bdb523d734c5925b40228931d86b337d64de63c2c3be671cfbf78c51ead4d067cad92a113a371d3", 0x6d) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000003a00)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000003a40)="df0f583d9e2f9a6685be671ab6ef27b251c11e36ddbaba103464db42e6017b3c94f90b7523de1738a713dee1271c3ead689afc56d457ddf803f8e389906f6b8e7f2f1cd77fcc22fc3e07a712313e17c2b87fbd89d4397480a36b0a7587833e41eddd542319dfe40bbce7ab6d149b4d", 0x6f}, {&(0x7f0000003ac0)="c470e956b90239a35ef716bd52c2d332714ec4aeff9219", 0x17}], 0x2, &(0x7f0000003b40)=[@ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x1b, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xe6}, {@loopback, 0x7}, {@rand_addr=0x64010101, 0x4}, {@multicast2, 0x2db}]}, @noop]}}}], 0x38}}, {{&(0x7f0000003b80)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000003cc0)=[{&(0x7f0000003bc0)="f8620d3f37076ab740cc4bc2006231d60a7a5a1e188056fe0bd231b6efb5c91d4af3dc4606d196712c347fde2e8e895e3a41c2156c862eef10d5b9739728f0309136aa641f8c866b52c6c1aaa7aef81e231d87f0de48c68b46dbfd14303e59c1da6c7fbc83c7393283973a4c24ce8f2ee47b69c0efd8559144e47dba4ef6a6208af071751e38984ea02aeace07012b4260d855414c4834426da1ccc07c5c38867e5ff489f9da5c0e04ba483b4360", 0xae}, {&(0x7f0000003c80)="115cc4875f1fe60865fb8a6c8f9c1da2e2b32da32c6808bdca6d55f1f0435039b3d5bed367faa3201cf6b5a4200a4bffd0cb84b80190e3", 0x37}], 0x2, &(0x7f0000003d00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffe}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @private=0xa010102, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x78, 0x0, 0x7, {[@rr={0x7, 0x27, 0x68, [@broadcast, @broadcast, @loopback, @private=0xa010101, @multicast1, @rand_addr=0x64010101, @local, @remote, @dev={0xac, 0x14, 0x14, 0x3e}]}, @timestamp_addr={0x44, 0x14, 0x51, 0x1, 0x5, [{@empty, 0x800}, {@broadcast, 0x2}]}, @timestamp={0x44, 0x2c, 0x1a, 0x0, 0x9, [0x0, 0xf, 0x8, 0x0, 0x4f, 0x1000, 0x7, 0x5, 0x3, 0xffffffff]}]}}}], 0xe0}}], 0x2, 0x8000) 212.268991ms ago: executing program 0 (id=9724): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x80000) (async) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[], 0xac}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004000) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x38, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1e}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) (async) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$printer(r5, &(0x7f0000000400)={0x14, &(0x7f00000003c0)={0x0, 0x8, 0x10, {0x10, 0x30, "6d27a045a26a7043303d6f1240dc"}}, &(0x7f0000000500)={0x0, 0x3, 0x88, @string={0x88, 0x3, "dc1a8a18784461ee7e8040b8dc437ccdc16e37597e9f83f44e6e028ed070cc812fc869fad98f058ee007d2bba314139b2eba8d9865f11d9726bf165203d6b45ac3ffd06698b9deddab897c08b0969b0b6dde5f50474248dd63d6544b74de7629661b36efe0ddd898d41580c5b9e10068bd0e3ab78235bb88aee2a8772687893f120685332099"}}}, &(0x7f0000000700)={0x34, &(0x7f0000000440)={0x20, 0xb, 0x35, "b71e2819efd91fc7df2eb11ad31d927843aefae7cc075d8ddb3b2445b08157511c3711ed05680bb0314a14ae330110ea567270e573"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000640)={0x20, 0x0, 0x3a, {0x38, "44092cdb25e9cc14bf1c84afb0a490851184e0127ffa66ee5e6cd43fc6f7003f0473b7d2e614839284ff359ffb9f0c2809f2a6129697d8e3"}}, &(0x7f0000000680)={0x20, 0x1, 0x1, 0x4b}, &(0x7f00000006c0)={0x20, 0x0, 0x1, 0xc}}) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000380)=ANY=[@ANYBLOB="001819"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000840)={0x34, &(0x7f0000000380)=ANY=[@ANYBLOB="001819"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x0, 0xb, 0x34, {0x34, 0xc, "847e829eb441c346ff8caf56de39b76b1e2771bbf7bf3de29af17c88b948bc0677e2620ce1a74bcd8ee2bbf84ebbbf39fb01"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}, &(0x7f0000000740)=ANY=[@ANYBLOB="0022d914ef84ca26ce49d71e943af27c0b7a27eaac83007328ab4793a2aa97385508383bb5dd7cb95246d1ad1cca62e65ef35dc8ba77ec4c57dbcf146f06f25cb7073639755d9282f484733b03801ab0068661087cecbed992f6008ad139fe94b8af2285b350345f6b1a6c2c40bea85553a80bec0d9c11be26aa677473fb016d6a101d2020e4a858e9864600b53fc99ffa527cf220a4a14db8f707d719a71b7827f817e5e80aeb7c4711d0362f2886c9f40a142a51a48379d188b0922c1c76e308d18179c36dec1e6f9d678b450293b5b23065817de5e30c2bf4624ba9cda67df78209791f3169079050cc29132c5ea3"], &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x10, 0x1, {0x22, 0x5d}}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x0, 0x7, 0xf4, "dba15c926afae7a63962941ec984737e8d93b277d86940eca0580f8919b9165773fd193067cb708cb138b8b92826cabfefa0eb9fd027130c166be3b992358a5bdcea9adf6635f5c65042fb36fd57ec54cc852c3121713c57ef88e90b541c2872f1d9fb92c55e8e12c26cba861512bf79b7cc1f3bc28f2abade4a2d8bbd5fb4f1e9b27d4947dc09b33081deb25dc11b5ccb945d57f69da865efc5fd0e0e5f890bdb7565459eb4181f5b7b52a45ff0facba6205bd32135191045cee11a106b2519c2f8b0b72c1e3e979d7b52e4f9059d19648af0585ab7615402bf37de8b4b889f803c63ceec242e6d60a4538dd4fc304d06869d09"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x24}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000002c0)={0x20, 0x1, 0x62, "ef5a8d9e85f6f7edc334aa92b39414ab760b723549aa83c043fbf60b38c60bfe767f99adbdc9940e7d6bd15383bffd99b0edf1b7813efab6063b9cb4732cf1caaafecf89986f62160ad20770ce7817d20c9bd22fac67b912312891915371e4fd2bbb"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0xb}}) (async) syz_usb_control_io$hid(r5, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x0, 0xb, 0x34, {0x34, 0xc, "847e829eb441c346ff8caf56de39b76b1e2771bbf7bf3de29af17c88b948bc0677e2620ce1a74bcd8ee2bbf84ebbbf39fb01"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}, &(0x7f0000000740)=ANY=[@ANYBLOB="0022d914ef84ca26ce49d71e943af27c0b7a27eaac83007328ab4793a2aa97385508383bb5dd7cb95246d1ad1cca62e65ef35dc8ba77ec4c57dbcf146f06f25cb7073639755d9282f484733b03801ab0068661087cecbed992f6008ad139fe94b8af2285b350345f6b1a6c2c40bea85553a80bec0d9c11be26aa677473fb016d6a101d2020e4a858e9864600b53fc99ffa527cf220a4a14db8f707d719a71b7827f817e5e80aeb7c4711d0362f2886c9f40a142a51a48379d188b0922c1c76e308d18179c36dec1e6f9d678b450293b5b23065817de5e30c2bf4624ba9cda67df78209791f3169079050cc29132c5ea3"], &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0x10, 0x1, {0x22, 0x5d}}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x0, 0x7, 0xf4, "dba15c926afae7a63962941ec984737e8d93b277d86940eca0580f8919b9165773fd193067cb708cb138b8b92826cabfefa0eb9fd027130c166be3b992358a5bdcea9adf6635f5c65042fb36fd57ec54cc852c3121713c57ef88e90b541c2872f1d9fb92c55e8e12c26cba861512bf79b7cc1f3bc28f2abade4a2d8bbd5fb4f1e9b27d4947dc09b33081deb25dc11b5ccb945d57f69da865efc5fd0e0e5f890bdb7565459eb4181f5b7b52a45ff0facba6205bd32135191045cee11a106b2519c2f8b0b72c1e3e979d7b52e4f9059d19648af0585ab7615402bf37de8b4b889f803c63ceec242e6d60a4538dd4fc304d06869d09"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x24}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000002c0)={0x20, 0x1, 0x62, "ef5a8d9e85f6f7edc334aa92b39414ab760b723549aa83c043fbf60b38c60bfe767f99adbdc9940e7d6bd15383bffd99b0edf1b7813efab6063b9cb4732cf1caaafecf89986f62160ad20770ce7817d20c9bd22fac67b912312891915371e4fd2bbb"}, &(0x7f0000000340)={0x20, 0x3, 0x1, 0xb}}) 67.291729ms ago: executing program 5 (id=9725): pipe2(&(0x7f0000001040), 0x0) prlimit64(0x0, 0x7, &(0x7f0000000080)={0x101, 0x9}, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000c00)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, 0x0) capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0xc3}, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000100)) 0s ago: executing program 5 (id=9726): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x684f, 0x40000) creat(0x0, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000100)={0xfffffffffffffffe, 0xe, 0x1f}) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000140001042bbd7000fcdbdf2510400d000100819e034727e720b0c30000000000"], 0x24}, 0x1, 0x0, 0x0, 0x20020000}, 0x40880) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0xffe7) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "00000004000100", "6abc0000b31600010000000100100400", "f0630400", "c14ec98dcd2ad89f"}, 0x28) r4 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x980912, 0x0, '\x00', @string=0x0}}) sendto$inet6(r1, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x4580b000) kernel console output (not intermixed with test programs): lid wMaxPacketSize 0 [ 1713.355581][ T5941] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1713.366901][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.385006][ T5941] usb 4-1: config 0 descriptor?? [ 1713.420355][ T4099] usb 1-1: Using ep0 maxpacket: 8 [ 1713.428219][ T4099] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1713.465914][ T4099] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1713.488191][ T4099] usb 1-1: config 1 interface 1 has no altsetting 1 [ 1713.508107][ T4099] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1713.523966][ T4099] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1713.534410][ T4099] usb 1-1: Product: syz [ 1713.538772][ T4099] usb 1-1: Manufacturer: syz [ 1713.546712][ T4099] usb 1-1: SerialNumber: syz [ 1713.811509][ T5941] hid-u2fzero 0003:10C4:8ACF.0062: unbalanced delimiter at end of report description [ 1713.857854][ T5941] hid-u2fzero 0003:10C4:8ACF.0062: probe with driver hid-u2fzero failed with error -22 [ 1713.947656][ T4099] usb 1-1: selecting invalid altsetting 1 [ 1713.989145][ T4099] cdc_ncm 1-1:1.0: bind() failure [ 1714.008565][ T5941] usb 4-1: USB disconnect, device number 32 [ 1714.058002][ T4099] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1714.087459][ T4099] cdc_ncm 1-1:1.1: bind() failure [ 1714.107497][ T4099] usb 1-1: USB disconnect, device number 41 [ 1714.489376][ T8014] netlink: 'syz.0.8899': attribute type 6 has an invalid length. [ 1714.838916][ T8022] netlink: 220 bytes leftover after parsing attributes in process `syz.5.8902'. [ 1715.221635][ T8037] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1715.283084][ T4099] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1715.291154][ T5941] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1715.450484][ T4099] usb 6-1: Using ep0 maxpacket: 16 [ 1715.455752][ T5941] usb 1-1: Using ep0 maxpacket: 16 [ 1715.471988][ T4099] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1715.485660][ T4099] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.495110][ T5941] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1715.507206][ T5941] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1715.522481][ T4099] usb 6-1: config 0 descriptor?? [ 1715.539427][ T4099] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1715.562450][ T5941] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1715.572014][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1715.580049][ T5941] usb 1-1: Product: syz [ 1715.599717][ T5941] usb 1-1: Manufacturer: syz [ 1715.607246][ T5941] usb 1-1: SerialNumber: syz [ 1715.624274][ T5941] usb 1-1: config 0 descriptor?? [ 1715.655511][ T5941] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1715.670633][ T5941] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1715.736566][ T4099] usb 6-1: Detected FT232B [ 1715.939654][ T4099] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1715.963243][ T4099] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1715.987098][ T4099] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1715.994835][ T8054] netlink: 220 bytes leftover after parsing attributes in process `syz.3.8914'. [ 1716.019523][ T4099] usb 6-1: USB disconnect, device number 82 [ 1716.035373][ T4099] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1716.046904][ T4099] ftdi_sio 6-1:0.0: device disconnected [ 1716.263459][ T5941] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1716.281123][ T5941] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1716.560180][ T5941] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1716.561627][ T8068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1716.567399][ T5941] em28xx 1-1:0.0: No AC97 audio processor [ 1716.631833][ T8068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1716.765912][ T8068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1716.821671][ T4099] usb 1-1: USB disconnect, device number 42 [ 1716.842422][ T4099] em28xx 1-1:0.0: Disconnecting em28xx [ 1716.893459][ T4099] em28xx 1-1:0.0: Freeing device [ 1716.945069][ T8056] netlink: 'syz.3.8915': attribute type 10 has an invalid length. [ 1716.974197][ T8056] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8915'. [ 1717.410218][T30488] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1717.571948][T30488] usb 1-1: Using ep0 maxpacket: 16 [ 1717.586894][T30488] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1717.650224][T30488] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1717.670377][T30488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1717.727987][T30488] usb 1-1: config 0 descriptor?? [ 1718.196127][T30488] mcp2221 0003:04D8:00DD.0063: unexpected long global item [ 1718.235148][ T8102] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1718.238610][T30488] mcp2221 0003:04D8:00DD.0063: can't parse reports [ 1718.244536][ T8102] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1718.267464][T30488] mcp2221 0003:04D8:00DD.0063: probe with driver mcp2221 failed with error -22 [ 1718.307031][ T8102] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1718.374166][ T8102] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1718.384988][ T8108] overlay: Unknown parameter 'subj_type' [ 1718.409649][T30488] usb 1-1: USB disconnect, device number 43 [ 1718.680638][ T5941] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1718.821037][ T8125] netlink: 220 bytes leftover after parsing attributes in process `syz.5.8929'. [ 1718.860309][ T5941] usb 4-1: Using ep0 maxpacket: 32 [ 1718.875792][ T5941] usb 4-1: config 0 has an invalid interface number: 125 but max is 0 [ 1718.923904][ T5941] usb 4-1: config 0 has no interface number 0 [ 1718.946751][ T5941] usb 4-1: config 0 interface 125 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1718.988786][ T5941] usb 4-1: config 0 interface 125 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1719.030350][ T5941] usb 4-1: config 0 interface 125 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1719.069914][ T5941] usb 4-1: New USB device found, idVendor=3277, idProduct=009e, bcdDevice=2e.0f [ 1719.089642][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1719.118255][ T5941] usb 4-1: Product: syz [ 1719.133382][ T5941] usb 4-1: Manufacturer: syz [ 1719.143736][ T5941] usb 4-1: SerialNumber: syz [ 1719.181201][ T5941] usb 4-1: config 0 descriptor?? [ 1719.197438][ T8106] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1719.225045][ T5941] usb 4-1: Found UVC 0.00 device syz (3277:009e) [ 1719.258173][ T5941] usb 4-1: No valid video chain found. [ 1719.792263][ T8159] netlink: 'syz.6.8936': attribute type 5 has an invalid length. [ 1719.817174][ T8159] netlink: 'syz.6.8936': attribute type 10 has an invalid length. [ 1719.925636][ T8166] /dev/rnullb0: Can't open blockdev [ 1719.978899][ T8168] netlink: 220 bytes leftover after parsing attributes in process `syz.5.8938'. [ 1720.144102][ T8172] /dev/rnullb0: Can't open blockdev [ 1720.157075][ T8164] syzkaller1: entered promiscuous mode [ 1720.163080][ T8164] syzkaller1: entered allmulticast mode [ 1720.349874][ T8106] binder: 8103:8106 ioctl c018620b 200000000000 returned -14 [ 1720.509488][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 1720.548988][ T8183] syz.5.8941: attempt to access beyond end of device [ 1720.548988][ T8183] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1720.585935][ T8183] vxfs: unable to read disk superblock at 1 [ 1720.596003][ T4242] usb 4-1: USB disconnect, device number 33 [ 1720.605657][ T8187] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1720.616774][ T8183] syz.5.8941: attempt to access beyond end of device [ 1720.616774][ T8183] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1720.647436][ T8183] vxfs: unable to read disk superblock at 8 [ 1720.691294][ T8183] vxfs: can't find superblock. [ 1723.010305][T30488] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1723.162448][T30488] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1723.180175][T30488] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1723.190265][ T10] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1723.210252][T30488] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1723.230255][T30488] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.253659][T30488] usb 4-1: config 0 descriptor?? [ 1723.340950][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 1723.352999][ T10] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1723.368342][ T10] usb 6-1: config 0 has no interface number 0 [ 1723.380310][ T10] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1723.398081][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.407312][ T10] usb 6-1: Product: syz [ 1723.413042][ T10] usb 6-1: Manufacturer: syz [ 1723.417958][ T10] usb 6-1: SerialNumber: syz [ 1723.439317][ T10] usb 6-1: config 0 descriptor?? [ 1723.466779][ T10] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1723.669176][T30488] pyra 0003:1E7D:2CF6.0064: unknown main item tag 0x0 [ 1723.695626][T30488] pyra 0003:1E7D:2CF6.0064: unknown main item tag 0x0 [ 1723.726699][ T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1723.737285][T30488] pyra 0003:1E7D:2CF6.0064: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 1723.765553][ T10] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1723.868381][T30488] pyra 0003:1E7D:2CF6.0064: couldn't init struct pyra_device [ 1723.892689][T30488] pyra 0003:1E7D:2CF6.0064: couldn't install mouse [ 1723.924946][T30488] pyra 0003:1E7D:2CF6.0064: probe with driver pyra failed with error -5 [ 1724.136304][ T8254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1724.158936][ T8254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1724.795247][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1724.811654][ T10] usb 6-1: USB disconnect, device number 83 [ 1724.847221][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1724.889961][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1724.926608][ T10] quatech2 6-1:0.51: device disconnected [ 1725.954698][T30516] usb 4-1: USB disconnect, device number 34 [ 1726.131075][ T4099] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1726.300677][ T4099] usb 1-1: device descriptor read/64, error -71 [ 1726.583474][ T4099] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1726.744531][ T4099] usb 1-1: device descriptor read/64, error -71 [ 1726.765687][ T8351] netlink: 220 bytes leftover after parsing attributes in process `syz.6.8972'. [ 1726.850333][ T3818] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1726.861905][ T4099] usb usb1-port1: attempt power cycle [ 1726.898778][ T8356] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8973'. [ 1727.011259][ T3818] usb 6-1: device descriptor read/64, error -71 [ 1727.210644][ T4099] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1727.251097][ T4099] usb 1-1: device descriptor read/8, error -71 [ 1727.260412][ T3818] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1727.410616][ T3818] usb 6-1: device descriptor read/64, error -71 [ 1727.476828][ T8383] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 1727.510370][ T4099] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1727.534552][ T3818] usb usb6-port1: attempt power cycle [ 1727.561498][ T4099] usb 1-1: device descriptor read/8, error -71 [ 1727.605181][ T8388] netlink: 220 bytes leftover after parsing attributes in process `syz.3.8982'. [ 1727.683667][ T4099] usb usb1-port1: unable to enumerate USB device [ 1727.880197][ T3818] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1727.902153][ T3818] usb 6-1: device descriptor read/8, error -71 [ 1728.150194][ T3818] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1728.172473][ T3818] usb 6-1: device descriptor read/8, error -71 [ 1728.281497][ T3818] usb usb6-port1: unable to enumerate USB device [ 1728.947980][ T8406] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1729.401601][ T8417] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8991'. [ 1730.021085][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.027787][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.232085][ T8434] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1730.421175][ T8439] netlink: 372 bytes leftover after parsing attributes in process `syz.5.8999'. [ 1730.460805][ T8439] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 1730.479142][ C1] vkms_vblank_simulate: vblank timer overrun [ 1730.561605][ T4098] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 1730.690199][ T3818] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 1730.752783][ T4098] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1730.764380][ T4098] usb 4-1: config 0 has no interface number 0 [ 1730.781429][ T4098] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1730.802372][ T4098] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1730.829963][ T4098] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1730.851670][ T4098] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.855606][ T3818] usb 1-1: config 7 has an invalid interface number: 252 but max is 0 [ 1730.868416][ T4098] usb 4-1: config 0 descriptor?? [ 1730.881470][ T8437] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1730.903635][ T3818] usb 1-1: config 7 has an invalid descriptor of length 48, skipping remainder of the config [ 1730.906763][ T4098] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1730.927407][ T3818] usb 1-1: config 7 has no interface number 0 [ 1730.944919][ T3818] usb 1-1: config 7 interface 252 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1730.972483][ T3818] usb 1-1: config 7 interface 252 has no altsetting 0 [ 1730.988386][ T3818] usb 1-1: string descriptor 0 read error: -22 [ 1730.997377][ T3818] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 1731.011047][ T3818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.084982][ T8450] binder: 8449:8450 unknown command 0 [ 1731.092634][ T8450] binder: 8449:8450 ioctl c0306201 200000000080 returned -22 [ 1731.099430][ T3818] usb 4-1: USB disconnect, device number 35 [ 1731.100388][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 1731.245255][ T4242] usb 1-1: USB disconnect, device number 48 [ 1731.424037][ T8460] netlink: zone id is out of range [ 1731.464715][ T8460] netlink: zone id is out of range [ 1731.517617][ T8460] netlink: set zone limit has 4 unknown bytes [ 1731.877289][ T8468] bond0: Error: Cannot enslave bond to itself. [ 1732.010028][ T8468] binder: 8467:8468 ioctl c018620b 200000000000 returned -14 [ 1732.050878][ T4098] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1732.210411][ T4098] usb 1-1: Using ep0 maxpacket: 8 [ 1732.217320][ T4098] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 1732.226696][ T4098] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 1732.250146][ T4098] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1732.262291][ T4098] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 1732.272507][ T4098] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.316213][ T8474] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9011'. [ 1732.325713][ T8474] netlink: 43 bytes leftover after parsing attributes in process `syz.5.9011'. [ 1732.337419][ T8474] netlink: 'syz.5.9011': attribute type 5 has an invalid length. [ 1732.346234][ T8474] netlink: 43 bytes leftover after parsing attributes in process `syz.5.9011'. [ 1732.517271][ T8466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1732.528772][ T8466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1732.535644][ T8478] "syz.6.9012" (8478) uses obsolete ecb(arc4) skcipher [ 1732.541438][ T8466] [U]  [ 1732.552043][ T4098] usb 1-1: string descriptor 0 read error: -71 [ 1732.615109][ T4098] usb 1-1: USB disconnect, device number 49 [ 1733.152099][ T8499] netlink: 124 bytes leftover after parsing attributes in process `syz.3.9020'. [ 1733.855880][ T8524] /dev/rnullb0: Can't open blockdev [ 1733.866387][ T8524] /dev/rnullb0: Can't open blockdev [ 1734.061538][ T8529] /dev/rnullb0: Can't open blockdev [ 1734.087882][ T8530] /dev/rnullb0: Can't open blockdev [ 1734.382014][T25842] Bluetooth: unknown link type 117 [ 1734.387426][T25842] Bluetooth: hci2: connection err: -111 [ 1734.450568][ T8539] /dev/rnullb0: Can't open blockdev [ 1734.460356][ T4099] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1734.624214][ T4099] usb 1-1: Using ep0 maxpacket: 16 [ 1734.632609][ T4099] usb 1-1: config 0 has no interfaces? [ 1734.642488][ T4099] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1734.655867][ T4099] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.680441][ T4099] usb 1-1: Product: syz [ 1734.684669][ T4099] usb 1-1: Manufacturer: syz [ 1734.700630][ T4099] usb 1-1: SerialNumber: syz [ 1734.708759][ T4099] usb 1-1: config 0 descriptor?? [ 1734.870444][ T4242] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1734.965118][ T8534] /dev/rnullb0: Can't open blockdev [ 1735.030281][ T4242] usb 4-1: Using ep0 maxpacket: 16 [ 1735.047109][ T4242] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.065060][ T4242] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 1735.088894][ T4242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 1735.109328][ T4242] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 1735.125592][ T4242] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1735.150331][ T4242] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1735.165752][ T4242] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1735.183339][ T4242] usb 4-1: Product: syz [ 1735.210353][ T4242] usb 4-1: Manufacturer: syz [ 1735.215025][ T4242] usb 4-1: SerialNumber: syz [ 1735.233852][ T4242] usb 4-1: config 0 descriptor?? [ 1735.252632][ T4242] xbox_remote_probe: endpoint_in message size==0? [ 1735.442386][ T8568] netlink: 324 bytes leftover after parsing attributes in process `syz.3.9037'. [ 1735.472685][ T8551] netlink: 324 bytes leftover after parsing attributes in process `syz.3.9037'. [ 1735.525293][ T8571] afs: Unknown parameter 'dynC' [ 1735.551121][ T8551] kAFS: unparsable volume name [ 1735.646832][ T4242] usb 4-1: USB disconnect, device number 36 [ 1735.763313][T25842] Bluetooth: hci4: Dropping invalid advertising data [ 1735.772109][T25842] Bluetooth: hci4: Malformed LE Event: 0x02 [ 1735.791930][ T8575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1735.802161][ T8575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1735.816862][ T8575] /dev/rnullb0: Can't open blockdev [ 1736.295266][ T8586] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9046'. [ 1736.999310][ T3818] usb 1-1: USB disconnect, device number 50 [ 1737.010878][T30736] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1737.374710][T30736] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1737.388996][T30736] usb 4-1: no configurations [ 1737.393833][T30736] usb 4-1: can't read configurations, error -22 [ 1737.514865][ T8604] /dev/nbd0: Can't lookup blockdev [ 1737.726595][ T8612] netlink: 220 bytes leftover after parsing attributes in process `syz.6.9056'. [ 1738.000489][T30489] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1738.057177][ T8617] netlink: 'syz.6.9058': attribute type 2 has an invalid length. [ 1738.088102][ T8619] netlink: 'syz.6.9058': attribute type 2 has an invalid length. [ 1738.161416][T30489] usb 1-1: device descriptor read/64, error -71 [ 1738.370671][T30736] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1738.410545][T30489] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1738.530546][T30736] usb 4-1: Using ep0 maxpacket: 8 [ 1738.537676][T30736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 1738.549222][T30736] usb 4-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 1738.552622][T30489] usb 1-1: device descriptor read/64, error -71 [ 1738.558889][T30736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.578117][T30736] usb 4-1: config 0 descriptor?? [ 1738.687076][T30489] usb usb1-port1: attempt power cycle [ 1738.996317][T30736] smartjoyplus 0003:6666:8802.0065: hidraw0: USB HID v0.03 Device [HID 6666:8802] on usb-dummy_hcd.3-1/input0 [ 1739.008418][T30736] smartjoyplus 0003:6666:8802.0065: no output reports found [ 1739.030752][T30489] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1739.051365][T30489] usb 1-1: device descriptor read/8, error -71 [ 1739.211020][ T3818] usb 4-1: USB disconnect, device number 38 [ 1739.290428][T30489] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1739.322195][T30489] usb 1-1: device descriptor read/8, error -71 [ 1739.432067][T30489] usb usb1-port1: unable to enumerate USB device [ 1739.951128][ T8637] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9066'. [ 1739.969854][ T8639] /dev/rnullb0: Can't open blockdev [ 1740.086257][ T8644] /dev/rnullb0: Can't open blockdev [ 1740.195343][ T8646] /dev/rnullb0: Can't open blockdev [ 1740.382234][ T8650] /dev/rnullb0: Can't open blockdev [ 1740.390640][ T8650] /dev/rnullb0: Can't open blockdev [ 1740.463021][ T8653] /dev/rnullb0: Can't open blockdev [ 1740.588756][ T8655] /dev/rnullb0: Can't open blockdev [ 1740.864335][ T8660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9075'. [ 1740.881932][ T8660] /dev/rnullb0: Can't open blockdev [ 1740.915411][ T8658] 9pnet_fd: Insufficient options for proto=fd [ 1741.015400][ T8663] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9076'. [ 1741.053527][ T30] audit: type=1800 audit(2000000323.486:7597): pid=8665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.9077" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1741.183626][ T8669] /dev/rnullb0: Can't open blockdev [ 1741.845269][ T8698] netlink: 220 bytes leftover after parsing attributes in process `syz.6.9087'. [ 1742.293366][ T8712] tmpfs: Unknown parameter 'usrquotamdȅ' [ 1742.335005][T31863] Bluetooth: hci1: command 0x0406 tx timeout [ 1742.380568][ T4099] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1742.520805][ T4099] usb 6-1: device descriptor read/64, error -71 [ 1742.579832][ T8719] 9pnet: Unknown protocol version 9p٭zMa^sion=9p2000.u [ 1742.592922][ T8719] /dev/rnullb0: Can't open blockdev [ 1742.670625][ T8726] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1742.677813][ T8726] /dev/rnullb0: Can't open blockdev [ 1742.735197][ T8729] netlink: 'syz.0.9099': attribute type 2 has an invalid length. [ 1742.770312][ T4099] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1742.788055][ T8729] netlink: 'syz.0.9099': attribute type 2 has an invalid length. [ 1742.920235][ T4099] usb 6-1: device descriptor read/64, error -71 [ 1743.031731][ T4099] usb usb6-port1: attempt power cycle [ 1743.190314][ T4242] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 1743.345008][ T4242] usb 1-1: config 150 has an invalid interface number: 204 but max is 1 [ 1743.366183][ T4242] usb 1-1: config 150 has no interface number 0 [ 1743.379771][ T4242] usb 1-1: config 150 interface 204 has no altsetting 0 [ 1743.383860][ T8753] overlayfs: failed to resolve './bus/file0': -2 [ 1743.387398][ T4242] usb 1-1: config 150 interface 1 has no altsetting 0 [ 1743.400325][ T4099] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 1743.413776][ T4242] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1743.422320][ T8753] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9105'. [ 1743.423279][ T4242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.433586][ T4099] usb 6-1: device descriptor read/8, error -71 [ 1743.446695][ T4242] usb 1-1: Product: syz [ 1743.451356][ T4242] usb 1-1: Manufacturer: syz [ 1743.456084][ T4242] usb 1-1: SerialNumber: syz [ 1743.604941][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9107'. [ 1743.627927][ T8757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9107'. [ 1743.664614][ T8757] syzkaller1: entered promiscuous mode [ 1743.671964][ T8757] syzkaller1: entered allmulticast mode [ 1743.701048][ T4099] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1743.729117][ T4242] xr_serial 1-1:150.204: xr_serial converter detected [ 1743.736330][ T4099] usb 6-1: device descriptor read/8, error -71 [ 1743.762063][ T4242] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 1743.768947][ T4242] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1743.811337][ T4242] usb 1-1: USB disconnect, device number 55 [ 1743.842993][ T4242] xr_serial 1-1:150.204: device disconnected [ 1743.851969][ T4099] usb usb6-port1: unable to enumerate USB device [ 1744.161928][ T3818] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1744.169597][ T4242] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1744.320292][ T3818] usb 4-1: Using ep0 maxpacket: 16 [ 1744.328289][ T4242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1744.339810][ T4242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1744.350198][ T3818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1744.361393][ T3818] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1744.371432][ T4242] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1744.384583][ T3818] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1744.398414][ T4242] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1744.408760][ T4242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.417261][ T3818] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1744.428186][ T3818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.437585][ T4242] usb 1-1: config 0 descriptor?? [ 1744.451418][ T3818] usb 4-1: config 0 descriptor?? [ 1744.869896][ T8763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1744.880054][ T8763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1744.984568][ T8763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1744.993432][ T8763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1745.002692][ T8763] /dev/rnullb0: Can't open blockdev [ 1745.011539][ T3818] usbhid 4-1:0.0: can't add hid device: -71 [ 1745.023916][ T3818] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1745.036566][ T3818] usb 4-1: USB disconnect, device number 39 [ 1745.215917][ T8769] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9111'. [ 1745.526474][ T8774] netlink: 'syz.6.9113': attribute type 25 has an invalid length. [ 1746.134821][ T8781] /dev/sg0: Can't lookup blockdev [ 1746.512109][ T8791] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9120'. [ 1746.889930][ T4242] usbhid 1-1:0.0: can't add hid device: -71 [ 1746.898816][ T4242] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1746.926382][ T4242] usb 1-1: USB disconnect, device number 56 [ 1747.350581][ T4242] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1747.491913][ T8821] netlink: 228 bytes leftover after parsing attributes in process `syz.6.9129'. [ 1747.530641][ T4242] usb 1-1: device descriptor read/64, error -71 [ 1747.547394][ T8821] netlink: 228 bytes leftover after parsing attributes in process `syz.6.9129'. [ 1747.549741][ T8825] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9130'. [ 1747.773373][ T4242] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1747.870182][ T4099] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1747.920243][ T4242] usb 1-1: device descriptor read/64, error -71 [ 1748.031690][ T4242] usb usb1-port1: attempt power cycle [ 1748.032256][ T4099] usb 6-1: Using ep0 maxpacket: 32 [ 1748.056345][ T4099] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1748.083137][ T4099] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1748.093022][ T4099] usb 6-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1748.107556][ T4099] usb 6-1: config 0 interface 0 has no altsetting 1 [ 1748.119898][ T4099] usb 6-1: New USB device found, idVendor=0582, idProduct=0033, bcdDevice=8e.57 [ 1748.129267][ T4099] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.137377][ T4099] usb 6-1: Product: syz [ 1748.141984][ T4099] usb 6-1: Manufacturer: syz [ 1748.146707][ T4099] usb 6-1: SerialNumber: syz [ 1748.156147][ T4099] usb 6-1: config 0 descriptor?? [ 1748.182808][ T4099] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1748.209009][ T4099] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1748.287110][T30947] udevd[30947]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1748.390651][ T4242] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1748.394271][T30736] usb 6-1: USB disconnect, device number 92 [ 1748.435087][ T4242] usb 1-1: device descriptor read/8, error -71 [ 1748.647083][ T8862] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9140'. [ 1748.690482][ T4242] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1748.732548][ T4242] usb 1-1: device descriptor read/8, error -71 [ 1748.841683][ T4242] usb usb1-port1: unable to enumerate USB device [ 1749.036328][ T8872] kvm: Disabled LAPIC found during irq injection [ 1749.165414][ T8884] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9146'. [ 1749.172254][ T8889] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9146'. [ 1749.497465][ T8894] overlayfs: failed to resolve './file0': -2 [ 1749.560037][ T8899] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9149'. [ 1749.862638][ T8911] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9154'. [ 1749.875450][ T8911] netlink: 'syz.5.9154': attribute type 22 has an invalid length. [ 1749.884584][ T8911] netlink: 14380 bytes leftover after parsing attributes in process `syz.5.9154'. [ 1750.215013][ T8925] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9159'. [ 1750.700415][ T8945] /dev/rnullb0: Can't open blockdev [ 1750.734763][ T8945] /dev/rnullb0: Can't open blockdev [ 1750.768428][ T8945] /dev/rnullb0: Can't open blockdev [ 1750.784871][ T8945] /dev/rnullb0: Can't open blockdev [ 1750.794234][ T8945] /dev/rnullb0: Can't open blockdev [ 1750.801477][ T8945] /dev/rnullb0: Can't open blockdev [ 1750.808878][ T8945] /dev/rnullb0: Can't open blockdev [ 1750.816357][ T8945] /dev/rnullb0: Can't open blockdev [ 1750.823719][ T8945] /dev/rnullb0: Can't open blockdev [ 1750.830850][ T8945] /dev/rnullb0: Can't open blockdev [ 1750.854808][ T8945] /dev/rnullb0: Can't open blockdev [ 1750.866745][ T8945] /dev/rnullb0: Can't open blockdev [ 1750.881379][ T8945] /dev/rnullb0: Can't open blockdev [ 1750.892516][ T8948] loop5: detected capacity change from 0 to 3031 [ 1750.947136][ T8948] loop5: detected capacity change from 3031 to 4903 [ 1751.079852][T30947] Buffer I/O error on dev loop5, logical block 612, async page read [ 1751.249322][T30947] Buffer I/O error on dev loop5, logical block 612, async page read [ 1751.811322][ T8965] cgroup: noprefix used incorrectly [ 1752.358237][T25842] Bluetooth: Wrong link type (-71) [ 1752.553994][T31863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1752.567426][T31863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1752.578054][T31863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1752.589360][T31863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1752.600002][T31863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1753.002786][ T9002] /dev/sg0: Can't lookup blockdev [ 1753.203465][ T9008] ALSA: mixer_oss: invalid OSS volume '' [ 1753.239080][ T9008] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 1753.245490][ T9010] 9pnet: p9_errstr2errno: server reported unknown error "WX>, PK_Wz{gANBk&ہ|nWNiۅߕ󵽕r [ 1753.350203][ T4099] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1753.437680][ T9015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9187'. [ 1753.455338][ T8982] chnl_net:caif_netlink_parms(): no params data found [ 1753.475014][ T9017] block nbd6: shutting down sockets [ 1753.520522][ T4099] usb 6-1: Using ep0 maxpacket: 8 [ 1753.528586][ T4099] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1753.538042][ T4099] usb 6-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1753.547642][ T4099] usb 6-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 1753.580174][ T4099] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1753.599379][ T4099] usb 6-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 1753.617791][ T4099] usb 6-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice= e.70 [ 1753.627046][ T4099] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.637936][ T4099] usb 6-1: Product: syz [ 1753.642387][ T4099] usb 6-1: Manufacturer: syz [ 1753.647093][ T4099] usb 6-1: SerialNumber: syz [ 1753.701211][ T4242] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1753.804544][ T8982] bridge0: port 1(bridge_slave_0) entered blocking state [ 1753.825940][ T8982] bridge0: port 1(bridge_slave_0) entered disabled state [ 1753.837840][ T8982] bridge_slave_0: entered allmulticast mode [ 1753.847050][ T8982] bridge_slave_0: entered promiscuous mode [ 1753.862663][ T8982] bridge0: port 2(bridge_slave_1) entered blocking state [ 1753.878290][ T8982] bridge0: port 2(bridge_slave_1) entered disabled state [ 1753.887773][ T8982] bridge_slave_1: entered allmulticast mode [ 1753.917629][ T8982] bridge_slave_1: entered promiscuous mode [ 1754.019470][ T9026] sp0: Synchronizing with TNC [ 1754.070960][ T9028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1754.108925][ T9028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1754.149264][ T8982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1754.200762][ T8982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1754.291905][ T8982] team0: Port device team_slave_0 added [ 1754.309925][ T8982] team0: Port device team_slave_1 added [ 1754.345278][ T4099] usb 6-1: USB disconnect, device number 93 [ 1754.387465][ T8982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1754.396675][ T8982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1754.426804][ T8982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1754.446247][ T8982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1754.454204][ T8982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1754.480650][ T8982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1754.553517][ T8982] hsr_slave_0: entered promiscuous mode [ 1754.565476][ T8982] hsr_slave_1: entered promiscuous mode [ 1754.650305][T31863] Bluetooth: hci0: command tx timeout [ 1754.783924][ T8982] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.882777][ T8982] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.998707][ T8982] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.190518][ T8982] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.212875][ T9039] /dev/rnullb0: Can't open blockdev [ 1755.221034][ T9039] /dev/rnullb0: Can't open blockdev [ 1755.248731][ T9039] /dev/rnullb0: Can't open blockdev [ 1755.504577][ T9053] /dev/rnullb0: Can't open blockdev [ 1755.599881][ T9053] /dev/rnullb0: Can't open blockdev [ 1755.764134][ T8982] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1755.777948][ T8982] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1755.815451][ T8982] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1755.852386][ T8982] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1756.049206][ T9039] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/rnullb0": -EINTR [ 1756.169814][ T9089] netlink: 220 bytes leftover after parsing attributes in process `syz.6.9197'. [ 1756.172142][ T8982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1756.251982][ T8982] 8021q: adding VLAN 0 to HW filter on device team0 [ 1756.297773][ T1349] bridge0: port 1(bridge_slave_0) entered blocking state [ 1756.305291][ T1349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1756.335549][ T1349] bridge0: port 2(bridge_slave_1) entered blocking state [ 1756.342855][ T1349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1756.613811][ T9093] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9199'. [ 1756.670739][ T4242] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1756.700789][ T4242] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1756.708448][ T4242] usb 4-1: can't read configurations, error -71 [ 1756.734239][T31863] Bluetooth: hci0: command tx timeout [ 1757.094153][ T8982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1757.146668][ T8982] veth0_vlan: entered promiscuous mode [ 1757.162504][ T8982] veth1_vlan: entered promiscuous mode [ 1757.198291][ T8982] veth0_macvtap: entered promiscuous mode [ 1757.209534][ T8982] veth1_macvtap: entered promiscuous mode [ 1757.233865][ T8982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1757.256766][ T8982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1757.275601][T12639] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.285518][T12639] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.296346][T12639] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.307693][T12639] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1757.433349][ T1349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1757.450520][ T1349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1757.515648][T12639] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1757.525977][T12639] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1757.976590][ T1018] Bluetooth: (null): Too short H5 packet [ 1757.982903][ T1018] Bluetooth: (null): Invalid header checksum [ 1757.993057][ T1018] Bluetooth: (null): Invalid header checksum [ 1758.260964][ T9134] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1758.798757][ T9149] /dev/rnullb0: Can't open blockdev [ 1758.810689][T31863] Bluetooth: hci0: command tx timeout [ 1758.913831][ T9151] /dev/rnullb0: Can't open blockdev [ 1758.991061][ T9153] /dev/rnullb0: Can't open blockdev [ 1758.997958][ T9153] nfs4: Unknown parameter '/dev/' [ 1759.376846][ T4242] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1759.562510][ T4242] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1759.580598][ T4242] usb 1-1: config 16 has an invalid interface number: 195 but max is 0 [ 1759.588913][ T4242] usb 1-1: config 16 has no interface number 0 [ 1759.612565][ T4242] usb 1-1: config 16 interface 195 altsetting 128 bulk endpoint 0xC has invalid maxpacket 1023 [ 1759.640536][ T4242] usb 1-1: config 16 interface 195 altsetting 128 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1759.676470][ T4242] usb 1-1: config 16 interface 195 altsetting 128 endpoint 0xB has an invalid bInterval 251, changing to 11 [ 1759.706414][ T4242] usb 1-1: config 16 interface 195 has no altsetting 0 [ 1759.716859][ T4242] usb 1-1: New USB device found, idVendor=0421, idProduct=044d, bcdDevice=e6.ce [ 1759.734322][ T4242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1759.759225][ T4242] usb 1-1: Product: syz [ 1759.776782][ T4242] usb 1-1: Manufacturer: syz [ 1759.785522][ T4242] usb 1-1: SerialNumber: syz [ 1759.802302][ T9155] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1759.809868][ T9155] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1760.061391][ T4242] usb 1-1: bad CDC descriptors [ 1760.086439][ T4242] usb 1-1: USB disconnect, device number 61 [ 1760.891688][T31863] Bluetooth: hci0: command tx timeout [ 1761.229434][ T9205] /dev/rnullb0: Can't open blockdev [ 1761.608343][ T9215] /dev/rnullb0: Can't open blockdev [ 1761.955944][ T9225] netlink: 4848 bytes leftover after parsing attributes in process `syz.3.9237'. [ 1762.235598][ T9239] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9238'. [ 1762.254403][ T9239] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9238'. [ 1762.266572][ T9239] netlink: 'syz.3.9238': attribute type 6 has an invalid length. [ 1762.275045][ T9239] netlink: 43 bytes leftover after parsing attributes in process `syz.3.9238'. [ 1762.426079][ T9246] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9243'. [ 1762.446507][T30516] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1762.474870][ T9246] binder: 9245:9246 ioctl c0306201 2000000002c0 returned -14 [ 1762.606274][T30516] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1762.626492][T30516] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.663205][T30516] usb 1-1: config 0 descriptor?? [ 1762.765947][ T9250] netlink: 'syz.3.9244': attribute type 29 has an invalid length. [ 1762.809663][ T9257] /dev/rnullb0: Can't open blockdev [ 1763.841426][ T9270] /dev/rnullb0: Can't open blockdev [ 1764.140994][ T9273] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1764.178627][ T9273] /dev/rnullb0: Can't open blockdev [ 1764.649375][ T9287] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9255'. [ 1764.661465][ T9287] /dev/rnullb0: Can't open blockdev [ 1764.888733][ T9290] binder: 9289:9290 ioctl c018620b 200000000000 returned -14 [ 1765.329526][ T9299] /dev/rnullb0: Can't open blockdev [ 1765.399004][ T9300] binder: BINDER_SET_CONTEXT_MGR already set [ 1765.420382][ T9300] binder: 9296:9300 ioctl 4018620d 200000000040 returned -16 [ 1765.507072][ T9300] binder: 9296:9300 ioctl 89f3 200000000140 returned -22 [ 1765.561945][T30516] usb 1-1: string descriptor 0 read error: -71 [ 1765.601549][T30516] usb 1-1: USB disconnect, device number 62 [ 1765.943768][ T30] audit: type=1800 audit(2000000348.376:7598): pid=9310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.9264" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1765.964690][ C1] vkms_vblank_simulate: vblank timer overrun [ 1766.122059][ T9319] syz.5.9266: attempt to access beyond end of device [ 1766.122059][ T9319] nbd5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 1766.173791][ T9319] EXT4-fs (nbd5): unable to read superblock [ 1766.563336][ T9334] /dev/rnullb0: Can't open blockdev [ 1767.301131][T30516] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1767.383936][ T9363] netlink: 'syz.6.9280': attribute type 10 has an invalid length. [ 1767.399238][ T9363] 8021q: adding VLAN 0 to HW filter on device team0 [ 1767.408521][ T9363] bond0: (slave team0): Enslaving as an active interface with an up link [ 1767.425214][ T9363] XFS (rnullb0): Invalid superblock magic number [ 1767.451053][T25842] Bluetooth: hci2: command 0x0405 tx timeout [ 1767.467536][T30516] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 1767.486626][T30516] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1767.499003][T30516] usb 1-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 1767.519791][T30516] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.554403][T30489] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1767.576750][T30516] usb 1-1: config 0 descriptor?? [ 1767.733129][T30489] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1767.752148][T30489] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1767.767021][T30489] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1767.786495][T30489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1767.795261][T30489] usb 4-1: SerialNumber: syz [ 1767.819715][T30489] usb 4-1: 0:2 : does not exist [ 1768.016945][T30516] monterey 0003:0566:3004.0066: unknown main item tag 0x0 [ 1768.068981][T30516] monterey 0003:0566:3004.0066: hidraw0: USB HID v0.00 Device [HID 0566:3004] on usb-dummy_hcd.0-1/input0 [ 1768.074000][T30489] usb 4-1: USB disconnect, device number 42 [ 1768.261568][ T9349] mkiss: ax0: crc mode is auto. [ 1768.316645][ T9383] /dev/rnullb0: Can't open blockdev [ 1768.325512][ T9349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1768.349041][ T9349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1768.456430][ T4099] usb 1-1: USB disconnect, device number 63 [ 1768.673298][ T9391] tipc: Started in network mode [ 1768.678272][ T9391] tipc: Node identity 000000000000003a0000000000000001, cluster identity 4711 [ 1768.687694][ T9391] tipc: Enabling of bearer rejected, failed to enable media [ 1769.248433][ T9405] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9293'. [ 1769.890448][T30516] usb 6-1: new full-speed USB device number 94 using dummy_hcd [ 1769.950406][ T3818] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1770.046984][T30516] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1770.058609][T30516] usb 6-1: not running at top speed; connect to a high speed hub [ 1770.090030][T30516] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1770.090615][ T3818] usb 4-1: device descriptor read/64, error -71 [ 1770.108707][T30516] usb 6-1: config 1 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1770.125282][T30516] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1770.135998][T30516] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1770.145486][T30516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.154104][T30516] usb 6-1: Product: 挐몥썴辪ᵫબ엨㘜ￄ⟭䏪ꈒ⧷ੑ䐎⇰槚洰벀㳓붞ᒖ梁푛㶛楚벗䋱꼔Ꟶ૆徬꿬嵔颰㻹섺灷㳲 [ 1770.177428][T30516] usb 6-1: Manufacturer: ఉ [ 1770.182824][T30516] usb 6-1: SerialNumber: ␉ [ 1770.193162][ T9415] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1770.201637][ T9415] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1770.360518][ T3818] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1770.500310][ T3818] usb 4-1: device descriptor read/64, error -71 [ 1770.615638][ T3818] usb usb4-port1: attempt power cycle [ 1770.626403][T30516] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 1770.656854][T30516] usb 6-1: USB disconnect, device number 94 [ 1770.975209][ T3818] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1771.000898][ T3818] usb 4-1: device descriptor read/8, error -71 [ 1771.260220][ T3818] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1771.302130][ T3818] usb 4-1: device descriptor read/8, error -71 [ 1771.411330][ T3818] usb usb4-port1: unable to enumerate USB device [ 1771.540581][ T9428] hpfs: Bad magic ... probably not HPFS [ 1771.634040][ T9430] /dev/rnullb0: Can't open blockdev [ 1772.120320][ T3818] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 1772.178233][ T9446] /dev/rnullb0: Can't open blockdev [ 1772.293169][ T3818] usb 1-1: not running at top speed; connect to a high speed hub [ 1772.304106][ T3818] usb 1-1: config 95 has an invalid interface number: 1 but max is 0 [ 1772.313620][ T3818] usb 1-1: config 95 has no interface number 0 [ 1772.319915][ T3818] usb 1-1: config 95 interface 1 has no altsetting 0 [ 1772.341424][ T3818] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice=79.79 [ 1772.367777][ T3818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1772.382698][ T3818] usb 1-1: Product: syz [ 1772.387212][ T3818] usb 1-1: Manufacturer: syz [ 1772.389408][ T9452] /dev/rnullb0: Can't open blockdev [ 1772.393067][ T3818] usb 1-1: SerialNumber: syz [ 1772.510367][T30516] usb 6-1: new full-speed USB device number 95 using dummy_hcd [ 1772.523026][ T9454] /dev/rnullb0: Can't open blockdev [ 1772.537183][ T9454] /dev/rnullb0: Can't open blockdev [ 1772.626529][ T9438] /dev/rnullb0: Can't open blockdev [ 1772.669272][T30516] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1772.690276][T30516] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.729784][T30516] usb 6-1: config 0 descriptor?? [ 1772.745018][ T3818] usb 1-1: USB disconnect, device number 64 [ 1772.786909][T30516] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1772.937218][T30947] udevd[30947]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:95.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1772.963960][T30516] gp8psk: usb in 128 operation failed. [ 1773.185244][T30516] gp8psk: FW Version = 211.73.119 (0xd34977) Build 2223/63/242 [ 1773.299727][T30516] gp8psk: usb in 149 operation failed. [ 1773.350430][T30516] gp8psk: failed to get FPGA version [ 1773.362818][T30516] gp8psk: usb in 138 operation failed. [ 1773.368435][T30516] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1773.409430][T30516] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1773.430903][T30516] usb 6-1: USB disconnect, device number 95 [ 1773.719462][ T9486] : renamed from lo [ 1773.739535][ T9486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9318'. [ 1773.753372][ T9486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9318'. [ 1774.260282][ T30] audit: type=1326 audit(2000000356.686:7599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9480 comm="syz.5.9317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9589f8e929 code=0x7fc00000 [ 1774.288660][ T30] audit: type=1326 audit(2000000356.686:7600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9480 comm="syz.5.9317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9589f8e929 code=0x7fc00000 [ 1774.332195][ T30] audit: type=1326 audit(2000000356.686:7601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9480 comm="syz.5.9317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9589f8e929 code=0x7fc00000 [ 1774.380292][ T30] audit: type=1326 audit(2000000356.686:7602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9480 comm="syz.5.9317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9589f8e929 code=0x7fc00000 [ 1774.437665][ T30] audit: type=1326 audit(2000000356.686:7603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9480 comm="syz.5.9317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9589f8e929 code=0x7fc00000 [ 1774.473963][ T9496] /dev/rnullb0: Can't open blockdev [ 1774.509344][ T30] audit: type=1326 audit(2000000356.686:7604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9480 comm="syz.5.9317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9589f8e929 code=0x7fc00000 [ 1774.597879][ T30] audit: type=1326 audit(2000000356.686:7605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9480 comm="syz.5.9317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9589f8e929 code=0x7fc00000 [ 1774.622893][ T30] audit: type=1326 audit(2000000356.686:7606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9480 comm="syz.5.9317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9589f8e929 code=0x7fc00000 [ 1774.646608][ T30] audit: type=1326 audit(2000000356.686:7607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9480 comm="syz.5.9317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9589f8e929 code=0x7fc00000 [ 1774.694502][ T9499] /dev/rnullb0: Can't open blockdev [ 1774.706201][ T30] audit: type=1326 audit(2000000356.686:7608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9480 comm="syz.5.9317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9589f8e929 code=0x7fc00000 [ 1774.818431][ T9503] overlay: Unknown parameter 'mask' [ 1775.435912][ T9509] /dev/rnullb0: Can't open blockdev [ 1775.790248][ T9511] /dev/rnullb0: Can't open blockdev [ 1775.797267][ T9512] /dev/rnullb0: Can't open blockdev [ 1776.105344][ T9528] /dev/nbd0: Can't lookup blockdev [ 1776.800853][T30516] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1776.841965][ T9545] /dev/rnullb0: Can't open blockdev [ 1776.981103][T30516] usb 6-1: Using ep0 maxpacket: 16 [ 1777.003697][T30516] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1777.017357][T30516] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1777.038621][T30516] usb 6-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1777.049852][T30516] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.071377][T30516] usb 6-1: config 0 descriptor?? [ 1777.109756][ T9551] /dev/rnullb0: Can't open blockdev [ 1777.212900][ T3818] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1777.380429][ T3818] usb 4-1: Using ep0 maxpacket: 32 [ 1777.391084][ T3818] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1777.452994][ T3818] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 1777.466880][ T3818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.486027][ T3818] usb 4-1: Product: syz [ 1777.493321][ T3818] usb 4-1: Manufacturer: syz [ 1777.498187][ T3818] usb 4-1: SerialNumber: syz [ 1777.539180][T30516] uclogic 0003:5543:0522.0067: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.5-1/input0 [ 1777.727727][ T9540] /dev/rnullb0: Can't open blockdev [ 1777.727880][ T9549] binder: BINDER_SET_CONTEXT_MGR already set [ 1777.735202][ T4242] usb 6-1: USB disconnect, device number 96 [ 1777.739358][ T9549] binder: 9548:9549 ioctl 4018620d 200000000040 returned -16 [ 1777.796902][ T3818] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input120 [ 1777.816934][ T5208] bcm5974 4-1:1.0: could not read from device [ 1777.827287][ T5208] bcm5974 4-1:1.0: could not read from device [ 1777.832868][ T3818] usb 4-1: USB disconnect, device number 47 [ 1777.844733][ T5208] bcm5974 4-1:1.0: could not read from device [ 1778.056562][ T9563] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1778.063730][ T9563] /dev/rnullb0: Can't open blockdev [ 1778.310397][ T3818] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1778.472343][ T3818] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1778.483156][ T3818] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1778.496728][ T3818] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1778.512890][ T3818] usb 1-1: config 1 has no interface number 1 [ 1778.525496][ T3818] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1778.538851][ T3818] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1778.555507][ T3818] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1778.565535][ T3818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1778.566671][ T9569] /dev/rnullb0: Can't open blockdev [ 1778.574259][ T3818] usb 1-1: Product: syz [ 1778.574283][ T3818] usb 1-1: Manufacturer: syz [ 1778.574300][ T3818] usb 1-1: SerialNumber: syz [ 1778.828585][ T3818] usb 1-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1778.839565][ T3818] usb 1-1: MIDIStreaming interface descriptor not found [ 1778.888082][ T3818] usb 1-1: USB disconnect, device number 65 [ 1779.188660][ T9589] tmpfs: Bad value for 'nr_blocks' [ 1779.310257][T30489] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1779.371929][ T9592] /dev/rnullb0: Can't open blockdev [ 1779.450257][T30489] usb 6-1: device descriptor read/64, error -71 [ 1779.679606][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9351'. [ 1779.695924][ T9604] /dev/rnullb0: Can't open blockdev [ 1779.713918][T30489] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 1779.850499][T30489] usb 6-1: device descriptor read/64, error -71 [ 1779.962649][T30489] usb usb6-port1: attempt power cycle [ 1780.134496][ T9607] /dev/rnullb0: Can't open blockdev [ 1780.300232][T30489] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1780.322294][T30489] usb 6-1: device descriptor read/8, error -71 [ 1780.451080][T30736] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1780.564823][T30489] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1780.605180][T30489] usb 6-1: device descriptor read/8, error -71 [ 1780.620739][T30736] usb 4-1: Using ep0 maxpacket: 32 [ 1780.633662][T30736] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1780.655970][T30736] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1780.669015][T30736] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1780.677486][T30736] usb 4-1: Product: syz [ 1780.681915][T30736] usb 4-1: Manufacturer: syz [ 1780.686559][T30736] usb 4-1: SerialNumber: syz [ 1780.694890][T30736] usb 4-1: config 0 descriptor?? [ 1780.701321][ T9609] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1780.710603][T30736] hub 4-1:0.0: bad descriptor, ignoring hub [ 1780.716569][T30736] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1780.731013][T30489] usb usb6-port1: unable to enumerate USB device [ 1780.825945][ T9621] /dev/rnullb0: Can't open blockdev [ 1780.877395][ T9623] /dev/rnullb0: Can't open blockdev [ 1780.911757][ T9609] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9353'. [ 1780.926242][ T9609] /dev/rnullb0: Can't open blockdev [ 1780.939792][ T9627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1780.955088][ T9627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1781.021056][ T9630] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1781.033336][ T9630] overlayfs: overlapping lowerdir path [ 1781.080477][T30736] usb 4-1: USB disconnect, device number 48 [ 1781.164899][T30489] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1781.284453][ T9641] fuse: Unknown parameter '0000000000000000000000300000000000000000000003' [ 1781.330331][T30489] usb 1-1: Using ep0 maxpacket: 16 [ 1781.341761][T30489] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1781.357865][T30489] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1781.378244][T30489] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1781.387843][T30489] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.410296][T30489] usb 1-1: Product: syz [ 1781.414644][T30489] usb 1-1: Manufacturer: syz [ 1781.419278][T30489] usb 1-1: SerialNumber: syz [ 1781.441357][T30489] usb 1-1: config 0 descriptor?? [ 1781.459189][T30489] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1781.472747][T30489] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1781.680350][T30736] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1781.830279][T30736] usb 4-1: Using ep0 maxpacket: 32 [ 1781.837301][T30736] usb 4-1: config 12 has an invalid interface number: 7 but max is 0 [ 1781.846048][T30736] usb 4-1: config 12 has no interface number 0 [ 1781.853373][T30736] usb 4-1: config 12 interface 7 has no altsetting 0 [ 1781.867107][T30736] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 1781.877049][T30736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.885486][T30736] usb 4-1: Product: syz [ 1781.890549][T30736] usb 4-1: Manufacturer: syz [ 1781.895227][T30736] usb 4-1: SerialNumber: syz [ 1782.069606][T30489] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1782.078773][T30489] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1782.099793][T30489] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1782.108938][ T9646] /dev/rnullb0: Can't open blockdev [ 1782.118563][T30489] em28xx 1-1:0.0: No AC97 audio processor [ 1782.245337][T30736] go7007 4-1:12.7: probe with driver go7007 failed with error -12 [ 1782.291649][T30736] usb 4-1: USB disconnect, device number 49 [ 1782.670191][ T4099] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1782.790241][T30736] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1782.820242][ T4099] usb 6-1: Using ep0 maxpacket: 16 [ 1782.827737][ T4099] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1782.838074][ T4099] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1782.844804][ T4099] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1782.854117][ T4099] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.866509][ T4099] usb 6-1: config 0 descriptor?? [ 1782.940234][T30736] usb 4-1: Using ep0 maxpacket: 8 [ 1782.950406][T30736] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1782.959722][T30736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.968079][T30736] usb 4-1: Product: syz [ 1782.972668][T30736] usb 4-1: Manufacturer: syz [ 1782.977324][T30736] usb 4-1: SerialNumber: syz [ 1782.988765][T30736] usb 4-1: config 0 descriptor?? [ 1783.075579][ T9659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1783.084707][ T9659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1783.198236][T30736] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1783.300565][T25842] Bluetooth: hci2: command 0x0405 tx timeout [ 1783.506306][ T9659] /dev/rnullb0: Can't open blockdev [ 1783.517027][ T4099] usbhid 6-1:0.0: can't add hid device: -71 [ 1783.524409][ T4099] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1783.539912][ T4099] usb 6-1: USB disconnect, device number 101 [ 1783.604584][T30736] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1784.335246][ T3818] usb 1-1: USB disconnect, device number 66 [ 1784.354041][ T3818] em28xx 1-1:0.0: Disconnecting em28xx [ 1784.384662][ T3818] em28xx 1-1:0.0: Freeing device [ 1784.610425][ T9672] /dev/rnullb0: Can't open blockdev [ 1784.784596][T30736] usb 4-1: USB disconnect, device number 50 [ 1785.187427][ T9682] netlink: 256 bytes leftover after parsing attributes in process `syz.5.9374'. [ 1785.339704][ T9689] /dev/rnullb0: Can't open blockdev [ 1785.485289][ T9693] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1785.514085][ T9695] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9378'. [ 1785.523917][ T9693] /dev/rnullb0: Can't open blockdev [ 1785.758286][ T9702] /dev/rnullb0: Can't open blockdev [ 1786.332493][T30736] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1786.510351][T30736] usb 4-1: Using ep0 maxpacket: 8 [ 1786.560950][T30736] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1786.571938][T30736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1786.583317][T30736] usb 4-1: Product: syz [ 1786.587619][T30736] usb 4-1: Manufacturer: syz [ 1786.594384][T30736] usb 4-1: SerialNumber: syz [ 1786.611332][T30736] usb 4-1: config 0 descriptor?? [ 1786.621101][T30736] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1786.763474][ T3818] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1786.935339][ T3818] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1786.944506][ T3818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.960944][ T3818] usb 6-1: config 0 descriptor?? [ 1787.293993][ T9710] /dev/rnullb0: Can't open blockdev [ 1787.839281][ T9706] /dev/rnullb0: Can't open blockdev [ 1787.850375][T30736] gspca_sonixj: reg_w1 err -71 [ 1787.891768][T30736] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1787.900803][ T9719] Unsupported ieee802154 address type: 0 [ 1787.922474][ T9719] /dev/rnullb0: Can't open blockdev [ 1787.938205][T30736] usb 4-1: USB disconnect, device number 51 [ 1787.972042][ T9721] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9389'. [ 1788.018691][ T1018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1788.091780][ T9723] /dev/rnullb0: Can't open blockdev [ 1788.187755][ T9726] binder: 9725:9726 ioctl c018620b 200000000000 returned -14 [ 1788.430840][ T9732] netlink: 666 bytes leftover after parsing attributes in process `syz.6.9393'. [ 1788.442759][ T9732] /dev/rnullb0: Can't open blockdev [ 1788.449802][ T9732] tmpfs: Bad value for 'mpol' [ 1788.539873][ T9735] syzkaller0: entered allmulticast mode [ 1789.500769][ T4242] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 1789.631983][ T9749] netlink: 220 bytes leftover after parsing attributes in process `syz.6.9399'. [ 1789.680249][ T4242] usb 1-1: device descriptor read/64, error -71 [ 1789.790530][T30489] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1789.872035][ T3818] usb 6-1: string descriptor 0 read error: -71 [ 1789.940457][ T4242] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 1789.950532][ T3818] usb 6-1: USB disconnect, device number 102 [ 1789.990445][T30489] usb 4-1: Using ep0 maxpacket: 16 [ 1790.028725][T30489] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1790.094832][T30489] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1790.114928][ T4242] usb 1-1: device descriptor read/64, error -71 [ 1790.169394][T30489] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1790.192500][ T9753] /dev/rnullb0: Can't open blockdev [ 1790.212680][T30489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1790.233020][T30489] usb 4-1: Product: syz [ 1790.243157][T30489] usb 4-1: Manufacturer: syz [ 1790.251124][ T4242] usb usb1-port1: attempt power cycle [ 1790.271737][T30489] usb 4-1: SerialNumber: syz [ 1790.513162][ T9763] ./cgroup: Can't lookup blockdev [ 1790.521881][ T9763] ./cgroup: Can't lookup blockdev [ 1790.781471][ T4242] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 1790.811384][ T4242] usb 1-1: device descriptor read/8, error -71 [ 1790.834625][ T9747] openvswitch: netlink: Unknown key attributes 2 [ 1790.848721][ T9747] sctp: [Deprecated]: syz.3.9398 (pid 9747) Use of int in maxseg socket option. [ 1790.848721][ T9747] Use struct sctp_assoc_value instead [ 1791.080254][ T4242] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1791.132456][ T4242] usb 1-1: device descriptor read/8, error -71 [ 1791.251465][ T4242] usb usb1-port1: unable to enumerate USB device [ 1791.459805][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.479169][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.730744][T30489] usb 4-1: USB disconnect, device number 52 [ 1791.781123][ T9587] udevd[9587]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1792.125407][ T9786] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9409'. [ 1792.288777][ T9789] /dev/rnullb0: Can't open blockdev [ 1792.474523][ T9797] /dev/rnullb0: Can't open blockdev [ 1792.728253][ T9806] /dev/rnullb0: Can't open blockdev [ 1793.120189][T30489] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1793.280336][T30489] usb 4-1: Using ep0 maxpacket: 32 [ 1793.296282][T30489] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1793.328918][ T9810] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9418'. [ 1793.331035][T30489] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1793.356912][T30489] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1793.376735][T30489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.407384][T30489] usb 4-1: config 0 descriptor?? [ 1793.815132][ T9824] /dev/rnullb0: Can't open blockdev [ 1793.855235][T30489] corsair-cpro 0003:1B1C:0C10.0068: unknown main item tag 0x1 [ 1793.867545][T30489] corsair-cpro 0003:1B1C:0C10.0068: item fetching failed at offset 4/5 [ 1793.878853][T30489] corsair-cpro 0003:1B1C:0C10.0068: probe with driver corsair-cpro failed with error -22 [ 1793.889271][ T9826] /dev/rnullb0: Can't open blockdev [ 1794.048671][ T9808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1794.057925][ T9808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1794.069114][ T9808] netlink: 176 bytes leftover after parsing attributes in process `syz.3.9417'. [ 1794.085406][ T3818] usb 4-1: USB disconnect, device number 53 [ 1794.180232][T30489] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1794.206264][ T9832] /dev/rnullb0: Can't open blockdev [ 1794.270743][ T9834] /dev/sg0: Can't lookup blockdev [ 1794.329381][ T9836] FAT-fs (nullb0): bogus number of reserved sectors [ 1794.340317][T30489] usb 1-1: Using ep0 maxpacket: 8 [ 1794.345803][ T9836] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1794.349921][T30489] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1794.362905][ T9837] FAT-fs (nullb0): bogus number of reserved sectors [ 1794.366328][T30489] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.369967][ T9837] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1794.382004][T30489] usb 1-1: Product: syz [ 1794.389214][T30489] usb 1-1: Manufacturer: syz [ 1794.396127][T30489] usb 1-1: SerialNumber: syz [ 1794.406361][T30489] usb 1-1: config 0 descriptor?? [ 1794.471973][ T9839] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9428'. [ 1794.623271][T30489] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1794.729141][ T9843] /dev/rnullb0: Can't open blockdev [ 1794.845953][ T9846] /dev/rnullb0: Can't open blockdev [ 1795.516965][ T9853] /dev/rnullb0: Can't open blockdev [ 1795.851283][T25842] Bluetooth: hci2: command 0x0405 tx timeout [ 1796.032146][ T9861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1796.073550][ T9861] /dev/rnullb0: Can't open blockdev [ 1796.080598][ T9863] /dev/rnullb0: Can't open blockdev [ 1796.107711][ T9863] tipc: Started in network mode [ 1796.116482][ T9863] tipc: Node identity 4, cluster identity 4711 [ 1796.125358][ T9863] tipc: Node number set to 4 [ 1796.204485][ T9865] netlink: 220 bytes leftover after parsing attributes in process `syz.6.9439'. [ 1796.226852][T31863] Bluetooth: hci2: Malformed Event: 0x2f [ 1796.413447][T30489] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1796.725518][ T9872] /dev/rnullb0: Can't open blockdev [ 1796.936583][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 1796.936604][ T30] audit: type=1326 audit(2000000379.366:7622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9827 comm="syz.0.9424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8036b8e929 code=0x7fc00000 [ 1796.990510][T30736] usb 1-1: USB disconnect, device number 71 [ 1797.003765][ T9879] FAULT_INJECTION: forcing a failure. [ 1797.003765][ T9879] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.023927][ T9879] CPU: 0 UID: 0 PID: 9879 Comm: syz.3.9444 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 1797.023954][ T9879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1797.023966][ T9879] Call Trace: [ 1797.023974][ T9879] [ 1797.023983][ T9879] dump_stack_lvl+0x189/0x250 [ 1797.024016][ T9879] ? __pfx____ratelimit+0x10/0x10 [ 1797.024037][ T9879] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1797.024059][ T9879] ? __pfx__printk+0x10/0x10 [ 1797.024088][ T9879] ? __pfx___might_resched+0x10/0x10 [ 1797.024113][ T9879] ? fs_reclaim_acquire+0x7d/0x100 [ 1797.024139][ T9879] should_fail_ex+0x414/0x560 [ 1797.024164][ T9879] should_failslab+0xa8/0x100 [ 1797.024184][ T9879] __kmalloc_noprof+0xcb/0x4f0 [ 1797.024209][ T9879] ? nvram_misc_read+0x8c/0x1a0 [ 1797.024231][ T9879] ? bpf_lsm_file_permission+0x9/0x20 [ 1797.024261][ T9879] nvram_misc_read+0x8c/0x1a0 [ 1797.024282][ T9879] ? __pfx_nvram_misc_read+0x10/0x10 [ 1797.024308][ T9879] vfs_read+0x200/0x980 [ 1797.024338][ T9879] ? __pfx_vfs_read+0x10/0x10 [ 1797.024360][ T9879] ? __fget_files+0x2a/0x420 [ 1797.024387][ T9879] ? __fget_files+0x2a/0x420 [ 1797.024408][ T9879] ? __fget_files+0x3a0/0x420 [ 1797.024429][ T9879] ? __fget_files+0x2a/0x420 [ 1797.024462][ T9879] ksys_read+0x145/0x250 [ 1797.024486][ T9879] ? __pfx_ksys_read+0x10/0x10 [ 1797.024503][ T9879] ? rcu_is_watching+0x15/0xb0 [ 1797.024534][ T9879] ? do_syscall_64+0xbe/0x3b0 [ 1797.024561][ T9879] do_syscall_64+0xfa/0x3b0 [ 1797.024580][ T9879] ? lockdep_hardirqs_on+0x9c/0x150 [ 1797.024598][ T9879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.024617][ T9879] ? clear_bhb_loop+0x60/0xb0 [ 1797.024641][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.024669][ T9879] RIP: 0033:0x7fe3c438e929 [ 1797.024687][ T9879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1797.024704][ T9879] RSP: 002b:00007fe3c5175038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1797.024725][ T9879] RAX: ffffffffffffffda RBX: 00007fe3c45b5fa0 RCX: 00007fe3c438e929 [ 1797.024737][ T9879] RDX: 0000000000002020 RSI: 0000200000002840 RDI: 0000000000000005 [ 1797.024749][ T9879] RBP: 00007fe3c5175090 R08: 0000000000000000 R09: 0000000000000000 [ 1797.024761][ T9879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1797.024772][ T9879] R13: 0000000000000000 R14: 00007fe3c45b5fa0 R15: 00007fff7005a958 [ 1797.024802][ T9879] [ 1797.342792][ T9884] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1797.418498][ T9890] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9448'. [ 1797.481147][ T9894] netlink: 220 bytes leftover after parsing attributes in process `syz.6.9449'. [ 1797.783982][ T9909] /dev/rnullb0: Can't open blockdev [ 1797.792528][ T30] audit: type=1326 audit(2000000380.226:7623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9908 comm="syz.3.9454" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3c438e929 code=0x0 [ 1797.848233][ T9903] /dev/rnullb0: Can't open blockdev [ 1797.872292][ T9910] netlink: 596 bytes leftover after parsing attributes in process `syz.3.9454'. [ 1797.988181][ T9917] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9456'. [ 1798.007461][ T9917] FAULT_INJECTION: forcing a failure. [ 1798.007461][ T9917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1798.025881][ T9917] CPU: 1 UID: 0 PID: 9917 Comm: syz.0.9456 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 1798.025912][ T9917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1798.025924][ T9917] Call Trace: [ 1798.025933][ T9917] [ 1798.025942][ T9917] dump_stack_lvl+0x189/0x250 [ 1798.025975][ T9917] ? __pfx____ratelimit+0x10/0x10 [ 1798.025998][ T9917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1798.026024][ T9917] ? __pfx__printk+0x10/0x10 [ 1798.026052][ T9917] ? __might_fault+0xb0/0x130 [ 1798.026093][ T9917] should_fail_ex+0x414/0x560 [ 1798.026120][ T9917] _copy_from_user+0x2d/0xb0 [ 1798.026141][ T9917] inet6_ioctl+0x180/0x280 [ 1798.026160][ T9917] ? __pfx_inet6_ioctl+0x10/0x10 [ 1798.026176][ T9917] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1798.026214][ T9917] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1798.026243][ T9917] sock_do_ioctl+0xd9/0x300 [ 1798.026275][ T9917] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1798.026301][ T9917] ? __lock_acquire+0xab9/0xd20 [ 1798.026342][ T9917] sock_ioctl+0x576/0x790 [ 1798.026373][ T9917] ? __pfx_sock_ioctl+0x10/0x10 [ 1798.026401][ T9917] ? __fget_files+0x2a/0x420 [ 1798.026424][ T9917] ? __fget_files+0x3a0/0x420 [ 1798.026444][ T9917] ? __fget_files+0x2a/0x420 [ 1798.026470][ T9917] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1798.026494][ T9917] ? __pfx_sock_ioctl+0x10/0x10 [ 1798.026520][ T9917] __se_sys_ioctl+0xfc/0x170 [ 1798.026539][ T9917] do_syscall_64+0xfa/0x3b0 [ 1798.026559][ T9917] ? lockdep_hardirqs_on+0x9c/0x150 [ 1798.026578][ T9917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.026597][ T9917] ? clear_bhb_loop+0x60/0xb0 [ 1798.026620][ T9917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.026638][ T9917] RIP: 0033:0x7f8036b8e929 [ 1798.026655][ T9917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1798.026671][ T9917] RSP: 002b:00007f8037942038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1798.026692][ T9917] RAX: ffffffffffffffda RBX: 00007f8036db5fa0 RCX: 00007f8036b8e929 [ 1798.026706][ T9917] RDX: 0000200000000540 RSI: 000000000000890b RDI: 0000000000000009 [ 1798.026719][ T9917] RBP: 00007f8037942090 R08: 0000000000000000 R09: 0000000000000000 [ 1798.026731][ T9917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1798.026743][ T9917] R13: 0000000000000000 R14: 00007f8036db5fa0 R15: 00007ffde5830238 [ 1798.026784][ T9917] [ 1798.267297][ C1] vkms_vblank_simulate: vblank timer overrun [ 1798.373660][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9459'. [ 1798.454670][ T9925] /dev/rnullb0: Can't open blockdev [ 1798.523732][ T9928] ieee802154 phy0 wpan0: encryption failed: -22 [ 1798.531928][ T9928] /dev/rnullb0: Can't open blockdev [ 1798.577690][ T9930] /dev/rnullb0: Can't open blockdev [ 1798.632977][ T9932] FAULT_INJECTION: forcing a failure. [ 1798.632977][ T9932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1798.646688][ T9932] CPU: 0 UID: 0 PID: 9932 Comm: syz.0.9462 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 1798.646717][ T9932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1798.646729][ T9932] Call Trace: [ 1798.646737][ T9932] [ 1798.646746][ T9932] dump_stack_lvl+0x189/0x250 [ 1798.646777][ T9932] ? __pfx____ratelimit+0x10/0x10 [ 1798.646796][ T9932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1798.646821][ T9932] ? __pfx__printk+0x10/0x10 [ 1798.646856][ T9932] should_fail_ex+0x414/0x560 [ 1798.646891][ T9932] _copy_to_user+0x31/0xb0 [ 1798.646912][ T9932] nvram_misc_read+0xf1/0x1a0 [ 1798.646935][ T9932] ? __pfx_nvram_misc_read+0x10/0x10 [ 1798.646959][ T9932] vfs_read+0x200/0x980 [ 1798.646989][ T9932] ? __pfx_vfs_read+0x10/0x10 [ 1798.647010][ T9932] ? __fget_files+0x2a/0x420 [ 1798.647034][ T9932] ? __fget_files+0x2a/0x420 [ 1798.647054][ T9932] ? __fget_files+0x3a0/0x420 [ 1798.647075][ T9932] ? __fget_files+0x2a/0x420 [ 1798.647107][ T9932] ksys_read+0x145/0x250 [ 1798.647129][ T9932] ? __pfx_ksys_read+0x10/0x10 [ 1798.647154][ T9932] ? do_syscall_64+0xbe/0x3b0 [ 1798.647178][ T9932] do_syscall_64+0xfa/0x3b0 [ 1798.647196][ T9932] ? lockdep_hardirqs_on+0x9c/0x150 [ 1798.647216][ T9932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.647235][ T9932] ? clear_bhb_loop+0x60/0xb0 [ 1798.647257][ T9932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1798.647274][ T9932] RIP: 0033:0x7f8036b8e929 [ 1798.647299][ T9932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1798.647315][ T9932] RSP: 002b:00007f8037942038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1798.647335][ T9932] RAX: ffffffffffffffda RBX: 00007f8036db5fa0 RCX: 00007f8036b8e929 [ 1798.647344][ T9932] RDX: 0000000000002020 RSI: 0000200000002840 RDI: 0000000000000005 [ 1798.647351][ T9932] RBP: 00007f8037942090 R08: 0000000000000000 R09: 0000000000000000 [ 1798.647358][ T9932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1798.647365][ T9932] R13: 0000000000000000 R14: 00007f8036db5fa0 R15: 00007ffde5830238 [ 1798.647383][ T9932] [ 1799.406053][ T9947] /dev/rnullb0: Can't open blockdev [ 1799.457758][ T9950] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9468'. [ 1799.474356][ T9950] FAULT_INJECTION: forcing a failure. [ 1799.474356][ T9950] name failslab, interval 1, probability 0, space 0, times 0 [ 1799.489185][ T9950] CPU: 0 UID: 0 PID: 9950 Comm: syz.0.9468 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 1799.489214][ T9950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1799.489226][ T9950] Call Trace: [ 1799.489234][ T9950] [ 1799.489243][ T9950] dump_stack_lvl+0x189/0x250 [ 1799.489276][ T9950] ? __pfx____ratelimit+0x10/0x10 [ 1799.489298][ T9950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1799.489324][ T9950] ? __pfx__printk+0x10/0x10 [ 1799.489354][ T9950] ? __pfx___might_resched+0x10/0x10 [ 1799.489379][ T9950] ? fs_reclaim_acquire+0x7d/0x100 [ 1799.489406][ T9950] should_fail_ex+0x414/0x560 [ 1799.489430][ T9950] should_failslab+0xa8/0x100 [ 1799.489451][ T9950] __kmalloc_noprof+0xcb/0x4f0 [ 1799.489477][ T9950] ? fib6_info_alloc+0x30/0xf0 [ 1799.489503][ T9950] fib6_info_alloc+0x30/0xf0 [ 1799.489524][ T9950] ip6_route_info_create+0x142/0x860 [ 1799.489546][ T9950] ? l3mdev_fib_table_by_index+0x34/0x2d0 [ 1799.489583][ T9950] ip6_route_add+0x49/0x1b0 [ 1799.489618][ T9950] ipv6_route_ioctl+0x35c/0x480 [ 1799.489647][ T9950] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 1799.489706][ T9950] inet6_ioctl+0x219/0x280 [ 1799.489724][ T9950] ? __pfx_inet6_ioctl+0x10/0x10 [ 1799.489739][ T9950] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1799.489776][ T9950] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1799.489804][ T9950] sock_do_ioctl+0xd9/0x300 [ 1799.489837][ T9950] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1799.489861][ T9950] ? __lock_acquire+0xab9/0xd20 [ 1799.489901][ T9950] sock_ioctl+0x576/0x790 [ 1799.489931][ T9950] ? __pfx_sock_ioctl+0x10/0x10 [ 1799.489959][ T9950] ? __fget_files+0x2a/0x420 [ 1799.489982][ T9950] ? __fget_files+0x3a0/0x420 [ 1799.490003][ T9950] ? __fget_files+0x2a/0x420 [ 1799.490030][ T9950] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1799.490060][ T9950] ? __pfx_sock_ioctl+0x10/0x10 [ 1799.490085][ T9950] __se_sys_ioctl+0xfc/0x170 [ 1799.490106][ T9950] do_syscall_64+0xfa/0x3b0 [ 1799.490126][ T9950] ? lockdep_hardirqs_on+0x9c/0x150 [ 1799.490147][ T9950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1799.490166][ T9950] ? clear_bhb_loop+0x60/0xb0 [ 1799.490189][ T9950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1799.490207][ T9950] RIP: 0033:0x7f8036b8e929 [ 1799.490226][ T9950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1799.490243][ T9950] RSP: 002b:00007f8037942038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1799.490264][ T9950] RAX: ffffffffffffffda RBX: 00007f8036db5fa0 RCX: 00007f8036b8e929 [ 1799.490278][ T9950] RDX: 0000200000000540 RSI: 000000000000890b RDI: 0000000000000009 [ 1799.490291][ T9950] RBP: 00007f8037942090 R08: 0000000000000000 R09: 0000000000000000 [ 1799.490303][ T9950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1799.490314][ T9950] R13: 0000000000000000 R14: 00007f8036db5fa0 R15: 00007ffde5830238 [ 1799.490345][ T9950] [ 1799.889795][ T9959] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1799.959364][ T9962] /dev/rnullb0: Can't open blockdev [ 1799.966387][ T9962] delete_channel: no stack [ 1799.971102][ T9962] delete_channel: no stack [ 1799.976172][ T9962] nfs: Unknown parameter '/dev/rnullb0' [ 1800.436893][ T9973] /dev/rnullb0: Can't open blockdev [ 1800.640385][ T9978] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9476'. [ 1800.747866][ T9981] /dev/rnullb0: Can't open blockdev [ 1800.887157][ T9985] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9479'. [ 1800.940716][ T9985] FAULT_INJECTION: forcing a failure. [ 1800.940716][ T9985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1800.974560][ T9985] CPU: 0 UID: 0 PID: 9985 Comm: syz.3.9479 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 1800.974590][ T9985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1800.974602][ T9985] Call Trace: [ 1800.974610][ T9985] [ 1800.974619][ T9985] dump_stack_lvl+0x189/0x250 [ 1800.974652][ T9985] ? __pfx____ratelimit+0x10/0x10 [ 1800.974673][ T9985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1800.974700][ T9985] ? __pfx__printk+0x10/0x10 [ 1800.974741][ T9985] should_fail_ex+0x414/0x560 [ 1800.974767][ T9985] _copy_to_user+0x31/0xb0 [ 1800.974789][ T9985] simple_read_from_buffer+0xe1/0x170 [ 1800.974819][ T9985] proc_fail_nth_read+0x1df/0x250 [ 1800.974850][ T9985] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1800.974880][ T9985] ? rw_verify_area+0x2a6/0x4d0 [ 1800.974899][ T9985] ? __lock_acquire+0xab9/0xd20 [ 1800.974918][ T9985] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1800.974946][ T9985] vfs_read+0x200/0x980 [ 1800.974973][ T9985] ? __pfx___mutex_lock+0x10/0x10 [ 1800.974995][ T9985] ? __pfx_vfs_read+0x10/0x10 [ 1800.975018][ T9985] ? __fget_files+0x2a/0x420 [ 1800.975048][ T9985] ? __fget_files+0x3a0/0x420 [ 1800.975069][ T9985] ? __fget_files+0x2a/0x420 [ 1800.975104][ T9985] ksys_read+0x145/0x250 [ 1800.975123][ T9985] ? __fget_files+0x3a0/0x420 [ 1800.975148][ T9985] ? __pfx_ksys_read+0x10/0x10 [ 1800.975175][ T9985] ? do_syscall_64+0xbe/0x3b0 [ 1800.975201][ T9985] do_syscall_64+0xfa/0x3b0 [ 1800.975220][ T9985] ? lockdep_hardirqs_on+0x9c/0x150 [ 1800.975241][ T9985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1800.975260][ T9985] ? clear_bhb_loop+0x60/0xb0 [ 1800.975284][ T9985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1800.975302][ T9985] RIP: 0033:0x7fe3c438d33c [ 1800.975320][ T9985] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1800.975336][ T9985] RSP: 002b:00007fe3c5175030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1800.975358][ T9985] RAX: ffffffffffffffda RBX: 00007fe3c45b5fa0 RCX: 00007fe3c438d33c [ 1800.975372][ T9985] RDX: 000000000000000f RSI: 00007fe3c51750a0 RDI: 000000000000000a [ 1800.975384][ T9985] RBP: 00007fe3c5175090 R08: 0000000000000000 R09: 0000000000000000 [ 1800.975397][ T9985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1800.975409][ T9985] R13: 0000000000000000 R14: 00007fe3c45b5fa0 R15: 00007fff7005a958 [ 1800.975442][ T9985] [ 1801.319868][ T9994] fuse: Unknown parameter 'group_iI@o""/d' [ 1801.450794][T10003] /dev/rnullb0: Can't open blockdev [ 1801.588697][T10005] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9486'. [ 1801.646400][T10007] /dev/rnullb0: Can't open blockdev [ 1801.655381][T10008] /dev/rnullb0: Can't open blockdev [ 1801.973108][T10018] C: renamed from team_slave_0 (while UP) [ 1802.144648][T10018] netlink: 'syz.3.9489': attribute type 1 has an invalid length. [ 1802.185189][T10018] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1802.213041][ T4098] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1802.406626][ T4098] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1802.434640][ T4098] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.470709][ T4098] usb 6-1: Product: syz [ 1802.485108][ T4098] usb 6-1: Manufacturer: syz [ 1802.489760][ T4098] usb 6-1: SerialNumber: syz [ 1802.556550][ T4098] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1802.636422][T30516] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1802.741793][T10023] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9490'. [ 1802.854417][ T4242] usb 6-1: USB disconnect, device number 103 [ 1803.347694][T10038] /dev/rnullb0: Can't open blockdev [ 1803.595807][T10045] /dev/rnullb0: Can't open blockdev [ 1803.694041][T30516] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1803.715965][T30516] ath9k_htc: Failed to initialize the device [ 1803.726485][ T4242] usb 6-1: ath9k_htc: USB layer deinitialized [ 1803.824425][T10052] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9500'. [ 1804.094602][T10059] /dev/rnullb0: Can't open blockdev [ 1804.190499][T10062] /dev/rnullb0: Can't open blockdev [ 1804.620401][T10071] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9507'. [ 1804.947597][T31863] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1804.996797][T10083] /dev/rnullb0: Can't open blockdev [ 1805.141169][T10086] /dev/rnullb0: Can't open blockdev [ 1805.452417][T10094] /dev/rnullb0: Can't open blockdev [ 1805.499995][T10095] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 1805.519714][T10095] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1806.697080][T10128] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9521'. [ 1806.714517][T10129] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9521'. [ 1806.724578][T10131] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9522'. [ 1806.951413][T10138] /dev/rnullb0: Can't open blockdev [ 1807.074869][T10141] /dev/rnullb0: Can't open blockdev [ 1807.126258][T10143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1807.187779][T10143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1807.245656][T10151] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9527'. [ 1807.291547][T10153] /dev/rnullb0: Can't open blockdev [ 1807.360215][T30736] usb 6-1: new full-speed USB device number 104 using dummy_hcd [ 1807.459936][T10158] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9531'. [ 1807.476666][T10163] /dev/rnullb0: Can't open blockdev [ 1807.555685][T30736] usb 6-1: config 0 has no interfaces? [ 1807.583210][T30736] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1807.605355][T30736] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1807.627789][T30736] usb 6-1: Product: syz [ 1807.657955][T30736] usb 6-1: Manufacturer: syz [ 1807.685494][T30736] usb 6-1: SerialNumber: syz [ 1807.711534][T30736] usb 6-1: config 0 descriptor?? [ 1807.746669][T10171] /dev/rnullb0: Can't open blockdev [ 1807.906618][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9536'. [ 1807.931190][T30736] usb 6-1: USB disconnect, device number 104 [ 1808.129182][T10191] /dev/rnullb0: Can't open blockdev [ 1808.229861][T10195] /dev/rnullb0: Can't open blockdev [ 1808.583388][T10174] ceph: No mds server is up or the cluster is laggy [ 1808.605564][T10201] netlink: 220 bytes leftover after parsing attributes in process `syz.6.9542'. [ 1808.733113][T10203] /dev/rnullb0: Can't open blockdev [ 1809.041332][T10211] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1809.086180][T10212] /dev/rnullb0: Can't open blockdev [ 1809.229946][T10216] /dev/rnullb0: Can't open blockdev [ 1809.281739][T10220] /dev/rnullb0: Can't open blockdev [ 1809.491817][T10226] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9553'. [ 1810.115603][T31863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1810.130789][T31863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1810.142600][T31863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1810.155586][T31863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1810.165928][T10232] /dev/rnullb0: Can't open blockdev [ 1810.182690][T31863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1810.276690][T10237] /dev/rnullb0: Can't open blockdev [ 1810.439743][ T3141] bridge0: port 3(syz_tun) entered disabled state [ 1810.482194][ T3141] syz_tun (unregistering): left allmulticast mode [ 1810.491341][ T3141] syz_tun (unregistering): left promiscuous mode [ 1810.498088][ T3141] bridge0: port 3(syz_tun) entered disabled state [ 1810.662666][ T4098] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1810.745987][T12639] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1810.758367][T10249] /dev/rnullb0: Can't open blockdev [ 1810.818691][T10233] chnl_net:caif_netlink_parms(): no params data found [ 1810.825690][T10251] /dev/rnullb0: Can't open blockdev [ 1810.848577][ T4098] usb 4-1: Using ep0 maxpacket: 16 [ 1810.879010][ T4098] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1810.910787][ T4098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.918931][ T4098] usb 4-1: Product: syz [ 1810.935340][ T4098] usb 4-1: Manufacturer: syz [ 1810.956723][ T4098] usb 4-1: SerialNumber: syz [ 1810.984200][T12639] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1811.008555][ T4098] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1811.015808][ T4098] r8152-cfgselector 4-1: config 0 descriptor?? [ 1811.046598][T10257] fuse: Bad value for 'group_id' [ 1811.053344][T10257] fuse: Bad value for 'group_id' [ 1811.142290][T12639] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1811.252506][T12639] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1811.309343][T10233] bridge0: port 1(bridge_slave_0) entered blocking state [ 1811.318670][T10233] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.327322][T10233] bridge_slave_0: entered allmulticast mode [ 1811.336003][T10233] bridge_slave_0: entered promiscuous mode [ 1811.345520][T10233] bridge0: port 2(bridge_slave_1) entered blocking state [ 1811.353363][T10233] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.362595][T10233] bridge_slave_1: entered allmulticast mode [ 1811.371676][T10233] bridge_slave_1: entered promiscuous mode [ 1811.461018][T10233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1811.533537][T10233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1811.736813][T10233] team0: Port device team_slave_0 added [ 1811.745264][ T4098] r8152-cfgselector 4-1: USB disconnect, device number 54 [ 1811.764898][T10233] team0: Port device team_slave_1 added [ 1811.877792][T12639] bridge_slave_1: left allmulticast mode [ 1811.888151][T12639] bridge_slave_1: left promiscuous mode [ 1811.894961][T12639] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.911733][T12639] bridge_slave_0: left allmulticast mode [ 1811.917435][T12639] bridge_slave_0: left promiscuous mode [ 1811.925278][T12639] bridge0: port 1(bridge_slave_0) entered disabled state [ 1812.264192][T25842] Bluetooth: hci4: command tx timeout [ 1812.424509][T10273] binder: 10272:10273 ioctl c018620b 200000000000 returned -14 [ 1812.474577][T12639] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1812.612652][T10277] /dev/rnullb0: Can't open blockdev [ 1812.969019][T12639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1812.988111][T12639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1812.999794][T12639] bond0 (unregistering): Released all slaves [ 1813.025133][T10233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1813.035097][T10233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1813.069342][T10233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1813.112709][T10233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1813.119987][T10233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1813.147190][T10233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1813.189141][T10283] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1813.206380][T12639] tipc: Left network mode [ 1813.377276][T10233] hsr_slave_0: entered promiscuous mode [ 1813.401454][T10233] hsr_slave_1: entered promiscuous mode [ 1813.420788][T10233] debugfs: 'hsr0' already exists in 'hsr' [ 1813.426862][T10233] Cannot create hsr debugfs directory [ 1813.655288][T12639] hsr_slave_0: left promiscuous mode [ 1813.716035][T12639] hsr_slave_1: left promiscuous mode [ 1813.729775][T12639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1813.748406][T10298] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9572'. [ 1813.758551][T12639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1813.777929][T12639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1813.789913][T12639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1813.815638][T12639] veth1_macvtap: left promiscuous mode [ 1813.826054][T12639] veth0_macvtap: left promiscuous mode [ 1813.833022][T12639] veth1_vlan: left promiscuous mode [ 1813.838563][T12639] veth0_vlan: left promiscuous mode [ 1814.119517][T10308] /dev/rnullb0: Can't open blockdev [ 1814.154167][T10308] MTD: Couldn't look up './file0': -15 [ 1814.330297][T25842] Bluetooth: hci4: command tx timeout [ 1814.366225][T10313] tmpfs: Unknown parameter 'nr' [ 1814.390022][T10314] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1814.427211][T10314] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1814.574242][T10316] netlink: 220 bytes leftover after parsing attributes in process `syz.6.9576'. [ 1814.649245][T25842] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 1815.058645][T12639] team0 (unregistering): Port device team_slave_1 removed [ 1815.064242][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9577'. [ 1815.148318][T12639] team0 (unregistering): Port device team_slave_0 removed [ 1816.302491][T10332] /dev/rnullb0: Can't open blockdev [ 1816.410737][T25842] Bluetooth: hci4: command tx timeout [ 1816.495289][T10338] /dev/rnullb0: Can't open blockdev [ 1816.610406][T30489] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1816.803820][T30489] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1816.835417][T30489] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1816.868015][T30489] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1816.906480][T30489] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1816.937415][T30489] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1816.973181][T30489] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1816.990154][T30489] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1817.014662][T30489] usb 4-1: Product: syz [ 1817.024539][T30489] usb 4-1: Manufacturer: syz [ 1817.066648][T30489] usb 4-1: SerialNumber: syz [ 1817.092082][T30489] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 1817.110712][T30489] imon 4-1:155.0: unable to initialize intf0, err -90 [ 1817.126797][T30489] imon:imon_probe: failed to initialize context! [ 1817.143864][T30489] imon 4-1:155.0: unable to register, err -19 [ 1817.292083][T10327] /dev/rnullb0: Can't open blockdev [ 1817.305433][T30489] usb 4-1: USB disconnect, device number 55 [ 1817.662187][T10233] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1817.677591][T10233] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1817.703009][T10233] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1817.726477][T10233] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1818.182071][T10233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1818.229576][T10233] 8021q: adding VLAN 0 to HW filter on device team0 [ 1818.264253][T24496] bridge0: port 1(bridge_slave_0) entered blocking state [ 1818.271534][T24496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1818.306364][ T1349] bridge0: port 2(bridge_slave_1) entered blocking state [ 1818.313601][ T1349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1818.427670][T10233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1818.468783][T10369] binder: 10368:10369 ioctl 40046210 0 returned -14 [ 1818.490302][T25842] Bluetooth: hci4: command tx timeout [ 1818.530497][ T30] audit: type=1800 audit(2000000400.946:7624): pid=10369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.9585" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 1818.626905][T10374] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9586'. [ 1818.799214][T10379] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9587'. [ 1818.836175][T10233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1819.092048][ T4242] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1819.260749][ T4242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1819.276251][ T4242] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1819.325288][ T4242] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1819.353783][ T4242] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.391490][ T4242] usb 1-1: config 0 descriptor?? [ 1819.610115][T10233] veth0_vlan: entered promiscuous mode [ 1819.649919][T10233] veth1_vlan: entered promiscuous mode [ 1819.761488][T10233] veth0_macvtap: entered promiscuous mode [ 1819.804423][ T4242] hkems 0003:2006:0118.0069: unknown main item tag 0x0 [ 1819.813470][T10233] veth1_macvtap: entered promiscuous mode [ 1819.834370][ T4242] hkems 0003:2006:0118.0069: unknown main item tag 0x0 [ 1819.846094][ T4242] hkems 0003:2006:0118.0069: unknown main item tag 0x0 [ 1819.854733][ T4242] hkems 0003:2006:0118.0069: unknown main item tag 0x0 [ 1819.872854][ T4242] hkems 0003:2006:0118.0069: unknown main item tag 0x0 [ 1819.886758][ T4242] hkems 0003:2006:0118.0069: unknown main item tag 0x0 [ 1819.896290][ T4242] hkems 0003:2006:0118.0069: unknown main item tag 0x0 [ 1819.921850][ T4242] hkems 0003:2006:0118.0069: hidraw0: USB HID v0.00 Device [HID 2006:0118] on usb-dummy_hcd.0-1/input0 [ 1819.941430][T10233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1819.959579][ T4242] hkems 0003:2006:0118.0069: no inputs found [ 1819.998230][T10233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1820.007789][ T4242] hkems 0003:2006:0118.0069: force feedback init failed [ 1820.028800][T24496] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.048117][T24496] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.092782][ T4242] usb 1-1: USB disconnect, device number 72 [ 1820.115939][T24496] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.145401][T24496] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1820.213279][T10404] fido_id[10404]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1820.519293][T10411] /dev/rnullb0: Can't open blockdev [ 1820.534193][T24496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1820.562692][T24496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1820.609154][T24496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1820.629789][T24496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1820.815923][T10421] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1820.915651][T10428] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1820.938105][T10428] /dev/rnullb0: Can't open blockdev [ 1821.853416][T10453] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 1821.888762][T10453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1821.908101][T10453] /dev/rnullb0: Can't open blockdev [ 1822.243715][T10463] /dev/rnullb0: Can't open blockdev [ 1822.559490][T10474] netlink: 'syz.5.9603': attribute type 4 has an invalid length. [ 1822.639743][T10476] /dev/rnullb0: Can't open blockdev [ 1822.820688][T30736] usb 6-1: new full-speed USB device number 105 using dummy_hcd [ 1822.982342][T30736] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1823.008603][T30736] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1823.024019][T30736] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.032687][ T4096] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1823.056691][T30736] usb 6-1: Product: syz [ 1823.066105][T30736] usb 6-1: Manufacturer: syz [ 1823.075135][T30736] usb 6-1: SerialNumber: syz [ 1823.085810][T30736] usb 6-1: config 0 descriptor?? [ 1823.121705][T30736] streamzap 6-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1823.190809][ T4096] usb 4-1: device descriptor read/64, error -71 [ 1823.298857][T10474] /dev/rnullb0: Can't open blockdev [ 1823.440464][ T4096] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1823.570605][ T4096] usb 4-1: device descriptor read/64, error -71 [ 1823.690623][ T4096] usb usb4-port1: attempt power cycle [ 1823.939239][T10500] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9609'. [ 1823.948790][T10500] 0{X: renamed from macvtap0 (while UP) [ 1823.963210][T10500] 0{X: entered allmulticast mode [ 1823.978173][T10500] veth0_macvtap: entered allmulticast mode [ 1823.985824][T10500] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 1824.040535][ T4096] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1824.100621][ T4096] usb 4-1: device descriptor read/8, error -71 [ 1824.438233][T10509] sctp: [Deprecated]: syz.0.9611 (pid 10509) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1824.438233][T10509] Use struct sctp_sack_info instead [ 1824.460264][ T4096] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1824.491641][ T4096] usb 4-1: device descriptor read/8, error -71 [ 1824.604436][ T4096] usb usb4-port1: unable to enumerate USB device [ 1824.648988][T10519] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9614'. [ 1824.660791][T10519] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9614'. [ 1824.671465][T10519] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9614'. [ 1825.441415][T30516] usb 6-1: USB disconnect, device number 105 [ 1825.516452][T10532] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9617'. [ 1825.534109][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1825.606226][T10534] input: syz1 as /devices/virtual/input/input121 [ 1825.634435][T10534] /dev/rnullb0: Can't open blockdev [ 1825.898455][T10539] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9620'. [ 1826.017677][T10541] random: crng reseeded on system resumption [ 1826.081906][T10543] /dev/rnullb0: Can't open blockdev [ 1826.150021][T10548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9622'. [ 1826.448553][T10570] netlink: 324 bytes leftover after parsing attributes in process `syz.0.9625'. [ 1826.730277][T30516] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1826.750750][ T4096] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1826.897396][T30516] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1826.909748][T30516] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1826.921250][ T4096] usb 1-1: Using ep0 maxpacket: 8 [ 1826.927737][T30516] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1826.943398][T30516] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1826.953792][T30516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.962889][T30516] usb 6-1: Product: syz [ 1826.967410][ T4096] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1826.975142][T30516] usb 6-1: Manufacturer: syz [ 1826.982108][T30516] usb 6-1: SerialNumber: syz [ 1826.992586][ T4096] usb 1-1: New USB device found, idVendor=1784, idProduct=0004, bcdDevice= 0.40 [ 1827.003249][T30516] usb 6-1: config 0 descriptor?? [ 1827.011819][ T4096] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.022661][T30516] iguanair 6-1:0.0: probe with driver iguanair failed with error -12 [ 1827.032228][ T4096] usb 1-1: Product: А [ 1827.036415][ T4096] usb 1-1: Manufacturer: 䘓⟯⬑⧩뵖ૣ㛻⥦ﶟ㙡ꋚ녊겆愬䃀 [ 1827.048979][ T4096] usb 1-1: SerialNumber: syz [ 1827.120313][ T4098] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1827.336791][ T4098] usb 4-1: Using ep0 maxpacket: 8 [ 1827.348323][ T4098] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1827.368876][ T4098] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1827.397513][ T4098] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1827.417166][ T4098] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.435104][ T4098] usb 4-1: Product: syz [ 1827.445510][ T4098] usb 4-1: Manufacturer: syz [ 1827.469590][ T4098] usb 4-1: SerialNumber: syz [ 1827.483908][ T4098] usb 4-1: config 0 descriptor?? [ 1827.579670][ T4096] usbhid 1-1:1.0: can't add hid device: -71 [ 1827.596142][ T4096] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1827.681095][ T4096] usb 1-1: USB disconnect, device number 73 [ 1828.119381][T10587] netlink: 220 bytes leftover after parsing attributes in process `syz.6.9630'. [ 1828.787373][T30489] usb 6-1: USB disconnect, device number 106 [ 1829.433261][T10598] netlink: 'syz.0.9634': attribute type 10 has an invalid length. [ 1829.458983][T10598] lo: entered promiscuous mode [ 1829.477764][T10598] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1829.930362][ T4242] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1829.974813][T30736] usb 4-1: USB disconnect, device number 60 [ 1830.070268][ T4242] usb 6-1: device descriptor read/64, error -71 [ 1830.077199][T10609] /dev/rnullb0: Can't open blockdev [ 1830.320438][ T4242] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1830.480215][ T4242] usb 6-1: device descriptor read/64, error -71 [ 1830.660809][ T4242] usb usb6-port1: attempt power cycle [ 1831.000355][ T4242] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1831.021091][ T4242] usb 6-1: device descriptor read/8, error -71 [ 1831.080341][T30736] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1831.230206][T30736] usb 4-1: Using ep0 maxpacket: 8 [ 1831.237609][T30736] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1831.246050][T30736] usb 4-1: config 0 has no interface number 0 [ 1831.252527][T30736] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1831.264594][T30736] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1831.272325][ T4242] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 1831.273806][T30736] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.292813][T30736] usb 4-1: config 0 descriptor?? [ 1831.306706][T30736] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1831.318578][ T4242] usb 6-1: device descriptor read/8, error -71 [ 1831.441810][ T4242] usb usb6-port1: unable to enumerate USB device [ 1831.497205][T10634] netlink: 220 bytes leftover after parsing attributes in process `syz.6.9643'. [ 1831.560620][T10635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1831.571169][T10635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1831.585299][T10635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1831.597307][T10635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1831.631391][T10637] /dev/rnullb0: Can't open blockdev [ 1832.625430][T30489] usb 4-1: USB disconnect, device number 61 [ 1832.923184][T10654] 9pnet: Could not find request transport: f [ 1833.453522][T10668] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9653'. [ 1833.569238][T10671] overlayfs: failed to resolve './file0': -2 [ 1833.835022][T10681] /dev/rnullb0: Can't open blockdev [ 1834.035363][T10687] /dev/rnullb0: Can't open blockdev [ 1834.064290][T10689] /dev/rnullb0: Can't open blockdev [ 1834.232750][T10700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1834.250887][T10700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1834.436899][T10703] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9662'. [ 1834.470443][ T10] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 1834.682914][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1834.696393][ T10] usb 1-1: not running at top speed; connect to a high speed hub [ 1834.718515][ T10] usb 1-1: config 13 has an invalid interface number: 120 but max is 0 [ 1834.741109][ T10] usb 1-1: config 13 has no interface number 0 [ 1834.755121][ T10] usb 1-1: config 13 interface 120 has no altsetting 0 [ 1834.785558][ T10] usb 1-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=a1.c9 [ 1834.801599][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.820278][ T10] usb 1-1: Product: syz [ 1834.824638][ T10] usb 1-1: Manufacturer: syz [ 1834.834002][ T10] usb 1-1: SerialNumber: syz [ 1835.085460][ T10] usb 1-1: USB disconnect, device number 74 [ 1835.210813][T30489] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 1835.270394][ T4096] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1835.371716][T30489] usb 6-1: Using ep0 maxpacket: 32 [ 1835.379252][T30489] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1835.387526][T30489] usb 6-1: config 0 has no interface number 0 [ 1835.396716][T30489] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1835.405935][T30489] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.414193][T30489] usb 6-1: Product: syz [ 1835.418381][T30489] usb 6-1: Manufacturer: syz [ 1835.423290][T30489] usb 6-1: SerialNumber: syz [ 1835.435988][ T4096] usb 4-1: config 0 has no interfaces? [ 1835.436598][T30489] usb 6-1: config 0 descriptor?? [ 1835.446646][ T4096] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1835.459708][ T4096] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.461980][T30489] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1835.468246][ T4096] usb 4-1: Product: syz [ 1835.483340][ T4096] usb 4-1: Manufacturer: syz [ 1835.488016][ T4096] usb 4-1: SerialNumber: syz [ 1835.496575][ T4096] usb 4-1: config 0 descriptor?? [ 1835.717340][ T3818] usb 4-1: USB disconnect, device number 62 [ 1836.022296][T30489] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1836.037054][T30489] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1836.209431][T10727] /dev/rnullb0: Can't open blockdev [ 1836.335546][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1836.340399][ T4096] usb 6-1: USB disconnect, device number 111 [ 1836.368209][T10732] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1836.382058][ T4096] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1836.391891][T10732] overlayfs: missing 'lowerdir' [ 1836.418553][ T4096] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1836.419702][ T4096] quatech2 6-1:0.51: device disconnected [ 1836.576599][T10737] binder: 10736:10737 ioctl c018620b 200000000000 returned -14 [ 1836.606775][T10739] fuse: Bad value for 'group_id' [ 1836.617268][T10739] fuse: Bad value for 'group_id' [ 1836.680437][T10741] /dev/rnullb0: Can't open blockdev [ 1836.768021][T10744] /dev/rnullb0: Can't open blockdev [ 1836.794612][T10745] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9676'. [ 1836.972667][T10750] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9679'. [ 1837.355439][T10765] kvm: pic: non byte write [ 1837.608327][T30489] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 1837.780186][T30489] usb 6-1: Using ep0 maxpacket: 32 [ 1837.798149][T30489] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1837.832663][T30489] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1837.867785][T30489] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1837.894661][T30489] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.916694][T30489] usb 6-1: config 0 descriptor?? [ 1837.951112][T30489] hub 6-1:0.0: USB hub found [ 1837.970162][ T4096] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1838.132783][ T4096] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1838.163418][ T4096] usb 4-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1838.198439][ T4096] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.244750][ T4096] usb 4-1: config 0 descriptor?? [ 1838.320009][T30489] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 1838.389849][T30489] usbhid 6-1:0.0: can't add hid device: -71 [ 1838.409949][T30489] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1838.473418][T30489] usb 6-1: USB disconnect, device number 112 [ 1838.630187][ T30] audit: type=1326 audit(2000000421.046:7625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10769 comm="syz.0.9685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8036b8e929 code=0x7fc00000 [ 1838.758292][ T4096] macally 0003:060B:0001.006A: unknown main item tag 0x0 [ 1838.780116][ T4096] macally 0003:060B:0001.006A: item fetching failed at offset 1/2 [ 1838.801215][ T4096] macally 0003:060B:0001.006A: probe with driver macally failed with error -22 [ 1839.060329][ T4098] usb 4-1: USB disconnect, device number 63 [ 1839.795149][T10798] netlink: 220 bytes leftover after parsing attributes in process `syz.3.9689'. [ 1839.854850][T10801] /dev/rnullb0: Can't open blockdev [ 1839.904614][T10803] netlink: 220 bytes leftover after parsing attributes in process `syz.0.9690'. [ 1840.120511][T10805] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9691'. [ 1840.400324][ T4098] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1840.429546][T10801] /dev/rnullb0: Can't open blockdev [ 1840.530249][ T4098] usb 1-1: device descriptor read/64, error -71 [ 1840.648692][T10817] /dev/rnullb0: Can't open blockdev [ 1840.800193][ T4098] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 1840.960166][ T4098] usb 1-1: device descriptor read/64, error -71 [ 1841.070722][ T4098] usb usb1-port1: attempt power cycle [ 1841.180187][T30489] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1841.343001][T30489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1841.369700][T30489] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1841.400142][T30489] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1841.419821][T30489] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1841.450508][ T4098] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 1841.461872][T30489] usb 4-1: config 0 descriptor?? [ 1841.504424][ T4098] usb 1-1: device descriptor read/8, error -71 [ 1841.763633][ T4098] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 1841.793490][ T4098] usb 1-1: device descriptor read/8, error -71 [ 1841.887219][T30489] hkems 0003:2006:0118.006B: reserved main item tag 0xe [ 1841.904989][T30489] hkems 0003:2006:0118.006B: item fetching failed at offset 4/7 [ 1841.921839][ T4098] usb usb1-port1: unable to enumerate USB device [ 1841.923211][T30489] hkems 0003:2006:0118.006B: parse failed [ 1841.937700][T30489] hkems 0003:2006:0118.006B: probe with driver hkems failed with error -22 [ 1841.984493][T10833] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1842.118181][T10822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1842.141010][T10822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1842.163078][ T4098] usb 4-1: USB disconnect, device number 64 [ 1842.196252][T10835] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9700'. [ 1842.358589][T10838] netlink: 220 bytes leftover after parsing attributes in process `syz.5.9701'. [ 1842.939638][T10842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1843.231404][T10847] /dev/rnullb0: Can't open blockdev [ 1843.454726][T10854] syzkaller1: entered promiscuous mode [ 1843.461027][T10854] syzkaller1: entered allmulticast mode [ 1843.629720][T10864] /dev/loop0: Can't lookup blockdev [ 1843.717231][T10866] /dev/rnullb0: Can't open blockdev [ 1843.770717][T30516] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 1844.022685][T10875] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 1844.065062][T30516] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1844.074311][T30516] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.082529][T30516] usb 6-1: Product: syz [ 1844.086744][T30516] usb 6-1: Manufacturer: syz [ 1844.096246][T10876] /dev/rnullb0: Can't open blockdev [ 1844.098548][T30516] usb 6-1: SerialNumber: syz [ 1844.117779][T30516] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1844.147267][T30736] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1844.555891][T10854] /dev/rnullb0: Can't open blockdev [ 1844.568029][T30489] usb 6-1: USB disconnect, device number 113 [ 1844.965190][T10883] /dev/rnullb0: Can't open blockdev [ 1845.015589][T10885] /dev/rnullb0: Can't open blockdev [ 1845.065041][T10887] /dev/rnullb0: Can't open blockdev [ 1845.210542][T30736] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1845.236732][T30736] ath9k_htc: Failed to initialize the device [ 1845.267816][T30489] usb 6-1: ath9k_htc: USB layer deinitialized [ 1845.331550][T10898] /dev/rnullb0: Can't open blockdev [ 1845.448637][T10900] /dev/rnullb0: Can't open blockdev [ 1845.633276][T10907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1845.648195][T10907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1845.798901][T10910] /dev/rnullb0: Can't open blockdev [ 1845.871565][T30489] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1845.880530][T10912] [ 1845.882986][T10912] ============================================ [ 1845.889184][T10912] WARNING: possible recursive locking detected [ 1845.895342][T10912] 6.16.0-rc6-next-20250714-syzkaller #0 Not tainted [ 1845.901926][T10912] -------------------------------------------- [ 1845.908124][T10912] syz.5.9726/10912 is trying to acquire lock: [ 1845.914189][T10912] ffffe8ffffd714b8 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80 [ 1845.923435][T10912] [ 1845.923435][T10912] but task is already holding lock: [ 1845.930889][T10912] ffffe8ffffd715b0 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 1845.940200][T10912] [ 1845.940200][T10912] other info that might help us debug this: [ 1845.948451][T10912] Possible unsafe locking scenario: [ 1845.948451][T10912] [ 1845.955893][T10912] CPU0 [ 1845.959260][T10912] ---- [ 1845.962547][T10912] lock(&pd_list->lock); [ 1845.966882][T10912] lock(&pd_list->lock); [ 1845.971211][T10912] [ 1845.971211][T10912] *** DEADLOCK *** [ 1845.971211][T10912] [ 1845.979358][T10912] May be due to missing lock nesting notation [ 1845.979358][T10912] [ 1845.987672][T10912] 6 locks held by syz.5.9726/10912: [ 1845.992874][T10912] #0: ffff8880304228f0 (&ctx->tx_lock){+.+.}-{4:4}, at: tls_sw_sendmsg+0x139/0x23d0 [ 1846.002530][T10912] #1: ffff8880303baad8 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tls_sw_sendmsg+0x165/0x23d0 [ 1846.012314][T10912] #2: ffffffff8e53ed00 (rcu_read_lock_bh){....}-{1:3}, at: padata_do_parallel+0x4b/0xab0 [ 1846.022340][T10912] #3: ffffffff8e53ed00 (rcu_read_lock_bh){....}-{1:3}, at: padata_do_parallel+0x4b/0xab0 [ 1846.032271][T10912] #4: ffffffff8e53ed00 (rcu_read_lock_bh){....}-{1:3}, at: padata_do_parallel+0x4b/0xab0 [ 1846.042189][T10912] #5: ffffe8ffffd715b0 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 1846.051849][T10912] [ 1846.051849][T10912] stack backtrace: [ 1846.057929][T10912] CPU: 1 UID: 0 PID: 10912 Comm: syz.5.9726 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 1846.057951][T10912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1846.057960][T10912] Call Trace: [ 1846.057968][T10912] [ 1846.057976][T10912] dump_stack_lvl+0x189/0x250 [ 1846.058002][T10912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1846.058022][T10912] ? __pfx__printk+0x10/0x10 [ 1846.058047][T10912] print_deadlock_bug+0x28b/0x2a0 [ 1846.058069][T10912] validate_chain+0x1a3f/0x2140 [ 1846.058099][T10912] ? irqentry_exit+0x74/0x90 [ 1846.058114][T10912] ? lockdep_hardirqs_on+0x9c/0x150 [ 1846.058128][T10912] ? look_up_lock_class+0x74/0x170 [ 1846.058143][T10912] ? register_lock_class+0x51/0x320 [ 1846.058160][T10912] __lock_acquire+0xab9/0xd20 [ 1846.058178][T10912] ? padata_do_serial+0x73e/0xb80 [ 1846.058198][T10912] lock_acquire+0x120/0x360 [ 1846.058213][T10912] ? padata_do_serial+0x73e/0xb80 [ 1846.058234][T10912] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1846.058249][T10912] _raw_spin_lock+0x2e/0x40 [ 1846.058270][T10912] ? padata_do_serial+0x73e/0xb80 [ 1846.058289][T10912] padata_do_serial+0x73e/0xb80 [ 1846.058313][T10912] ? padata_do_parallel+0x4b/0xab0 [ 1846.058332][T10912] padata_do_parallel+0x7b7/0xab0 [ 1846.058352][T10912] ? padata_do_parallel+0x4b/0xab0 [ 1846.058372][T10912] pcrypt_aead_encrypt+0x2f1/0x400 [ 1846.058395][T10912] ? padata_do_parallel+0x4b/0xab0 [ 1846.058413][T10912] pcrypt_aead_enc+0x17/0x80 [ 1846.058432][T10912] padata_do_parallel+0x7b7/0xab0 [ 1846.058451][T10912] ? padata_do_parallel+0x4b/0xab0 [ 1846.058471][T10912] pcrypt_aead_encrypt+0x2f1/0x400 [ 1846.058492][T10912] ? padata_do_parallel+0x4b/0xab0 [ 1846.058510][T10912] pcrypt_aead_enc+0x17/0x80 [ 1846.058529][T10912] padata_do_parallel+0x7b7/0xab0 [ 1846.058548][T10912] ? padata_do_parallel+0x4b/0xab0 [ 1846.058568][T10912] pcrypt_aead_encrypt+0x2f1/0x400 [ 1846.058589][T10912] tls_push_record+0x19c5/0x3770 [ 1846.058612][T10912] ? __pfx_tls_push_record+0x10/0x10 [ 1846.058625][T10912] ? __pfx_sk_psock_get+0x10/0x10 [ 1846.058645][T10912] ? gup_fast_fallback+0x1e81/0x2010 [ 1846.058666][T10912] bpf_exec_tx_verdict+0xefb/0x15e0 [ 1846.058692][T10912] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1846.058711][T10912] ? __pfx_bpf_exec_tx_verdict+0x10/0x10 [ 1846.058756][T10912] tls_sw_sendmsg+0x18db/0x23d0 [ 1846.058786][T10912] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 1846.058806][T10912] ? __pfx_aa_sk_perm+0x10/0x10 [ 1846.058826][T10912] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1846.058841][T10912] ? sock_rps_record_flow+0x19/0x410 [ 1846.058861][T10912] ? inet_getname+0x4c7/0x530 [ 1846.058882][T10912] ? inet6_sendmsg+0x101/0x120 [ 1846.058895][T10912] __sock_sendmsg+0xe5/0x270 [ 1846.058917][T10912] __sys_sendto+0x3bd/0x520 [ 1846.058934][T10912] ? __pfx___sys_sendto+0x10/0x10 [ 1846.058949][T10912] ? do_futex+0x395/0x420 [ 1846.058977][T10912] ? rcu_is_watching+0x15/0xb0 [ 1846.058997][T10912] __x64_sys_sendto+0xde/0x100 [ 1846.059013][T10912] do_syscall_64+0xfa/0x3b0 [ 1846.059029][T10912] ? lockdep_hardirqs_on+0x9c/0x150 [ 1846.059042][T10912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.059057][T10912] ? clear_bhb_loop+0x60/0xb0 [ 1846.059072][T10912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.059094][T10912] RIP: 0033:0x7f604598e929 [ 1846.059109][T10912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1846.059122][T10912] RSP: 002b:00007f6046859038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1846.059139][T10912] RAX: ffffffffffffffda RBX: 00007f6045bb5fa0 RCX: 00007f604598e929 [ 1846.059150][T10912] RDX: ffffffffffffff69 RSI: 0000200000000240 RDI: 0000000000000004 [ 1846.059161][T10912] RBP: 00007f6045a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1846.059171][T10912] R10: 0000000000008040 R11: 0000000000000246 R12: 0000000000000000 [ 1846.059182][T10912] R13: 0000000000000000 R14: 00007f6045bb5fa0 R15: 00007ffea4b0d658 [ 1846.059197][T10912] [ 1846.060583][T30489] usb 1-1: device descriptor read/64, error -71 [ 1846.700376][T30489] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1846.830172][T30489] usb 1-1: device descriptor read/64, error -71 [ 1846.940524][T30489] usb usb1-port1: attempt power cycle [ 1847.280288][T30489] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1847.302579][T30489] usb 1-1: device descriptor read/8, error -71 [ 1847.540646][T30489] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1847.560917][T30489] usb 1-1: device descriptor read/8, error -71 [ 1847.671222][T30489] usb usb1-port1: unable to enumerate USB device [ 1852.893850][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.900475][ T1308] ieee802154 phy1 wpan1: encryption failed: -22