last executing test programs: 16m52.330764299s ago: executing program 0 (id=616): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000400)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x7}) (async, rerun: 32) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (rerun: 32) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)={0x0, 0x0, 0x100000}) shmctl$IPC_STAT(0x0, 0x2, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 16m52.164590345s ago: executing program 0 (id=618): creat(&(0x7f0000001380)='./file0\x00', 0x12c) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x2800, 0x0) getgroups(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000080)={0x18, 0x6a, 0x15, 0x8000000, 0xffffffff, "", [@generic="894150da2e"]}, 0x18}], 0x1}, 0x8000) mount(&(0x7f0000000100)=@sr0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 16m52.088736654s ago: executing program 0 (id=620): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e23, 0x7, @private2, 0x5}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r2, &(0x7f0000000000)='|', 0x1, 0x200088c5, &(0x7f0000000a80)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x4, 0x4) 16m51.984972628s ago: executing program 0 (id=621): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x400000009) syz_usb_connect(0x3, 0x24, &(0x7f0000001640)=ANY=[@ANYBLOB="12010000e1476040d61000220200000003010902"], 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) ioctl$BLKIOMIN(r2, 0x401070cd, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) ioctl$SIOCAX25ADDUID(r4, 0x89e1, &(0x7f00000000c0)={0x3, @null}) ioctl$FICLONE(r1, 0x40049409, r0) sendmmsg$inet6(r3, &(0x7f0000002f00)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x3b, @mcast2, 0x6}, 0x1c, 0x0}}], 0x1, 0x20000000) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x2009) ioctl$SNAPSHOT_ATOMIC_RESTORE(r5, 0x3304) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 16m49.371706341s ago: executing program 0 (id=633): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000380)={0x1, 0x0, [{0x27ddc99d2b6db97c, 0x34, &(0x7f00000003c0)=""/52}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0xc000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000001ec0)={0x0, 0x0}) r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$FS_IOC_READ_VERITY_METADATA(r1, 0xc0286687, &(0x7f0000000080)={0x3, 0x5, 0x51, &(0x7f0000000140)=""/81}) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0x8000, '\x00', @p_u16=&(0x7f00000000c0)=0xfffe}}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) 16m49.289097594s ago: executing program 0 (id=634): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x5436c0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000002c000000000000000000860090780000000000000000000000000000ee3f000000002b036f"], 0xfdef) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 16m36.265187922s ago: executing program 3 (id=746): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) (async) r1 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async, rerun: 64) mlock(&(0x7f00008a4000/0x4000)=nil, 0x4000) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x80, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (async) r4 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0xd000, 0x5, 0x9, 0x6, 0x0, [{0x7f, 0x3, 0xff, '\x00', 0x5}, {0x91, 0x7, 0x7, '\x00', 0x9}, {0x47, 0x6, 0x6, '\x00', 0xb5}, {0x15, 0x8, 0x2, '\x00', 0x4}, {0x5, 0x9, 0xc, '\x00', 0x8}, {0xff, 0x40, 0x1, '\x00', 0x1}, {0x5, 0x7f, 0x40, '\x00', 0x3}, {0x9, 0x1, 0xc, '\x00', 0xe}, {0xdc, 0x4, 0x7, '\x00', 0x1}, {0x9, 0x0, 0x2, '\x00', 0x2e}, {0x3, 0x2, 0xa, '\x00', 0x61}, {0xf5, 0x8, 0x5, '\x00', 0x1}, {0xff, 0x4, 0x1, '\x00', 0x80}, {0xf0, 0xbf, 0x6, '\x00', 0x1}, {0x4e, 0x7, 0x81}, {0x83, 0x2, 0x0, '\x00', 0x2}, {0x4, 0x5, 0xe, '\x00', 0x5}, {0x3, 0x0, 0x8, '\x00', 0x4d}, {0x7, 0xb, 0x0, '\x00', 0x5}, {0x3, 0x2, 0xf, '\x00', 0x4}, {0xb, 0x9, 0x3f}, {0xe, 0x8, 0x5, '\x00', 0xf7}, {0x9, 0x8, 0x2, '\x00', 0x1}, {0x9, 0xd9, 0x3, '\x00', 0xc}]}}) (async) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x101, 0x7fffffffffffe, 0x5, 0x5, 0xb, 0x0, 0x45, 0x0, 0xbdb], 0x1, 0x1c4213}) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async, rerun: 64) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) (async) syz_kvm_add_vcpu$x86(0x0, 0x0) (async, rerun: 32) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001800000000000000070000000000000001000000000000006b00000000000000c463"], 0x2de}) (rerun: 32) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) (async) write$UHID_INPUT(r3, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006) (async) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x5, 0x1c, "ffffffff00000004ddb49a000000000000000000f8e500080000010000000000000000040000ff000000000000ffffffff00000000000000299b00", "2809e8dbe108598948f8ffd54a07c21d875397bdb22d0008b420a1819e01177d3d458dd4992861ac00000080ffffffffffffffff001700", "90be8bf4bd00000000000000000000000000001000"}}) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x90000001) 16m36.148002736s ago: executing program 3 (id=748): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000200)={'binder1\x00'}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x22052, r1, 0x2000) socket$inet_icmp(0x2, 0x2, 0x1) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x980}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) r6 = fsmount(r2, 0x0, 0x0) fchdir(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r7, 0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0xfe, r1, 'id0\x00'}) ioctl$USBDEVFS_REAPURB(r8, 0x4008550c, &(0x7f0000000080)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x800, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000200)={'binder1\x00'}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x22052, r1, 0x2000) (async) socket$inet_icmp(0x2, 0x2, 0x1) (async) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x28, r4, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x980}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) (async) fsmount(r2, 0x0, 0x0) (async) fchdir(r6) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) lseek(r7, 0x0, 0x1) (async) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0xfe, r1, 'id0\x00'}) (async) ioctl$USBDEVFS_REAPURB(r8, 0x4008550c, &(0x7f0000000080)) (async) 16m35.973039544s ago: executing program 3 (id=751): syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/73, 0x49}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x10, r0, 0x2000) 16m35.084796402s ago: executing program 3 (id=757): openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000040ef17476000000000000109024e9defed0800000000000000030002000921000000012205000905810300000c0000"], 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000001480)='./file0\x00') syz_usb_control_io(r0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x2) ioctl$TCFLSH(r2, 0x40087101, 0x2) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r3, 0xc0045405, &(0x7f0000000140)) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500000000000000b031a93cb4839d63390000010000000900010073797a3000000000340000000b0a01010000000000000000000000050900010073797a31000000000c00118008000100647570000800074000000028140000001100010000000000000000000700000a"], 0x7c}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r5 = syz_usb_connect$cdc_ecm(0x3, 0x79, &(0x7f0000000440)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x1, 0x1, 0x7, 0x90, 0x7, [{{0x9, 0x4, 0x0, 0x7, 0x3, 0x2, 0x6, 0x0, 0x2, {{0xb, 0x24, 0x6, 0x0, 0x0, "e80699c060bd"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x22, 0xfb}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0x3, 0x10}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0xf, 0x6a, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x610, 0xfb, 0x2, 0xc}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x48, 0xe0, 0x8, 0xff, 0x5}, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="5f05000000be09b868023fba1ba0fe00000001d1ea82e096c30000000027b6881de507cc9c2f"]}) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000300)={0x14, &(0x7f00000005c0)={0x40, 0x35, 0xfb, {0xfb, 0x1, "2d257b97c58c2396f14964464843045debcff324a0d0fc2a5d3258d707647a1dc7881857896709f52f74607732ff8204734315bef5a0c81a51ae63598d08dd4ed39613585117b90bd2fc9a445ff1ca27f63f87af31dad260286072ca65afda6a2c8393d64469d5f6193169cebf8c6a07d1f15e0db47f558130d1c5689beaab2116274e2c4f3b75ae076960be2cbee2c4701c615c2efc43aac1eb3fbc453dc665daacd0be1544335e0638974ddefbd1f20d573f10870d35bec9d4ce3bfb08441d7cd00d3244e3df0fed231c64947ba4c4c96f25e43901f0f446c672c11794215e8e714090061636ecaf4210866cdcc7d564084171c78d6a29e5"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x1c, &(0x7f0000000700)={0x0, 0x17, 0xdf, "9eedc0398f5e9a63cb5a923ee05df43ce56ac6417a6e787d89c60b998e64706bb21c401e6cf89998cf81801bfa355b172d5e93e74931553c5a58b683f4f3d0f2ba32cb6d6ef9fbeab644bc18a46233ad1a697e847d8bd3d1c32febd98687cd50f136b33f20ac9111940f20d8b431b433548701b477a641397262d4bcb19328e5825534dc3d247a9a1336967bb9c623d1b554c3aabfe720d236e2e47d2b10536cff8cff06d420f72e6816c86bd4438078ca62537e1e84ca4d24868ce376d51accdc796fdfc12696eaa9c711de9e4d7b2d9ff7eedc4bd139332c5b0eb31f15f8"}, &(0x7f0000000340)={0x0, 0xa, 0x1}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x9}}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) accept4$unix(r1, &(0x7f0000000880), &(0x7f0000000900)=0x6e, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000040435531300000000000010902"], 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20002, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) 16m34.11201294s ago: executing program 32 (id=634): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x5436c0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000002c000000000000000000860090780000000000000000000000000000ee3f000000002b036f"], 0xfdef) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 16m33.576717755s ago: executing program 3 (id=773): ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r0 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000080)=@get={0x1, &(0x7f0000000040)=""/24, 0x8}) (async) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e24, @remote}, {0x306, @multicast}, 0x48, {0x2, 0x4e24, @loopback}, 'netdevsim0\x00'}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x4008010, r0, 0x73976000) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000140)={0x2, 'dvmrp1\x00', 0x2}, 0x18) (async) r1 = socket$inet(0x2, 0x800, 0xfffffffc) r2 = accept4$inet(r1, &(0x7f0000000180)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10, 0x80000) (async) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f0000000200)=0x9, &(0x7f0000000240)=0x2) (async) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000002c0)=@add_del={0x2, &(0x7f0000000280)='wlan1\x00'}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x40}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={r3, 0x6}, &(0x7f00000003c0)=0x8) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000400)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x3, r4, 0x3, &(0x7f0000000480)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000004c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000540)={r6, 0x1}, &(0x7f0000000580)=0x8) write(r1, &(0x7f00000005c0)="e2c4c16d1056b413b045df2f06768f7121cae62e74e5", 0x16) (async) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000008, 0x110, r2, 0x13901000) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000600)={{0x32, @multicast1, 0x4e22, 0x2, 'dh\x00', 0x4, 0x9, 0x79}, {@empty, 0x4e21, 0x0, 0x3, 0x8}}, 0x44) (async) r7 = syz_open_dev$audion(&(0x7f0000000680), 0x6, 0x1c200) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r7, 0x80045301, &(0x7f00000006c0)) recvfrom$inet(r0, &(0x7f0000000700)=""/20, 0x14, 0x40002000, &(0x7f0000000740)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) (async) fcntl$setflags(r1, 0x2, 0x0) (async) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f0000000880)=@get={0x1, &(0x7f0000000780)=""/224, 0x4}) (async) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f00000008c0)={0x2c, @multicast2, 0x4e23, 0x4, 'sed\x00', 0x18, 0x7, 0x53}, 0x2c) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000940)={0xffffffffffffffff}, 0x17, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000009c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000900), 0x4, r8, 0x1c, 0x0, @ib={0x1b, 0x3, 0x2, {"a2ea0c8486237eaa053ea30b4746dd4a"}, 0x101, 0xfffffffffffffffb, 0xb}}}, 0xa0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) (async) socket$inet6(0xa, 0x80000, 0x6) 16m33.185830846s ago: executing program 3 (id=777): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) creat(0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000000, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xeb9a0000) copy_file_range(r0, 0x0, r0, 0x0, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x5, 0x6}, {0x9, 0xec74}], r1}, 0x18, 0x2) lseek(r0, 0x2004, 0x0) sendfile(r0, r0, 0x0, 0x80c000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x46e80, 0x0) mmap(&(0x7f000042b000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r2, 0x5876b000) 16m32.932949493s ago: executing program 33 (id=777): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) creat(0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000000, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xeb9a0000) copy_file_range(r0, 0x0, r0, 0x0, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f0000000180)=@v3={0x3000000, [{0x5, 0x6}, {0x9, 0xec74}], r1}, 0x18, 0x2) lseek(r0, 0x2004, 0x0) sendfile(r0, r0, 0x0, 0x80c000) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x46e80, 0x0) mmap(&(0x7f000042b000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r2, 0x5876b000) 7m7.346930814s ago: executing program 4 (id=4809): r0 = open(&(0x7f0000000000)='./file0\x00', 0x80ff, 0x1) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8}) (async) fcntl$setlease(r1, 0x400, 0x1) (async) fcntl$setlease(r0, 0x400, 0x0) (async) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) 7m7.261379408s ago: executing program 4 (id=4810): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) r0 = open$dir(&(0x7f0000000080)='./cgroup\x00', 0x602, 0x43) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x210180) fanotify_mark(0xffffffffffffffff, 0x20, 0x40001020, r0, &(0x7f0000000100)='./cgroup\x00') mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) (async) open$dir(&(0x7f0000000080)='./cgroup\x00', 0x602, 0x43) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x210180) (async) fanotify_mark(0xffffffffffffffff, 0x20, 0x40001020, r0, &(0x7f0000000100)='./cgroup\x00') (async) 7m7.156424691s ago: executing program 4 (id=4811): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x1b00, 0x0) (async, rerun: 32) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) (rerun: 32) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x300, 0x8000005, 0x590f, 0x9}) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (rerun: 64) 7m6.497562696s ago: executing program 4 (id=4818): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = syz_init_net_socket$ax25(0x3, 0xc8faeed5fe750dd7, 0x1) (async, rerun: 32) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) setsockopt$ax25_int(r2, 0x101, 0x7, &(0x7f0000000040)=0x371, 0x4) (async) socket$tipc(0x1e, 0x2, 0x0) mount(0x0, &(0x7f0000000d40)='./file1\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x20, 0x0) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0x9, 0x1, 0x0, "f3f0b32aa4526bc424cc83055c5a8d21e6cb87d69b11022ef02d2b83dda571f8", 0x50565559}) (async) chdir(&(0x7f0000000080)='./file0\x00') (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async, rerun: 64) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r8, 0x45809000) (async) r9 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r9, &(0x7f0000000180)={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r10, 0x4068aea3, &(0x7f0000000080)={0xdb, 0x0, 0xf}) (async) mount$9p_unix(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000140), 0x810c0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d756e03000000372e1b221c6810385b0000000061636c2c00"]) syz_init_net_socket$ax25(0x3, 0xd1bd8900d0cf44f5, 0xf0) (async) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 7m6.324672937s ago: executing program 4 (id=4820): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xd0}, 0x4040) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 7m6.142786109s ago: executing program 4 (id=4822): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='bridge0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004c9, 0x7000, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x2], 0xffff1000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 7m5.963462965s ago: executing program 34 (id=4822): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000000)) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='bridge0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x100000000, 0x0, 0x20, 0x0, 0x0, 0x2004c9, 0x7000, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x4000000000000004, 0x2], 0xffff1000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 3m13.885359236s ago: executing program 2 (id=6570): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @private}, &(0x7f0000000140)=0x10) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000001c0)) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fremovexattr(r3, &(0x7f00000002c0)=@known='system.posix_acl_default\x00') mmap(&(0x7f0000215000/0x3000)=nil, 0x3000, 0x800001, 0x12, r0, 0xe8a4a000) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x141002, 0x0) fallocate(r4, 0x0, 0x0, 0xaeca) syz_open_dev$vim2m(&(0x7f0000000180), 0x2f, 0x2) syz_usb_connect(0x1, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f00000000c0)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x686881) r5 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) 3m13.144919971s ago: executing program 2 (id=6576): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x2, @loopback, 0xa73}, 0x1c) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000280)={0x28, 0x0, 0x0, @my=0x0}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x142) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff}, 0x0) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000003c0)={0x0, 0x465f}, 0x8) r5 = syz_open_dev$radio(&(0x7f0000000400), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r5, 0xc0405665, &(0x7f0000000080)={0x8000, 0x1}) sendmmsg$inet6(r0, &(0x7f0000001b00)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}], 0x1, 0x4008041) dup3(r2, r3, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 3m12.148823109s ago: executing program 2 (id=6587): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r2, 0x0}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f00000003c0)={r3, 0x0, 0x5, 0x8, 0x2, [0x0], [0x0, 0x0, 0x6], [0xc4c, 0x6, 0x10], [0x8, 0x0, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000800)={0x0, 0x80, 0xa, 0x34325241, 0x2, [r5], [0x401], [], [0x3ffffffffffffff]}) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 3m11.49242638s ago: executing program 2 (id=6593): r0 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x28200, 0x0) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000540), 0x80000, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe23099492febd0dc}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000680)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000006c0)={0x48, 0x2, r4}) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) ioctl$SIOCAX25ADDUID(r5, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r2, 0x3b8d, &(0x7f0000000640)={0x20, r3, &(0x7f0000000600)=[{0x0, 0x3}, {0x0, 0x2}, {}, {0x1, 0x1}, {0x1, 0x3}], 0xdeadbeef, 0x8, 0x5}) setreuid(0x0, 0xee01) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 3m10.869483628s ago: executing program 2 (id=6600): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r0) 3m10.304318122s ago: executing program 2 (id=6602): syz_open_dev$vim2m(0x0, 0x7f, 0x2) openat$rnullb(0xffffffffffffff9c, 0x0, 0xa02, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r1 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xfffffffc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, 0x0, 0x2000000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000000000000000000000000000000000000000beda00", "90be6c09306003d8006000", [0x0, 0x2]}}) write$uinput_user_dev(r2, 0x0, 0x0) 3m6.708248102s ago: executing program 6 (id=6626): creat(&(0x7f0000001380)='./file0\x00', 0x4) creat(&(0x7f0000001380)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x4}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x880035, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket$tipc(0x1e, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$inet(0x2, 0x80001, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES32=r0], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 3m6.520977316s ago: executing program 6 (id=6627): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040effff2820"], 0x7) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x40}, 0x40) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000180)={0x2, 0xb0a2}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0xb3, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x7}]}) accept(r2, 0x0, &(0x7f00000000c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$media(&(0x7f0000000140), 0x6, 0x201) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) connect$802154_dgram(r2, &(0x7f0000000100)={0x27}, 0x14) 3m6.459591007s ago: executing program 6 (id=6628): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) socket$netlink(0x10, 0x3, 0x0) accept4(r1, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) syz_io_uring_setup(0x110, &(0x7f0000001280)={0x0, 0xfad9, 0x2}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, {0x40, 0x4, 0x0, 0xffff, 0x0, 0x6, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x14c0348, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r4, 0x4004092b, 0x8) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) openat(r0, &(0x7f00000000c0)='./cgroup\x00', 0xc080, 0x110) 3m5.954037342s ago: executing program 6 (id=6631): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa2000, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x101400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) write(r0, &(0x7f00000000c0)="8660020000002b93acd9a86b1ad751ed0f94f174cd2ab8c48f22f06dbf518eb9c8dcf30883bdc5f84ccb51235785ebc8a6c7327afbd7077aaf213bc4dae669478c121f528066e18bd928d3fa0a5b6649b399322e7d579c44ad3de9457399ce44624dc89e905744ca2be989e7044e75272ee56611e2a71ddd90a9697eacb820e22736198ff9e8748a166a00776e35b2ddf54a2f094dfbd4688417752d4ec01fae5bcb0dcbb179e31b0ebb053f7dacdbf6f0a222", 0xb3) 3m5.674371228s ago: executing program 6 (id=6632): memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904000001ff0132000905"], 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r1, 0x29, 0x7, 0x0, &(0x7f0000000dc0)) 3m5.255808889s ago: executing program 6 (id=6635): mount(0x0, 0x0, &(0x7f0000000240)='gfs2\x00', 0x200000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{&(0x7f0000000200)=@in6={0xa, 0x4e20, 0x6, @loopback, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x100}}], 0x1, 0x4008800) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m5.007740494s ago: executing program 35 (id=6635): mount(0x0, 0x0, &(0x7f0000000240)='gfs2\x00', 0x200000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{&(0x7f0000000200)=@in6={0xa, 0x4e20, 0x6, @loopback, 0x6}, 0x80, 0x0, 0x0, 0x0, 0x100}}], 0x1, 0x4008800) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m54.073487464s ago: executing program 36 (id=6602): syz_open_dev$vim2m(0x0, 0x7f, 0x2) openat$rnullb(0xffffffffffffff9c, 0x0, 0xa02, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r1 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xfffffffc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, 0x0, 0x2000000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000000000000000000000000000000000000000beda00", "90be6c09306003d8006000", [0x0, 0x2]}}) write$uinput_user_dev(r2, 0x0, 0x0) 5.121661038s ago: executing program 7 (id=7800): ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000001080)={0x2d8, 0x2}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000008002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) syz_open_procfs$namespace(0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000240)={'nat\x00', 0x0, [0x4, 0xfffdf001, 0x4, 0x7, 0x6c]}, &(0x7f00000002c0)=0x54) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000b0100"]) openat$nullb(0xffffffffffffff9c, &(0x7f0000001040), 0x800, 0x0) getpid() r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r6, &(0x7f0000000740)=[{{&(0x7f0000000080)=@phonet={0x23, 0x7, 0x0, 0x7}, 0x14, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0x8}}], 0x18}}], 0x1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) sendfile(r1, r0, 0x0, 0x203) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$VT_RELDISP(r7, 0x5605) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000140)={@my=0x1}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x10) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sync_file_range(r0, 0xe0000000000004, 0xea0, 0x1) 3.785063122s ago: executing program 7 (id=7809): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x4, @loopback, 0x8}, 0x1c) sendto$inet6(r0, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg$inet6(r0, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="a132", 0x2}], 0x1}}], 0x1, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/209, 0xd1, 0x0, 0x0}, &(0x7f0000000400)=0x40) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) 3.753009837s ago: executing program 7 (id=7811): syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="12015001020000102505a1a440000102030109025c0002010000000904000001020d00000524060001052400a2000d240f01f9fffffffdff18000006241a00003b090581030004000900090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000480)={0x40, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c64030005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) 2.064618655s ago: executing program 1 (id=7831): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz0\x00', {0x4, 0xc, 0x1, 0x5}, 0x46, [0x3, 0x4, 0x0, 0x7, 0x9, 0x6, 0x60, 0x4, 0x7, 0x81, 0x8, 0xff, 0x7fff, 0x2, 0x9, 0xe7, 0x101, 0x8, 0x5da1, 0x16, 0xffffffff, 0xb, 0x151, 0xd32, 0xf0e2, 0xffff, 0x0, 0x0, 0xb3a, 0x22, 0x5662, 0x1, 0x2, 0x4, 0x6, 0x3, 0xcb, 0x2, 0x3, 0x5, 0x1, 0x77a3, 0x795, 0x0, 0x9, 0x5, 0x1, 0x23f4601f, 0x1000, 0x6, 0x490c72db, 0xfffffffd, 0x254a, 0x3, 0xd, 0x80000001, 0x10000, 0xe, 0xe5e, 0x7fff, 0x1, 0x9, 0x8000, 0xfffffc93], [0x1a20, 0xffffffff, 0x4d400000, 0x1, 0xa, 0x2, 0x18, 0x0, 0x1, 0x8, 0x4, 0xe1c7, 0x864d, 0x74f80, 0x751, 0x4000000, 0x3, 0x5, 0x1683, 0x5, 0x0, 0x9, 0xca5, 0x200, 0x1, 0x9b0, 0x1, 0x8, 0x5, 0xd, 0x4, 0x8, 0x0, 0xd, 0xae3, 0x6, 0x3, 0xf, 0x7dc, 0x9, 0x8, 0x6, 0x8, 0x7, 0x52a5, 0x51, 0x9, 0x4, 0x78, 0x3, 0x2, 0x195, 0x1, 0x2000, 0x7fff, 0x5, 0x5, 0x5a6168c7, 0x3, 0x6, 0x6, 0x5, 0x10, 0x8], [0x10000, 0x4, 0x8001, 0x0, 0x3, 0x7f, 0x1, 0x6, 0x3f1800, 0xff, 0x7, 0xf, 0x2, 0x3, 0x8, 0x5, 0x3ff, 0x4, 0x8, 0x9, 0x2, 0x81, 0x9, 0x8000, 0x80000001, 0x2, 0x9, 0x4, 0xff, 0x101, 0x8, 0x0, 0x81, 0x6c3, 0x1b7a, 0x9, 0x1, 0x3, 0x0, 0xca, 0x5c25, 0x400, 0x8, 0x3, 0x9, 0xda, 0x4, 0x58, 0x1, 0x5, 0x4, 0xf, 0x65c921a2, 0x3, 0x3, 0x4, 0x8, 0x4, 0x4, 0x8, 0x9, 0x4, 0x1, 0x728], [0x8, 0x0, 0xf, 0x6, 0xd44, 0x7, 0x80000001, 0x6, 0x5, 0x6, 0x6, 0xf, 0x0, 0xd, 0xf1b5, 0x8, 0x1, 0x9, 0x411, 0x0, 0x1, 0xc00, 0x3, 0x4, 0x7, 0x6, 0x3, 0x100, 0x7, 0x7fae, 0x7, 0x1, 0xf7d, 0x8, 0x8001, 0xb, 0x6, 0x4, 0x22, 0x8, 0x6, 0x6, 0x2, 0x0, 0x0, 0x4, 0x5, 0x5, 0x48, 0x5, 0x3, 0xd9, 0x23, 0x9, 0x22b, 0x18, 0xf8, 0x0, 0x40, 0x40, 0x0, 0x3, 0x442, 0x80000001]}, 0x45c) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000080)={0xc99, 0xd70}) write$uinput_user_dev(r0, &(0x7f00000000c0)={'syz0\x00', {0x6, 0x4, 0x3, 0x5}, 0x43, [0x6, 0x5, 0x8000, 0xd9, 0xd, 0x5, 0x2, 0x9, 0x4, 0x6, 0xfff, 0x8, 0xfffffff8, 0x4, 0x4, 0x80, 0x0, 0x0, 0x7ff, 0x2, 0x1ff, 0x584, 0x1, 0x6, 0x9, 0x3, 0x7, 0x2, 0xb86, 0x7, 0x2, 0x6c, 0x10001, 0x1, 0x7, 0x401, 0x7fffffff, 0x1, 0xc46, 0x5, 0x8001, 0x4, 0xff, 0x7810, 0xa, 0xfffffffa, 0x6, 0x98, 0x6, 0x7, 0x6af6, 0xd4, 0x5, 0xa, 0x67e8, 0x7fffffff, 0x9, 0x7, 0x7, 0x400, 0x8001, 0x101, 0x7, 0x1], [0x3, 0x4, 0x4, 0x3, 0xfff, 0xace, 0x93, 0xd, 0xb, 0x3e8, 0x6, 0x898, 0x1, 0x4, 0x1df, 0x10000, 0x1, 0x0, 0x7, 0x18, 0x30b, 0x8, 0x1, 0x32, 0x1, 0x2, 0xfffffe00, 0x667, 0xbe88, 0x4, 0x0, 0xffffffff, 0x4, 0x1ff, 0x3, 0x6617, 0xb2e, 0x6, 0x1, 0xfffffe01, 0x9, 0xffffffff, 0x4, 0x4, 0x7889, 0x9, 0x7, 0x5, 0x9, 0xfff, 0x9, 0x7fffffff, 0x2, 0xffffff36, 0x3, 0x7, 0xc, 0x8000, 0xef74, 0x77d4000, 0x8000, 0x80, 0x2, 0x2], [0x3, 0x81, 0x2, 0xfffffff7, 0x8, 0x3efa, 0xffffffff, 0x8006, 0x3, 0x4, 0x7, 0x7fff, 0x4, 0x81, 0x80000000, 0xfffff593, 0x2, 0x0, 0x1, 0x6, 0x8, 0xa, 0x2, 0xc2, 0x121, 0x5, 0xff, 0xbe64, 0xb, 0x2, 0x7, 0x3, 0x900000, 0x39a, 0x3, 0x5, 0x50d2, 0x8, 0x48, 0x7, 0x2bb6ea7b, 0x808, 0x7f, 0xa, 0x1, 0xffff8001, 0x2, 0x66, 0x2, 0x7f, 0x9c2f, 0x9, 0x9, 0x0, 0x7, 0x40, 0xb6c6, 0x8000, 0x7, 0xfff, 0x0, 0x8000, 0x7, 0x3], [0x5, 0x18c0, 0x3, 0x5, 0x3, 0x4, 0x6, 0x2, 0x3, 0x3, 0x3, 0x0, 0x2, 0xff, 0x9, 0x5e35, 0x20, 0x9, 0x7, 0xfff, 0x8, 0x5, 0xd, 0x7fff, 0x4, 0xffffffff, 0x5f98286, 0x6, 0x2, 0x0, 0x4, 0x1000, 0x1, 0x8f, 0x4, 0xfffff587, 0x3, 0x6, 0xce, 0x7, 0x1, 0x8, 0x2, 0x3, 0x7, 0x5, 0x400, 0x4, 0xffffff61, 0x0, 0x22, 0xfffffffc, 0x7, 0x6ad5, 0x4d5, 0x5, 0x9, 0x5, 0x6, 0x1, 0x1, 0x7, 0x5, 0x4]}, 0x45c) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) 1.932878688s ago: executing program 5 (id=7833): syz_open_dev$vim2m(0x0, 0x7f, 0x2) openat$rnullb(0xffffffffffffff9c, 0x0, 0xa02, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r1 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xfffffffc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, 0x0, 0x2000000) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac100000000000000000000000000000000000000000000000000000001200", "90be6c09306003d8006000", [0x0, 0x2]}}) write$uinput_user_dev(r2, 0x0, 0x0) 1.926993014s ago: executing program 1 (id=7834): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb304, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000180)={0x2c, &(0x7f0000000100)={0x20, 0xc, 0x7, {0x7, 0x23, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000f40)=[{{&(0x7f0000000a00)={0xa, 0x4e22, 0x6, @remote, 0x80}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="24000000000000002900000032000000fe8000000000000000000000000000aa", @ANYRES32=r2, @ANYRESOCT=r0], 0x120}}], 0x1, 0x44000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r6, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0xb00) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r6, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[c9s[r\xf8\xfd\xca\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x5) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x600000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0xa101, 0x0) write$vga_arbiter(r8, &(0x7f0000000040), 0xf) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x5}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 1.611054758s ago: executing program 8 (id=7835): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x40}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x0, 0x2, 0x4, 0x0, 0x80000001, {}, {0x4, 0x8, 0x0, 0x0, 0x0, 0x0, "186856f3"}}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000300)=@multiplanar_userptr={0x81, 0x0, 0x4, 0xa4a0bcefeda6916c, 0xf5, {0x0, 0x2710}, {0x2, 0x0, 0x8, 0x7, 0x7, 0x0, "1bd91733"}, 0xc5f5, 0x2, {&(0x7f0000000280)=[{0x80, 0xffffffff, {&(0x7f0000000040)}, 0x4}, {0x0, 0xd, {&(0x7f0000000080)}, 0x9}]}, 0xffff}) ioctl$BLKROTATIONAL(r1, 0x127e, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x8004, &(0x7f0000000600)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}}) sendfile(r2, r1, 0x0, 0xfffc) 1.547627995s ago: executing program 8 (id=7836): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000001600)={0x54, r1, 0x1, 0xfffffffd, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x51}, {0xc, 0x8f, 0xfffffffffffffffe}, {0xc}}]}, 0x54}}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc810}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc810}, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 1.424901385s ago: executing program 8 (id=7837): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c) rmdir(&(0x7f0000000080)='./file0\x00') (async) rmdir(&(0x7f0000000080)='./file0\x00') getsockname$netrom(r2, 0x0, &(0x7f0000000180)) (async) getsockname$netrom(r2, 0x0, &(0x7f0000000180)) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) shutdown(r3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, 0x5, 0x4, 0x7fffffff, 0x1ff, 0x8, 0x5, 0x8}, &(0x7f0000000080)=0x9c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, 0x5, 0x4, 0x7fffffff, 0x1ff, 0x8, 0x5, 0x8}, &(0x7f0000000080)=0x9c) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 1.388624034s ago: executing program 8 (id=7838): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x1, 0x0, 0x0, 0x5, 0x9, 0x2}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r0, 0x8b32, &(0x7f0000000040)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000a79d5e565c5c4756de18611a8fe374dd2bd71690982567f38b3c8be19d35be9787e657926e6d6c2dc1f80520721efbf0147d4ba52ea0445fb51922330dfba1b0d2b69b0b8b63c2e00a02ea78db7eb6ac4290ca5e98fe02e4812640dc9d4a44b6253851dd2f8165f7bb34"], 0x5) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0xe) fcntl$setstatus(r2, 0x4, 0x2000) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="4af3c21c0b", 0x5}], 0x1, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="a40000003a002902000000000000000002"], 0xa4}}, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYRES32=r4], 0x0) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000300)) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) 1.316824209s ago: executing program 5 (id=7839): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x12e, [0x0, 0x200000000880, 0x2000000008b0, 0x200000000ab4], 0x0, 0x0, &(0x7f0000000880)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x3, 0x0, 0x12e8, 'ip_vti0\x00', 'syzkaller1\x00', 'virt_wifi0\x00', 'veth1\x00', @multicast, [0xff, 0xff, 0x0, 0x0, 0xff], @broadcast, [], 0x6e, 0x6e, 0x9e, [], [], @common=@redirect={'redirect\x00', 0x8, {{0xfffffffffffffffe}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x1a6) syz_emit_vhci(&(0x7f0000000a80)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_name={{0x7, 0xff}, {0x5, @any, "6090f763a147460bdd2b3ac36027f3f11bd6a8476f9508c751a03bd6f2dfe1117542c4ad82a3de276fc1f988b8afc6ccd577cec8d7dffa25ecaaa1976dfecf6bf6d935851224f59d96e1a7f841e2a83bd1cbeae1f5b56c02f215014996604f1acc71688d9b0aa799788a15176a54599348cd97be3ad65a98d0a3dd39b4423854aa713e536ac2073c76f4480b20b3147dfd999facd78baf771f9afdfb9c2f58a61380d1ca32e082e74c8301a171d76185613a86d9ab316779fd8c4e35f2f53bf8f65fe353990a9fe6d8d3c923a3a8d28c5e67694f2f72665d1bc56ac152f39f116a3640dd4f5de0f2f19815913bd24f9824ae78af7bac5b70"}}}, 0x102) ioctl$TIOCMGET(r0, 0x5415, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYRES8=r0], 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x125a80, 0x0) r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, 0x0, 0x2f) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000001380)='./file0\x00', 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_control_io$uac1(r2, &(0x7f00000000c0)={0x14, &(0x7f00000002c0)={0x20, 0x1a, 0xae, {0xae, 0x30, "cb9f0f61f1196c4c6d05326eafd5f521e5f92c1c26e438e2374e0f57bd535bb0f4e84a4a9c3f94c4a6ad83ad4f174e987ad275d59f13bf8cc8a71a665c4d2ac1b617f1c7b78e6c43b58f59310ff3c65126d16c91c83e950e49e7bbe8ce15a5c3ba8121768db0bed0221d3e81ad44c223518dbf4671561a2a57413d10c296e5ef56ca69cc81cfac64ef13c06f6f2601e15d8ced038695ba6070602ec5993800313838c6d196e3b5ee6a7a8c8a"}}, &(0x7f0000000380)={0x0, 0x3, 0x9c, @string={0x9c, 0x3, "ef463809b3f251b1fd6701666ecf9891d50a2ff56995bf8bb0069c35787edda9252d8d708fa8c170f4bbcd58edfd76c4379a6225a264127435df6221e11226b751d1fbef5341bad828a1b8875271dc564f273f0ed53ce8e4ae951c5c75497f78515e4701710850b7d43fddd1da25c51a3c7b39a35c8b1864c88296018ecddeea4ddb912027c0dd560ac92a6e071d6e8286c15f1dcbe2b5aec5ad"}}}, &(0x7f0000000580)={0x44, &(0x7f0000000140)={0x40, 0xf, 0x33, "e68de6fc1ec1c3299d764ec102a828e21969b9487b608665f97e9135c0d69fc806bddbc8be54b65a8f8add9e76c6486fe3e2f4"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000200)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x81, 0x1, "13"}, &(0x7f0000000480)={0x20, 0x82, 0x3, "7dd8a4"}, &(0x7f00000004c0)={0x20, 0x83, 0x2, "2186"}, &(0x7f0000000500)={0x20, 0x84, 0x3, "ef396a"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "22b785"}}) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x8004, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRESHEX=r7, @ANYRESOCT=r3, @ANYRES64=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_usb_control_io(r2, &(0x7f0000000940)={0x2c, &(0x7f0000000600)={0x0, 0x0, 0xf8, {0xf8, 0x1, "cdd4d1fbb9ce5488ca4159b3ad121c0046705cbcff9502ac9340c68e4b4c286d0ec798edbb9880f1251aa79cf474510f371e3e3e08125e386dbb1aa554ebe15412751d99a863e3e0998995f96b3f5265aa4f093fa9d81c71d817b16abae572c1de3bdee7ac2ce2e496394b2201c28c823f9d0e0a4a170a0ec92eb9c00558449fc2e044c6d551880e7b13987d0aae8d8d4718ae87a39819fc95d214e2a923c99274a63b8a5f3129c1769bd6117b4d43c82d74559a4675896b2be00ded302c055f7cb135531117fd4851e82a8da95f8058f2a907a3eaf1c1c7430635fd2323ea696d3a661de60942b5938090b3f4eb6f9ee5ffe088a781"}}, &(0x7f0000000780)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "b73427f0e96ab69499352c51195f06f1a0bc356e1dc79c8136eacc8ec4f8f0423a113a002086dc2abd2d60c4c746cb41f8c78413f903f27c865736240ad659c6b2f3e3ba8a19ea118ff00579609fdb8bb2362af611497c0bdc25596a8015110772a2906ce0d53af8cbb09d93eacac615282ef180d4e780a0f15be10b4505774c72da5294887193dec8e372b9c2961c9f9516548083ad971c2dab84e7a56bf15d18f65b0dd48fb820fe3e77d7f6ce6ff7d9fde59f0336d03153ef28b3bfc20569b5fbc829d5e8543532f1513fb4d932fd7b70b6ee647c4893eb01d6c439a6382639"}}, &(0x7f0000000700)={0x0, 0xf, 0x1a, {0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x3, 0x6, 0x9ad}, @wireless={0xb, 0x10, 0x1, 0x4, 0x61, 0x3, 0x6, 0x9, 0x6}]}}, &(0x7f0000000880)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0xf0, 0xa, 0xc, "05ab46ef", "bb77e07f"}}, &(0x7f0000000900)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x26, 0x60, 0xf, 0x48, 0x2, 0x800, 0xec}}}, &(0x7f0000000d80)={0x84, &(0x7f0000000980)={0x40, 0x11, 0x28, "6174575f8f9b7f6e5c89dbd33160ac1440e62c62cba7b0d2e7db42aa277eb0c1f480f8a892f8ca31"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0xc}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x40, 0x1}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "d4b4"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000bc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @random="9863fc9748b3"}, &(0x7f0000000c40)={0x40, 0x19, 0x2, "6e90"}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x10}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x81}, &(0x7f0000000d00)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x8}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="280000000c060101000000000000000025000000050001000700000009000200"], 0x28}}, 0x20000000) sendfile(r7, r3, 0x0, 0xfffc) 1.108788317s ago: executing program 1 (id=7840): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r1, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004300)="00e7a0633e8438bafa888b9b02144af32e296a0a01dc194d649b6fa26d6d5e63bac4a04baeeb8aacb22c6eec461b67db6a737737c6d2687acb00572f92e3fdb5d0cb2f11121c557a943020200755bcab77b39c406b733239e2bb1175b9322ba39dc7d67da8f77aed1714dae2e6c24c3ea96be9d151c6ab7b3c54bbe507b8b2461fb4be8dc90042184af6d48f8ace16abb5e3fc943cf61cdb75624a259bdb5f7829b9775820f85f2d1a6ee6c6c2af4fd41ab8a41ecb2612abf13cd2c6f9f3e6db505e4bbe68cc000cf5fa6d5636191a4b366ab59af52132a3f9678d4ed1bd577bacffb3b52850804005eebf3dfa4763168ff30490a11acdbbf4c3312a45f30139f6b72b1e7cdec185006bb30e0e8fa88da2cefc718cae7e9830f7ca101e4e23c6bd16bfacf4a9927fb13af4b79c86ab999beda4ad396abdda354a42fb4ef21d6749175dc21a0cf9191aa4f90d274b50370a580ad8dcd166d2b06c0d8b071973c3fde30f7e2bc371a51ca5866bf8b24eaac75bf482dd4436b214ff62d32e20df223b0b680ede28b3a49e66e330a8a3ecace0db9855d235d5ff23765e742d1a739c2ac8743f4c62664a3b347279da55a1a5b16e1e2828b584a013577d50f890e3894d9e8d6bfccdfb2b70221f12a7fac24b7a8818edce72b65f622c77bf1312771a2c0d805ec9a25c536c91868762032255be78903b77b2c1a773a03996fabba69214e76f5df6df0375b592692a2c3c86c75a3be56fe598ddaea0b9901d20db7e43e128e04e5509283f833c24c625887288459db5727210ba9a301fb8c934dd1d8dca68039fe5b2e1a8d7cdfc6d875e5851098100c3cd42544ed90bb55b58d20a501fabbc485d148c615a3b070fa0520da2ed68ee115a4411d5418b47f3d95616096f67a7a36d68f1e8df82eca8ef96fb4a96b3422fe046a37ea5f5967513a559bd770fecab7228b0692f439765c9e9c6ea4fc608e0b27f9b49064daa2bac06f83f6d87ebc61fa3a29bb5ed39641245ce8cf43770df32a84838802b0827ca5a40e2003915e2ed108a005637bb028d29bd2cfd28a1bd55e67ed1b6b7b72163c27c4b0e36d1b134d6dfdb165a66fb46498fc04bb8053b84098af5b18758631d1318d625a6fa4d3ce5a4d3a90e10c6363a26b5ae96c2d56f87ad21a6118af6847d041f88f852ddc3f250c088ef5cb31198f3ac81cff9a5bab26ed56c09f8416188974e08349f7da28fc754b98c1ac4ea0060ac1e1b1c49f7dbadbc59254b265dc418cab9ac14e2bbecc4c3103543e37984efb1f61315e10d2b422732217d3a9b0cfe4561f3765d3bda60be239e02bdc164dd631582e8c87dd8fa60d63dcf9e7f3dadc4ce5e4433a42425b8ee8cb8a2defab0bf9b6109c90b5655b79b18c06884f2670a985d454e08e54de69f645cb0cbb70620bd988ee717c310ae77b4abe81c01c6e7f47268ee20bc30b9062830917705682eba2c5ef966b877f33294aa5f8b29d3dd5ed92302087f34fa18d19a005de05f925e3e93c8c0f24507ff20cd23d9ae5452c32ff58c78ccdb1ab32c98edfaa6d2c3971934ca8f849ac360c286566eb72b0793f12cef84bd282368d533247ee750f18aeda484167f3d680e4aaa3aa0694441d4ff6a71531f1a30f87eeb71afd04c5d686e1f86f27586f4e2c8ff77c09612ba1af9b3fb93efd31af42f8e0498f35d07c662b743a08f2839cad8f95b90cbb4fc0ed2ca45dd093a549cde4c6ff08ce09a2cbc6f9f78b6f96643357f92f8f403202742057731fd3e343a87c0affe803cfdbddb8c2694ab63f2dc35da705624747e30a943000fc82c40f10e1975d2e2ec15aefd531b6dbc053606b054dc976f44d5b5a5f37e9c08532ce16cf8bca55ab6c814ceb855ab50b8b52620f8645a9dc25fcb732080d84bf39c3ebb235b4d96da527b64ec4b72f69e91d16a4efcaf76f2e1f968ca68a06f60b01ec7becc9ffd7877c0992cb0f80fb3daabc039513896bd7697843be06aba53e7761e11e075c61ef2d897d4d9f90041c14283746feeb3f0d456ba4be27843350fe43e7c1110b4439489139f6dae01c43f23ec71f08d3042663c65e059d368e4e2c6e49de45bf078d3182a1bc1208bc59379e705aa3309579947409f2a8b3d79099c8619f916e7a6fa333d2312a274247156b8c25cbcfcc59ef13339c700f56a8691dff39bd4338789001872c0d90929037dc0ad99b380a6ba73f331f73f9274f4c2bf5233d7482edf37bf6ffed4f2c0ee44a1d57cae0d644f25591dc03bf837571a82d0c31b61be7ff85a5b3843e8f96a50eaa43f5c137ecfc4e4530d08a2afa4ba02fcc50117a4ad0d5862302017639344c82749f673dbd650e49b35302d0acbab45c0973198291bb42b4cfcd3b0c252074341ea8eca19e122cd234da6d41bf5eedb706e16c17687ed8b84db67130796d26b94eac83bbcd785b603242bd6252c155711efd7dd22cc54e1eaf6d910d0f22c701f3d4da0314dd2829c6ee13bbcbd126558b47b8066bf0766c792a012315bd29bfeda8f28a2c1f4e638b701758e19a0e5bd5b4f19048b00a877d956292e345f8a3a8367892f955bcb5e50ca145ec5e2c9309e25941bd277e393aaad38f9b72a42514b27da6856223c37a1fc1327fa760551d3fdeb0b222ab180b16c9eea138cf4f327e88fdfee293c5b6b007028eb796a60772148282dcd17ffc1c90ed8b6540ede933545ed5a5301d6ff39734444ff3d85cda4ac3befa5083a4685e9e231eba4a91a35f4f7f48fd5ac2447c64c010e2a9f8e80691c95460e1995444466ec5f3cd71fe509a26ff0b7f3254bc8c3255e903834e841b37c70b267fb33deb0d1ed4ea84a869453ba508fc255b12cf847103d5195046c930ae4a75c956f22fcfe4186d547686b54bd7a534940d5d62216994eac0e8ed3bd2bd59354e6b9c6b5b10511d54a8b928040f1e1024a423b0cf519fc6e9673df5c48c0778c7edb8fa8d8ace77463a77d2d6313160e1ee72742953e433b670400d59c93464fd91520847db238610ed0c289fc55647881a7d6257cf28090c75a6f19df079cfd35742a74a5ab270314f7c8039c20ff0f3f543d029b75a741b5dc6425241ac2ffabf1f96288e6d4ba34da09fb6049c2c8753fbd41fdb4bc68c57bf374ef4feb0df00c41319debb26afba2ff39e1799a1c2137f4e920ee5b02d93789b6b0c853e8143dae5b08ee85da2ea7c31803610ce797293ea95c16ade6dae2afb008e59d8b9505737f008b5227df5f1e4eb5d707f502698a17ead9b1f5ec09dff34248ff2fb153dc6df4812e39754a4baa42e1d8b77fbddef3ca091701ac28ae5fd422dbd8db5b122d3965383abc37a52d2fca5ce56eba974dba3d059cefe40e3c35c9daa8ae31198214303c1dcb90d58fc983ccfd504fa43925636f94b128d44e8aa5cd3ecfabd50a84062d03f7508a0575ab65ecc749d3ef566fdbc529a8139b7a7fb3a9bd784df52cddc6f2699044ba47615163fbbe19f3d88d38a8b71fe52b2611ca74341429d1cef1a7e350545be29d2caa560e60352cab074c298c44ca2c07f9795ce52f10aa3e2fcdef371f24e309b19e52218881f25a4674527edbe3b3bd0b9b536d810c6f9500c0c81bcfd9a440dd91c1d35c52758d2b2ae1a8497bb394c4f09d3947cf777727b0d1daf5ac4fe4fa3c247a791702cb84b96321b7fec81bf549d4eb5d6dafe019b26187417c68b064e4308908535a3e77b6cd3e28caaf12d726f15590b7958e40134d045a38cbb689131a7e85532f1c63dd4bac9e4d00645cd7b2b71704563f3738b92044a8153f6ba717800ab7cb238175c376d7add2c5ec38e4c856f1ab9c3ee33f6ca6d576ae908dd290e4bae23470182e253765e04e8eb02a791c4396a511ef467879a9e2818b8a4b1b0b39a6c44e816e3ebf6e3be93929dfcb38d5dad7d20b60215447674d0608b8b02331ac20e57083cb9b4449fecbb149441aea0ad82f00a82d87d743fc80d410922bc20923516885440f43c9f32beb81ce148def6140952583a7825c2d2fe012d52d30ef66d32a8a0864ac5c1737e2506228d41ff0515ee80be4cf012927dde0fd2a07cac68eff8c4437f2844d4df07936fd8753e5909f962c5c767f8719cc295bdfa8a16f3f36ff56e34d7b14b6b8c46d5af248b04a9c5396f84990e23d145670950bce5f5638e5e2cea37c371a4483729338f1305cbb32fa1c05dd9d21d2a69e5fa3abe9a2dad2237be20b4088393c04aa66cf13718de4bffac72f641a8c017a1d5568fa15a6a06e4dc833874ec95af6f115bdadf15179bfc8c4e3e64f26f1299e282c4ab397340934efc1e601afc630fe195e8ae7d8da1310568cab4f2fad085d0ec39710d8b7c812b3fd55c6f50925bcfc90fbcb35b8daa0f1e1f69d82fae2034039f7ad6921694ed48a55a68bc541e6d86f1e33c261a92d48b50eb58a03d8e31b2f6564a4ddc3ee988d0dc47b4b610a9a9dcb87571b5c1edb3362df0ec3d58872157e0f7247dfa8100b4478b705702a5620c9201010f40232327550db333e845dbecd6aadbd0a94c064862b1100b6dd45ece811b8c0275e3753e11b4bcd8bc5ed7668e72afa5bc5cc17b4c313273755f532ecfdefdf2d5c47999453a3b7c158d98332f0bd3a820cfb2c8c3bcd43197e7395a032cec6e41662079f2f654965aebc393e22b5c8516d9b8ad01e33ee481a4ac46a2df304dadeaa9e5274d340aaebe14dcea315fe1279f1a41a5c7aa8c94bf4b3d48757503171f53488e01210145e62c0de7c39737848dbdb1b207d4d33b8de180b020e8a76b1b521905e5e3ce97292f8558fb68efdee774681bfffcf1dc3eef35f660dd1659a32950de2d50e762313beee330d9c2a9fe8ce5e4e61ddd86378d3551335f6ef62053d3b248a8c33a11abdf3f3aa1975a15f4a6957a13d5b12a44d0f2b52b9a2d996e98c630c0f2abca80c7ae89efcf81ae284a0d19582cb1319d207077e5657d245533181ed6e07e0f7647123fc46c37bd75b4f4d181112b4a08acdcf445332cb9dde69a0923dd9244dd2ecd818b19588939922e3b2d8dd9d9fed95fa55b0e4564b38aca2c4d24eebc634664400177fbdeaeb278bb1d8eb11baf4be5c87d4f8d9a855bfa75df4c51fb4eec87a27c59df9a47d82523b08022a1c0fb22ff6f93c3d2cc22a4111a6ec5be428cba33617be65739c2240248f3a02d01ddf2d6aca9e537a2296b16d082d2b868504371dd5e41898885b03ebfaca73b40e8924ece83c1c80de6ce14943e1199c6f81bf359f44c3ed5ae3c6eacb730b1039f0b6555347bd566dfff45a7a2176420ab2b40916a73b66a3ad07af6e1ac5597393d203fa1ad34d4564af956a0a3e2997e27a4e5eff67dd89cce8875d995e00c1858234f149f6ad4cac2b8056966f726df57b8c4ee8f22f23097ba1471b1f1036e3a499400fccdb75b56eb13e9eca1407d5bff4b075b06d00fcbfcafc28431eb33156232e73c6577e3eca437330c494ede57b9609e1f40634918dea767338b5542197410cdc000143ace89ca0b7bf645b3267f74767d7c7fce05d2f59c137204e56bfa711f66903c511f681cf7a1b4f9fc0f42b7c438ff8957e1059375321df5b0c5c884f46d94c21686e1300582d34928bc398653118f79bfeea2e7cfbbf31a7718f4aab50fae57db94203d43e060365c9a7455241be03d82dffc3783d0f6aa170c0866eb0dad07485831526922d8348a7a16e2e9903a2ac93c58c6dce83127fab17703ec004a519ae5675baffb31bf4b52f9ca992a84017a44d68dc693abd829947342f277fdcbc87168bcc03c32b8b1e81a1915af2517c464af07d52b79d1b0e53164c82ba049f81e92ed1dc20a88fd72e9ce7aa4b22a7cc57dc5527d14f62bc29cfc9d57ed26fd523cac39ac00ba12d3a49d694709924275fc0793d56acf9558818dc9eb210749fa5307d45886b879257d627cee0542b51c2ce6ce134100efb47c92456ece5b73cdc051f570810a8d534222649eb56cf73a377162b753de6c282bcd4a25dda21dd10901bd8dfe8fd4ba8a70811c39707beded23dd60f23e2933372e3a6bce099899b07f0a4c4956fd98e956a8649622c77717de099463c0c6c9389ab4a1ae10f8ddd086d876af2943ee0b6b402ae5f89e09922e8c510ec0caa0a83e366e916400bfec88a52ab457037a35ddc6a8e2289c33684a5915c37bf5d227cbc65a737b52bdcb4fbbb7b4e7f965db116b46044d0870846c730dce12e120b1fe6dd5798ced24cad72c59a3f44de4978b8bc05a1dbeb766be6e2abf6ef46c67a58a370e54e92d89e5f44525e82b94a388d8d0cb20c3469a258c1633c9dddb6854aee255f93f59435ff317622f6899250aa185c207644275278580c5d32401741fe264a2e03b80f442ed58fd0704ebac923ac6a5abb7f0c695252f82e3fbcf2b99d721589a8fe3fad4d5926aee3d7bfafb6739e525faae3d25b12841fa2cc61dddc44d36acb9a8b72d60ecdd9c8cf04f9bac341b5e0f9bc59042db8126324888b07afe72b18cce36d61eec975b6b4ef5dc4a16ac14440cf770599bd4db630bd110eb63a03a80cd95c16d314a4de60cc5115bf0754cb7ab84a827ecefafa96069c721a5979f227fdc2467b4cd1975dafb5b28e1d6f3c1c3a2816ad831dd98c1378a03798c128f176426eaa0e361571e758d54bf4ec2c988355f016e16d6cd5cf97bb4891ab33f5623b7e796af313cc7a9e2f9510cd2bead1ea5dd080d9de1f595b2629ebccf69a0feaed3963ae8a6c89edd66fbf6e566379898185828925f8669668d6bddff961b08aaedbbe7fc196931a887ec740da6bcdab8f826a34aa2aa1e406a258558f3baf022a64222df4d6ee8726c79ba3dd6e11a19e4b4bb49b4a8cd99c189e6392f08ad731e415b65d0ccb919dca46efe9f79e21437111ab09e926d3038182044ae047bf1cc92e2d2644c528985719667a1a8abaf65d0f211172ea789b2fa016e1a88325d1ed706239da4dbb9e2079e3598b4ae5885667587ba1e0921c9ba55d7a3be4c47bc2f2f3547ce9efe32e5a22855f761bd4cbe1cd9337eda4bd7d82a918084d7e116b656104ca87e64b1b8c62323c3c296c5b5b98051feb607b872edf9f789744aff710c4b7279711182bcac6b76c05f5cd982f52f451e7e29046550e012e01d8cdd3e305427030f4247488c9136303084c12175c5c781cdd08aede5a356ea0ccdd05a460be3c7b4bfd62c3ce9ab68e285a36c1546d0b18edad71f69f5bedb340772e1bbb035514b085067259e39f59dc292a12557350c66904b253efee29a5eb7a6920f583c899dc46a1d3e2af2db3a3d1a0e8d1f98722a16c6cc1e401058d60c8c436d8f1166ba53bdde5810f9d0288528affd486c266546a864c92af3df8abd451cc1e0d6bfea534865cea9d49b3ea5e390fa823118df8a61e31022f5fbb8ceee870bf2e60890263c4d14e24d053d0fddf665ff80a66fa00a5957f8a30fe82a4b82cf2f6b4d49def98f66bfcdaa0aef13314e950ca9f3849b1edf3b82eaf74a0dbcf45c3dba9bd2d853281a78484f1efaf4150da1207ec3cb61fbcbf759f8182b7052b28d7164b73197b0a440759fe9d5ddf827f1897a174e82fb968a9a07c61bee44bc1f7f9ee5c6de04c02d57735c5fab741b36aec7c8642e56cba932a08b8e8a9d3eb066a4ee7cbf22e5abbd4346de59eca1f24ad9f7f9ff7621e5f30dd08f4cddda8e80e496908109f5212a72bab1378d1237def07bdda4178719975346c68405de15153031fb17535894e5e3c1de6fdd507333f0226b78ba7cae509cfb48d6735ede9392650bf85ac1db919b1e9fe0a823119d8253204dbb2f7a8f524be6d419f3a45c5051a7a88ef0bd41586d90c11a894d647f03895f671a6e19f1c70e32668653aba8366a3d372522f49844081a9637db080663ab02f4a8af502955d5411461b62f85308c91852f8fb9f0bdddd500b4a133791d3a2f91a82dc4b09f5ad2196a9172ab0cd3fafe7266e9f6d159110d99ca8da8a34b17be17a04ad4509a9fffab1e45e10f10e0cf9cfbd9c761ad044064c07e473fdc626289cfb88b13a11455c069b70aa02426d9119ac878a14c9483be9c0d5bcbb5fa76c8d06531f59c7cf7c26372e750e2f332418ca769e5e7fbeb3ada7bb58b573a0635e2e3ad9a53ddb809ea01086a3fa993ad57e89da6f9c5e61bd0f8ba69212a386b2aa1ae17520d7fb989dbe14021885eb50fa3048aebd42c861a09a308b660d382c0480ead8a52a1e14927c7c77957f94bb59ccfd557f8c4a7af23360a298a603d20ebc386db041d8c306b3e32b0bff541bdec5ff75c3b40950815cf9f89d48a382f67e44c409d046c01fb1262aca0df6f5238a3c3c09977261494f7361ba326815d6e23f49e4d6d4b54665081067332265fff59cf54af9da0db9d19bc611cbcb6e6f3f1e2e1ffb6cdd6253578d78d06a2ff5f9250f1994c5749e3ce49231fbd63bba28e948f9150933e3ae31299babaa41043b181a100882e613b4b4b8f49ceeb742d22f860853a9b917f5a323a8a1fb1f3363a7be4407fba44b408f259b5db79a055b92ce3d7a0649cc59f4afa2b1f69959d5c6f5eef1fa7987a47bee4491f685c52e9db1ee1a231ab5a4bae1019c97868a409dd0d57b32525394a233023c4a7ac429808bbcb57a34b41883202744c3bdebc0a637773273f19c2be6e806bef7fc1002846db762ee4e16867773808c5477987d5851d5b1641d070feabc203cb3d7943ffb206272fcac1bccb616352d85975f5a22c0f247548535ad9fb83fb2be17689453f10691143c060cd964df63c3c70e7b1cfc7e2b468015f327f9869353477bfeeed330b03ddd9e4e0a2441182244da283d7a59d2b2b20e6de3e3a47c26aeef4944c1190bba674523a6c3c4ed6bac53b9edffcb0e9fb19d8bf36949d03ef6a7e59eb903a00d9614f642d1932c766421906f5b177963c71e881453560e3ffcec792e8dc46b1832a8fcb2ab2268a9c1fb648d1c6fa1c8cbd50d5a2d8264fbc6c063e6daac5519d362da389dcd3d12c8039f991de91e728abf5bab95c3aef66dd8cc36c60e73cb10afb02eff6df20ff12c59b142b07fc48fe94612de80b8b958f78256fd7cf3c6f79a83867f3bb5f70da392957badadecefdf7b6e4ebd39ff945397c7d302ca0a5a3918d8abb893cd9cdd680916a50fe19699ff0476ad82e6ba46523f26ccc5eb65313c1df1077c8876d2b73bf86ba311862d12b0c557a92ef827197121512e87f817167d4b17c7e225a48b3f8fbbf4187438e0e9b78e905cdbeb72e80dfb37ec0104f5186b39b4ff34f0cdf4b74dc915acd3f98874cd6a67308d0ad9697121ac477550b1affe004f433705933f9647522be65cb5a7471120ec942aeb956f195be0c1783102cf7d842f2968222ae1a7fa6513f200d3fa85d71724956ed697f0673ee3b40a4d46ba4850439ec125b708ed52b52b9f72906477d520c90a9f5dd49a7a33a328137a183f439895532b78ae451a8c3db789bc862fbc37241d523027e1a008629c969380f6eb55f9cf3f0675bca6851f00df6aaf90de9f62d5c179945ef81d1073850301f97e379ea415d830e3f3751cf83e2dba541cb6cdd89e6b674f2c53e329e5f3dd418d534ada6469a5b3bca5b7cfbdfdd6df4abaf77d4520d0311e801145c91b52586a56086e663841b702f52cef9fff8cfb7b33dfa125688ba6b4fadd1dca8defaf4259ca85323b23d3bbb45933562c25af3e8d7bc6ad4a50ae974f8d207994b3bd74a6812ab6a40fcaf96bb4e17bd20d742b14c72226caef3e0f5c56c4930071e9f9a894f18650fbb785c6f707605c86b634c9722c8690cf3a954f68d7c2db3a257339ade67a41259f6f878dd0ab7876deffa77f6f00819282a8f4c4da84c6cf4f335cd0410770a2b1a1fbb3f85f4489eeceb78bbfddb2d1866c57b41f6ed179a0bc3750a486403d23473f2feef43ebc5af1018d9c20089e277d77fb9c34f425c8f8af4c49864b57572fa8c232e61ef37194251a1ddc2f73ffecd57e638751cb72bcb2c40d22540166ca1e8588f24b010c9fbd962e3a2c23a7e93f131df61b8703ce326ed80cc87912d3c6aaa27574bbe8d65bcaecd660c31cead132a44b1d0e4a53cacc0b82a263c4e7783944af0af08ea9e68e8e25ed9111cfef841f1b2fd24164f9097f70efe09b1109e5cb91fe68a2760381fd63a7fd422dd578a60661abc9ee3a5db1c2cde2fb21f2040f1ed3fc27b99e254256949d0560e8b98fa028fca50768caa951a87bf8969af498d50a9ee773c9caa7d9f7d8e1955506013f198cda316d79b177e59f233b98f727afd2494fc18642f0015adab756ea6742690c7d00f28655b915ce4eb8b3ba2e8559ba23e1ff1ccc9f79ae2df85f924459c56715dec78ef4592352eb1a850cd65ecd36e1a9121e888586b7b2fa84da920b8cf44480433e61ab076b10171c0537524bb170a4b99b0b0c437418a665b7ef909652b6483b20362e557c1480c2a2a0efa221fc59054a48122b52d38245f9bd026001635be5b155f5c766a59306fbde231fa72b4d74449a2fe8fb969496ee26af5881adaafb4189b439877ab8f78709cfd32c10ea576a010bfc137b7a4aae137ea3d29070ce3bc8dbe6655e967115ca3461ad9d28b9cf8af07441e68a54ec5e889846f3978f07ba51f7d5af5da78c5c675dc5d0c1a4a399ff4247203573a46fb903eaf7bc886e6cbd3126fa4a3fe3bb13bbdfea7da871f6563aa750f6ad7895b34b2809563dcf5ed30f1c60cef4138aa49d4f55e396534ed10cf4d857723a2b442f47d79de162c30ec6c4daf939b4c88649494e3682d1da81b4a5928d8e18a16c46707a685305e592589acb484e28e9d5af89c44b6e563d125ec97c0155410527406d94b90bc9576a662db99da1cb82b04d610d02187ce08f22ea0e8fd31919d53fa6aaf980e31ca7f8610e695a41919c24136a8406c62d5f15fca365892a2b54ece17664b5247583ad60d863f283f3c288946139575dcaedc978762e85f534e56334ef0221c34ffae054ddf79339b8f08701e9699b11041df8f518dd33203363c8098fbefb01555bcc2542422777b38d8dff11b15aadb0c251ce2c5b32f8735b3cb784f2e5731b48feb5a0e791a1106abdea0f7d1f087737cbe7fdf523fa14c9be2a2987511004c5b7ac1814ef6961db16799698242452c469a07c30e4a1f73193c74a41bdd88aef50035e4648bc9dfa276951798420a45e4085932bdb9381af3cc4678bd962af616549e4020d2c9fd25e2117a6d8934fde2218273d7833d60ea492e251417a27e7fb32012a940a6b6487af4b64958bf05f1b1107732149d227eeda5ca5a43cf583dc297d66072a1acd75e93a7caefd36a0d581e21d5cb08654c4ecef46ebac5391546e0b7d2a6418548d8f816446bcf237f676e873e6bae9107234abe5ab24c53ea472ad10653cef068fd9f4e729fc0d526e489f8df13af5575f1e70e0ec22899728b0659d70fc2dd509d9df3ec170638f89e540f4d3f02aa9b1b1819f84da596e0d7b45a5818061728f8eeccd2bea0f460dd7e18cb95f2364c50e351f0690e184eb63ebbb14a0b4b2117e44f3b2b3", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x400, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x1, 0xadf, 0x800, 0xee01, 0x0, 0x6000, '\x00', 0x2, 0x4, 0xb4e9, 0x3, {0x8001, 0x8}, {0x4000000000006, 0x3}, {0x0, 0x7}, {0x0, 0xa00}, 0x80008003, 0xa, 0x0, 0x6}}}}) write$FUSE_INIT(r1, &(0x7f0000001200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x22000100, 0x3, 0x0, 0x2}}, 0x50) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, r2, {0x7, 0x2b, 0x4, 0x20, 0x9, 0x81, 0x2, 0x9, 0x0, 0x0, 0x20, 0x800}}, 0x50) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r3, &(0x7f0000000140)={0x27, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x6, "e36f66d137ada5939015db2d8441ee84a5cf0a0637fed9bf7d13af8f0d5babc60d1e8039ffd61b5c007bdece91d241a6c021c2532724f7caf5ff6be7480272", 0x2d}, 0x60) mknod(&(0x7f0000000040)='./file1\x00', 0x1000, 0x7fff) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r4, &(0x7f0000000080)={0x1, @le_remove_cig={{0x2065, 0x1}, {0xff}}}, 0x5) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (async) read$FUSE(r1, &(0x7f0000008340)={0x2020}, 0x2020) (async) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x400, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x1, 0xadf, 0x800, 0xee01, 0x0, 0x6000, '\x00', 0x2, 0x4, 0xb4e9, 0x3, {0x8001, 0x8}, {0x4000000000006, 0x3}, {0x0, 0x7}, {0x0, 0xa00}, 0x80008003, 0xa, 0x0, 0x6}}}}) (async) write$FUSE_INIT(r1, &(0x7f0000001200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x22000100, 0x3, 0x0, 0x2}}, 0x50) (async) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, r2, {0x7, 0x2b, 0x4, 0x20, 0x9, 0x81, 0x2, 0x9, 0x0, 0x0, 0x20, 0x800}}, 0x50) (async) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) bind$nfc_llcp(r3, &(0x7f0000000140)={0x27, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x6, "e36f66d137ada5939015db2d8441ee84a5cf0a0637fed9bf7d13af8f0d5babc60d1e8039ffd61b5c007bdece91d241a6c021c2532724f7caf5ff6be7480272", 0x2d}, 0x60) (async) mknod(&(0x7f0000000040)='./file1\x00', 0x1000, 0x7fff) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) write$bt_hci(r4, &(0x7f0000000080)={0x1, @le_remove_cig={{0x2065, 0x1}, {0xff}}}, 0x5) (async) 1.002928101s ago: executing program 1 (id=7841): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000180), &(0x7f0000000200)=0xc) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000040)={r4}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={r4, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x3d2f, 0x6, 0xfffffffc, 0x65, 0x0, 0x7, 0x5}, 0x9c) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000009700)='/sys/kernel/oops_count', 0x40, 0x2) read$FUSE(r5, &(0x7f0000009800)={0x2020}, 0x2020) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x11, r1, 0x63cb1000) 938.507297ms ago: executing program 1 (id=7842): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, 0x0) mmap(&(0x7f0000215000/0x3000)=nil, 0x3000, 0x800001, 0x12, r0, 0xe8a4a000) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x141002, 0x0) fallocate(r2, 0x0, 0x0, 0xaeca) r3 = syz_open_dev$vim2m(&(0x7f0000000180), 0x10000000000201, 0x2) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r4 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000000c0)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000001880)={&(0x7f0000000000)={0xa, 0x3ff, 0xf7, @dev={0xfe, 0x80, '\x00', 0x25}, 0xe0000}, 0x1c, 0x0, 0x0, &(0x7f0000001600)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x28}, 0x8000000) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x686881) r7 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r8 = getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000005140)={0x0, 0x0, 0x0}, &(0x7f0000005180)=0xc) mount$tmpfs(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000007c0), 0x10004, &(0x7f0000000c80)=ANY=[@ANYBLOB="6700003de7e9abc344cb0ed4b5b47f03d747443bc18f69c2d4b68c1bf1d4d803ef7835a0f7535c3189e8c39a3276698db72021b77088ff82c421b13623f79a1d5fd5bb476a196accb83e09469f11c42802a27bdbd82e3e93aa1ac6e342b1c76f0f93df4ca3df3ca6f6d965712e6015b099f466a972037b5515f5e8b855777f44dc47d75baaf3f524e94aa30ec9f45f11d193ea6f7feb", @ANYRESHEX=r9, @ANYBLOB=',\x00']) r10 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r10, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000f887"], 0x0) r11 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000400), 0x131002, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000440)={0x1, 0xff419e7c, {}, {0x0}, 0x9, 0x1000}) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendmsg$netlink(r2, &(0x7f0000000600)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)=[{&(0x7f00000018c0)={0x10b8, 0x28, 0x4, 0x70bd26, 0x25dfdbfe, "", [@nested={0x74, 0xbb, 0x0, 0x1, [@typed={0x4, 0xfb}, @generic="5cdbfb2c24b7bc1658b9c5c525c033d6a516e402fbb9952f4115db2e5561e304b783817822cd58b896f7f382b02c5dedc677b05f43caf33ed2b1f6b3373cb3da83e0d0c3e95b73e16dbc043eb7b7270534ceff3aa2f6ca1fe908978b892c9577cdecd72f512e0781", @typed={0x4, 0x26}]}, @nested={0x1032, 0x75, 0x0, 0x1, [@generic="ba986b825671f32fefb79cfae129c5ba294702a178135c93321749de71287e4d72a1227a06d8362b49525f009af0", @generic="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"]}]}, 0x10b8}, {&(0x7f0000000340)={0x7c, 0x19, 0x100, 0x70bd28, 0x25dfdbfe, "", [@nested={0x46, 0xf9, 0x0, 0x1, [@generic="353d7c658763f0c56f11539afdc5d17f3ab7cf956d593477c9a7936dd48b2db5e6eee8b8462f4a1fad85d345ec103069847dfd6ce59e2e6b8ce37ddd0d3829a54858"]}, @nested={0xc, 0x87, 0x0, 0x1, [@typed={0x8, 0xba, 0x0, 0x0, @pid}]}, @nested={0x10, 0x138, 0x0, 0x1, [@typed={0x8, 0x3e, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x8a}]}, @typed={0x8, 0x3b, 0x0, 0x0, @uid}]}, 0x7c}], 0x2, &(0x7f0000000540)=[@cred={{0x1c, 0x1, 0x2, {r8, 0x0, r9}}}, @rights={{0x18, 0x1, 0x1, [r6, r6]}}, @rights={{0x20, 0x1, 0x1, [r10, r6, r0, r11]}}, @rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r12, r13}}}, @rights={{0x24, 0x1, 0x1, [r1, 0xffffffffffffffff, r1, r3, r4]}}], 0xb8, 0x40041}, 0x4004001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) socket$packet(0x11, 0x2, 0x300) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) 729.06179ms ago: executing program 8 (id=7843): rt_sigaction(0xd, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x20, 0x0) 727.176753ms ago: executing program 8 (id=7844): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = syz_open_dev$I2C(0x0, 0x2000000000000000, 0x100) ioctl$I2C_SMBUS(r1, 0x720, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) (async) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) 538.855521ms ago: executing program 5 (id=7845): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) (async) r1 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, 0x0) (async) mmap(&(0x7f0000215000/0x3000)=nil, 0x3000, 0x800001, 0x12, r0, 0xe8a4a000) (async) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x141002, 0x0) (async) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async) r4 = gettid() r5 = syz_open_procfs(r4, &(0x7f0000000040)='timerslack_ns\x00') write$tun(r5, &(0x7f0000000380)=ANY=[@ANYRESOCT=r3], 0xfce) (async) fallocate(r2, 0x0, 0x0, 0xaeca) (async) syz_open_dev$vim2m(&(0x7f0000000180), 0x10000000000201, 0x2) (async) syz_usb_connect(0x1, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) (async) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000000c0)) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x686881) (async) r6 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54}) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) (async) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) (async) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) 444.367061ms ago: executing program 7 (id=7846): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f0000004580)) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setresuid(r1, r1, 0x0) setuid(r1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) r4 = fanotify_init(0x200, 0x0) r5 = dup(r4) write$sndseq(r5, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x8000, 0x4080}) close(r3) close_range(r2, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 333.024856ms ago: executing program 5 (id=7847): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r1 = fanotify_init(0x40, 0x101c00) timer_create(0x0, &(0x7f0000000040)={0x0, 0x2c, 0x2, @thr={&(0x7f00000000c0)="d7d8999d9efcebe20c0e954febb30b5aaac1da6a10b94be4af41667936b767744763bfb4594d1924a65a88f352a92681ebd9bac68df2c55a4031aa7bbd9c98b51409c719d620b5fd099f058679275c71544fc84cf373c0f524fc18008fe597ac632d94ab66eaf44a609100494e4e3e48e2bf8ea65565aed0f1a82e29effb2c05473ad26c51ce84e0dbf35a09f6760e59fae44d97132529fc5ca3651523", &(0x7f0000000180)="f6e9259148e5c8579fcd36153ea2f1c527c220b35a5b87f348a2ef56213f85ec6a9f134b2126f94e75bc0e5a2b992887fc6b1d3c78503cf6a0b983fa9cd14e2d3c64a85d3abca5551458c832daa8ba57860147b961d4887cb26724bd9269"}}, &(0x7f0000000200)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="041d"], 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r3, 0x1000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = dup(r1) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r0, 0x45809000) read$eventfd(r3, &(0x7f0000000240), 0x8) 283.532545ms ago: executing program 1 (id=7848): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a80016", 0x33}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe45) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCFLSH(r2, 0x80045430, 0x2000000000002) add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) mount(&(0x7f00000014c0)=@rnullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='overlay\x00', 0x6475e206c9aaffa3, 0x0) r3 = syz_usb_connect(0x0, 0xcdf, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0xe4, 0xb0, 0x20, 0x40, 0xb48, 0x1006, 0x4e22, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xccd, 0x3, 0x2, 0x3, 0x20, 0x0, [{{0x9, 0x4, 0xdd, 0x55, 0xf, 0xde, 0x5f, 0x37, 0x40, [@hid_hid={0x9, 0x21, 0x8, 0xe, 0x1, {0x22, 0x768}}, @uac_as={[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x8, 0x6, 0x8, "f6c00c7e0304"}, @as_header={0x7, 0x24, 0x1, 0x7a, 0xfa, 0x5}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x3, 0xf5, 0x8, "ecb2", "96"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x4, 0x42, 0x7, 0xb, 'G^'}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x2, 0x0, 0x7, "d17d"}, @as_header={0x7, 0x24, 0x1, 0x8, 0xd, 0x2}]}], [{{0x9, 0x5, 0x8, 0x0, 0x8, 0x2, 0x80, 0x6, [@generic={0x2c, 0x23, "d63448c80d0d2ee5fa90512cd3f182f0a1c3ed65f793369793e1d70c4cebdd052fd3a9980738454e6fd0"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x40, 0x42, 0x7, 0x0, [@generic={0xe9, 0x5, "a747017c14a01fe006a6c507e66146ddede3c3622c00c1988b8632aca9b0d8c8ff7bd3c6a3c72c7d5364b9cbea4dbc19fb169ea6e323140da8e92e20a2953c10d3ea766b0ee8469798edd0fbb85edec489fad172e9b29a3f4fb24ed7c3f8e20dac6a5e467e9c657a5e855a412d088e64aab2d1e3bc43c9e2ffd136f5318ed215792c53aabc2b236ba9e85cff2c44e6acdce4b2d5d8dd316e112bab5a8629b00887d8affdc51e47327e26b865e61bd6fb3bb5da0abd718c79bc8fdc1f9c2a36b54ee80ebc5d2a8e89559c0382f8f2981566ab265b0c770bf07f41ec1f451c7a7e4dafca39e6c166"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x8, 0x3, 0x5, [@generic={0x34, 0x21, "139b8f1a36c5e3ba0c247aee44edb00f993ac34120dfc4665a795094fd798c9811e0b098649709802a2ecae793983fa166e5"}]}}, {{0x9, 0x5, 0x6, 0x1, 0x20, 0x5, 0x0, 0x5, [@generic={0x3, 0xa, '>'}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x82, 0x503f}]}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0xfd, 0x2, 0x94, [@generic={0xb, 0xa, "c6690599a8bbbfdc69"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x400, 0xe, 0xfc, 0x8, [@generic={0x36, 0x30, "cebf7f163a5f686d81e6fdd708f8d054d6797973143e52508e1a3baf4d177f8499b81f2d6edd88070268e116a53351f8ceaf6c53"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0x8, 0x2, 0xb, [@generic={0xd5, 0x0, "8443f071460f2cfee4f43a041257cc43c8fc697e0aefb5fa184bd6146ea31ecc27f4e6da85f655f87480a59b3ffee8c727c812f8d84fdb476549e18cf8deea0f583279eb7dc71b3b57287d68118777fe2ef0ff606e270ca081e191b72d1b691c31174d795affa421ac912c2526a58c8f6d4b88041b2524ae77ae62444b946b4bfdefe62b947553f5ca21f97e9de957151c53716bb4a2ea16475fe6d303cd0c29892330cb08534f4290030256675413a02c1fa51a85d5fa40da896ec8fae2ebc022bc6799c6cdaab3ecaaa62db4abe8853feaac"}, @generic={0xb4, 0x31, "49b70052ab9595eeee1d3edc515a0d5bb5403ce50f8403c55193529018ecf7b76ca36ae14750f9089b5760787265dce08a70956201bc7063368dc18e7aadaf2d21c5780ea9cae2217ffe6552e4fb943b6df5ebe10a14dc61984818807bd2a595ee80c50e73d93a63a1120e14bf02716d5c7a3ccb9a1ff16c3c2d9da6e0a2b2a2cdfc0e0004973fd1aff9d3bf1620ab105b9fc0b4a9be97fcf3d3b577a6e27d298f05d592aaccc167ef37bb436b14ef05214e"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0xb, 0x3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xe, 0x6}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x1, 0xde, 0x0, [@generic={0xf, 0xf, "e4db82041b9a3294b3d9b51c0f"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x628, 0x0, 0x7, 0x2f, [@generic={0x95, 0xa, "b1c9467d73121b6977e01e7245727903fa7c9f2b041ec8ca43816af8cefcb850de0f62b24c5a9b8bd5dcb6b425c851c90000bedc9eaecdd861f6bf7fffbd8ddb9da47182ea29aeec278819688eee9cba72deb9403e1303a8b5f57cfdff39659e0a36ed882e851d40df8e6e4345d50fbf06673380e7bcf529d97213f3f028e9ca81f9938a71fb4f96d3f5f92c3862df467c9092"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x3, 0x7, 0x2, [@generic={0xe3, 0x22, "4e31b1e7ac8e3fcafe9d0629f7ad12734b993afa82c2ee6588809f329cdb4e4ac1c059d77ac7fd175840bd43e2561be9e66605ec69ea8b00e3b647b574346c767b00e6939e7c8020c002c73d65659291a8a327bf58660d771adacf032a08602f4dc1dd26bacafc0217f78c7c902da6230bdb8e31fd75c14146f073dbd4493a02fd7c2c34721cab217fbc42f093c96c9c64b56be1c8a1b8ff3dba9a6aa48092bc76992e9c6176f4d680cb4f53d306192352f63acad4848f76731a25d566bff3815c6a5246daa6fed8162c53a7d316d5eaceb3b4a4d2a7627ded6640e8a13213fc85"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x2}]}}, {{0x9, 0x5, 0x5, 0x3, 0x200, 0x44, 0x5, 0x0, [@generic={0xa1, 0xd, "fe4b5158a76f3d54cbf06bc080190621e8132b8a5193f3b7e00165d4ec3c065d6e4be1265dee167f725a3d1dd8b2dd2ce01ada87d2306d96d7eef94bb09a5b5682ebae39ae15d49ab7e44cd65ac4778e85bd8e18d407405235d0c8060126a6397b82676a8877f2b026f5eed3e6587d10bf38d25182c0beb72d8280ce7a83e93e6f121fa4ee90aadfd04d75c8bcd0873efe4cea796aff7cb0cdb6d41c61b02f"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x3ff, 0x7, 0x95, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x67}]}}, {{0x9, 0x5, 0xd, 0x3, 0x3ff, 0x9, 0x73, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x7, 0x20, 0x10, [@generic={0x34, 0x23, "e353a70bf0dc466f41755665673bdbb91e7489fa9ac15952d8e6bcca704a1b18268a7c330fdd9d08fecc0c3e2f79ee04acb2"}]}}]}}, {{0x9, 0x4, 0x3, 0x7f, 0xf, 0x8b, 0xad, 0xa0, 0xe, [@hid_hid={0x9, 0x21, 0x400, 0x7, 0x1, {0x22, 0x430}}, @generic={0x8d, 0x9, "6ca1b7ed45f683cfd10e8e9fc5af93721d36b3085a6573aefd57b2f7f085d94cb3f8be354bae720ce3c6739d5e098b8e017a44c33a925fa951f068dbf4dae29d9b490a9b3e992662b5a5c0bbfc2578f7a66eeaecd1724ad4ae39e3396f898e9a42346e678630c694b04f1579570a8c7311b186b8976b3d1f86b177c36060f9b3fe184491932246e47f0dfb"}], [{{0x9, 0x5, 0x9, 0x3, 0x3ef, 0x0, 0xff, 0x7, [@generic={0x55, 0x11, "2ce603ec441d2ce0b44adbe62dd22fa745362c2b7f694e6f682b3834c92727069b0bcb578f87215e41017dcb2e70127950c846c6b492d10f711468e1e9a69753571f564cf31da65398602909312723bc9afa9f"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xe, 0x5}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0x3, 0x7, 0x5, [@generic={0xb8, 0xd, "4e2b1cb8a31ee22442ea9bb3910f201c17851f27d89575d549ae4ca60548441b37a7bc58b0482099b24e38ec3a5c501651cf18b5edd23c50ab080e598e768b2ec80d3cb38c3012a1640bb689206e745f54e03bc9a479898fe8a1e9482c40485fc8c84bc3268153a978dd4c501731296cbb06c6a05066e88e12fd21b0588c4f3d3e2ded11e8c3f7202e090b6eddfc60843f990b3a7f69815939c98642a1ecdd1538b285631e41b46d62d95c58ef5198526d278dbf8e4c"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0x6, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7f, 0x7}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x0, 0x9, 0x8, [@generic={0x25, 0x10, "3c9f460482945012b9feb1d7095d7ba3f7aaa304750f5ddf19227ff724910c3007ada0"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x400, 0xf7, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x93246a9bfb4e2925, 0x0, 0x2eaf}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x3, 0x5, 0xd, [@generic={0x1b, 0x22, "3400b6fe086908ae24693dd6f6d6992a316e756ee48e6a0521"}, @generic={0x49, 0x3, "ff777c85cd3fea69818098cb910c9674464a44e6b219fe938643e4eca763060897df8081e7476332b8ea6c655c42c0cc9acadab3b08b10a3088897fb33bf32cf81447936623047"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x610, 0x2, 0x81, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xbc, 0x0, 0x0, [@generic={0x5a, 0x21, "78501bcaab015bcb4b6c7f40fa0ebb43ba3e026365180b77a846d7d0051bba52f7a13068f7988bccaa84eee6da09f2eadeb86e6d851ad4a1373a70b868ecf6245f7050610616c39625af9705e43389255b430fda7a9a188b"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x7, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x84, 0x8, 0x7fff}, @generic={0x28, 0xa, "c731066d3e9c50db7e42bda4d1332f8632387f6dafb3d4727c97b3257c3e7e92a892890234c9"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x3, 0x5c, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x40, 0x9}]}}, {{0x9, 0x5, 0xb, 0xc, 0x430, 0xf1, 0x9, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x6}]}}, {{0x9, 0x5, 0x80, 0x4, 0x10, 0x81, 0x9, 0x3f, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x3}]}}, {{0x9, 0x5, 0x8ef3dbe4f28e94e3, 0x10, 0x20, 0x2, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x2}]}}, {{0x9, 0x5, 0x6, 0x0, 0x20, 0x6, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5}]}}, {{0x9, 0x5, 0x7, 0xc, 0x40, 0x3, 0x6e, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x13, 0x756}]}}]}}, {{0x9, 0x4, 0xbb, 0x3, 0xb, 0xc2, 0x88, 0xa9, 0xe, [@hid_hid={0x9, 0x21, 0xfffa, 0xf, 0x1, {0x22, 0x65a}}, @uac_control={{0xa, 0x24, 0x1, 0x8001}, [@mixer_unit={0x9, 0x24, 0x4, 0x4, 0x0, "2786e7d0"}, @feature_unit={0x11, 0x24, 0x6, 0x5, 0x6, 0x5, [0x3, 0x6, 0xa, 0x9, 0x9], 0x2}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x8, 0x3, "52e972d0"}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x1ff, 0x4, 0x7, 0x400, 0x7f, 0x1f}]}], [{{0x9, 0x5, 0x6, 0x1, 0x40, 0x8, 0x18, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9}]}}, {{0x9, 0x5, 0x6, 0xc, 0x20, 0xb1, 0x3e, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x2000}]}}, {{0x9, 0x5, 0xc, 0x1, 0x10, 0xb, 0x0, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x5}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x7, 0x0, 0xe4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x74, 0x9}, @generic={0xdd, 0x23, "531fa26d80bcac8b698bd7dbd1044e36a4002a9b11674e440f92ca3eea75a0a4573e38a570d01f0b317750dc1a8ab8d272b5a5a42cee3d970d42f00df3cb448ee92a3dc2ee6f5d55a235060e6ddf2164eab88830a5ff0c0d26a7b9cea1b72caca461e1c517058000a7b86ac49a1f6a79cbbfc07070145d21ea20f604e3c72ef789142b84e6e1a177714a7164fec914861ba58370309898d144bac6ca5d7f154674da6fc111c0cac8f67b19e7a24443d95a6ee6176da789a70a8eae836e810b52079c9902b00e92090c04739f4506aa7ece0c63613eae6b9af28b92"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x200, 0x0, 0x81, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x2}]}}, {{0x9, 0x5, 0x6, 0x3b249faae68a38dc, 0x8, 0x5, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x9}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x6, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0x318}]}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x2, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x6, 0x7f, 0x7}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x4, 0x9, 0x5f, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0xffff}]}}, {{0x9, 0x5, 0x6, 0x4, 0x400, 0x8, 0x10, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x9, 0x28, 0x3, [@generic={0xf6, 0x5, "ef610f062b3baffeefb46ba537f267f49f6b2a2a992d8fd94ff0360a87d043be3703feef0da2ac49357f09408ca01ca5d193778b2a4e03ff21c1e996a50807886baedd709107c073a7b3ba1a6e2ca1e5f5a60fa597ed58e065e81cf9688823233a15677f512cf1f05f9b8a4e9a7b3eb9cb62f30cfefc2cdfe4dce4aa25625b8eba401169f2f6a26b32fe86fa1a1810931e8d8e9c388c0281d82f3a48a9dcebbdaca6bf8965873cc7822f9352ebc0150754cc6a80db049e83808c5e4116cd7e554fad36250d061cf7055f2ff91b8f0eaf6517c228f9cbf5c3d4fb09c3bcfb637a067cbabb7688114ae5f41ad1e091de83ec8cc5ac"}]}}]}}]}}]}}, &(0x7f0000001080)={0xa, &(0x7f0000000e40)={0xa, 0x6, 0x110, 0x80, 0xf5, 0x7, 0x8, 0x3}, 0xe7, &(0x7f0000000e80)={0x5, 0xf, 0xe7, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x42, 0x8, 0xb, 0x400, 0x87}, @wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0x1, 0x6, 0x5, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x3, 0x96}, @generic={0xb0, 0x10, 0xb, "dae582b397c70f6f10d01f9580346e014dad5cb3a75a007c5dbaab82f6f1de0d77c573671841dfeba5806ad4ba11980b02bccec3c9d0fb859f07bdbfff35682c58cea1b240b9d7999b507a52e1594a47b3742d75077962c8970692c84470ddfa74f6bac2925b6bb64f4dd9aab1a1ffed634ff50a44074349b7f206725c7fcc1a0fcabf784dbd215c64ecf6c66c4cf487b5e23e61c56f8219e97abee9d89b01d219dcbbac27840b572d9c16f96e"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x28, 0x8, 0x7, 0x100, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x30, 0x9, 0x9}]}, 0x4, [{0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x401}}, {0x12, &(0x7f0000000fc0)=@string={0x12, 0x3, "cf21994fec522a869e095ad4ef514966"}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x3c2b}}]}) syz_usb_control_io$hid(r3, &(0x7f0000001300)={0x24, &(0x7f0000001100)={0x40, 0x10, 0x68, {0x68, 0x24, "db5b2a5e4bccc8c6109537e1a1aaa873f65ee12dc1fed169285ecfc3019f393bd4f0a92f6e07e17d91d64a344d5caf50223fb454b33887cdd564373c79e956e5462bcc56a1a614317c038be7cf8168851d10c70d41b3a9818cd23607cf1fa746d9b06b13510e"}}, &(0x7f0000001180)={0x0, 0x3, 0xce, @string={0xce, 0x3, "79b73a6b892b7d7c63803aa393118ae363c2b0c7f8649c36b188a2bf1b6ba752150e45e90beed632b8c2920828daeeb357fefd8c3e891d5d4a6584ead8d78fc588642566317ca582d61056430d433b5d168b3413b2b4717426768a275ca1885111a1a7696b956cb50def167f083d01dcba10dc251cada9e5252f78f80b9cda2ef8ade59cb3e5305acfd209c68f4e1a39a2f264134f5d2d9d3b39940c17d1d91e3abdc50b81bfb459b880108fcced97127f53def4f1b5d40de067757f0e7903435177986748aae5c0c9c4ef3c"}}, &(0x7f0000001280)={0x0, 0x22, 0x10, {[@global=@item_4={0x3, 0x1, 0x7, "f960d6aa"}, @local=@item_4={0x3, 0x2, 0x7, "36d0ecab"}, @global=@item_4={0x3, 0x1, 0x4, "ab985264"}, @main=@item_012={0x0, 0x0, 0xb}]}}, &(0x7f00000012c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x7, 0x1, {0x22, 0x32b}}}}, &(0x7f0000001480)={0x2c, &(0x7f0000001340)={0x20, 0x7, 0x33, "9d26550b32afb4e90f5b3944be08cff6471f534c2d55a5c9392b1e11d542eab972d04bbbad9bed095311d2d0de608d7204e929"}, &(0x7f0000001380)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000013c0)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000001400)={0x20, 0x1, 0x18, "0ae10d8a20e497eafe96b937c3cf73d37d1b7bbc68779465"}, &(0x7f0000001440)={0x20, 0x3, 0x1, 0x1}}) 270.506348ms ago: executing program 7 (id=7849): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) ioctl$FICLONE(r0, 0x40049409, r1) (async) creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 149.037949ms ago: executing program 5 (id=7850): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x82040, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0585605, &(0x7f0000000080)={0x0, 0x1}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r3, 0x400, 0x0) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x10) 50.485477ms ago: executing program 7 (id=7851): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="010000006b0100000100000000000000", @ANYRES64=r1, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) r3 = open_tree(0xffffffffffffffff, &(0x7f0000000140)='./cgroup\x00', 0x89000) fstat(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400), 0x6088, &(0x7f0000000940)={[{@name={'name', 0x3d, 'ns/user\x00'}}, {@clone_children}, {@favordynmods}], [{@fowner_gt={'fowner>', r4}}, {@pcr={'pcr', 0x3d, 0x19}}, {@obj_user={'obj_user', 0x3d, '/dev/rnullb0\x00'}}]}) syz_clone(0x0, &(0x7f0000000180)="f00d3f0ce2d298a62a32762e1246cfb927b725e22a45c79f186b561b740441021b", 0x21, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280)="d214ee7d958af1c88e8b2ece2cd61ccc62c9faddb520083cd9e73e71841f657267da6da02d92c3d70f57a92b1eba28eb47845e1f47518788d34e7feb24607ec47bb6c17f66e43b3bc64597cc8a116a9ac5e23ce54bb202b4af6e6276bbe181df28fcdf4ffe7209ec8ecd59c4b511fd94b62b") r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r3, &(0x7f00000005c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0xc4}, 0x60050) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000840)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r5, @ANYBLOB="00042cbd7000fddbdf25440000000c0099000100000042000000080022013d01000008009f00000000000800a100a334ffff08009f000200cd180356bbe36630211b000008002201ef020000050019010500000008006b00080000000a00180003030303030300000400080108000c001000000008006b00000800001d002400058b988981a412929b9b12964802896cf0c8a492c80584fa180000000a00180003030303030300000a001800030303030303000008002600fc150000"], 0xb8}, 0x1, 0x0, 0x0, 0xc000}, 0x4000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0xc000, &(0x7f0000000100)={0x61, 0x100001, 0x60000, {r2}}, 0x20) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x10) 0s ago: executing program 5 (id=7852): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x80000003}) fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x2, 0x0, 0x400000000000000, 0x1fd}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, r4, 0x852dd6c070cd7e4d, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x38}, 0x4, 0x700000002000000, 0x0, 0x10}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, r4, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x80000000}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48004}, 0x80) chdir(&(0x7f00000003c0)='./bus\x00') r7 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0xc0140, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0x401c5820, &(0x7f0000000300)={@id={0x18, 0x0, @c}}) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/resume', 0x149a82, 0x36) write$ppp(r8, &(0x7f0000000440)="83b59dcee0adc02f2f", 0x9) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x220023, 0x0) kernel console output (not intermixed with test programs): e a regular file [ 976.485440][ T1225] usb 7-1: USB disconnect, device number 45 [ 976.516185][T28968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.533471][T28968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.356371][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 977.367636][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 977.378321][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 977.386475][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 977.394402][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 977.402352][T28977] FAULT_INJECTION: forcing a failure. [ 977.402352][T28977] name failslab, interval 1, probability 0, space 0, times 0 [ 977.468427][T28977] CPU: 0 UID: 0 PID: 28977 Comm: syz.1.6638 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 977.468454][T28977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 977.468465][T28977] Call Trace: [ 977.468472][T28977] [ 977.468481][T28977] dump_stack_lvl+0x189/0x250 [ 977.468506][T28977] ? __pfx____ratelimit+0x10/0x10 [ 977.468528][T28977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 977.468548][T28977] ? __pfx__printk+0x10/0x10 [ 977.468574][T28977] ? rcu_is_watching+0x15/0xb0 [ 977.468595][T28977] should_fail_ex+0x414/0x560 [ 977.468619][T28977] should_failslab+0xa8/0x100 [ 977.468641][T28977] kmem_cache_alloc_noprof+0x73/0x3c0 [ 977.468658][T28977] ? _sctp_make_chunk+0x14e/0x430 [ 977.468684][T28977] _sctp_make_chunk+0x14e/0x430 [ 977.468704][T28977] ? sctp_ulpevent_make_stream_change_event+0x4f7/0x930 [ 977.468735][T28977] sctp_make_strreset_resp+0x8e/0x370 [ 977.468761][T28977] ? __pfx_sctp_make_strreset_resp+0x10/0x10 [ 977.468783][T28977] ? sctp_process_strreset_addstrm_out+0x493/0x700 [ 977.468814][T28977] sctp_sf_do_reconf+0x6a1/0xac0 [ 977.468848][T28977] ? __pfx_sctp_sf_do_reconf+0x10/0x10 [ 977.468869][T28977] ? sctp_outq_flush+0x109e/0x3140 [ 977.468887][T28977] ? sctp_outq_flush+0xbef/0x3140 [ 977.468914][T28977] sctp_do_sm+0x1e7/0x5a20 [ 977.468931][T28977] ? __pfx_sctp_cname+0x10/0x10 [ 977.468947][T28977] ? do_sock_setsockopt+0x25a/0x3e0 [ 977.468967][T28977] ? __x64_sys_setsockopt+0x18b/0x220 [ 977.468991][T28977] ? __pfx_sctp_outq_flush+0x10/0x10 [ 977.469025][T28977] ? __pfx_sctp_do_sm+0x10/0x10 [ 977.469042][T28977] ? __lock_acquire+0xab9/0xd20 [ 977.469116][T28977] sctp_assoc_bh_rcv+0x3f2/0x630 [ 977.469149][T28977] sctp_backlog_rcv+0x167/0x3f0 [ 977.469163][T28977] ? do_raw_spin_unlock+0x122/0x240 [ 977.469187][T28977] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 977.469202][T28977] __release_sock+0x249/0x350 [ 977.469234][T28977] release_sock+0x5f/0x1f0 [ 977.469258][T28977] sctp_setsockopt+0xaf9/0x1200 [ 977.469287][T28977] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 977.469310][T28977] do_sock_setsockopt+0x25a/0x3e0 [ 977.469335][T28977] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 977.469362][T28977] ? __fget_files+0x2a/0x420 [ 977.469392][T28977] __x64_sys_setsockopt+0x18b/0x220 [ 977.469422][T28977] do_syscall_64+0xfa/0x3b0 [ 977.469442][T28977] ? lockdep_hardirqs_on+0x9c/0x150 [ 977.469462][T28977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.469484][T28977] ? clear_bhb_loop+0x60/0xb0 [ 977.469503][T28977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 977.469519][T28977] RIP: 0033:0x7f930178e929 [ 977.469535][T28977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 977.469549][T28977] RSP: 002b:00007f9302554038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 977.469567][T28977] RAX: ffffffffffffffda RBX: 00007f93019b6080 RCX: 00007f930178e929 [ 977.469580][T28977] RDX: 0000000000000079 RSI: 0000000000000084 RDI: 0000000000000003 [ 977.469591][T28977] RBP: 00007f9302554090 R08: 0000000000000008 R09: 0000000000000000 [ 977.469602][T28977] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 977.469614][T28977] R13: 0000000000000001 R14: 00007f93019b6080 R15: 00007ffd2f82d348 [ 977.469642][T28977] [ 978.429735][T28976] chnl_net:caif_netlink_parms(): no params data found [ 978.466670][T28993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.484844][T28993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.557579][T29000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.569049][T28993] syzkaller1: left promiscuous mode [ 978.574382][T28993] syzkaller1: left allmulticast mode [ 978.587505][T29000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.706097][T28976] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.714784][T28976] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.722186][T28976] bridge_slave_0: entered allmulticast mode [ 978.730188][T28976] bridge_slave_0: entered promiscuous mode [ 978.739202][T28976] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.746557][T28976] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.753968][T28976] bridge_slave_1: entered allmulticast mode [ 978.762836][T28976] bridge_slave_1: entered promiscuous mode [ 978.826086][T28976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.845529][T28976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.911392][T28976] team0: Port device team_slave_0 added [ 978.923142][T28976] team0: Port device team_slave_1 added [ 978.978117][T28976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.986362][T28976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.013110][T28976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.026580][T28976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.039572][T28976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.066634][T28976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.139692][T28976] hsr_slave_0: entered promiscuous mode [ 979.147633][T28976] hsr_slave_1: entered promiscuous mode [ 979.156503][T28976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 979.167312][T28976] Cannot create hsr debugfs directory [ 979.464168][T29011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.489009][T29011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.653914][ T5838] Bluetooth: hci2: command tx timeout [ 979.798132][T28976] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 979.826711][T28976] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 979.849532][T28976] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 979.871812][T28976] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 980.161246][T28976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.251517][T28976] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.304165][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.311382][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.362866][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.370086][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.982419][T29033] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20004 [ 981.049382][T28976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 981.121480][T29039] /dev/rnullb0: Can't open blockdev [ 981.250849][T29044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 981.379780][T29047] binder: 29046:29047 ioctl c0306201 200000000640 returned -22 [ 981.792975][T28976] veth0_vlan: entered promiscuous mode [ 981.818996][T28976] veth1_vlan: entered promiscuous mode [ 981.872967][ T5838] Bluetooth: hci2: command tx timeout [ 981.956337][T28976] veth0_macvtap: entered promiscuous mode [ 981.987763][T28976] veth1_macvtap: entered promiscuous mode [ 982.013905][T28976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 982.043134][T28976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 982.081461][ T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.095098][ T3494] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.191469][ T3494] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.235751][T29059] /dev/rnullb0: Can't open blockdev [ 982.248237][ T3494] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.380111][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.387949][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.431656][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.448503][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 983.115588][T29067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.131543][T29067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.143201][T29067] /dev/rnullb0: Can't open blockdev [ 983.182649][T29069] /dev/rnullb0: Can't open blockdev [ 983.398702][T29072] syzkaller1: left promiscuous mode [ 983.403915][T29072] syzkaller1: left allmulticast mode [ 983.719900][T29079] afs: Unknown parameter 'fd' [ 984.066495][T29087] FAULT_INJECTION: forcing a failure. [ 984.066495][T29087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 984.087478][T29087] CPU: 0 UID: 0 PID: 29087 Comm: syz.5.6662 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 984.087503][T29087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 984.087514][T29087] Call Trace: [ 984.087522][T29087] [ 984.087531][T29087] dump_stack_lvl+0x189/0x250 [ 984.087554][T29087] ? __pfx____ratelimit+0x10/0x10 [ 984.087576][T29087] ? __pfx_dump_stack_lvl+0x10/0x10 [ 984.087592][T29087] ? __pfx__printk+0x10/0x10 [ 984.087620][T29087] should_fail_ex+0x414/0x560 [ 984.087641][T29087] _copy_to_user+0x31/0xb0 [ 984.087662][T29087] simple_read_from_buffer+0xe1/0x170 [ 984.087686][T29087] proc_fail_nth_read+0x1df/0x250 [ 984.087710][T29087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 984.087733][T29087] ? rw_verify_area+0x258/0x650 [ 984.087750][T29087] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 984.087772][T29087] vfs_read+0x200/0x980 [ 984.087795][T29087] ? __pfx___mutex_lock+0x10/0x10 [ 984.087817][T29087] ? __pfx_vfs_read+0x10/0x10 [ 984.087837][T29087] ? __fget_files+0x2a/0x420 [ 984.087863][T29087] ? __fget_files+0x3a0/0x420 [ 984.087882][T29087] ? __fget_files+0x2a/0x420 [ 984.087911][T29087] ksys_read+0x145/0x250 [ 984.087933][T29087] ? __pfx_ksys_read+0x10/0x10 [ 984.087950][T29087] ? rcu_is_watching+0x15/0xb0 [ 984.087971][T29087] ? do_syscall_64+0xbe/0x3b0 [ 984.087997][T29087] do_syscall_64+0xfa/0x3b0 [ 984.088017][T29087] ? lockdep_hardirqs_on+0x9c/0x150 [ 984.088037][T29087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.088054][T29087] ? clear_bhb_loop+0x60/0xb0 [ 984.088075][T29087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.088091][T29087] RIP: 0033:0x7f041418d33c [ 984.088106][T29087] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 984.088121][T29087] RSP: 002b:00007f0411fd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 984.088140][T29087] RAX: ffffffffffffffda RBX: 00007f04143b6080 RCX: 00007f041418d33c [ 984.088153][T29087] RDX: 000000000000000f RSI: 00007f0411fd50a0 RDI: 0000000000000005 [ 984.088164][T29087] RBP: 00007f0411fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 984.088175][T29087] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 984.088186][T29087] R13: 0000000000000001 R14: 00007f04143b6080 R15: 00007ffc3add0418 [ 984.088214][T29087] [ 984.092074][ T5838] Bluetooth: hci2: command tx timeout [ 984.493682][T29092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.541509][T29092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 984.561102][T29092] /dev/rnullb0: Can't open blockdev [ 984.586891][T29094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 984.606119][T29094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.217903][T29096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 986.260979][T29106] /dev/rnullb0: Can't open blockdev [ 986.496792][ T5838] Bluetooth: hci2: command tx timeout [ 986.758798][T29125] /dev/rnullb0: Can't open blockdev [ 986.868048][T29129] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6675'. [ 987.192472][T29143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.232440][T29143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.381668][T29149] netlink: 'syz.1.6680': attribute type 21 has an invalid length. [ 987.395071][T29149] netlink: 168 bytes leftover after parsing attributes in process `syz.1.6680'. [ 987.410723][T29149] /dev/rnullb0: Can't open blockdev [ 987.482009][T29151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.499259][T29151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.857337][T29156] /dev/rnullb0: Can't open blockdev [ 988.374385][ T48] usb 3-1: USB disconnect, device number 74 [ 988.712145][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 988.723217][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 988.732418][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 988.740646][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 988.748503][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 989.016114][T29179] loop5: detected capacity change from 0 to 12615 [ 989.065105][T18082] Buffer I/O error on dev loop5, logical block 1576, async page read [ 989.271409][T29172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.304044][T29172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.347785][T29173] chnl_net:caif_netlink_parms(): no params data found [ 989.519137][T29173] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.527419][T29173] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.534966][T29173] bridge_slave_0: entered allmulticast mode [ 989.541999][T29173] bridge_slave_0: entered promiscuous mode [ 989.550728][T29173] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.558202][T29173] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.570488][T29173] bridge_slave_1: entered allmulticast mode [ 989.579221][T29173] bridge_slave_1: entered promiscuous mode [ 989.608898][T29173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 989.621661][T29173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 989.658172][T29173] team0: Port device team_slave_0 added [ 989.666828][T29173] team0: Port device team_slave_1 added [ 989.695560][T29173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.702518][T29173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.729111][T29173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 989.741679][T29173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 989.750426][T29173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 989.776478][T29173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 989.822066][T29173] hsr_slave_0: entered promiscuous mode [ 989.828299][T29173] hsr_slave_1: entered promiscuous mode [ 989.834813][T29173] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 989.842504][T29173] Cannot create hsr debugfs directory [ 990.078397][T29191] binder: 29190:29191 ioctl c0306201 200000000240 returned -14 [ 990.096678][T29173] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 990.139516][T29173] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 990.151223][T29193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.162848][T29193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.177037][T29173] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 990.202534][T29173] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 990.283597][T29173] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.290794][T29173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.298256][T29173] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.305500][T29173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.394935][T29173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.423017][ T2994] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.433262][ T2994] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.549568][T29173] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.563258][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.570437][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.603633][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.610809][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 990.904530][T29229] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 990.932327][ T51] Bluetooth: hci0: command tx timeout [ 991.019443][T29173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 991.058634][T29238] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.6703'. [ 991.069896][T29237] overlay: Unknown parameter 'obj_type' [ 991.357585][T29173] veth0_vlan: entered promiscuous mode [ 991.389723][T29173] veth1_vlan: entered promiscuous mode [ 991.460091][T29173] veth0_macvtap: entered promiscuous mode [ 991.475340][T29173] veth1_macvtap: entered promiscuous mode [ 991.515834][T29173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 991.539228][T29173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.575887][ T2994] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.590018][ T2994] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.612976][ T2994] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.622430][ T2994] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 991.754192][T29251] netlink: 201916 bytes leftover after parsing attributes in process `syz.1.6706'. [ 991.777405][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.807893][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.861146][ T3494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.895742][ T3494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.030204][T29256] binder: 29255:29256 ioctl c0306201 200000001900 returned -14 [ 993.167194][ T51] Bluetooth: hci0: command tx timeout [ 993.226931][T29274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.257397][T29274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.289168][T29274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.362635][T29274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.675895][T29281] overlay: ./file0 is not a directory [ 993.695425][T29281] 9pnet_virtio: no channels available for device /dev/md0 [ 993.722341][T29283] 9pnet_virtio: no channels available for device /dev/md0 [ 993.730731][T29282] overlay: ./file0 is not a directory [ 994.482638][T29311] /dev/rnullb0: Can't open blockdev [ 994.546250][T29314] netlink: 260 bytes leftover after parsing attributes in process `syz.8.6723'. [ 994.644220][T29317] /dev/rnullb0: Can't open blockdev [ 995.379552][ T51] Bluetooth: hci0: command tx timeout [ 995.915307][T29355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.939327][T29355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.607420][T29371] program syz.8.6745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 996.655852][T29374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.681533][T29374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.042686][T29391] loop5: detected capacity change from 0 to 9839 [ 997.066889][T18082] Buffer I/O error on dev loop5, logical block 1229, async page read [ 997.122562][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 997.319464][ T10] usb 9-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e [ 997.335637][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.344167][ T10] usb 9-1: Product: syz [ 997.353702][ T10] usb 9-1: Manufacturer: syz [ 997.361366][ T10] usb 9-1: SerialNumber: syz [ 997.377473][ T10] usb 9-1: config 0 descriptor?? [ 997.385685][ T10] usbsevseg 9-1:0.0: USB 7 Segment device now attached [ 997.603190][ T51] Bluetooth: hci0: command tx timeout [ 997.656854][ T10] usb 9-1: USB disconnect, device number 2 [ 997.663645][ T10] usbsevseg 9-1:0.0: USB 7 Segment now disconnected [ 997.805906][T29405] program syz.5.6756 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 997.825368][T29408] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 998.110040][T29428] /dev/rnullb0: Can't open blockdev [ 998.279265][T29430] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6763'. [ 998.294733][T29430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.314664][T29430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.476410][T29436] @: renamed from vlan0 (while UP) [ 998.495693][T29440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 998.506180][T29440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 998.839061][T29456] netlink: 'syz.8.6773': attribute type 4 has an invalid length. [ 998.868555][T29457] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6772'. [ 999.114662][ T48] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 999.318186][ T48] usb 9-1: config 0 has an invalid interface number: 233 but max is 0 [ 999.334378][ T48] usb 9-1: config 0 has no interface number 0 [ 999.342759][ T48] usb 9-1: too many endpoints for config 0 interface 233 altsetting 83: 78, using maximum allowed: 30 [ 999.358789][ T48] usb 9-1: config 0 interface 233 altsetting 83 has 0 endpoint descriptors, different from the interface descriptor's value: 78 [ 999.375300][ T48] usb 9-1: config 0 interface 233 has no altsetting 0 [ 999.393216][ T48] usb 9-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 999.408621][ T48] usb 9-1: New USB device strings: Mfr=0, Product=221, SerialNumber=255 [ 999.419687][ T48] usb 9-1: Product: syz [ 999.427664][ T48] usb 9-1: SerialNumber: syz [ 999.441085][ T48] usb 9-1: config 0 descriptor?? [ 999.677652][T29456] netlink: 60 bytes leftover after parsing attributes in process `syz.8.6773'. [ 999.722943][ T48] gspca_main: mars-2.14.0 probing 093a:050f [ 999.739029][ T48] usb 9-1: USB disconnect, device number 3 [ 1000.975084][T29525] overlayfs: invalid origin (00000079007a6b616c6c6572310000000000000180c2000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 1000.994103][T29494] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1001.000253][T29494] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1001.009323][T29494] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1001.018157][T29494] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1001.034353][T29494] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1001.040731][T29494] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1001.049432][T29494] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1001.338030][T29537] binder: Unknown parameter 'MÁ”§o!ºg2Œ@ìrd¯ù§*Í•EÅB¬‡.û.bítÄ„iHò}ß 1ªpGˆ“Cm›¼õ6—d;°q²Ú­;òÝÆð[p?Ø—HE‚t¹ žØên+ÔKÊy;Q3ý¾+ŒåÆ2írn0FwúÆ÷“›á½‚ˆÕák—c' [ 1001.434752][T29537] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6796'. [ 1001.548620][T29547] netlink: 277 bytes leftover after parsing attributes in process `syz.7.6799'. [ 1001.577735][T29550] netlink: 'syz.1.6800': attribute type 7 has an invalid length. [ 1001.660993][T29550] : entered promiscuous mode [ 1001.756885][T29559] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1001.993819][T29572] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6806'. [ 1002.023518][T29572] tipc: Invalid UDP bearer configuration [ 1002.023576][T29572] tipc: Enabling of bearer rejected, failed to enable media [ 1002.307489][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 1002.556701][T29590] netlink: 'syz.8.6812': attribute type 4 has an invalid length. [ 1002.602958][T29592] XFS (rnullb0): Invalid superblock magic number [ 1002.894959][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1003.091481][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.136504][ T9] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1003.161484][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.180134][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 1003.227011][ T9] usb 9-1: config 0 descriptor?? [ 1003.235782][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1003.248183][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 1003.565226][T29609] netlink: 'syz.1.6817': attribute type 1 has an invalid length. [ 1003.573195][T29609] netlink: 216 bytes leftover after parsing attributes in process `syz.1.6817'. [ 1003.583862][T29609] NCSI netlink: No device for ifindex 0 [ 1003.664879][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1003.686561][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1003.697295][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1003.704756][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 1003.714424][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 1003.730088][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 1003.951679][T29614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.972304][T29614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.997678][T29614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.027133][T29614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.109626][T29615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.121498][T29615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.446277][T29627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.471017][T29627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.551111][T29632] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1005.386086][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 1005.471582][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 1005.752658][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 1005.761698][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 1005.768609][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 1005.777020][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 1005.785106][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 1005.794817][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 1005.801960][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 1005.809116][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 1005.816468][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1005.825098][ T9] pwc: Registered as video103. [ 1005.837339][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input119 [ 1005.862320][ T9] usb 9-1: USB disconnect, device number 4 [ 1006.140288][T29640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.151635][T29640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.162712][T29640] MTD: Couldn't look up './cgroup': -15 [ 1006.169929][T29640] ./cgroup: Can't lookup blockdev [ 1006.209326][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1006.370308][ T9] usb 9-1: too many configurations: 151, using maximum allowed: 8 [ 1006.392264][ T9] usb 9-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1006.401334][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1006.412099][ T9] usb 9-1: Product: syz [ 1006.416271][ T9] usb 9-1: Manufacturer: syz [ 1006.420843][ T9] usb 9-1: SerialNumber: syz [ 1006.430492][ T9] usb 9-1: config 0 descriptor?? [ 1006.733142][T29644] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6825'. [ 1007.609556][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 1007.695123][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 1008.366790][ T9] usb 9-1: bad CDC descriptors [ 1008.385648][ T9] usb 9-1: USB disconnect, device number 5 [ 1009.179433][T29660] fuse: Unknown parameter 'ÿÿÿÿ0000000000000000003600000000000000000000157' [ 1009.439602][T29662] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 1009.724417][ T48] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1009.897262][ T48] usb 9-1: Using ep0 maxpacket: 32 [ 1009.905139][ T48] usb 9-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1009.914664][ T48] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.936211][ T48] usb 9-1: config 0 descriptor?? [ 1009.947331][ T48] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1010.032907][T29666] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1010.267440][ T48] gspca_sq930x: ucbus_write failed -71 [ 1010.284607][ T48] sq930x 9-1:0.0: probe with driver sq930x failed with error -71 [ 1010.345037][ T48] usb 9-1: USB disconnect, device number 6 [ 1010.404889][ T5919] hid-generic 0008:0000:FFFFFBFF.0045: unknown main item tag 0x0 [ 1010.427826][ T5919] hid-generic 0008:0000:FFFFFBFF.0045: unknown main item tag 0x0 [ 1010.446128][ T5919] hid-generic 0008:0000:FFFFFBFF.0045: unknown main item tag 0x0 [ 1010.455778][ T5919] hid-generic 0008:0000:FFFFFBFF.0045: unknown main item tag 0x0 [ 1010.468278][ T5919] hid-generic 0008:0000:FFFFFBFF.0045: unknown main item tag 0x0 [ 1010.481923][ T5919] hid-generic 0008:0000:FFFFFBFF.0045: unknown main item tag 0x0 [ 1010.493608][ T5919] hid-generic 0008:0000:FFFFFBFF.0045: unknown main item tag 0x0 [ 1010.505015][ T5919] hid-generic 0008:0000:FFFFFBFF.0045: unknown main item tag 0x0 [ 1010.547667][ T5919] hid-generic 0008:0000:FFFFFBFF.0045: unknown main item tag 0x0 [ 1010.566993][ T5919] hid-generic 0008:0000:FFFFFBFF.0045: unknown main item tag 0x0 [ 1010.595994][ T5919] hid-generic 0008:0000:FFFFFBFF.0045: hidraw0: HID v9.86 Device [syz0] on syz1 [ 1010.751193][T29677] fido_id[29677]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1011.559455][T29700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1011.583552][T29700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.607342][T29700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.957939][T29709] nfs: Unknown parameter '' [ 1012.302721][T17645] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1012.436965][T29722] /dev/rnullb0: Can't open blockdev [ 1012.489985][T17645] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1012.523474][T17645] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1012.547360][T17645] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 57608, setting to 64 [ 1012.558657][T17645] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1012.582642][T17645] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1012.602471][T17645] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1012.611433][T17645] usb 9-1: SerialNumber: syz [ 1012.629810][T29713] raw-gadget.6 gadget.8: fail, usb_ep_enable returned -22 [ 1012.642290][T17645] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 1012.672076][T17645] cdc_acm 9-1:1.0: probe with driver cdc_acm failed with error -12 [ 1012.716439][T29730] /dev/rnullb0: Can't open blockdev [ 1013.082603][ T1225] usb 9-1: USB disconnect, device number 7 [ 1013.252915][T29746] netlink: 'syz.8.6859': attribute type 29 has an invalid length. [ 1013.271942][T29746] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6859'. [ 1013.307963][T29744] sd 0:0:1:0: PR command failed: 1026 [ 1013.313422][T29744] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1013.355244][T29744] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1013.786178][T29749] loop5: detected capacity change from 0 to 7703 [ 1013.822726][T18082] Buffer I/O error on dev loop5, logical block 962, async page read [ 1014.434885][T29755] batadv_slave_0: entered promiscuous mode [ 1014.462600][T29754] batadv_slave_0: left promiscuous mode [ 1015.172867][T29786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.192702][T29786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.421222][ T30] audit: type=1326 audit(1751133257.982:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29790 comm="syz.5.6871" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f041418e929 code=0x0 [ 1016.184525][T29805] netlink: 'syz.8.6875': attribute type 25 has an invalid length. [ 1017.776601][T17645] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1017.947438][T17645] usb 9-1: Using ep0 maxpacket: 8 [ 1017.965976][T17645] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1017.981779][T17645] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.995734][T17645] usb 9-1: Product: syz [ 1017.999930][T17645] usb 9-1: Manufacturer: syz [ 1018.014843][T17645] usb 9-1: SerialNumber: syz [ 1018.022588][T17645] usb 9-1: config 0 descriptor?? [ 1018.039495][T17645] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1018.295855][T17645] gspca_sonixj: reg_w1 err -71 [ 1018.318001][T17645] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 1018.351463][T17645] usb 9-1: USB disconnect, device number 8 [ 1018.427466][ T30] audit: type=1326 audit(1751133260.788:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29831 comm="syz.8.6884" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b2538e929 code=0x0 [ 1018.589774][T29840] fuse: Bad value for 'group_id' [ 1018.595146][T29840] fuse: Bad value for 'group_id' [ 1018.706428][T29835] fuse: root generation should be zero [ 1019.048568][T17645] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1019.208831][T17645] usb 9-1: Using ep0 maxpacket: 8 [ 1019.216561][T17645] usb 9-1: config 9 has an invalid interface number: 105 but max is 0 [ 1019.225028][T17645] usb 9-1: config 9 has no interface number 0 [ 1019.231252][T17645] usb 9-1: config 9 interface 105 altsetting 8 endpoint 0x3 has invalid maxpacket 1056, setting to 1024 [ 1019.243454][T17645] usb 9-1: config 9 interface 105 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 1019.254448][T17645] usb 9-1: config 9 interface 105 altsetting 8 endpoint 0xB has invalid maxpacket 391, setting to 64 [ 1019.265372][T17645] usb 9-1: config 9 interface 105 altsetting 8 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1019.276407][T17645] usb 9-1: config 9 interface 105 altsetting 8 bulk endpoint 0x6 has invalid maxpacket 32 [ 1019.286606][T17645] usb 9-1: config 9 interface 105 has no altsetting 0 [ 1019.296257][T17645] usb 9-1: New USB device found, idVendor=0421, idProduct=04b2, bcdDevice=4d.82 [ 1019.306855][T17645] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.314945][T17645] usb 9-1: Product: à – [ 1019.319204][T17645] usb 9-1: SerialNumber: Ð [ 1019.333770][T29848] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1019.452340][T29850] netlink: 'syz.5.6890': attribute type 3 has an invalid length. [ 1019.536998][T29853] /dev/rnullb0: Can't open blockdev [ 1019.635923][T17645] rndis_host 9-1:9.105: skipping garbage [ 1019.643018][T17645] rndis_host 9-1:9.105: skipping garbage [ 1019.649212][T17645] usb 9-1: bad CDC descriptors [ 1019.654782][T17645] cdc_acm 9-1:9.105: skipping garbage [ 1019.662536][T17645] cdc_acm 9-1:9.105: skipping garbage [ 1019.698493][T17645] usb 9-1: USB disconnect, device number 9 [ 1019.817573][ T5884] hid (null): unknown global tag 0xc [ 1019.833530][ T5884] hid (null): report_id 3026029623 is invalid [ 1019.845218][ T5884] hid (null): unknown global tag 0xc [ 1019.860350][ T5884] hid_parser_main: 159 callbacks suppressed [ 1019.860372][ T5884] hid-generic 0008:0004:0001.0046: unknown main item tag 0x0 [ 1019.875275][ T5884] hid-generic 0008:0004:0001.0046: unknown main item tag 0x1 [ 1019.922836][ T5884] hid-generic 0008:0004:0001.0046: unknown main item tag 0x1 [ 1019.966600][ T5884] hid-generic 0008:0004:0001.0046: unknown global tag 0xc [ 1019.985201][ T5884] hid-generic 0008:0004:0001.0046: item 0 0 1 12 parsing failed [ 1020.010998][ T5884] hid-generic 0008:0004:0001.0046: probe with driver hid-generic failed with error -22 [ 1020.070951][T29866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.084963][T29866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.136877][T29868] /dev/rnullb0: Can't open blockdev [ 1020.173454][T29870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1020.196079][T29870] /dev/rnullb0: Can't open blockdev [ 1020.527957][T29879] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1020.589561][T29881] netlink: 288 bytes leftover after parsing attributes in process `syz.8.6899'. [ 1020.855415][T17645] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1021.048407][T17645] usb 9-1: Using ep0 maxpacket: 8 [ 1021.062432][T17645] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1021.090665][T17645] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.114778][T17645] usb 9-1: config 0 descriptor?? [ 1022.638761][T17645] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1022.661216][T17645] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1022.672310][T17645] asix 9-1:0.0: probe with driver asix failed with error -71 [ 1022.693727][T17645] usb 9-1: USB disconnect, device number 10 [ 1023.171766][T29893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1023.192409][T29893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1023.831307][T29906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1024.570898][T29919] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1026.707237][T29957] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1027.201034][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1027.210660][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1027.520713][T29977] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1028.002309][T29989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.030516][T29989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.137315][T29993] overlay: filesystem on ./bus not supported [ 1028.727184][T30013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.748107][T30014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1028.757718][T30013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.768226][T30014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1028.773880][T30016] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1029.595466][T30020] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1030.536402][T30032] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1030.542935][T30032] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1030.553604][T30032] vhci_hcd vhci_hcd.0: Device attached [ 1030.560533][T30032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.569554][T30032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.580439][T30033] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 1030.593681][ T3494] vhci_hcd: stop threads [ 1030.600800][ T3494] vhci_hcd: release socket [ 1030.605992][ T3494] vhci_hcd: disconnect device [ 1030.658471][ T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1030.827327][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1030.836630][ T9] usb 9-1: config 2 has an invalid interface number: 2 but max is 1 [ 1030.850870][ T9] usb 9-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 1030.859661][ T9] usb 9-1: config 2 has an invalid interface number: 43 but max is 1 [ 1030.869273][ T9] usb 9-1: config 2 has no interface number 0 [ 1030.875711][ T9] usb 9-1: config 2 has no interface number 1 [ 1030.881940][ T9] usb 9-1: config 2 interface 2 altsetting 38 has an invalid descriptor for endpoint zero, skipping [ 1030.894746][ T9] usb 9-1: config 2 interface 2 altsetting 38 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 1030.906837][ T9] usb 9-1: config 2 interface 2 altsetting 38 has a duplicate endpoint with address 0x6, skipping [ 1030.917874][ T9] usb 9-1: config 2 interface 2 altsetting 38 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1030.930055][ T9] usb 9-1: config 2 interface 2 altsetting 38 has a duplicate endpoint with address 0x6, skipping [ 1030.944370][ T9] usb 9-1: config 2 interface 2 altsetting 38 has a duplicate endpoint with address 0x1, skipping [ 1030.955402][ T9] usb 9-1: config 2 interface 2 altsetting 38 has a duplicate endpoint with address 0x1, skipping [ 1030.966535][ T9] usb 9-1: config 2 interface 2 altsetting 38 has a duplicate endpoint with address 0xC, skipping [ 1030.978371][ T9] usb 9-1: config 2 interface 2 altsetting 38 has a duplicate endpoint with address 0xD, skipping [ 1030.989330][ T9] usb 9-1: config 2 interface 2 altsetting 38 has a duplicate endpoint with address 0xB, skipping [ 1031.001362][ T9] usb 9-1: config 2 interface 43 altsetting 97 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 1031.017779][ T9] usb 9-1: config 2 interface 43 altsetting 97 bulk endpoint 0x3 has invalid maxpacket 64 [ 1031.028093][ T9] usb 9-1: config 2 interface 43 altsetting 97 has an invalid descriptor for endpoint zero, skipping [ 1031.028119][ T9] usb 9-1: config 2 interface 43 altsetting 97 has a duplicate endpoint with address 0x4, skipping [ 1031.028142][ T9] usb 9-1: config 2 interface 43 altsetting 97 has a duplicate endpoint with address 0x4, skipping [ 1031.028163][ T9] usb 9-1: config 2 interface 43 altsetting 97 has a duplicate endpoint with address 0xD, skipping [ 1031.028185][ T9] usb 9-1: config 2 interface 43 altsetting 97 has a duplicate endpoint with address 0xA, skipping [ 1031.028206][ T9] usb 9-1: config 2 interface 43 altsetting 97 has a duplicate endpoint with address 0xB, skipping [ 1031.028227][ T9] usb 9-1: config 2 interface 43 altsetting 97 has an endpoint descriptor with address 0x32, changing to 0x2 [ 1031.028252][ T9] usb 9-1: config 2 interface 43 altsetting 97 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1031.028276][ T9] usb 9-1: config 2 interface 43 altsetting 97 has a duplicate endpoint with address 0x6, skipping [ 1031.028297][ T9] usb 9-1: config 2 interface 2 has no altsetting 0 [ 1031.028314][ T9] usb 9-1: config 2 interface 43 has no altsetting 0 [ 1031.030857][ T9] usb 9-1: New USB device found, idVendor=04d8, idProduct=f58b, bcdDevice=54.de [ 1031.030884][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.030903][ T9] usb 9-1: Product: Ðœ [ 1031.030917][ T9] usb 9-1: Manufacturer: 《 [ 1031.030931][ T9] usb 9-1: SerialNumber: 鄟⇄鷃銓鵌ë¶ä¶å‘²à¾žë• áº‘嗩⦫䈞é–ℋ諠套Ⳮ섟껾輰æ±ëªˆè“‹ì‡¾ë´€é£•ë‰·ç¡§ç¯é°³à¥ŽåŠ¥æ®áˆšå´¹ä»¾è¤–鱌ᗯ→棅㧀킂㥌晩潉嚆繯蛇æ€Ê¼ì¢˜ä¨‡á€¹ê²¯êŽ¤è·ä´ [ 1031.061956][T30028] raw-gadget.6 gadget.8: fail, usb_ep_enable returned -22 [ 1031.276042][T30037] tty tty22: ldisc open failed (-12), clearing slot 21 [ 1031.327912][ T9] ir_toy 9-1:2.2: required endpoints not found [ 1031.407364][T30047] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1031.440887][ T9] usb 9-1: USB disconnect, device number 11 [ 1031.530661][T30052] binder: 30051:30052 ioctl 4018620d 0 returned -22 [ 1031.599798][T30053] overlayfs: failed lookup in lower (newroot/49, name='bus', err=-40): overlapping layers [ 1031.881937][T30065] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1031.922690][T30065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.953920][T30065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.262230][ T9] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1032.411988][ T9] usb 9-1: device descriptor read/64, error -71 [ 1032.656063][T30069] /dev/rnullb0: Can't open blockdev [ 1032.690147][ T9] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1032.710653][T30071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.726703][T30071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.809321][T30077] /dev/rnullb0: Can't open blockdev [ 1032.821466][T30077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.823373][T30078] netlink: 'syz.5.6956': attribute type 29 has an invalid length. [ 1032.847502][T30077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.870138][ T9] usb 9-1: device descriptor read/64, error -71 [ 1032.871077][T30071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.899753][T30071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.920937][T30071] /dev/rnullb0: Can't open blockdev [ 1032.991346][T30084] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1033.011115][ T9] usb usb9-port1: attempt power cycle [ 1033.122785][T30086] /dev/rnullb0: Can't open blockdev [ 1033.322445][T30091] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20004 [ 1033.374346][ T9] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1033.396293][ T9] usb 9-1: device descriptor read/8, error -71 [ 1033.662599][ T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1033.685390][ T9] usb 9-1: device descriptor read/8, error -71 [ 1033.807048][ T9] usb usb9-port1: unable to enumerate USB device [ 1033.837480][T30100] /dev/rnullb0: Can't open blockdev [ 1034.487707][T30107] /dev/rnullb0: Can't open blockdev [ 1034.552925][T30112] NILFS (loop1): device size too small [ 1035.576217][T30091] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1035.586984][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 1036.527276][T30091] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1036.533880][T30091] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1036.624991][T30119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.633789][T30119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.642743][T30120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.657651][T30120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.806121][ T5928] usb 9-1: new low-speed USB device number 16 using dummy_hcd [ 1036.876433][T30134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1036.915214][T30134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.019634][ T5928] usb 9-1: Invalid ep0 maxpacket: 64 [ 1037.150554][T30134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.166094][T30134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.179768][ T5928] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 1037.393781][ T5928] usb 9-1: Invalid ep0 maxpacket: 64 [ 1037.401682][ T5928] usb usb9-port1: attempt power cycle [ 1037.606040][T30143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.615062][T30143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.799910][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 1037.813809][ T5928] usb 9-1: new low-speed USB device number 18 using dummy_hcd [ 1037.843384][ T5928] usb 9-1: Invalid ep0 maxpacket: 64 [ 1037.867581][T30150] batadv_slave_0: entered promiscuous mode [ 1037.875782][T30150] /dev/rnullb0: Can't open blockdev [ 1037.881818][T30149] batadv_slave_0: left promiscuous mode [ 1037.945296][T30152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.956323][T30152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.992486][ T5928] usb 9-1: new low-speed USB device number 19 using dummy_hcd [ 1038.014817][ T5928] usb 9-1: Invalid ep0 maxpacket: 64 [ 1038.035196][ T5928] usb usb9-port1: unable to enumerate USB device [ 1038.266726][T30154] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1038.721308][T30158] sctp: [Deprecated]: syz.5.6985 (pid 30158) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1038.721308][T30158] Use struct sctp_sack_info instead [ 1038.741432][T30158] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6985'. [ 1038.745479][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 1038.993725][T30165] XFS (rnullb0): Invalid superblock magic number [ 1039.489801][T30180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6991'. [ 1039.952540][T30194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.962720][T30194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.651872][T30218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.697892][T30218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.703008][T30220] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1041.100062][T30238] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20001 [ 1042.183419][T30251] kvm: kvm [30250]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000002a) [ 1042.431131][T30257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.458273][T30257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.511939][T30262] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1042.685123][T30272] syz.5.7017 (30272): attempted to duplicate a private mapping with mremap. This is not supported. [ 1042.923700][T30282] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7018'. [ 1042.948698][T30278] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7018'. [ 1042.969299][T30282] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7018'. [ 1043.161771][T30288] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1043.268422][T30295] /dev/rnullb0: Can't open blockdev [ 1043.362442][T30293] Process accounting resumed [ 1043.377586][T30297] netlink: 'syz.7.7024': attribute type 40 has an invalid length. [ 1043.768005][T30310] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1044.010989][ T5928] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1044.050916][T30314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.074744][T30314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.075106][T30313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1044.110712][T30313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1044.193096][ T5928] usb 9-1: Using ep0 maxpacket: 16 [ 1044.206216][ T5928] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 1044.224842][ T5928] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.237898][ T5928] usb 9-1: config 0 has no interface number 0 [ 1044.245944][ T5928] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1044.255710][ T5928] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.265041][ T5928] usb 9-1: Product: syz [ 1044.269523][ T5928] usb 9-1: Manufacturer: syz [ 1044.274099][ T5928] usb 9-1: SerialNumber: syz [ 1044.283102][ T5928] usb 9-1: config 0 descriptor?? [ 1044.291189][ T5928] usb 9-1: Found UVC 0.00 device syz (046d:08f3) [ 1044.297609][ T5928] usb 9-1: No valid video chain found. [ 1044.513248][ T5928] usb 9-1: USB disconnect, device number 20 [ 1045.197163][T30342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1045.857887][T30345] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1046.318142][T30355] XFS (rnullb0): Invalid superblock magic number [ 1048.069773][T30391] kernel read not supported for file /file1 (pid: 30391 comm: syz.5.7054) [ 1048.084323][ T30] audit: type=1800 audit(1751133289.529:222): pid=30391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7054" name="file1" dev="mqueue" ino=136703 res=0 errno=0 [ 1048.187676][T30401] syz.5.7055: attempt to access beyond end of device [ 1048.187676][T30401] nbd5: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1048.203679][T30401] SQUASHFS error: Failed to read block 0x0: -5 [ 1048.209944][T30401] unable to read squashfs_super_block [ 1048.358232][T30403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1049.042398][T30418] loop5: detected capacity change from 0 to 4967 [ 1049.088006][T18082] Buffer I/O error on dev loop5, logical block 620, async page read [ 1049.583733][T18082] Buffer I/O error on dev loop5, logical block 620, async page read [ 1050.033157][T30424] netlink: 160 bytes leftover after parsing attributes in process `syz.5.7063'. [ 1050.067303][T30423] netlink: 160 bytes leftover after parsing attributes in process `syz.5.7063'. [ 1050.088279][T30424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1050.111630][T30424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1050.239490][T30431] kAFS: unparsable volume name [ 1050.342801][T30437] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7067'. [ 1050.352075][T30437] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7067'. [ 1050.361035][T30437] netlink: 'syz.1.7067': attribute type 5 has an invalid length. [ 1050.369616][T30437] netlink: 43 bytes leftover after parsing attributes in process `syz.1.7067'. [ 1050.490381][T30442] fuse: Bad value for 'fd' [ 1050.498259][T30442] 9pnet: p9_errstr2errno: server reported unknown error Çpî‘AçÁ›¬ž;KZì00000000000000030000000000000000000000400000000000 [ 1050.733277][T30447] loop5: detected capacity change from 0 to 11127 [ 1050.788292][T18082] Buffer I/O error on dev loop5, logical block 1390, async page read [ 1050.823391][T30450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1050.860235][T18082] Buffer I/O error on dev loop5, logical block 1390, async page read [ 1050.919284][T30453] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7072'. [ 1051.310240][T30460] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7076'. [ 1051.742626][T30479] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7082'. [ 1051.773667][T30478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7082'. [ 1051.978191][T30471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.010429][T30471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.037923][T30471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.058239][T30471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.091758][T30471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.114119][T30471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.137940][T30471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.168831][T30471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.191508][T30471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.211196][T30471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.936470][T30494] loop5: detected capacity change from 0 to 4751 [ 1052.986542][T18082] Buffer I/O error on dev loop5, logical block 593, async page read [ 1053.136318][T18082] Buffer I/O error on dev loop5, logical block 593, async page read [ 1053.270772][T30503] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1055.258574][T30541] loop5: detected capacity change from 0 to 11295 [ 1055.287897][T18082] Buffer I/O error on dev loop5, logical block 1411, async page read [ 1055.902893][T30561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1055.981768][T30564] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1056.066906][T30566] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7108'. [ 1056.352355][T30575] loop5: detected capacity change from 0 to 8711 [ 1056.387021][T18082] Buffer I/O error on dev loop5, logical block 1088, async page read [ 1056.408154][T30577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.429293][T30577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1056.982328][ T9] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1057.150014][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 1057.162712][ T9] usb 9-1: config 0 has an invalid interface number: 146 but max is 0 [ 1057.170901][ T9] usb 9-1: config 0 has no interface number 0 [ 1057.180571][ T9] usb 9-1: config 0 interface 146 has no altsetting 0 [ 1057.191183][ T9] usb 9-1: New USB device found, idVendor=2c42, idProduct=1636, bcdDevice=8d.92 [ 1057.201962][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.224051][ T9] usb 9-1: Product: syz [ 1057.229530][ T9] usb 9-1: Manufacturer: syz [ 1057.234113][ T9] usb 9-1: SerialNumber: syz [ 1057.253015][ T9] usb 9-1: config 0 descriptor?? [ 1057.261790][ T9] f81232 9-1:0.146: f81534a converter detected [ 1057.476094][ T9] usb 9-1: f81534a converter now attached to ttyUSB0 [ 1058.076789][T30600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.100566][T30600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.176783][ T1225] usb 9-1: USB disconnect, device number 21 [ 1058.197815][ T1225] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 1058.230134][ T1225] f81232 9-1:0.146: device disconnected [ 1058.263215][T30604] /dev/rnullb0: Can't open blockdev [ 1058.666501][T30615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1058.762362][T30617] loop5: detected capacity change from 0 to 3439 [ 1058.797656][T18082] Buffer I/O error on dev loop5, logical block 429, async page read [ 1059.426116][T30634] dvmrp0: entered allmulticast mode [ 1060.573154][T30665] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1060.637432][T30663] loop5: detected capacity change from 0 to 8775 [ 1060.733053][T18082] Buffer I/O error on dev loop5, logical block 1096, async page read [ 1061.108365][T30669] /dev/sg0: Can't lookup blockdev [ 1061.281565][T30671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.304175][T30671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.224212][T30696] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7151'. [ 1062.378031][T30702] /dev/rnullb0: Can't open blockdev [ 1062.496526][ T1225] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1062.687703][ T1225] usb 9-1: Using ep0 maxpacket: 16 [ 1062.707318][ T1225] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1062.731332][ T1225] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1062.752446][ T1225] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1062.790547][ T1225] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 57608, setting to 1024 [ 1062.834768][ T1225] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1062.851085][ T1225] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1062.868626][ T1225] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1062.889455][ T1225] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1062.900323][ T1225] usb 9-1: SerialNumber: syz [ 1062.918690][T30696] raw-gadget.6 gadget.8: fail, usb_ep_enable returned -22 [ 1062.971759][ T1225] cdc_acm 9-1:1.0: Control and data interfaces are not separated! [ 1062.999222][ T1225] cdc_acm 9-1:1.0: probe with driver cdc_acm failed with error -12 [ 1063.191996][T30726] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1063.360294][T30733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1063.385009][T30733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1063.516058][ T9] usb 9-1: USB disconnect, device number 22 [ 1064.180611][T30740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.197389][T30740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.679546][T30752] netlink: 'syz.7.7167': attribute type 1 has an invalid length. [ 1064.679594][T30752] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7167'. [ 1065.076003][T30754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.103680][T30754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.200537][T30756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.211517][T30756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.232778][T30757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.243475][T30757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.824605][ T30] audit: type=1326 audit(1751133306.123:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30765 comm="syz.7.7173" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf9098e929 code=0x0 [ 1065.916063][T17645] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1066.044935][T30773] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1066.083211][T17645] usb 9-1: Using ep0 maxpacket: 32 [ 1066.099900][T17645] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1066.120134][T17645] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1066.136420][T17645] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 1066.147278][T17645] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.161894][T17645] usb 9-1: config 0 descriptor?? [ 1066.511066][T30777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.528751][T30777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.544750][T30777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.563124][T30777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.255785][T30787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.266105][T30787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.277061][T30787] afs: Unknown parameter 'dynU‰ºékÃÖ;(ì#OVNóKHp¨A„‡' [ 1067.373517][T30792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.382708][T30792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.779271][T30801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.788550][T30801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.054948][T30807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.063752][T30807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.102274][T30809] veth0_vlan: left promiscuous mode [ 1068.157568][ T30] audit: type=1326 audit(1751133308.312:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30808 comm="syz.5.7186" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f041418e929 code=0x0 [ 1068.274871][T30812] NILFS (rnullb0): couldn't find nilfs on the device [ 1068.626113][T30815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.635198][T30815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.891278][T30820] loop5: detected capacity change from 0 to 12127 [ 1068.923072][T18082] Buffer I/O error on dev loop5, logical block 1515, async page read [ 1069.214240][T30825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1069.810628][T30837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1069.838733][T30837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.507329][T30858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.526999][T30858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.592904][T30858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.622849][T30858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.952373][T30870] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7205'. [ 1070.989872][T30868] loop5: detected capacity change from 0 to 3999 [ 1071.063580][T18090] Buffer I/O error on dev loop5, logical block 499, async page read [ 1071.569805][T30887] /dev/rnullb0: Can't open blockdev [ 1071.579154][T30887] /dev/rnullb0: Can't open blockdev [ 1071.590800][T30887] /dev/rnullb0: Can't open blockdev [ 1071.603590][T17645] usbhid 9-1:0.0: can't add hid device: -32 [ 1071.607755][T30887] /dev/rnullb0: Can't open blockdev [ 1071.609586][T17645] usbhid 9-1:0.0: probe with driver usbhid failed with error -32 [ 1071.656594][T30887] /dev/rnullb0: Can't open blockdev [ 1071.681197][T30890] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7209'. [ 1071.691253][T30887] /dev/rnullb0: Can't open blockdev [ 1071.706750][T30887] /dev/rnullb0: Can't open blockdev [ 1071.726064][T30887] /dev/rnullb0: Can't open blockdev [ 1071.747790][T30887] /dev/rnullb0: Can't open blockdev [ 1071.767580][T30887] /dev/rnullb0: Can't open blockdev [ 1071.796761][T30887] /dev/rnullb0: Can't open blockdev [ 1071.810880][T30887] /dev/rnullb0: Can't open blockdev [ 1071.831223][T30887] /dev/rnullb0: Can't open blockdev [ 1071.838092][T30887] /dev/rnullb0: Can't open blockdev [ 1071.866442][T30887] /dev/rnullb0: Can't open blockdev [ 1071.878258][T30887] /dev/rnullb0: Can't open blockdev [ 1071.884846][T30887] /dev/rnullb0: Can't open blockdev [ 1071.890833][T30887] /dev/rnullb0: Can't open blockdev [ 1071.901461][T30894] /dev/rnullb0: Can't open blockdev [ 1071.908742][T30887] /dev/rnullb0: Can't open blockdev [ 1071.931103][T30887] /dev/rnullb0: Can't open blockdev [ 1072.081370][T30899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.114051][T30899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1072.309794][T30906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1072.664940][T30919] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1072.694425][T30919] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 1072.727542][T30919] overlayfs: conflicting lowerdir path [ 1072.780905][T30919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.802602][T30919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.236308][T30926] loop5: detected capacity change from 0 to 6143 [ 1073.307720][T18082] Buffer I/O error on dev loop5, logical block 767, async page read [ 1074.506293][T30949] netlink: 'syz.1.7228': attribute type 5 has an invalid length. [ 1074.518443][T30949] netlink: 'syz.1.7228': attribute type 5 has an invalid length. [ 1074.706899][T30955] loop5: detected capacity change from 0 to 14759 [ 1074.754329][T18082] Buffer I/O error on dev loop5, logical block 1844, async page read [ 1074.849342][T18082] Buffer I/O error on dev loop5, logical block 1844, async page read [ 1074.896586][T30958] /dev/rnullb0: Can't open blockdev [ 1075.002706][T30962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.013485][T30962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.025582][T30962] /dev/rnullb0: Can't open blockdev [ 1075.125415][T30964] netlink: 'syz.1.7232': attribute type 1 has an invalid length. [ 1075.134640][T30964] netlink: 'syz.1.7232': attribute type 101 has an invalid length. [ 1075.142708][T30964] netlink: 564 bytes leftover after parsing attributes in process `syz.1.7232'. [ 1075.616697][T30971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7235'. [ 1075.896736][T30975] /dev/rnullb0: Can't open blockdev [ 1075.906635][T30977] /dev/rnullb0: Can't open blockdev [ 1075.915621][T30979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.930546][T30979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.975156][T30982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.984925][T30982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.999855][T30983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.013676][T30983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.023363][T30982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.033857][T30982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.049323][T30986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.060507][T30986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.076689][T30986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.086652][T30986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.103006][T30986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.118665][T30986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.224974][T30988] loop5: detected capacity change from 0 to 8167 [ 1076.239495][T30990] /dev/rnullb0: Can't open blockdev [ 1076.258346][T18082] Buffer I/O error on dev loop5, logical block 1020, async page read [ 1076.819161][T30999] /dev/rnullb0: Can't open blockdev [ 1076.902289][T31001] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1076.910748][T31001] syzkaller0: entered promiscuous mode [ 1076.916323][T31001] syzkaller0: entered allmulticast mode [ 1076.928131][T31001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.936785][T31001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.204671][T31003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.217512][T31003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.227187][T31003] /dev/rnullb0: Can't open blockdev [ 1077.636050][T31005] /dev/rnullb0: Can't open blockdev [ 1077.679895][T31007] /dev/rnullb0: Can't open blockdev [ 1077.720777][T31009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7250'. [ 1077.721231][T31010] /dev/rnullb0: Can't open blockdev [ 1077.882029][T31017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.908806][T31017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.053546][T31019] loop5: detected capacity change from 0 to 8671 [ 1078.093897][T18082] Buffer I/O error on dev loop5, logical block 1083, async page read [ 1079.202682][ T30] audit: type=1326 audit(1751133318.630:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31046 comm="syz.8.7261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8b2538e929 code=0x0 [ 1079.399060][T31056] netlink: 'syz.5.7264': attribute type 25 has an invalid length. [ 1079.408779][T31056] netlink: 'syz.5.7264': attribute type 9 has an invalid length. [ 1079.413147][T31058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1079.624757][T31064] loop5: detected capacity change from 0 to 5591 [ 1079.660933][T31066] binder: 31065:31066 ioctl c00c620f 0 returned -14 [ 1079.676496][T18082] Buffer I/O error on dev loop5, logical block 698, async page read [ 1080.650910][T31069] /dev/rnullb0: Can't open blockdev [ 1080.678860][T31070] /dev/rnullb0: Can't open blockdev [ 1080.803901][T31072] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1080.832722][T31072] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1081.009222][T31076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.041595][T31076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.246801][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 1081.626371][T31096] loop5: detected capacity change from 0 to 9535 [ 1081.663418][T18082] Buffer I/O error on dev loop5, logical block 1191, async page read [ 1081.916016][T18082] Buffer I/O error on dev loop5, logical block 1191, async page read [ 1082.199312][T31109] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1082.596761][T31115] netlink: 'syz.8.7285': attribute type 21 has an invalid length. [ 1082.615892][T31115] netlink: 128 bytes leftover after parsing attributes in process `syz.8.7285'. [ 1082.692911][T31120] sctp: [Deprecated]: syz.5.7286 (pid 31120) Use of int in max_burst socket option deprecated. [ 1082.692911][T31120] Use struct sctp_assoc_value instead [ 1083.325226][T31131] loop5: detected capacity change from 0 to 8743 [ 1083.387298][T18082] Buffer I/O error on dev loop5, logical block 1092, async page read [ 1083.824940][T31133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.844734][T31133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.049760][T31157] loop5: detected capacity change from 0 to 7991 [ 1085.110416][T18082] Buffer I/O error on dev loop5, logical block 998, async page read [ 1085.412629][T31162] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1085.761389][T31172] /dev/rnullb0: Can't open blockdev [ 1086.006344][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.017528][T31182] /dev/rnullb0: Can't open blockdev [ 1086.048228][T31182] /dev/rnullb0: Can't open blockdev [ 1086.056858][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.068470][T31182] /dev/rnullb0: Can't open blockdev [ 1086.082468][T31182] /dev/rnullb0: Can't open blockdev [ 1086.090719][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.094361][T31182] /dev/rnullb0: Can't open blockdev [ 1086.109972][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.128727][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.131192][T31182] /dev/rnullb0: Can't open blockdev [ 1086.145088][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.171428][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.194598][T31182] /dev/rnullb0: Can't open blockdev [ 1086.203854][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.223973][T31182] /dev/rnullb0: Can't open blockdev [ 1086.225670][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.238493][T31182] /dev/rnullb0: Can't open blockdev [ 1086.253756][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.260008][T31182] /dev/rnullb0: Can't open blockdev [ 1086.308926][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.329436][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.340305][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.357973][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.376301][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.393476][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.406629][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.429907][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.445078][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.460060][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.470906][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.481477][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.492645][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.505425][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.522483][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.533749][T31183] 9pnet_fd: p9_fd_create_unix (31183): problem connecting socket: ./file1: -2 [ 1086.709731][T31191] loop5: detected capacity change from 0 to 10335 [ 1086.751578][T18082] Buffer I/O error on dev loop5, logical block 1291, async page read [ 1086.947716][T18082] Buffer I/O error on dev loop5, logical block 1291, async page read [ 1086.962120][T31195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1086.985104][T31195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.016622][T31195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.062978][T31195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.088057][T31195] dlm: no locking on control device [ 1087.106363][T31197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.115185][T31197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.530286][T31214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.549878][T31214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.069956][T31222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1088.255596][T31225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.289560][T31225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.909590][T31266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.937356][T31266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.339182][T31268] program syz.1.7335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1090.548645][T31277] syz.1.7337: attempt to access beyond end of device [ 1090.548645][T31277] loop1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 1091.047136][T31288] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1091.156912][ T5838] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 1091.823310][T31295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.834263][T31295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.864164][T31297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.873691][T31297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.884739][T31297] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7345'. [ 1091.898754][T31297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.916643][T31297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1091.937203][T31297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1091.955264][T31297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.455522][T31316] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1092.460833][T31315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1092.884403][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1092.890998][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1093.518212][T31339] sctp: [Deprecated]: syz.8.7360 (pid 31339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1093.518212][T31339] Use struct sctp_sack_info instead [ 1093.866275][T31348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.884674][T31348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.165400][T31354] netlink: 'syz.1.7365': attribute type 2 has an invalid length. [ 1094.173432][T31354] netlink: 'syz.1.7365': attribute type 1 has an invalid length. [ 1094.367343][T31367] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1094.814411][T31378] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1095.660767][T31391] /dev/rnullb0: Can't open blockdev [ 1095.759102][T31393] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1095.961700][T31398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1095.975406][T31398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.606851][T31417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.655928][T31417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1096.720160][T31420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1096.747306][T31420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.057113][T31435] /dev/rnullb0: Can't open blockdev [ 1097.069561][T31436] /dev/rnullb0: Can't open blockdev [ 1097.077246][T31435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.087995][T31435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.884552][T31445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1097.982623][T31447] /dev/rnullb0: Can't open blockdev [ 1098.057055][T31449] o2cb: This node has not been configured. [ 1098.063929][T31449] o2cb: Cluster check failed. Fix errors before retrying. [ 1098.071451][T31449] (syz.1.7396,31449,0):user_dlm_register:674 ERROR: status = -22 [ 1098.079798][T31449] (syz.1.7396,31449,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "syz1" [ 1098.149785][T31449] o2cb: This node has not been configured. [ 1098.159240][T31449] o2cb: Cluster check failed. Fix errors before retrying. [ 1098.166644][T31449] (syz.1.7396,31449,0):user_dlm_register:674 ERROR: status = -22 [ 1098.175072][T31449] (syz.1.7396,31449,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "syz1" [ 1098.288922][T31456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.313014][T31456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.577261][T31460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.613834][T31460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.651548][T31460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.677426][T31460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.902642][T31468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.918477][T31468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.942076][T31468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.953297][T31468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.549649][T31490] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1101.075806][ T48] IPVS: starting estimator thread 0... [ 1101.173706][T31500] IPVS: using max 32 ests per chain, 76800 per kthread [ 1101.220934][T31502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1101.671283][T31513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1101.692078][T31513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.245630][T31551] ./cgroup: Can't lookup blockdev [ 1103.680101][T31564] tmpfs: Bad value for 'mpol' [ 1103.702541][T31564] tmpfs: Bad value for 'mpol' [ 1104.044340][ T1225] usb 2-1: USB disconnect, device number 82 [ 1104.464020][T31573] FAULT_INJECTION: forcing a failure. [ 1104.464020][T31573] name failslab, interval 1, probability 0, space 0, times 0 [ 1104.520121][T31573] CPU: 0 UID: 0 PID: 31573 Comm: syz.5.7436 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 1104.520146][T31573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1104.520157][T31573] Call Trace: [ 1104.520165][T31573] [ 1104.520173][T31573] dump_stack_lvl+0x189/0x250 [ 1104.520197][T31573] ? __pfx____ratelimit+0x10/0x10 [ 1104.520216][T31573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1104.520233][T31573] ? __pfx__printk+0x10/0x10 [ 1104.520255][T31573] ? __pfx___might_resched+0x10/0x10 [ 1104.520271][T31573] ? fs_reclaim_acquire+0x7d/0x100 [ 1104.520294][T31573] should_fail_ex+0x414/0x560 [ 1104.520317][T31573] should_failslab+0xa8/0x100 [ 1104.520338][T31573] __kmalloc_cache_noprof+0x70/0x3d0 [ 1104.520356][T31573] ? syslog_print_all+0xc4/0x3e0 [ 1104.520378][T31573] syslog_print_all+0xc4/0x3e0 [ 1104.520405][T31573] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1104.520425][T31573] ? __pfx_syslog_print_all+0x10/0x10 [ 1104.520442][T31573] ? vfs_write+0x8d8/0xa90 [ 1104.520471][T31573] ? ksys_write+0x1cb/0x250 [ 1104.520492][T31573] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1104.520518][T31573] do_syslog+0x375/0x760 [ 1104.520537][T31573] ? __pfx_do_syslog+0x10/0x10 [ 1104.520553][T31573] ? __fget_files+0x3a0/0x420 [ 1104.520581][T31573] ? fput+0xa0/0xd0 [ 1104.520603][T31573] ? ksys_write+0x22a/0x250 [ 1104.520622][T31573] ? __pfx_ksys_write+0x10/0x10 [ 1104.520648][T31573] __x64_sys_syslog+0x7c/0x90 [ 1104.520666][T31573] do_syscall_64+0xfa/0x3b0 [ 1104.520687][T31573] ? lockdep_hardirqs_on+0x9c/0x150 [ 1104.520706][T31573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.520722][T31573] ? clear_bhb_loop+0x60/0xb0 [ 1104.520740][T31573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.520756][T31573] RIP: 0033:0x7f041418e929 [ 1104.520773][T31573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1104.520787][T31573] RSP: 002b:00007f0411ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 1104.520807][T31573] RAX: ffffffffffffffda RBX: 00007f04143b5fa0 RCX: 00007f041418e929 [ 1104.520820][T31573] RDX: 0000000000001000 RSI: 00002000000014c0 RDI: 0000000000000003 [ 1104.520832][T31573] RBP: 00007f0411ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1104.520843][T31573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1104.520853][T31573] R13: 0000000000000000 R14: 00007f04143b5fa0 R15: 00007ffc3add0418 [ 1104.520881][T31573] [ 1104.820200][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1104.838882][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1104.857295][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1104.878065][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1104.887636][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1104.985692][T31581] vlan1: entered promiscuous mode [ 1105.005980][T31581] vlan1: entered allmulticast mode [ 1105.011192][T31581] veth0_vlan: entered allmulticast mode [ 1105.443299][T31574] chnl_net:caif_netlink_parms(): no params data found [ 1105.657595][T31617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.677841][T31617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.791208][T31574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.804152][T31625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.821567][T31574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.830849][T31625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.835655][T31574] bridge_slave_0: entered allmulticast mode [ 1105.847927][T31623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.848479][T31574] bridge_slave_0: entered promiscuous mode [ 1105.865466][T31574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.875716][T31574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.883733][T31574] bridge_slave_1: entered allmulticast mode [ 1105.890305][T31623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.901472][T31574] bridge_slave_1: entered promiscuous mode [ 1105.943254][T31574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1105.961841][T31574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.061350][T31574] team0: Port device team_slave_0 added [ 1106.072741][T31574] team0: Port device team_slave_1 added [ 1106.117951][T31574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.125298][T31574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.153037][T31574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.166196][T31574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.173166][T31574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.199561][T31574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.257365][T31574] hsr_slave_0: entered promiscuous mode [ 1106.264138][T31574] hsr_slave_1: entered promiscuous mode [ 1106.270173][T31574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1106.278674][T31574] Cannot create hsr debugfs directory [ 1106.438792][T31574] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.491622][T31632] netlink: 'syz.5.7451': attribute type 11 has an invalid length. [ 1106.579439][T31574] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.750447][T31574] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.806930][T31644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.815682][T31644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.828372][T31644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.853097][T31644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.865562][T31574] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.109510][T31574] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1107.119683][T31574] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1107.131087][T31574] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1107.141258][T31574] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1107.171262][ T51] Bluetooth: hci3: command tx timeout [ 1107.222863][T31574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.243702][T31574] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.259348][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.266512][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.286857][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.293999][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.500990][T31662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.521079][T31662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.581373][T31574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1107.698313][T31574] veth0_vlan: entered promiscuous mode [ 1107.723672][T31574] veth1_vlan: entered promiscuous mode [ 1107.807221][T31574] veth0_macvtap: entered promiscuous mode [ 1107.876374][T31574] veth1_macvtap: entered promiscuous mode [ 1107.915003][T31574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1107.934737][T31574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1107.948737][ T3026] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.961024][ T3026] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.972025][ T3026] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1107.983980][ T3026] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.043373][T31668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.054848][T31668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.088459][ T2994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.104080][T31668] XFS (rnullb0): Invalid superblock magic number [ 1108.115986][ T2994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1108.204421][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1108.212695][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1108.309325][T31676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1109.176611][T31681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.189677][T31681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.384571][ T51] Bluetooth: hci3: command tx timeout [ 1110.463769][ T10] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1110.647573][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1110.700723][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1110.726260][ T10] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1110.736231][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.756004][ T10] usb 2-1: config 0 descriptor?? [ 1110.981864][T31729] /dev/rnullb0: Can't open blockdev [ 1111.003348][T31729] /dev/rnullb0: Can't open blockdev [ 1111.023221][T31729] /dev/rnullb0: Can't open blockdev [ 1111.049691][T31729] /dev/rnullb0: Can't open blockdev [ 1111.071793][T31729] /dev/rnullb0: Can't open blockdev [ 1111.104641][T31729] /dev/rnullb0: Can't open blockdev [ 1111.195086][ T10] hid (null): global environment stack underflow [ 1111.240120][ T10] steelseries 0003:1038:12B6.0047: global environment stack underflow [ 1111.287590][T31735] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1111.307471][ T10] steelseries 0003:1038:12B6.0047: item 0 2 1 11 parsing failed [ 1111.341730][ T10] steelseries 0003:1038:12B6.0047: probe with driver steelseries failed with error -22 [ 1111.608279][ T51] Bluetooth: hci3: command tx timeout [ 1112.735990][T31743] fuse: Unknown parameter '¸ å€#iyWZ‡ÝÖl]h0x0000000000000004' [ 1113.111548][T31756] sp0: Synchronizing with TNC [ 1113.453914][ T10] usb 2-1: USB disconnect, device number 83 [ 1113.833142][ T51] Bluetooth: hci3: command tx timeout [ 1114.156694][T31767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.182390][T31767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.219750][T31767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1114.239940][T31767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1114.410609][T31774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1114.743940][T31781] syzkaller1: entered promiscuous mode [ 1114.768171][T31781] syzkaller1: entered allmulticast mode [ 1114.815939][ T30] audit: type=1326 audit(1751133351.958:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31780 comm="syz.1.7488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbba2f8e929 code=0x0 [ 1114.953176][T31755] [U] è [ 1116.112967][T31800] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.126794][ T51] Bluetooth: hci1: unexpected event for opcode 0x0c14 [ 1116.203233][T31802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.213825][T31802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.228514][T31802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.260346][T31802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.269370][ T9] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1116.328397][T31802] netlink: 'syz.8.7496': attribute type 3 has an invalid length. [ 1116.342282][T31802] netlink: 'syz.8.7496': attribute type 1 has an invalid length. [ 1116.351360][T31802] netlink: 216 bytes leftover after parsing attributes in process `syz.8.7496'. [ 1116.380187][T31802] NCSI netlink: No device for ifindex 33022 [ 1116.401803][T31809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.420396][T31809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.461628][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1116.481739][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1116.492947][ T9] usb 2-1: config 8 has an invalid interface number: 105 but max is 0 [ 1116.503609][ T9] usb 2-1: config 8 has no interface number 0 [ 1116.511057][ T9] usb 2-1: config 8 interface 105 has no altsetting 0 [ 1116.526513][ T9] usb 2-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=ab.34 [ 1116.535635][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.544023][ T9] usb 2-1: Product: syz [ 1116.557748][ T9] usb 2-1: Manufacturer: syz [ 1116.562373][ T9] usb 2-1: SerialNumber: syz [ 1116.600738][T31815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7500'. [ 1116.610562][T31815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1116.699763][T31817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.714129][T31817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.803311][T31798] fuseblk: Bad value for 'user_id' [ 1116.808555][T31798] fuseblk: Bad value for 'user_id' [ 1116.815520][T31798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.825000][T31798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.838321][T31819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1116.849507][T31819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1116.887086][ T9] usb 2-1: USB disconnect, device number 84 [ 1117.077367][T31826] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1117.337993][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1117.508940][ T9] usb 2-1: device descriptor read/64, error -71 [ 1117.776168][ T9] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1117.925903][ T9] usb 2-1: device descriptor read/64, error -71 [ 1118.046898][ T9] usb usb2-port1: attempt power cycle [ 1118.412313][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1118.450583][ T9] usb 2-1: device descriptor read/8, error -71 [ 1118.679207][T31857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.693283][T31857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.717091][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1118.749766][ T9] usb 2-1: device descriptor read/8, error -71 [ 1118.867241][ T9] usb usb2-port1: unable to enumerate USB device [ 1118.983342][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1119.291737][T31867] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1120.109833][T17645] libceph: connect (1)[c::]:6789 error -101 [ 1120.117800][T17645] libceph: mon0 (1)[c::]:6789 connect error [ 1120.139184][T31883] ceph: No mds server is up or the cluster is laggy [ 1120.146553][T17645] libceph: connect (1)[c::]:6789 error -101 [ 1120.163106][T17645] libceph: mon0 (1)[c::]:6789 connect error [ 1120.468728][T31898] netlink: 'syz.5.7522': attribute type 4 has an invalid length. [ 1120.774233][T31912] netfs: Couldn't get user pages (rc=-14) [ 1121.004708][ T48] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1121.040207][T31921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1121.165054][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 1121.187670][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.218739][ T48] usb 2-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.00 [ 1121.250623][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.286032][ T48] usb 2-1: config 0 descriptor?? [ 1121.318885][ T48] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input121 [ 1122.159836][T31935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1122.184543][T31935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1122.225799][T31934] netlink: 'syz.8.7533': attribute type 20 has an invalid length. [ 1122.545813][T31949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7538'. [ 1122.949148][T31965] netlink: 'syz.8.7541': attribute type 21 has an invalid length. [ 1123.329782][T31981] /dev/rnullb0: Can't open blockdev [ 1123.529338][T31984] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1123.938526][T31995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1125.442544][T32025] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1125.555544][T32030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1125.566593][T32030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1125.577444][T32029] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7563'. [ 1125.695640][T32029] bond0: (slave bond_slave_0): Releasing backup interface [ 1125.730873][T32031] loop5: detected capacity change from 0 to 6551 [ 1125.782863][T18082] Buffer I/O error on dev loop5, logical block 818, async page read [ 1126.332503][T32033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1126.352280][T32033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.539626][T32043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1126.549550][T32043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.562446][T32043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1126.590981][T32043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.746697][ T5191] bcm5974 2-1:0.0: could not read from device [ 1126.761117][ T5191] bcm5974 2-1:0.0: could not read from device [ 1126.771204][ T5191] bcm5974 2-1:0.0: could not read from device [ 1126.782276][ T5191] bcm5974 2-1:0.0: could not read from device [ 1126.800362][ T5191] bcm5974 2-1:0.0: could not read from device [ 1126.820711][T18082] bcm5974 2-1:0.0: could not read from device [ 1126.848498][T32051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1126.870196][T32051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.889366][ T5191] bcm5974 2-1:0.0: could not read from device [ 1126.899010][ T5191] bcm5974 2-1:0.0: could not read from device [ 1127.217799][ T48] hid-generic 0000:0000:0000.0048: hidraw0: HID v0.00 Device [syz1] on syz1 [ 1127.325143][T32065] fido_id[32065]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1127.829996][T32088] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1128.182391][ T51] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1128.241013][ T51] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 1129.132933][T32116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.178771][T32118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.191139][T32116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.201409][T32118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.407060][T32120] /dev/rnullb0: Can't open blockdev [ 1129.575025][T32124] /dev/rnullb0: Can't open blockdev [ 1129.933484][T32134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.985257][T32134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.014712][T32137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.033773][T32139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.043614][T32137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.062422][T32134] dvmrp0: entered allmulticast mode [ 1130.064983][T32139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1130.808347][T32147] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7599'. [ 1130.817787][T32149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1130.856243][T32149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.405952][T32175] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1132.003317][T32195] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7613'. [ 1132.827029][T32206] /dev/rnullb0: Can't open blockdev [ 1132.834139][T32206] /dev/rnullb0: Can't open blockdev [ 1132.840762][T32206] /dev/rnullb0: Can't open blockdev [ 1132.846481][T32206] /dev/rnullb0: Can't open blockdev [ 1132.854758][T32206] /dev/rnullb0: Can't open blockdev [ 1132.862430][T32206] /dev/rnullb0: Can't open blockdev [ 1132.868127][T32206] /dev/rnullb0: Can't open blockdev [ 1132.875703][T32206] /dev/rnullb0: Can't open blockdev [ 1132.881372][T32206] /dev/rnullb0: Can't open blockdev [ 1132.887908][T32206] /dev/rnullb0: Can't open blockdev [ 1132.894929][T32206] /dev/rnullb0: Can't open blockdev [ 1132.900655][T32206] /dev/rnullb0: Can't open blockdev [ 1132.908615][T32206] /dev/rnullb0: Can't open blockdev [ 1132.916074][T32206] /dev/rnullb0: Can't open blockdev [ 1132.921728][T32206] /dev/rnullb0: Can't open blockdev [ 1132.928318][T32206] /dev/rnullb0: Can't open blockdev [ 1132.940565][T32206] /dev/rnullb0: Can't open blockdev [ 1132.946943][T32206] /dev/rnullb0: Can't open blockdev [ 1132.952643][T32206] /dev/rnullb0: Can't open blockdev [ 1132.960257][T32206] /dev/rnullb0: Can't open blockdev [ 1132.965925][T32206] /dev/rnullb0: Can't open blockdev [ 1132.971792][T32206] /dev/rnullb0: Can't open blockdev [ 1132.977422][T32206] /dev/rnullb0: Can't open blockdev [ 1132.983639][T32206] /dev/rnullb0: Can't open blockdev [ 1132.989690][T32206] /dev/rnullb0: Can't open blockdev [ 1132.995578][T32206] /dev/rnullb0: Can't open blockdev [ 1133.001773][T32206] /dev/rnullb0: Can't open blockdev [ 1133.007422][T32206] /dev/rnullb0: Can't open blockdev [ 1133.013358][T32206] /dev/rnullb0: Can't open blockdev [ 1133.019057][T32206] /dev/rnullb0: Can't open blockdev [ 1133.025847][T32206] /dev/rnullb0: Can't open blockdev [ 1133.031656][T32206] /dev/rnullb0: Can't open blockdev [ 1133.037534][T32206] /dev/rnullb0: Can't open blockdev [ 1133.045316][T32206] /dev/rnullb0: Can't open blockdev [ 1133.050984][T32206] /dev/rnullb0: Can't open blockdev [ 1133.057628][T32206] /dev/rnullb0: Can't open blockdev [ 1133.063382][T32206] /dev/rnullb0: Can't open blockdev [ 1133.070482][T32206] /dev/rnullb0: Can't open blockdev [ 1133.077253][T32206] /dev/rnullb0: Can't open blockdev [ 1133.082984][T32206] /dev/rnullb0: Can't open blockdev [ 1133.089021][T32206] /dev/rnullb0: Can't open blockdev [ 1133.094694][T32206] /dev/rnullb0: Can't open blockdev [ 1133.100534][T32206] /dev/rnullb0: Can't open blockdev [ 1133.106167][T32206] /dev/rnullb0: Can't open blockdev [ 1133.112348][T32206] /dev/rnullb0: Can't open blockdev [ 1133.118298][T32206] /dev/rnullb0: Can't open blockdev [ 1133.123954][T32206] /dev/rnullb0: Can't open blockdev [ 1133.130486][T32206] /dev/rnullb0: Can't open blockdev [ 1133.136154][T32206] /dev/rnullb0: Can't open blockdev [ 1133.142414][T32206] /dev/rnullb0: Can't open blockdev [ 1133.148068][T32206] /dev/rnullb0: Can't open blockdev [ 1133.155702][T32206] /dev/rnullb0: Can't open blockdev [ 1133.161994][T32206] /dev/rnullb0: Can't open blockdev [ 1133.167709][T32206] /dev/rnullb0: Can't open blockdev [ 1133.174152][T32206] /dev/rnullb0: Can't open blockdev [ 1133.180354][T32206] /dev/rnullb0: Can't open blockdev [ 1133.186787][T32206] /dev/rnullb0: Can't open blockdev [ 1133.193439][T32206] /dev/rnullb0: Can't open blockdev [ 1133.199123][T32206] /dev/rnullb0: Can't open blockdev [ 1133.204901][T32206] /dev/rnullb0: Can't open blockdev [ 1133.210542][T32206] /dev/rnullb0: Can't open blockdev [ 1133.216518][T32206] /dev/rnullb0: Can't open blockdev [ 1133.222152][T32206] /dev/rnullb0: Can't open blockdev [ 1133.228079][T32206] /dev/rnullb0: Can't open blockdev [ 1133.233699][T32206] /dev/rnullb0: Can't open blockdev [ 1133.430555][T32212] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1133.997243][T32149] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1134.115536][ T51] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 1134.124789][ T51] Bluetooth: hci0: unexpected event for opcode 0x2062 [ 1134.135773][T32215] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7621'. [ 1134.163377][T32215] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7621'. [ 1134.259393][T32220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.273962][T32220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.402472][T32222] loop5: detected capacity change from 0 to 7087 [ 1134.450424][T18082] Buffer I/O error on dev loop5, logical block 885, async page read [ 1134.703834][T18082] Buffer I/O error on dev loop5, logical block 885, async page read [ 1134.842316][T32226] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1134.956265][T32231] nbd: must specify a device to reconfigure [ 1135.525427][T32252] loop5: detected capacity change from 0 to 9607 [ 1135.548420][T32256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7635'. [ 1135.578166][T32256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7635'. [ 1135.587960][T18082] Buffer I/O error on dev loop5, logical block 1200, async page read [ 1135.601828][T32256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7635'. [ 1135.654695][T32260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.692414][T32260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.693691][T32266] XFS (rnullb0): Invalid superblock magic number [ 1137.504278][T32289] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1137.687660][T32295] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 1138.070637][T32317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.080493][T32317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.410255][T32320] Bluetooth: MGMT ver 1.23 [ 1138.448737][T32322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.458060][T32322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.474736][ T51] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1138.483490][ T51] Bluetooth: hci0: Injecting HCI hardware error event [ 1138.487463][T32323] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7653'. [ 1138.493949][ T5838] Bluetooth: hci0: hardware error 0x00 [ 1138.523208][T32320] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7653'. [ 1138.535732][T32320] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7653'. [ 1139.952151][ T10] hid-generic 0000:0000:0000.0049: unknown main item tag 0x0 [ 1139.987550][ T10] hid-generic 0000:0000:0000.0049: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1140.036944][T32368] loop5: detected capacity change from 0 to 7215 [ 1140.073888][T18090] Buffer I/O error on dev loop5, logical block 901, async page read [ 1140.165664][T32369] fido_id[32369]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1140.613703][T32381] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1140.687611][ T5838] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1140.837996][T32396] /dev/rnullb0: Can't open blockdev [ 1141.879554][T32417] No control pipe specified [ 1141.894686][T32417] No control pipe specified [ 1141.899503][T32417] No control pipe specified [ 1141.923349][T32417] No control pipe specified [ 1141.934508][T32417] No control pipe specified [ 1141.945068][T32417] No control pipe specified [ 1141.951404][T32417] No control pipe specified [ 1141.956347][T32417] No control pipe specified [ 1141.967374][T32417] No control pipe specified [ 1141.973826][T32417] No control pipe specified [ 1141.978789][T32417] No control pipe specified [ 1141.998621][T32417] No control pipe specified [ 1142.008675][T32417] No control pipe specified [ 1142.021235][T32417] No control pipe specified [ 1142.028656][T32417] No control pipe specified [ 1142.038900][T32417] No control pipe specified [ 1142.044751][T32417] No control pipe specified [ 1142.052944][T32417] No control pipe specified [ 1142.062322][T32417] No control pipe specified [ 1142.072557][T32417] No control pipe specified [ 1142.083253][T32417] No control pipe specified [ 1142.091313][T32417] No control pipe specified [ 1142.096317][T32417] No control pipe specified [ 1142.105958][T32417] No control pipe specified [ 1142.113113][T32417] No control pipe specified [ 1142.117910][T32417] No control pipe specified [ 1142.133433][T32417] No control pipe specified [ 1142.138583][T32417] No control pipe specified [ 1142.183288][T32417] No control pipe specified [ 1142.188144][T32417] No control pipe specified [ 1142.192965][T32417] No control pipe specified [ 1142.219656][T32417] No control pipe specified [ 1142.224485][T32417] No control pipe specified [ 1142.246699][T32417] No control pipe specified [ 1142.256465][T32417] No control pipe specified [ 1142.267253][T32417] No control pipe specified [ 1142.278083][T32417] No control pipe specified [ 1142.288780][T32417] No control pipe specified [ 1142.307285][T32417] No control pipe specified [ 1142.317029][T32417] No control pipe specified [ 1142.323166][T32417] No control pipe specified [ 1142.858725][T32445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1142.878052][T32445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.334607][T32474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1144.385597][T32474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1144.404912][T32479] /dev/rnullb0: Can't open blockdev [ 1144.413806][T32480] /dev/rnullb0: Can't open blockdev [ 1144.624028][T32484] loop6: detected capacity change from 0 to 524287999 [ 1144.645465][T32484] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7706'. [ 1144.674428][T32484] bridge_slave_1: left allmulticast mode [ 1144.680251][T32484] bridge_slave_1: left promiscuous mode [ 1144.691281][T32484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.726072][T32484] bridge_slave_0: left allmulticast mode [ 1144.753695][T32484] bridge_slave_0: left promiscuous mode [ 1144.770490][T32484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.360195][T32497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.364377][T32499] /dev/rnullb0: Can't open blockdev [ 1145.373081][T32497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.408660][T32500] netlink: 'syz.5.7710': attribute type 1 has an invalid length. [ 1145.433898][T32500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7710'. [ 1145.460453][T32504] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1145.533470][T32509] loop4: detected capacity change from 0 to 7 [ 1145.544537][T18082] Dev loop4: unable to read RDB block 7 [ 1145.564695][T18082] loop4: unable to read partition table [ 1145.570612][T18082] loop4: partition table beyond EOD, truncated [ 1145.621526][T32509] Dev loop4: unable to read RDB block 7 [ 1145.644141][T32509] loop4: unable to read partition table [ 1145.672709][T32509] loop4: partition table beyond EOD, truncated [ 1145.688147][T32509] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1145.716455][T32510] Dev loop4: unable to read RDB block 7 [ 1145.726062][T32510] loop4: unable to read partition table [ 1145.740317][T32510] loop4: partition table beyond EOD, truncated [ 1145.769939][T32517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.784395][T32517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.952398][T32522] XFS (rnullb0): Invalid superblock magic number [ 1146.136302][T32536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.145293][T32536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.918344][T32553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.930406][T32553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.943594][T32553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.955565][T32553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1146.966434][T32553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1146.979386][T32553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.430132][T32563] syz.8.7728 (32563) used obsolete PPPIOCDETACH ioctl [ 1147.628984][T32573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1147.638372][T32573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1147.794056][T32581] netlink: 'syz.7.7735': attribute type 10 has an invalid length. [ 1147.803219][T32581] syz_tun: entered promiscuous mode [ 1147.820131][T32581] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1147.834624][T32581] /dev/rnullb0: Can't open blockdev [ 1147.940337][T32586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1148.108694][T32600] /dev/sg0: Can't lookup blockdev [ 1148.208648][T32603] /dev/rnullb0: Can't open blockdev [ 1148.376697][T32609] /dev/rnullb0: Can't open blockdev [ 1148.420503][T32614] Invalid logical block size (2) [ 1148.437724][T32616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.473487][T32616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.513400][T32620] /dev/rnullb0: Can't open blockdev [ 1148.616100][T32622] /dev/rnullb0: Can't open blockdev [ 1148.646725][T32622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.673307][T32622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.899195][T32628] IPVS: length: 65 != 24 [ 1148.907040][T32628] /dev/rnullb0: Can't open blockdev [ 1149.113573][ T3494] syzkaller0: tun_net_xmit 76 [ 1149.118965][ T3494] syzkaller0: tun_net_xmit 48 [ 1149.125133][T32634] /dev/rnullb0: Can't open blockdev [ 1149.130419][T32633] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1149.137452][T32633] syzkaller0: Linktype set failed because interface is up [ 1149.570766][T32646] sctp: [Deprecated]: syz.5.7756 (pid 32646) Use of int in max_burst socket option. [ 1149.570766][T32646] Use struct sctp_assoc_value instead [ 1149.624831][T32646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.643530][T32646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.486317][T32662] /dev/rnullb0: Can't open blockdev [ 1150.717647][T32665] loop5: detected capacity change from 0 to 10439 [ 1150.752807][T18082] Buffer I/O error on dev loop5, logical block 1304, async page read [ 1151.354489][T32674] netlink: 'syz.5.7763': attribute type 10 has an invalid length. [ 1152.798972][T32674] team0: Device veth0_vlan failed to register rx_handler [ 1152.919982][T32690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1152.930286][T32690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.946971][T32690] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 1152.954679][T32690] PKCS7: Only support pkcs7_signedData type [ 1153.293564][T32710] kvm: kvm [32709]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x7101 [ 1153.572839][T32717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.586025][T32717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.605383][ T30] audit: type=1326 audit(1751133389.236:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32713 comm="syz.5.7775" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041418e929 code=0x7fc00000 [ 1155.035173][T32743] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1155.109238][T32743] mkiss: ax0: crc mode is auto. [ 1155.353682][T32751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1155.372445][T32751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1156.486313][ T306] /dev/sg0: Can't lookup blockdev [ 1156.551431][ T2994] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.705836][ T317] team0: No ports can be present during mode change [ 1156.863612][ T323] FAULT_INJECTION: forcing a failure. [ 1156.863612][ T323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1156.904885][ T323] CPU: 1 UID: 0 PID: 323 Comm: syz.5.7801 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 1156.904911][ T323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1156.904929][ T323] Call Trace: [ 1156.904937][ T323] [ 1156.904945][ T323] dump_stack_lvl+0x189/0x250 [ 1156.904970][ T323] ? __pfx____ratelimit+0x10/0x10 [ 1156.904992][ T323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1156.905010][ T323] ? __pfx__printk+0x10/0x10 [ 1156.905042][ T323] should_fail_ex+0x414/0x560 [ 1156.905066][ T323] _copy_to_user+0x31/0xb0 [ 1156.905088][ T323] simple_read_from_buffer+0xe1/0x170 [ 1156.905115][ T323] proc_fail_nth_read+0x1df/0x250 [ 1156.905142][ T323] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1156.905169][ T323] ? rw_verify_area+0x258/0x650 [ 1156.905187][ T323] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1156.905211][ T323] vfs_read+0x200/0x980 [ 1156.905236][ T323] ? __pfx___mutex_lock+0x10/0x10 [ 1156.905257][ T323] ? __pfx_vfs_read+0x10/0x10 [ 1156.905278][ T323] ? __fget_files+0x2a/0x420 [ 1156.905303][ T323] ? __fget_files+0x3a0/0x420 [ 1156.905323][ T323] ? __fget_files+0x2a/0x420 [ 1156.905354][ T323] ksys_read+0x145/0x250 [ 1156.905375][ T323] ? __pfx_ksys_read+0x10/0x10 [ 1156.905399][ T323] ? do_syscall_64+0xbe/0x3b0 [ 1156.905425][ T323] do_syscall_64+0xfa/0x3b0 [ 1156.905444][ T323] ? lockdep_hardirqs_on+0x9c/0x150 [ 1156.905464][ T323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.905481][ T323] ? clear_bhb_loop+0x60/0xb0 [ 1156.905502][ T323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.905519][ T323] RIP: 0033:0x7f041418d33c [ 1156.905536][ T323] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1156.905551][ T323] RSP: 002b:00007f0411ff6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1156.905570][ T323] RAX: ffffffffffffffda RBX: 00007f04143b5fa0 RCX: 00007f041418d33c [ 1156.905583][ T323] RDX: 000000000000000f RSI: 00007f0411ff60a0 RDI: 0000000000000003 [ 1156.905594][ T323] RBP: 00007f0411ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1156.905605][ T323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.905615][ T323] R13: 0000000000000000 R14: 00007f04143b5fa0 R15: 00007ffc3add0418 [ 1156.905644][ T323] [ 1157.505785][ T335] /dev/rnullb0: Can't open blockdev [ 1157.684146][ T340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1157.714551][ T340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1157.738874][ T2994] tipc: Subscription rejected, illegal request [ 1157.749054][ T340] /dev/rnullb0: Can't open blockdev [ 1158.159072][ T354] netlink: 'syz.1.7812': attribute type 1 has an invalid length. [ 1158.167086][ T354] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.7812'. [ 1158.576295][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1158.588242][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1158.787161][ T378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1158.800886][ T378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.774100][ T424] random: crng reseeded on system resumption [ 1159.984622][ T434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.001218][ T434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.192037][ T437] loop5: detected capacity change from 0 to 14263 [ 1160.216649][T18082] Buffer I/O error on dev loop5, logical block 1782, async page read [ 1160.498989][ T449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.508367][ T449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.650238][ T451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.662241][ T451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.676697][ T451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.686000][ T451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.711438][ T451] fuseblk: Unknown parameter '' [ 1161.650049][ T485] netlink: 'syz.1.7848': attribute type 21 has an invalid length. [ 1161.682246][ T485] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7848'. [ 1161.688777][ T488] /dev/rnullb0: Can't open blockdev [ 1161.728232][ T485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1161.773120][ T485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1161.965960][ T495] /dev/rnullb0: Can't open blockdev [ 1162.000858][ T495] [ 1162.003214][ T495] ====================================================== [ 1162.010225][ T495] WARNING: possible circular locking dependency detected [ 1162.017251][ T495] 6.16.0-rc3-next-20250627-syzkaller #0 Not tainted [ 1162.023828][ T495] ------------------------------------------------------ [ 1162.030831][ T495] syz.5.7852/495 is trying to acquire lock: [ 1162.036720][ T495] ffff88805bd51e50 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}, at: lookup_slow+0x46/0x70 [ 1162.046472][ T495] [ 1162.046472][ T495] but task is already holding lock: [ 1162.053835][ T495] ffff888066a7ac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1162.063139][ T495] [ 1162.063139][ T495] which lock already depends on the new lock. [ 1162.063139][ T495] [ 1162.073534][ T495] [ 1162.073534][ T495] the existing dependency chain (in reverse order) is: [ 1162.082549][ T495] [ 1162.082549][ T495] -> #3 (&of->mutex){+.+.}-{4:4}: [ 1162.089756][ T495] lock_acquire+0x120/0x360 [ 1162.094774][ T495] __mutex_lock+0x182/0xe80 [ 1162.099785][ T495] kernfs_fop_write_iter+0x1e0/0x4f0 [ 1162.105577][ T495] iter_file_splice_write+0x93a/0x1000 [ 1162.111548][ T495] do_splice+0xc79/0x1660 [ 1162.116406][ T495] __se_sys_splice+0x2e1/0x460 [ 1162.121699][ T495] do_syscall_64+0xfa/0x3b0 [ 1162.126725][ T495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.133126][ T495] [ 1162.133126][ T495] -> #2 (&pipe->mutex){+.+.}-{4:4}: [ 1162.140494][ T495] lock_acquire+0x120/0x360 [ 1162.145508][ T495] __mutex_lock+0x182/0xe80 [ 1162.150519][ T495] iter_file_splice_write+0x1e6/0x1000 [ 1162.156483][ T495] do_splice+0xc79/0x1660 [ 1162.161316][ T495] __se_sys_splice+0x2e1/0x460 [ 1162.166601][ T495] do_syscall_64+0xfa/0x3b0 [ 1162.171614][ T495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.178015][ T495] [ 1162.178015][ T495] -> #1 (sb_writers#5){.+.+}-{0:0}: [ 1162.185390][ T495] lock_acquire+0x120/0x360 [ 1162.190402][ T495] sb_start_write+0x4d/0x1c0 [ 1162.195496][ T495] mnt_want_write+0x41/0x90 [ 1162.200501][ T495] ovl_xattr_set+0x142/0x4d0 [ 1162.205592][ T495] ovl_own_xattr_set+0x8b/0xb0 [ 1162.210856][ T495] __vfs_setxattr+0x439/0x480 [ 1162.216040][ T495] __vfs_setxattr_noperm+0x12d/0x660 [ 1162.221827][ T495] vfs_setxattr+0x16b/0x2f0 [ 1162.226838][ T495] filename_setxattr+0x274/0x600 [ 1162.232281][ T495] path_setxattrat+0x364/0x3a0 [ 1162.237552][ T495] __x64_sys_setxattr+0xbc/0xe0 [ 1162.242908][ T495] do_syscall_64+0xfa/0x3b0 [ 1162.247932][ T495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.254341][ T495] [ 1162.254341][ T495] -> #0 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 1162.263014][ T495] validate_chain+0xb9b/0x2140 [ 1162.268285][ T495] __lock_acquire+0xab9/0xd20 [ 1162.273474][ T495] lock_acquire+0x120/0x360 [ 1162.278493][ T495] down_read+0x46/0x2e0 [ 1162.283159][ T495] lookup_slow+0x46/0x70 [ 1162.287904][ T495] walk_component+0x2d2/0x400 [ 1162.293087][ T495] path_lookupat+0x163/0x430 [ 1162.298185][ T495] filename_lookup+0x212/0x570 [ 1162.303455][ T495] kern_path+0x35/0x50 [ 1162.308041][ T495] lookup_bdev+0xc0/0x280 [ 1162.312873][ T495] resume_store+0x169/0x460 [ 1162.317885][ T495] kernfs_fop_write_iter+0x375/0x4f0 [ 1162.323670][ T495] vfs_write+0x54b/0xa90 [ 1162.328415][ T495] ksys_write+0x145/0x250 [ 1162.333246][ T495] do_syscall_64+0xfa/0x3b0 [ 1162.338251][ T495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.344647][ T495] [ 1162.344647][ T495] other info that might help us debug this: [ 1162.344647][ T495] [ 1162.354851][ T495] Chain exists of: [ 1162.354851][ T495] &ovl_i_mutex_dir_key[depth] --> &pipe->mutex --> &of->mutex [ 1162.354851][ T495] [ 1162.368215][ T495] Possible unsafe locking scenario: [ 1162.368215][ T495] [ 1162.375640][ T495] CPU0 CPU1 [ 1162.380981][ T495] ---- ---- [ 1162.386323][ T495] lock(&of->mutex); [ 1162.390289][ T495] lock(&pipe->mutex); [ 1162.396951][ T495] lock(&of->mutex); [ 1162.403434][ T495] rlock(&ovl_i_mutex_dir_key[depth]); [ 1162.408959][ T495] [ 1162.408959][ T495] *** DEADLOCK *** [ 1162.408959][ T495] [ 1162.417084][ T495] 4 locks held by syz.5.7852/495: [ 1162.422085][ T495] #0: ffff888028b600f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320 [ 1162.431120][ T495] #1: ffff88803566a428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 1162.439982][ T495] #2: ffff888066a7ac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1162.449706][ T495] #3: ffff8881416ef878 (kn->active#72){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 1162.459697][ T495] [ 1162.459697][ T495] stack backtrace: [ 1162.465568][ T495] CPU: 0 UID: 0 PID: 495 Comm: syz.5.7852 Not tainted 6.16.0-rc3-next-20250627-syzkaller #0 PREEMPT(full) [ 1162.465586][ T495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1162.465595][ T495] Call Trace: [ 1162.465603][ T495] [ 1162.465610][ T495] dump_stack_lvl+0x189/0x250 [ 1162.465628][ T495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1162.465642][ T495] ? __pfx__printk+0x10/0x10 [ 1162.465657][ T495] ? print_lock_name+0xde/0x100 [ 1162.465672][ T495] print_circular_bug+0x2ee/0x310 [ 1162.465689][ T495] check_noncircular+0x134/0x160 [ 1162.465705][ T495] validate_chain+0xb9b/0x2140 [ 1162.465725][ T495] __lock_acquire+0xab9/0xd20 [ 1162.465745][ T495] ? lookup_slow+0x46/0x70 [ 1162.465757][ T495] lock_acquire+0x120/0x360 [ 1162.465775][ T495] ? lookup_slow+0x46/0x70 [ 1162.465790][ T495] down_read+0x46/0x2e0 [ 1162.465810][ T495] ? lookup_slow+0x46/0x70 [ 1162.465822][ T495] lookup_slow+0x46/0x70 [ 1162.465834][ T495] walk_component+0x2d2/0x400 [ 1162.465854][ T495] path_lookupat+0x163/0x430 [ 1162.465875][ T495] filename_lookup+0x212/0x570 [ 1162.465895][ T495] ? __pfx_filename_lookup+0x10/0x10 [ 1162.465921][ T495] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1162.465935][ T495] ? getname_kernel+0x146/0x2f0 [ 1162.465953][ T495] ? getname_kernel+0x20e/0x2f0 [ 1162.465971][ T495] kern_path+0x35/0x50 [ 1162.465990][ T495] lookup_bdev+0xc0/0x280 [ 1162.466004][ T495] ? rcu_is_watching+0x15/0xb0 [ 1162.466018][ T495] ? __pfx_lookup_bdev+0x10/0x10 [ 1162.466030][ T495] ? kstrndup+0xbf/0x160 [ 1162.466050][ T495] resume_store+0x169/0x460 [ 1162.466065][ T495] ? sysfs_file_kobj+0x1a/0x230 [ 1162.466082][ T495] ? __pfx_resume_store+0x10/0x10 [ 1162.466097][ T495] ? sysfs_file_kobj+0x1a/0x230 [ 1162.466112][ T495] ? sysfs_file_kobj+0x1a/0x230 [ 1162.466127][ T495] ? sysfs_file_kobj+0x1a/0x230 [ 1162.466142][ T495] ? sysfs_file_kobj+0x1e4/0x230 [ 1162.466158][ T495] ? sysfs_kf_write+0x166/0x260 [ 1162.466174][ T495] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1162.466190][ T495] kernfs_fop_write_iter+0x375/0x4f0 [ 1162.466206][ T495] vfs_write+0x54b/0xa90 [ 1162.466222][ T495] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1162.466237][ T495] ? __pfx_vfs_write+0x10/0x10 [ 1162.466268][ T495] ? __fget_files+0x2a/0x420 [ 1162.466288][ T495] ksys_write+0x145/0x250 [ 1162.466308][ T495] ? __pfx_ksys_write+0x10/0x10 [ 1162.466321][ T495] ? rcu_is_watching+0x15/0xb0 [ 1162.466335][ T495] ? do_syscall_64+0xbe/0x3b0 [ 1162.466353][ T495] do_syscall_64+0xfa/0x3b0 [ 1162.466368][ T495] ? lockdep_hardirqs_on+0x9c/0x150 [ 1162.466384][ T495] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.466397][ T495] ? clear_bhb_loop+0x60/0xb0 [ 1162.466411][ T495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.466425][ T495] RIP: 0033:0x7f041418e929 [ 1162.466440][ T495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1162.466452][ T495] RSP: 002b:00007f0411ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1162.466467][ T495] RAX: ffffffffffffffda RBX: 00007f04143b5fa0 RCX: 00007f041418e929 [ 1162.466477][ T495] RDX: 0000000000000009 RSI: 0000200000000440 RDI: 0000000000000009 [ 1162.466487][ T495] RBP: 00007f0414210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1162.466496][ T495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1162.466504][ T495] R13: 0000000000000000 R14: 00007f04143b5fa0 R15: 00007ffc3add0418 [ 1162.466518][ T495] [ 1167.457121][ T5929] kworker/1:6 (5929) used greatest stack depth: 13592 bytes left