last executing test programs: 12m24.751786327s ago: executing program 32 (id=521): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r0, &(0x7f0000006480)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000cc0)=""/4099, 0x1003}, {&(0x7f0000000640)=""/125, 0x7d}, {&(0x7f0000000240)=""/221, 0xdd}, {&(0x7f00000064c0)=""/4103, 0x1007}, {&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000c00)=""/35, 0x23}], 0x6}, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) r2 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r3 = dup(r2) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x8001021, r3, 0x0) r5 = memfd_create(&(0x7f0000000780)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\nh<\x99\xaa\xe1\xf3\xb8Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev<\x97\x1a2_\x82\xfa\x15h$\x01\xdd\xe5\xceC\x19\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xb2\xf5\x1e5.\xc1\xa1\x05\x92\x82d\x0e\xf5PMjIt\xc5u~Tw\xbeNg\xb5\xeeP\x9c\xce\xfaS\xa7\xec0\xf4\xd2\xc2+@\x12=\xaa\b\xd2&\x19k6\xc7\xa6+\x04V\xc3\xe1\xd3\fZZ\x1cJo\xa5(& \r\xf1\xa4\xb8\xc23\x16\xc3\xaejA/', 0x0) write$binfmt_elf32(r5, &(0x7f0000000080)=ANY=[], 0x66) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x844) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0x1c}], 0x1}, 0x0) 12m8.413591302s ago: executing program 33 (id=702): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', &(0x7f00000001c0)={0x40000, 0xb, 0x5}, 0x18) mkdirat(r1, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r2, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfff, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r3, &(0x7f0000000000)="ff", 0x58200, 0x2200) 10m33.223342691s ago: executing program 34 (id=1245): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000940)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) r2 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000010, 0x42003) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0305602, &(0x7f00000004c0)={0x1, 0x0, {0x34a, 0x0, 0x2004, 0x8, 0x0, 0x7, 0x0, 0x6}}) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x0, 0x0, {0x4, 0x20039, 0x15, 0x18, 0x201, 0x8e80, 0x0, 0x400041, 0xffffffffffffffff}}) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000008c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f00006c7000/0x2000)=nil, &(0x7f0000ef3000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000bbb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r3, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x9, 0x6a76) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a00)={0x88, 0x0, &(0x7f0000000800)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x60, 0x18, &(0x7f00000005c0)={@fda={0x66646185, 0x5, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/64, 0x4c, 0x8000000002, 0x9}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, &(0x7f0000000480)={0x0, 0xffffffffffffffea, 0x48}}}, @exit_looper], 0x29b, 0x0, &(0x7f0000001240)="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"}) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f00000010c0)={0x0, 0x0, 0x103, 0x1, {0x17, 0x0, 0x2, 0x5}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) 10m25.984034784s ago: executing program 35 (id=1293): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x109001) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x10001, 0x4, 0x2}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x10001, 0x4, 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r1, 0xc01064b3, &(0x7f0000000080)={r2}) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000b40)={0x54, 0xc6, 0x64, {0x7fff, 0x6}, {0x60, 0x2}, @rumble={0x7, 0x2426}}) r3 = getpgrp(0xffffffffffffffff) getpgrp(r3) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000100)=0x4, 0x4) (async) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000100)=0x4, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d0083"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$char_usb(r0, &(0x7f0000000040)='\b', 0x6457b3bedf6fcea5) 8m57.011411919s ago: executing program 36 (id=1728): mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4006, &(0x7f0000000c00)=0x6, 0x6, 0x2) munmap(&(0x7f0000097000/0x2000)=nil, 0x2000) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, &(0x7f00000000c0)=0x1c) mincore(&(0x7f000045f000/0x3000)=nil, 0x3000, &(0x7f0000000580)=""/166) r1 = socket$packet(0x11, 0x3, 0x300) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x39) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0xff, 0x5, 0x9, 0x9, 0x69, 0x6, 0x1, 0x4b, 0x4, 0x8, 0x7, 0xfc, 0x3, 0x6, 0x28, 0xc}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f0302e90302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000100)={@initdev={0xfe, 0x88, '\x00', 0x84, 0x0}, r3}, 0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x3, 0x2, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f0000000000), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x0) 7m58.748848051s ago: executing program 1 (id=2099): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5457, &(0x7f0000000040)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffbfc, 0x808c, 0x3, "54d208457f0b0000000300"}) 7m58.127625924s ago: executing program 37 (id=2099): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TCSETSF(r0, 0x5457, &(0x7f0000000040)={0x0, 0x629, 0xffffffff, 0x0, 0x7, "7a58bea88a00"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f00000001c0)={0x0, 0x101, 0xfffffbfc, 0x808c, 0x3, "54d208457f0b0000000300"}) 6m15.967004463s ago: executing program 38 (id=2594): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r0, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000a80)=""/4089, 0xff9}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000002c80)=""/188, 0xbc}, {&(0x7f0000000680)=""/175, 0xaf}, {&(0x7f0000002ec0)=""/212, 0xdc}, {&(0x7f0000002fc0)=""/189, 0xbd}, {&(0x7f0000003080)=""/4083, 0xc94}, {&(0x7f00000005c0)=""/46, 0x2e}], 0x6}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3fffffffffffe5f, 0x40, 0x0) 4m39.876951753s ago: executing program 39 (id=3325): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000140001002bbd7000ffdbdf2511200d"], 0x24}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020200020c000000000000000000000002000800300000002e86741490f50000020017000000000000000300000000a0030006000000000002000000ac1414ff000000000000000003000500000000000200"/96], 0x60}, 0x1, 0x7}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x20040, 0x33) setsockopt(r0, 0x5, 0x0, &(0x7f0000000080)="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", 0x176) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x1, 0xa0240) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x9c, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5f}}}}, [@NL80211_ATTR_CQM={0x6c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x1c, 0x1, [0x3, 0x4, 0x1, 0x5, 0x699, 0x3]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3f5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x200}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x591}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x2, 0x9, 0x1]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xd}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}, @NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xce1, 0x5]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x12}, 0x6712c94909f18801) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newsa={0x180, 0x10, 0x1, 0xfffffffe, 0x80000100, {{@in6=@private2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x2, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@loopback, {0x100b, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffb}, {0x4, 0x0, 0x1f, 0xfffffffffffffffe}, {0x6, 0xfffffffc, 0x80000}, 0x70bd2a, 0x3506, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_crypt={0x48, 0x2, {{'essiv(cbc(aes),sha256)\x00'}}}]}, 0x180}, 0x1, 0x0, 0x0, 0x8801}, 0x0) symlink(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000280)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_gfeatures={0x3a, 0x4, [{}, {}, {}, {}]}}) 3m42.658909776s ago: executing program 40 (id=3569): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x3000000, 0x10}, 0x40000) 3m40.834607674s ago: executing program 41 (id=3631): mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = socket(0x15, 0x5, 0x0) connect$unix(r0, &(0x7f00000003c0)=@abs={0xa}, 0x6e) getsockname$llc(r0, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) r2 = fsopen(&(0x7f0000000040)='nilfs2\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000000)=0x1700) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x9, @loopback, 0x4}, 0x1c) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @mcast2}}}, 0x32) writev(r3, &(0x7f0000001500)=[{&(0x7f0000000380)='T', 0x34000}], 0x1) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000440)={0xc, [0x36, 0x6aa6, 0xf8, 0x1, 0x0, 0x3, 0x4, 0x81, 0x8, 0xa33, 0x1, 0x4, 0x6, 0x6, 0xe2, 0xf, 0x3, 0x7, 0xd, 0x40, 0xf, 0x7ff, 0x1440, 0xd, 0x5, 0x7, 0x1, 0xc048, 0x3, 0x4, 0x4d8d, 0x9, 0x3, 0xfff7, 0x5, 0x8, 0x58, 0xa3, 0x5, 0x7fff, 0x7, 0xa2c1, 0x7, 0xfff7, 0x7, 0x6, 0xa8a, 0x2], 0x7}) 3m3.351129682s ago: executing program 2 (id=3804): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = memfd_create(&(0x7f0000000900)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\x15\xc3\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000080)) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000028c0)=""/4096) 3m3.147415451s ago: executing program 2 (id=3807): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test/cgroup.procs\x00', 0x14) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x4, "e971ec7b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="200100000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000140)={0x0, 0x10, 0x1, "9a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket(0x2, 0x80805, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000ffa000/0x2000)=nil], 0x0, 0x0, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_STATUS={0x8}]}, 0x1c}}, 0x808) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 3m1.349287988s ago: executing program 2 (id=3812): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) (async) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f0000000140)={0x200006, 0x3, 0x4, 0x6}) 2m59.39557825s ago: executing program 2 (id=3828): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./cifs\x00', 0x1ed) mount(&(0x7f0000000800)=@filename='\\\\::1\\share\x00', &(0x7f0000000300)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='ip=::1,port=20000,user=root,password=root,vers=3.1..\x00') 2m58.997585178s ago: executing program 2 (id=3829): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = geteuid() sendmsg$nl_xfrm(r0, &(0x7f0000001800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000017c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="54120000140000042cbd7000fedbdf257f000001000000000000000000000000e00000010000000000000000000000004e2200004e2200070200c08067000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="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"], 0x1254}, 0x1, 0x0, 0x0, 0x84}, 0x4000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='/dev/loop0,65536k', 0x11) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x80) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r6, 0x402, 0x1a) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r5, 0x40086602, &(0x7f0000000240)) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r4, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) write$cgroup_pid(r3, &(0x7f00000000c0)=r4, 0x12) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0xc03, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x13}) ioctl$UI_DEV_CREATE(r7, 0x5501) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) gettid() ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r9, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8001}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x48c0) r11 = syz_open_dev$evdev(&(0x7f0000000440), 0x72, 0x0) ioctl$EVIOCSFF(r11, 0x40304580, &(0x7f0000000500)={0x52, 0x13, 0x6, {0x0, 0x2}, {0x3, 0x2007}, @rumble={0x4, 0x10}}) syz_create_resource$binfmt(&(0x7f0000000200)='./file0\x00') 2m58.436613763s ago: executing program 2 (id=3831): sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x9, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100019800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2m43.450469318s ago: executing program 0 (id=3897): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x16) write(r0, &(0x7f0000000400)='+192.168.1.1', 0xc) 2m43.373411841s ago: executing program 42 (id=3831): sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x9, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100019800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2m43.084951968s ago: executing program 0 (id=3900): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0xffffffffffffffff) ptrace$pokeuser(0x6, r0, 0x358, 0xff) ptrace$pokeuser(0x6, r0, 0x8000, 0x0) 2m42.818893807s ago: executing program 0 (id=3901): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x604000000000000, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0xca, 0x0, 0x21}, @ptr={0x70742a85, 0x80002, &(0x7f0000000440)=""/210, 0x330, 0x1, 0x31}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 2m42.482553295s ago: executing program 0 (id=3902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x104}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$packet(0x11, 0x2, 0x300) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x104}}, 0x0) (async) 2m42.263006089s ago: executing program 0 (id=3904): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) rmdir(&(0x7f0000000000)='mtd0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0) write(r2, &(0x7f0000000080)='.', 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r4, r5, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = geteuid() mount$fuse(0x0, &(0x7f0000000080)='mtd0/file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1c00}}, {@allow_other}], [{@smackfshat={'smackfshat', 0x3d, 'jffs2\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/kvm\x00'}}, {@euid_lt={'euid<', r6}}, {@smackfshat={'smackfshat', 0x3d, ']#'}}, {@audit}]}}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x600000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 2m38.924475765s ago: executing program 0 (id=3915): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) close(0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0xfcff, 0x200000000000000, 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x40, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x840) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r4, 0xf4240) mkdir(0x0, 0x1ff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) readahead(r5, 0xdf46, 0x0) mount(0x0, &(0x7f00000001c0)='./config\x00', 0x0, 0x0, 0x0) mkdir(0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f00000003c0)='file', 0x4) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket(0x10, 0x3, 0x9) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) socket(0x40000000015, 0x5, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x271e, 0x0, &(0x7f0000000400)) r9 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x1) ioctl$SG_IO(r9, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000400)="5d117e7c21d7", 0x0, 0xfffffff9, 0x0, 0xffffffffffffffff, 0x0}) sendfile(r6, r7, 0x0, 0x7fffffffffffffff) 2m23.700241834s ago: executing program 43 (id=3915): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) close(0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0xfcff, 0x200000000000000, 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x40, r3, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x840) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r4, 0xf4240) mkdir(0x0, 0x1ff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) readahead(r5, 0xdf46, 0x0) mount(0x0, &(0x7f00000001c0)='./config\x00', 0x0, 0x0, 0x0) mkdir(0x0, 0x1ff) write(0xffffffffffffffff, &(0x7f00000003c0)='file', 0x4) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r6 = socket(0x10, 0x3, 0x9) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x400000}) socket(0x40000000015, 0x5, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) getsockopt(r8, 0x200000000114, 0x271e, 0x0, &(0x7f0000000400)) r9 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x1) ioctl$SG_IO(r9, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000400)="5d117e7c21d7", 0x0, 0xfffffff9, 0x0, 0xffffffffffffffff, 0x0}) sendfile(r6, r7, 0x0, 0x7fffffffffffffff) 2m16.483856772s ago: executing program 1 (id=3982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2], 0x44}}, 0x28000) 2m16.372761516s ago: executing program 1 (id=4006): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) epoll_wait(r1, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x6) setns(0xc9, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@remote, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000200)="bad004b087ee36640fc77b2166b91802000066b8b600000066ba000000000f30643e65660f38229c778b360f00952e000fc77200baf80c66b8f0b9bb8266efbafc0ced0fc7b300780f0177bc0f01c9", 0x4f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m12.679521596s ago: executing program 1 (id=4010): setns(0xc9, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r2, @ANYBLOB="0600000021a500000c00010003"], 0x2c}], 0x1}, 0x0) 2m12.679335456s ago: executing program 1 (id=4011): ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @vbi={0x7ff, 0x3, 0x8001, 0x64737664, [0x8, 0xabd], [0x0, 0x8001], 0x1}}, 0x4000}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1a4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r0, 0xff00, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) 2m12.679046159s ago: executing program 1 (id=4012): prlimit64(0x0, 0xd, &(0x7f0000000140)={0x6, 0x86}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r3, 0x1) (async) shutdown(r3, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000580)=0x4, 0x4) sendto$inet(r3, 0x0, 0x0, 0x240000c1, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0x240000c1, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r3, 0x89) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, 0x0) (async) ioctl$TIOCL_SETSEL(r4, 0x541c, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r1, &(0x7f00000000c0)=0x58, 0x5) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="0005040000031c0834df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201101be97956408007050005000102030109022400010295109909042b0d0239b1a50909050102400009b901e7048212080004043f"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) (async) r7 = socket(0xa, 0x2, 0x0) setns(0xc9, 0x0) ioctl$OCFS2_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000040)={0x1, 0x3, 0x7, 0x1b4c, 0x5, 0xa}) (async) ioctl$OCFS2_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000040)={0x1, 0x3, 0x7, 0x1b4c, 0x5, 0xa}) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) getsockopt$sock_buf(r7, 0x1, 0x19, 0x0, &(0x7f0000000280)) sendmsg$netlink(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c010000140001002dbd7000fcdbdf2509"], 0x11c}], 0x1, 0x0, 0x0, 0x20008044}, 0x400c831) syz_open_dev$video4linux(&(0x7f0000000080), 0x4004, 0x410601) (async) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x4004, 0x410601) ioctl$VIDIOC_QUERYMENU(r9, 0xc040564a, &(0x7f0000000180)={0x0, 0x1, @value=0x101b}) 1m59.187471638s ago: executing program 44 (id=4012): prlimit64(0x0, 0xd, &(0x7f0000000140)={0x6, 0x86}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) (async) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r3, 0x1) (async) shutdown(r3, 0x1) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000580)=0x4, 0x4) sendto$inet(r3, 0x0, 0x0, 0x240000c1, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) (async) sendto$inet(r3, 0x0, 0x0, 0x240000c1, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r3, 0x89) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, 0x0) (async) ioctl$TIOCL_SETSEL(r4, 0x541c, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r5, r1, &(0x7f00000000c0)=0x58, 0x5) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="0005040000031c0834df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201101be97956408007050005000102030109022400010295109909042b0d0239b1a50909050102400009b901e7048212080004043f"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) (async) r7 = socket(0xa, 0x2, 0x0) setns(0xc9, 0x0) ioctl$OCFS2_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000040)={0x1, 0x3, 0x7, 0x1b4c, 0x5, 0xa}) (async) ioctl$OCFS2_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000040)={0x1, 0x3, 0x7, 0x1b4c, 0x5, 0xa}) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) getsockopt$sock_buf(r7, 0x1, 0x19, 0x0, &(0x7f0000000280)) sendmsg$netlink(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c010000140001002dbd7000fcdbdf2509"], 0x11c}], 0x1, 0x0, 0x0, 0x20008044}, 0x400c831) syz_open_dev$video4linux(&(0x7f0000000080), 0x4004, 0x410601) (async) r9 = syz_open_dev$video4linux(&(0x7f0000000080), 0x4004, 0x410601) ioctl$VIDIOC_QUERYMENU(r9, 0xc040564a, &(0x7f0000000180)={0x0, 0x1, @value=0x101b}) 1m38.80342464s ago: executing program 5 (id=4212): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x7) wait4(r2, 0x0, 0x0, 0x0) tkill(r2, 0x3) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r1, 0x5, &(0x7f0000000040)={0x0, 0x0, 0xfff, 0xc}) copy_file_range(r0, &(0x7f0000000000)=0x3ff, r0, 0x0, 0x6, 0x0) 1m38.215750577s ago: executing program 5 (id=4215): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x8080, 0x0) (fail_nth: 27) 1m37.774822734s ago: executing program 5 (id=4217): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5000000) 1m37.484669415s ago: executing program 5 (id=4219): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x202a) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x7, 0x2, 0x7, 0x8, 0x0, 0xc, {0x43, 0x3, 0x6, 0x3ff, 0xffc, 0xe000000000000000, 0x0, 0x10, 0x120, 0x2000, 0x10001, 0x0, 0x0, 0x501, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x2, 0xffffffff80200168, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x82042, 0xc0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x542e, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x358, 0xffff8880b840e000) 1m37.221479931s ago: executing program 5 (id=4220): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xb, 0x7fff7ffc}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000400)=0x1, 0xa) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10) sendto(r1, &(0x7f0000000540)="f6", 0xffa6, 0xd63a66976f7dfbe1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001002dbd700000000000e0000001", @ANYBLOB="000000000000000000000000000000000000000032000000ff010000000000000000000000000001"], 0x1a4}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r7 = dup(r6) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x8000, 0x7, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x1b, 0x14, 0x67, 0xfffc, 0x0, 0x5e55b37311de6d89, 0x0, @multicast2, @loopback}}}}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1m37.078121922s ago: executing program 5 (id=4221): syz_usb_connect$uac1(0x3, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000010820556014000010203010902960003010080060904000000010100000a2401000036000201020924060206010a00020c24020103020500ff01600709240604020102000905240501060924030200010404220904010000100200000904010101010200000a24020209000400010409050109000003810b0725"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^=\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 1m36.789803079s ago: executing program 45 (id=4221): syz_usb_connect$uac1(0x3, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000010820556014000010203010902960003010080060904000000010100000a2401000036000201020924060206010a00020c24020103020500ff01600709240604020102000905240501060924030200010404220904010000100200000904010101010200000a24020209000400010409050109000003810b0725"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^=\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 1m25.122552331s ago: executing program 6 (id=4279): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) ioctl$MEMREADOOB64(r3, 0xc0184d16, &(0x7f0000000100)={0x7, 0x0, 0x6, &(0x7f0000000080)="d210ecd7fbfb"}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="b7f228260a00000000000000000000a70000000000f200"/34, 0x22) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4001000041000701fefffffffeffffff017c000008004280040008000c0001800600060088470000180102"], 0x140}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000140), 0x206402, 0x0) r7 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xb) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r7) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012001600054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7", 0x94}, {&(0x7f0000000bc0)="aa581ff83dac4a519b67538bfa897e210c31e1c78d2d8de1498e01601b446808358248cf2d795634b12c4ce81c38765fa04eaab78e0d3122d0db5efb9428a0e5c5badfa1", 0x44}], 0x2}, 0x20000050) 1m24.900883819s ago: executing program 6 (id=4280): setns(0xc9, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r2, @ANYBLOB="0600000021a500000c00010003"], 0x2c}], 0x1}, 0x0) 1m24.796910853s ago: executing program 6 (id=4281): io_setup(0x3, &(0x7f00000003c0)=0x0) io_submit(r0, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)=@secondary) keyctl$get_persistent(0x16, 0x0, r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r3, 0x5, 0x2, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdb}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x100000, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m24.58089326s ago: executing program 6 (id=4282): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0xb, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) write$binfmt_script(r0, &(0x7f0000000100), 0x4) 1m24.056644686s ago: executing program 6 (id=4283): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, 0x0}}, {{0x0, 0xff97, 0x0, 0x0, &(0x7f0000000540)=ANY=[], 0x18}}], 0x2, 0x80) 1m23.91806074s ago: executing program 6 (id=4285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000980)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xab00, 0xfffffffd, 0x40000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r4 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYBLOB='\a'], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@remote, 0x0}, &(0x7f0000000100)=0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x8c, r7, 0x7, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xbd5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004041) futex(0x0, 0x106, 0x0, 0x0, 0x0, 0x15000000) 1m8.803763356s ago: executing program 46 (id=4285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) syz_open_procfs$pagemap(0x0, &(0x7f0000000a00)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000980)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xab00, 0xfffffffd, 0x40000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r4 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYBLOB='\a'], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3c}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000000c0)={@remote, 0x0}, &(0x7f0000000100)=0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x8c, r7, 0x7, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xbd5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x20004041) futex(0x0, 0x106, 0x0, 0x0, 0x0, 0x15000000) 1m2.211288648s ago: executing program 8 (id=4372): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x4000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, 0x0, 0x0) 1m2.004823421s ago: executing program 8 (id=4375): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0b06000000000000000030000000050036000300000008000200", @ANYRES32=r3, @ANYBLOB="0500350000000000050033"], 0x3c}}, 0x0) 1m1.775284098s ago: executing program 8 (id=4378): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x1000000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x10000, 0x1000000, &(0x7f0000000000/0x1000000)=nil, 0x0, r3}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000200)={0x10000, 0x1000000, 0x8}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f0000000340)={0x10000, 0x1000000, 0x9000000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0x1) 1m1.444629677s ago: executing program 8 (id=4380): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x2, 0xdbef, 0xe, 0x8, 0x40}) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000040)={0x0, 0x0, 0x3014, 0x5, 0x8, {0x3, 0x80000001}, 0x1}) (async) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x5) (async) r1 = dup(r0) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x57bd, 0x9}, {0x10, 0xfff}]}) (async) timer_create(0x1, &(0x7f0000000100)={0x0, 0x2b, 0x2}, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f00000001c0)={{r3, r4+10000000}, {0x77359400}}, &(0x7f0000000200)) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000240)={0xa1, 0x46, 0x6}) (async) cachestat(r5, &(0x7f0000000280)={0x3, 0x9}, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f0000000300)={{0x2000, 0xeeee0000, 0x9, 0x3, 0x7c, 0x0, 0x2, 0x7, 0x0, 0x4, 0x3, 0x3}, {0x2000, 0xc000, 0xd, 0x16, 0x0, 0x1, 0x80, 0x5, 0x7f, 0x93, 0x6}, {0xb000, 0x6000, 0xd, 0x4, 0x5, 0x2, 0x8, 0xe, 0x82, 0x2, 0x9, 0x18}, {0xfec00000, 0x100000, 0x1c, 0x3, 0x2, 0x5, 0xce, 0x42, 0x10, 0x1, 0x1, 0xb9}, {0x0, 0x6000, 0x9, 0x1, 0x4, 0x7, 0x75, 0x3, 0x2, 0x3, 0x2, 0x2}, {0x58000, 0x50000, 0xe, 0x6c, 0x20, 0xd5, 0x7, 0x8, 0x10, 0x8, 0x1, 0xeb}, {0x0, 0x10000, 0x0, 0x6, 0x2, 0x5, 0x0, 0x9, 0x3, 0xff, 0x8, 0xa1}, {0x4, 0x70000, 0xe, 0x80, 0x5, 0x31, 0x5, 0x9, 0x0, 0x0, 0x7, 0x8}, {0x25000, 0x101}, {0x4000, 0x7f}, 0x20000001, 0x0, 0xc000, 0x424200, 0x8, 0x1000, 0x100000, [0x7, 0x3, 0x7fff, 0x75]}) (async, rerun: 32) readahead(r1, 0xdcaa, 0xe) (async, rerun: 32) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/pm_wakeup_irq', 0x2, 0x45) (async) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000480)={0x2, 0x3, 0xe3, 0x8, 0x17, "6c119d6dee339c32198e45ce020d979f63c76b"}) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x20010, r6, 0x8ec74000) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f00000004c0)=@arm64={0x80, 0x3, 0x8, '\x00', 0x3}) write$binfmt_aout(r1, &(0x7f0000000500)={{0x108, 0x0, 0x4, 0x112, 0x2b6, 0xe, 0x1b9, 0x81}, "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x920) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r6, 0x4008941a, &(0x7f0000000e40)=0x2) (async, rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000e80)={0xc, 0x0, 0x0}) (rerun: 64) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000ec0)={0x48, 0x5, r8}) (async, rerun: 64) ioctl$KVM_GET_SREGS2(r5, 0x8140aecc, &(0x7f0000000f40)) (rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000001080), 0x101, 0x0) (async) syz_emit_vhci(&(0x7f00000010c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xf7}, "c42227e33a41f18acbaf9aea4ca97b71c4c2e19cfcf91c43c16099fc59c946d18c1c82dede17b3939a0a4cc768c9e7de173c9f2af8cd706911c49d33d7607be26bf082631f4538253181cb50070efa594a092542dd272b98d08cb25b9d8eab948c394b6463ddf70225f968830a2ca0ae5badfbde84c36c84eaae41c364fc39c4c1871dea3c137f23f415e852fc36151211e4ff2df759f17377d28912e4e04f8160ffa66e675f056abfdc729d00ea4f152b257677650acc7192baab420e365a5fd9c254bc8e462fa6bdbf0ab185b196556657c934e7a4ec056f73a7d0455e63e2f976d39ad2ef8144687f29f23e6d1f4c26f75387d5786c"}, 0xfb) ioctl$SOUND_MIXER_INFO(r1, 0x805c4d65, &(0x7f00000011c0)) (async) r9 = epoll_create(0xf) r10 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_SNAP_DESTROY(r9, 0x5000940f, &(0x7f0000001240)={{r10}, "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"}) 1m1.276159446s ago: executing program 8 (id=4381): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async) r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2a003) ioctl$NBD_CLEAR_SOCK(r0, 0xab20) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r1, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m1.012718628s ago: executing program 8 (id=4383): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000140)=0x8001) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r0 = open$dir(&(0x7f0000000000)='./file1\x00', 0x80100, 0x0) name_to_handle_at(r0, &(0x7f0000000040)='mtd0\x00', &(0x7f0000000080)=@ocfs2_parent={0x18, 0x2, {{0x80, 0x9, 0x8705}, {0x1, 0x1000, 0x1dd1}}}, &(0x7f00000000c0), 0x1200) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xc3, 0xb6, 0xf6, 0x40, 0xbfd, 0x112, 0xbb9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0xb, 0x10, 0xb4, "", [{{0x9, 0x4, 0x11, 0x2, 0x2, 0xa1, 0x48, 0xcd, 0x8, [], [{{0x9, 0x5, 0x2, 0x2, 0x7ff, 0x1d, 0x7, 0x5}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x1, 0x9, 0x8}}]}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=@known='trusted.overlay.metacopy\x00') 45.9564167s ago: executing program 47 (id=4383): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000140)=0x8001) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r0 = open$dir(&(0x7f0000000000)='./file1\x00', 0x80100, 0x0) name_to_handle_at(r0, &(0x7f0000000040)='mtd0\x00', &(0x7f0000000080)=@ocfs2_parent={0x18, 0x2, {{0x80, 0x9, 0x8705}, {0x1, 0x1000, 0x1dd1}}}, &(0x7f00000000c0), 0x1200) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xc3, 0xb6, 0xf6, 0x40, 0xbfd, 0x112, 0xbb9e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x4, 0xb, 0x10, 0xb4, "", [{{0x9, 0x4, 0x11, 0x2, 0x2, 0xa1, 0x48, 0xcd, 0x8, [], [{{0x9, 0x5, 0x2, 0x2, 0x7ff, 0x1d, 0x7, 0x5}}, {{0x9, 0x5, 0x5, 0x10, 0x200, 0x1, 0x9, 0x8}}]}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0}) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)=@known='trusted.overlay.metacopy\x00') 7.777208182s ago: executing program 9 (id=4674): syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x4000042, 0x1, 0x2}, 0x10) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r1, &(0x7f0000000240)=[{&(0x7f0000000040)='0', 0x1}, {&(0x7f0000000080)="23c3", 0x2}], 0x2, 0x0, 0x0) (async) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x101001, 0x1) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000900)=0x15) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) (async, rerun: 64) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) (rerun: 64) close_range(r4, 0xffffffffffffffff, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r7, @ANYBLOB="0800c300741300000800c40001"], 0x30}}, 0x0) (async, rerun: 32) r8 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) bind$tipc(r8, &(0x7f0000000200)=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x10) 5.777004639s ago: executing program 9 (id=4683): mkdir(&(0x7f0000000000)='./my_sysfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_sysfs\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_sysfs/bus/pci/devices/0000:00:03.0/resource0\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000500), 0x4, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000b00)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed", @ANYBLOB="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", @ANYRESHEX], 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r4}], 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="20140200000012"], 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_usb_control_io$rtl8150(r2, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0x8, 0x8e, {0x8e, 0x3, "f6ce4bfd5f57855b28ec6a0b954634977e88c761129ba1e3a4f096007eaba175db9ef47d43b69aead38076d2935e0d4f6f5dc72c4ccf71b7c280a9cd11915ba36273616734621270c44095605fb552f046cb9bfa22691cf024f3881b3c1e6a0fa04f7de46a16d8f9568fe35505a32374f459395fc0238a535ed6f5a664d8f56f2dc087bfeef9c93d140f0aca"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000280)={0x20, 0x31, 0x89, "140d369d85f43d33e4bb3d83e660f2e723aa11828695077b8057457935740fdb3ecc5ab49c05c98b6990a6bbb76b55b78120863e5a9cfdb331261074bb6b3c4174b48bd71581ca72fe2ff089e11822f6701acdab6d1c865a738a90495996dc5ae5a3b58b7c8010680e9008ba5a6404d1ba154d1991129c0f3b375d3e9cf908bc82def19ebb65bcc267"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000400), &(0x7f0000000440)={0x40, 0x5, 0x1, "b7"}}) sendmmsg$inet6(r5, &(0x7f0000000080), 0x2, 0x20000c0) shutdown(r5, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x0, 0xa0}, 0x14) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x24, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x1048) 3.577687223s ago: executing program 9 (id=4686): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000100)=0x3, 0x4) recvmmsg(r0, &(0x7f0000001d40), 0x0, 0x40000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={0xe0, r3, 0x1, 0x70bd27, 0x25d7dbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8583}, {0x5, 0x82}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000054) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000ec0), 0xffffffffffffffff) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="c469c15777c2f959ff"], 0x7) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000380)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000002c0)='gfs2meta\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)='ffffffff', 0x8) close(r5) syz_usbip_server_init(0x5) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0xf, 0x2) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000200)={0x23, 0x3, 0x8, 0x1, 0x0, 0x3e8, &(0x7f0000000240)}) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r7, 0x29, 0x1, &(0x7f0000000040), 0x4) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000240)={0x4, 0x1, 0x8, 0x1, 0x0, 0x3e7, &(0x7f00000002c0)}) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000300)={0xa3, 0x0, 0x0, 0x1, 0x4, 0x3e8, &(0x7f0000000340)='\x00\x00\x00\x00'}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x406, r8) sendmmsg$unix(r9, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000100000051"], 0x38}}], 0x1, 0x100) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="290028bd7000ffdbdf25070000000400068008000400467400000180"], 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20004010) 3.179360695s ago: executing program 3 (id=4690): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100f3ff000500050002000000050004"], 0x48}, 0x1, 0x0, 0x0, 0x20020810}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x9, 0x6, 0x201, 0x0, 0x300, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040043}, 0x4000050) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file2\x00', 0x3f, 0x8) 3.055074167s ago: executing program 3 (id=4692): syz_usb_connect(0x3, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100378e87220711f0633c02a010203010902510002030180050904df00004635340f0904190605fbdc42000905801000020606040904df9b52d017dc7309050d000002af028309058b002000010808090508000002081b0609050e"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x45, &(0x7f0000000080)=@string={0x45, 0x3, "b787a8c5467c359813829ff73575d9a407c319159ffc9948d20aa86bcae67d1a09dcfce648a38c3c4710da6637d610f6abc5f7d57704d4af33cff3c94094c86c81d2b6"}}]}) 2.853255511s ago: executing program 9 (id=4693): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000040)) r1 = eventfd(0xf) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000080)={0x2, r1}) connect$nfc_raw(r0, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) write(r2, &(0x7f0000000140)="89f4dfb12929907c3e02d777c80106cf7a45bb303f1ce9a38c74c027be626095a8f7f1649dcf00de2853f47182bf90d87df7f19b33146c599d3bbd890d3615f87e2e7f581d4a7437d9c58dda65fa8502820c9bd3e754419759f4cf", 0x5b) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x3, 0x4, 0x8, "2fa82222d700aaba0a780e5c4d11e0c0ed41d95e6efa6674118185cc1f918c70e89ed149ba6b65ca9032cc49a5cf1a064b7b972e7c0a18e056fb7d3dd47589aa", "38970f36b4b57a268cb8b673546e7e121bb6ead9defd219dca07c3ac2aa51246dfc979abeda4476e2ff0e4b2c714a8a54b5ae5c3bd5a49fe38622b8a28d01a26", "2ab458d6a6ff662601bc1753e745d5b1215fdb512a28a97ec5431f9a9464a8a5", [0x7, 0xf65b]}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f00000002c0)=0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, r3, 0x820, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x4a}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "cfc42e5b1e5260c5b5e25b200a"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x101) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r2, 0x3b72, &(0x7f0000000440)={0x85, 0x8, 0xc, 0x1, "15c4487d533972485c614ff2855578641b2f7d9a2551b92c83484a208f5061949818848dfb6d7b9f4184743f03fdce2dc55815ebe918ac3b047caa7fe1d0a9b65677d3f90d3740bf45f438aaf5596b062f68614d466e9db1f8f6cab6351a65341f23b672b80f7b3c66dc0f7105"}) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x8, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000580)=0x81, &(0x7f00000005c0)=0x1) ioctl$VHOST_VDPA_GET_AS_NUM(r2, 0x8004af7a, &(0x7f0000000600)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000640)=0x7) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000680)={{r2}, "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"}) ioctl$SIOCX25SCAUSEDIAG(r0, 0x89ec, &(0x7f0000001680)={0xc0, 0x2}) r4 = syz_open_dev$dvb_frontend(&(0x7f00000016c0), 0xf, 0x81) r5 = fcntl$getown(r2, 0x9) fcntl$getownex(r4, 0x10, &(0x7f0000001700)={0x0, 0x0}) kcmp(r5, r6, 0x6, 0xffffffffffffffff, r4) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r7 = openat(r2, &(0x7f0000001740)='./file0\x00', 0x40, 0x80) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001780)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000001980)={"0785a4e3d1e029e8e807cc9500112b76", 0x0, 0x0, {0x8000000000000000, 0x7}, {0x8000000000000001, 0x5}, 0xfffffffffffffff8, [0x7fffffff, 0x7f, 0x4, 0x7, 0xfffffffff12b099e, 0x7, 0x7f, 0x800, 0x5, 0x0, 0x4, 0x7, 0x1, 0x3, 0x80000000, 0x8000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000001a80)={"d92617826faeab4c6bba7bb13782168d", r8, r9, {0x0, 0xfe1}, {0x7}, 0x2d77, [0xf, 0x2, 0x7, 0x80000001, 0x7fe, 0x5, 0x1, 0xfffffffffffffffe, 0xffffffff80000001, 0x6, 0x7, 0x22730eb4, 0x2, 0x40, 0x10, 0x6]}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000001b80)={0x0, 0xf001, 0x5}, &(0x7f0000001bc0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000001c00)={0x5, 0x2, 0x7, 0x3, r10}, 0x10) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.673622691s ago: executing program 9 (id=4695): openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) socket$igmp(0x2, 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0xa2c65) pselect6(0x40, &(0x7f0000000080)={0x3, 0x0, 0x7fffffff, 0xfffffffffffffffd, 0x2, 0x10000000, 0x3, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x26}, 0x0, 0x0) 2.252807791s ago: executing program 7 (id=4697): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x241, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.134335579s ago: executing program 7 (id=4698): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000e00)={0x28, 0x7, r1, 0x0, 0x0, 0x0, 0x7}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) 1.980421297s ago: executing program 7 (id=4699): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000021000100010000000080e6ff090000000000000101620000"], 0x1c}], 0x1}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x10001, 0x7, {r1}, {}, 0x4, 0x1}) ptrace(0x18, r2) ptrace$pokeuser(0x6, r1, 0x358, 0xffff8880b840e000) tkill(0x0, 0x5) 1.744722958s ago: executing program 7 (id=4700): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) setxattr$incfs_metadata(&(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), &(0x7f0000000280)="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", 0xfbd, 0x200000000000000) 1.707509227s ago: executing program 9 (id=4701): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xaa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x2000, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00221800"], 0x0}, 0x0) r3 = socket$pptp(0x18, 0x1, 0x2) sendto(r3, &(0x7f0000000440)="65a291565701637b62eb366af1c10224005df3d0f2960d893db513a13ac31e8b0850a95a5b1fd523c560e3821ccda8e6c57af97459fb04f084055d76bef4aedde0482cbc9d889cd06e684cd2d23d7527fe378d09f1d375b613af36c936809332f84232c775d22ccb7d6110c973148f4f7b517b5d47be09c852e9269a6c8dfd5490162b7ed90f0e08d32035cd99f667f86514720d5565787b05328f089973", 0x9e, 0x811, &(0x7f0000000500)=@xdp={0x2c, 0xe, 0x0, 0x28}, 0x80) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r1, 0x5, 0xfd, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000014) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x80901) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r4, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x108, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0xd4, 0x84, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0xa}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x8}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8, 0x2, 0x1}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x1c, 0x6, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x8, 0x0, 0x200}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x5}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x9}]}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x2c, 0x6, 0x0, 0x1, [@NL80211_BAND_LC={0x8, 0x5, 0x9f97}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7ff}, @NL80211_BAND_6GHZ={0x8, 0x3, 0xfffffffd}, @NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_5GHZ={0x8, 0x1, 0x7f}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x34, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x3f6}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x2}, @NL80211_BAND_60GHZ={0x8, 0x2, 0x7}, @NL80211_BAND_60GHZ={0x8}, @NL80211_BAND_LC={0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x52000000}]}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ibss_ssid}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa, 0x5, @random="b1c184ea1ab0"}, @NL80211_SCHED_SCAN_MATCH_ATTR_RSSI={0x8}]}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x2}]}, 0x108}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r7, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004800}, 0x8800) 1.601324822s ago: executing program 4 (id=4702): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="042fff01ffffffffffff0b7ff49a941b7a07178b04"], 0x102) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc0100001900010025bd700001000000000000000100000000000000000000010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000101000000000000000000000000000000900000000000001000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000044010500ac1414aa00000000000000000000000000000000330000000000000064010100000000000000000000000000ff340000000000000000000026e500003f2000007f000001000000000000000000000000000020003c00000002000000fe8000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000001000000006c"], 0x1fc}, 0x1, 0x0, 0x0, 0x20040081}, 0x4000) 1.508761959s ago: executing program 3 (id=4703): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/midi1_num_groups\x00', 0x1, 0x0) r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000a40)=0x0) syz_io_uring_submit$UBLK(r3, r4, r5, &(0x7f0000000440)=@ublk_get_queue_affinity_sqe={0x2e, 0x0, 0x0, r1, 0x80207501, 0x0, 0x0, 0x0, 0x1, 0xb, 0x0, 0x0, '\x00', {0x0, 0xffff, 0x0, 0x0}}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000180)=@new_dev={0x4, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x168}}}, 0x0) 1.508446159s ago: executing program 7 (id=4704): mkdir(&(0x7f0000000000)='./trace\x00', 0x16c) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)='1', 0x1) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=ANY=[@ANYBLOB="80000000ffffffffffffeff06e1648ae40868586272365ffffffffffff50503b50505000000000000000ad4900640001000002020202"], 0x5d) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './trace/file0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x2000000}, 0x4004800) 1.39139959s ago: executing program 4 (id=4705): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x103, 0x0) ioctl$PIO_CMAP(r0, 0x4b71, &(0x7f0000000040)={0x2a20c21f, 0x6, 0x7ff, 0xc, 0x9, 0xb99e}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x140a, 0x1, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000011}, 0x4040081) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x140a, 0x1, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000011}, 0x4040081) ioctl$TIOCCBRK(r0, 0x5428) write(r1, &(0x7f0000000180)="d8a08a9c3ce5099d6fb1a912e4e71fd31f45ce860cd99b8a2681acb7677e10f6b62cb455bd", 0x25) syz_socket_connect_nvme_tcp() (async) r2 = syz_socket_connect_nvme_tcp() recvfrom$inet_nvme(r2, &(0x7f00000001c0)=""/27, 0x1b, 0x2020, &(0x7f0000000200)=@pptp={0x18, 0x2, {0xc, @broadcast}}, 0x80) fcntl$addseals(r0, 0x409, 0x6) (async) fcntl$addseals(r0, 0x409, 0x6) r3 = syz_open_dev$usbfs(&(0x7f0000000280), 0xd66, 0x80081) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f00000002c0)={0x4cb1f8cb, "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"}) listxattr(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)=""/250, 0xfa) (async) listxattr(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000500)=""/250, 0xfa) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) write$9p(r4, &(0x7f0000000740)="fa21d2a9ab51e7b228cfdf58d370467f91b1005f78b76cd2f87e657c44d553c813bec3544e464917b44c69840c82c27db807ed8c97e7f47f763978125fe0f8d0277a2b4d5fb297e42779a4b2961d2b07ee4ffba66ac5f7c7567f5c6d63e96d06740b199046a5fc5eef5b25a418a2704874a53441bb0f1687da11f5fd794284fc97743faafdb270f67e1adc", 0x8b) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={@rand_addr=0x64010100, 0x0, 0x0, 0x40, 0x0, [{@multicast1}, {}, {@remote}, {@multicast2}]}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={@rand_addr=0x64010100, 0x0, 0x0, 0x40, 0x0, [{@multicast1}, {}, {@remote}, {@multicast2}]}}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000008c0)={r4, 0x1, 0xfffffffffffff000}) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000900)='./binderfs/binder-control\x00', 0x4, 0x0) write(r5, &(0x7f0000000940)="fa473674152c1239348916c0a3cc7f0595faeeb844e739ddab8156363894df", 0x1f) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000980)={0x0, 0x9}, &(0x7f00000009c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000a00)={r6, 0x42, "8d3d340cceb85248927e4c7d9081efedaba9d9cb185e5539393d2a90d89a84c95934eba5adf9a8bb61b75116a56ddcebf00311c2bfbde3f1bb6a364030f8c3d04615"}, &(0x7f0000000a80)=0x4a) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44840, 0xc8) splice(r5, &(0x7f0000000ac0)=0x2, r7, &(0x7f0000000c00)=0x4, 0x725e, 0x4) (async) splice(r5, &(0x7f0000000ac0)=0x2, r7, &(0x7f0000000c00)=0x4, 0x725e, 0x4) truncate(&(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) recvfrom(r4, &(0x7f0000000d40), 0x0, 0x2003, &(0x7f0000000d80)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @remote}, 0x3, 0x3, 0x1, 0x4}}, 0x80) (async) recvfrom(r4, &(0x7f0000000d40), 0x0, 0x2003, &(0x7f0000000d80)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @remote}, 0x3, 0x3, 0x1, 0x4}}, 0x80) r8 = landlock_create_ruleset(&(0x7f00000011c0)={0x6e5d085ebae86a6a, 0x0, 0x3, 0x18010, 0x3}, 0x30, 0x0) fcntl$getown(r1, 0x9) (async) r9 = fcntl$getown(r1, 0x9) r10 = getgid() read$FUSE(r4, &(0x7f0000001200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmsg$unix(r4, &(0x7f0000003f80)={&(0x7f0000000e00)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000e80)="c89e53e87b56b8cc2eaa9f9fc5bdb8c295468054a48db32cc2df0d52c82f2da062fd9a7931744c70dac35ef1286b7d19bdcef1a610220e3e", 0x38}, {&(0x7f0000000ec0)="acfdfe64714ef601aace05630ef2e86db380cac9ac4a7ad8b0eaad7aa90a23b13fe69f94a7c93aa290a855385a8b3c7c8ebfd3180141dbfb67cea47624d3afcaba29ef3a1f59fb1bd82f251df24e0911594800120ec1ebc9a95030c5448dc5797d355222ed88185f433e907621da23c22608cfbdf8486969fa4ffcc991fffac47fa06dd41042f140941fb66e9d634fd1c5b61480296909c6122a918e74ce", 0x9e}, {&(0x7f0000000f80)="6cf64acbe73577f5c66e1f464f11038bd989ea3ca2ed25fedbd9f1945bf3e49cc02a9d29784c8c00283ab6fd08e49e77d15cb4ec87e45372e2c28d2ce25bbdd9d44fd4786562c685e99f7c6c70a919ebfe498664d9f6dd8acebd7f02f03889fdb6eb9326c59f9d85a73f98a4749729c7ee3796a2e4665546ed748cc1f33d9406b3a72564fc1ae9db91992187eb9860e54bb457e6f05bb8ee0d39d6274836e65659d8326d3b7b1925f7a63efbed2de3b660d7e8e2dabbb36cefd493fadd3e0c231b08bef5007d5600e980288815d4daf196b1cdfcde81dd8d02f4691c803ddba7ee0e692f", 0xe4}, {&(0x7f0000001080)="b7f2166214734d1d3fafa53689851ec17656eb60600d4c505d319094b1e4fcd21bc67921d9abc77cc0921ad46578ba7d89500c48b149b3a63aa057a73966a07b9e37b3797063a79b24975612618aa438458a1cd15d73c5478378a5a5d22a25c61f6e660e416e8491e7f0f63419628a", 0x6f}, {&(0x7f0000001100)="e7ae1d47f1e973c1bc78037b275fc1036429234acda241fac331764c0f", 0x1d}], 0x5, &(0x7f0000003e40)=[@rights={{0x1c, 0x1, 0x1, [r8, r4, r4]}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, r10}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r11}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x110, 0x800}, 0x40) 1.309459908s ago: executing program 3 (id=4706): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r0, &(0x7f0000000000)="ff", 0x582f1, 0x582f1) 924.911621ms ago: executing program 4 (id=4707): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000e00)={0x28, 0x7, r1, 0x0, 0x0, 0x0, 0x7}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) 924.615084ms ago: executing program 3 (id=4708): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000000280)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="14377874c329dd4bc5bbcef850cc4101790d9a99bb2f4257c1", 0x19}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @multicast1, @rand_addr=0x64010100}}}], 0x20}}], 0x1, 0x40050) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f0000000140)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0006dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf943de3ffe465f30273af419f811b36110bf11feed3ddfdc1cbd24bc4ef03d9b53b34edf54dcc5b3aeb2bbf25e2c7fbdaa08f516558cb2910807", 0x7c, 0x24040081, &(0x7f0000000040)={0xc9, 0xf6, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000000)={0x2b, 0x1b, 0x4, 0xe, 0xa, 0x5a, 0x2, 0x99}) 801.711087ms ago: executing program 4 (id=4709): syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x101300) (fail_nth: 42) 721.646314ms ago: executing program 7 (id=4710): r0 = dup(0xffffffffffffffff) syz_clone3(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0, 0x15, {r0}}, 0x58) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000400)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket(0x1e, 0x4, 0x0) syz_usb_connect(0x0, 0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100128ba0d106d047c087cb00102030109021a0001400990000904ee09000e0100e00224020102"], 0x0) 635.558286ms ago: executing program 3 (id=4711): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x0, @private1, 0x80000000}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000000)="a2", 0x1}], 0x1, &(0x7f0000000280)=[@dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x20, 0x8080}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r2, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r4, 0x4) listen(r4, 0x50) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) madvise(&(0x7f0000305000/0x4000)=nil, 0x4000, 0x9) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0b06000000000000000030000000050036000000000008000200", @ANYRES16=r6], 0x3c}}, 0x8000) 203.175385ms ago: executing program 4 (id=4712): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x70000000, 0x0, 0x10}, 0x40000) 0s ago: executing program 4 (id=4713): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002880)={0x0, 0x0, "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", "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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) move_pages(0x0, 0x3f, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) kernel console output (not intermixed with test programs): F.003A: unknown main item tag 0x0 [ 830.988831][T12854] plantronics 0003:047F:FFFF.003A: unknown main item tag 0x0 [ 831.050560][T12854] plantronics 0003:047F:FFFF.003A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 831.076106][T21182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 831.076370][T21182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 831.118470][T21189] udevd[21189]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 831.227361][T12854] usb 9-1: USB disconnect, device number 44 [ 831.259054][ T5776] usb 4-1: USB disconnect, device number 7 [ 831.838697][ T30] audit: type=1800 audit(1787968448.670:473): pid=21196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4312" name="nl80211" dev="sda1" ino=2041 res=0 errno=0 [ 831.878774][T21198] loop7: detected capacity change from 0 to 16384 [ 831.919026][ T5692] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 832.069054][ T5692] usb 8-1: Using ep0 maxpacket: 8 [ 832.077743][ T5692] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 832.091782][ T5692] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 832.091822][ T5692] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 832.091843][ T5692] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 832.091859][ T5692] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 832.091873][ T5692] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 832.091898][ T5692] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.260442][ T2535] block nbd0: Possible stuck request ffff888027940000: control (read@0,1024B). Runtime 570 seconds [ 832.260496][ T2535] block nbd0: Possible stuck request ffff8880279401c0: control (read@1024,1024B). Runtime 570 seconds [ 832.260522][ T2535] block nbd0: Possible stuck request ffff888027940380: control (read@2048,1024B). Runtime 570 seconds [ 832.260538][ T2535] block nbd0: Possible stuck request ffff888027940540: control (read@3072,1024B). Runtime 570 seconds [ 832.354727][T21199] loop7: detected capacity change from 16384 to 0 [ 832.373410][ C0] I/O error, dev loop7, sector 13568 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 832.393994][ T5692] usb 8-1: usb_control_msg returned -32 [ 832.394035][ T5692] usbtmc 8-1:16.0: can't read capabilities [ 833.380889][T21224] netlink: 'syz.8.4319': attribute type 1 has an invalid length. [ 833.405675][T21224] syz_tun: entered allmulticast mode [ 833.548850][ T5775] usb 8-1: USB disconnect, device number 40 [ 833.592162][T21226] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 833.604287][T21226] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 833.604316][T21226] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 833.604328][T21226] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 833.604560][T21226] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 833.604571][T21226] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 833.604583][T21226] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 833.701147][T21226] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 833.712713][T21226] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 833.719792][ T5692] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 833.848994][ T5692] usb 4-1: device descriptor read/64, error -71 [ 834.089379][ T5692] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 834.229728][ T5692] usb 4-1: device descriptor read/64, error -71 [ 834.339806][ T5692] usb usb4-port1: attempt power cycle [ 834.503649][T21234] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 834.679159][ T5692] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 834.700237][ T5692] usb 4-1: device descriptor read/8, error -71 [ 834.931284][T21246] overlayfs: failed lookup in lower (newroot/137, name='file0', err=-40): overlapping layers [ 834.942529][ T5692] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 834.960614][ T5692] usb 4-1: device descriptor read/8, error -71 [ 834.997956][ T30] audit: type=1800 audit(1787968451.830:474): pid=21247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4327" name="syz0" dev="overlay" ino=762 res=0 errno=0 [ 835.070158][ T5692] usb usb4-port1: unable to enumerate USB device [ 836.649480][ T5775] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 836.694054][T21263] syzkaller1: entered promiscuous mode [ 836.694080][T21263] syzkaller1: entered allmulticast mode [ 836.810409][ T5775] usb 8-1: Using ep0 maxpacket: 8 [ 836.815874][ T5775] usb 8-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 836.832551][ T5775] usb 8-1: config 0 has an invalid interface number: 186 but max is 0 [ 836.832575][ T5775] usb 8-1: config 0 has no interface number 0 [ 836.832599][ T5775] usb 8-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 836.832613][ T5775] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 836.832636][ T5775] usb 8-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 836.832652][ T5775] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 255, changing to 11 [ 836.832668][ T5775] usb 8-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid maxpacket 59381, setting to 1024 [ 836.832684][ T5775] usb 8-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 836.885675][ T5775] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.885690][ T5775] usb 8-1: Product: syz [ 836.885698][ T5775] usb 8-1: Manufacturer: syz [ 836.885706][ T5775] usb 8-1: SerialNumber: syz [ 836.887012][ T5692] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 836.927089][ T5775] usb 8-1: config 0 descriptor?? [ 836.929199][T21259] raw-gadget.4 gadget.7: fail, usb_ep_enable returned -22 [ 837.120156][ T5692] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 837.130845][ T5692] usb 4-1: config index 0 descriptor too short (asked for 9, got 0) [ 837.130877][ T5692] usb 4-1: can't read configurations, error -22 [ 837.150906][ T5775] iowarrior 8-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 837.249076][ T2239] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 837.269039][ T5692] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 837.363686][ T5775] usb 8-1: USB disconnect, device number 41 [ 837.399115][ T2239] usb 9-1: Using ep0 maxpacket: 8 [ 837.405130][ T2239] usb 9-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 837.418665][ T2239] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.418688][ T2239] usb 9-1: Product: syz [ 837.418705][ T2239] usb 9-1: Manufacturer: syz [ 837.418715][ T2239] usb 9-1: SerialNumber: syz [ 837.433016][ T5692] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 837.456566][ T5692] usb 4-1: config index 0 descriptor too short (asked for 9, got 0) [ 837.456603][ T5692] usb 4-1: can't read configurations, error -22 [ 837.465029][ T5692] usb usb4-port1: attempt power cycle [ 837.484464][ T2239] usb 9-1: config 0 descriptor?? [ 837.498227][ T2239] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 837.810339][ T5692] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 837.830430][ T5692] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 837.841051][ T5692] usb 4-1: config index 0 descriptor too short (asked for 9, got 0) [ 837.841081][ T5692] usb 4-1: can't read configurations, error -22 [ 837.979357][ T5692] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 838.010106][ T5692] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 838.028404][ T5692] usb 4-1: config index 0 descriptor too short (asked for 9, got 0) [ 838.028435][ T5692] usb 4-1: can't read configurations, error -22 [ 838.028596][ T5692] usb usb4-port1: unable to enumerate USB device [ 838.288813][T14726] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 838.303919][T14726] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 838.312167][T14726] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 838.322243][T14726] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 838.333288][ T2239] gspca_sonixj: reg_r err -32 [ 838.333352][ T2239] sonixj 9-1:0.0: probe with driver sonixj failed with error -32 [ 838.350380][T14726] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 838.485400][T21271] lo speed is unknown, defaulting to 1000 [ 838.495439][T21271] dummy0 speed is unknown, defaulting to 1000 [ 838.736843][T21288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.737127][T21288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.976728][T21271] bridge0: port 1(bridge_slave_0) entered blocking state [ 838.986989][T21271] bridge0: port 1(bridge_slave_0) entered disabled state [ 838.994660][T21271] bridge_slave_0: entered allmulticast mode [ 839.005922][T21271] bridge_slave_0: entered promiscuous mode [ 839.017464][T21271] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.025320][T21271] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.032876][T21271] bridge_slave_1: entered allmulticast mode [ 839.041064][T21271] bridge_slave_1: entered promiscuous mode [ 839.124596][T21271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 839.143812][T21271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 839.222326][T21271] team0: Port device team_slave_0 added [ 839.236001][T21271] team0: Port device team_slave_1 added [ 839.313255][T21271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.322124][T21271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.348805][T21271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.362304][T21271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.364553][T21271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.364579][T21271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.522991][T21271] hsr_slave_0: entered promiscuous mode [ 839.532436][T21271] hsr_slave_1: entered promiscuous mode [ 839.539515][T21271] debugfs: 'hsr0' already exists in 'hsr' [ 839.546386][T21271] Cannot create hsr debugfs directory [ 839.689077][ T5776] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 839.843439][ T5776] usb 8-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 839.854765][ T5776] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 839.854791][ T5776] usb 8-1: Product: syz [ 839.854806][ T5776] usb 8-1: SerialNumber: syz [ 839.881139][ T5776] usb 8-1: config 0 descriptor?? [ 839.889563][ T2239] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 840.039726][ T2239] usb 4-1: Using ep0 maxpacket: 16 [ 840.045337][ T2239] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 840.055657][ T2239] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 840.055680][ T2239] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 840.075841][ T2239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 840.075856][ T2239] usb 4-1: SerialNumber: syz [ 840.107710][ T2239] usb 4-1: 0:2 : does not exist [ 840.122351][ T5776] hso 8-1:0.0: Failed to find BULK eps [ 840.158712][ T5776] usb 9-1: USB disconnect, device number 45 [ 840.322327][T21304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.322612][T21304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.419436][T14726] Bluetooth: hci7: command tx timeout [ 840.429223][ T5776] usb 8-1: USB disconnect, device number 42 [ 840.446685][ T2239] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 840.481084][ T2239] usb 4-1: 5:0: failed to get current value for ch 2 (-22) [ 840.516328][ T2239] usb 4-1: 5:0: failed to get current value for ch 3 (-22) [ 840.542935][ T2239] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 840.592947][ T2239] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 840.592979][ T2239] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 840.592999][ T2239] usb 4-1: [5] FU [Feature 5 Playback Volume] ch = 3, val = 0/1/1 [ 840.628580][ T2239] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 840.628608][ T2239] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 840.628628][ T2239] usb 4-1: [5] FU [Feature 5 Playback Volume] ch = 1, val = 0/1/1 [ 840.660632][ T2239] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 840.679738][ T2239] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 840.702179][ T2239] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 840.722017][ T2239] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 840.738035][ T2239] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 840.752670][ T2239] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 840.780683][ T2239] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 840.799215][ T2239] usb 4-1: 5:0: failed to get current value for ch 2 (-22) [ 840.814516][ T2239] usb 4-1: 5:0: failed to get current value for ch 3 (-22) [ 840.845071][ T2239] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 840.861265][ T2239] usb 4-1: 5:0: cannot get min/max values for control 8 (id 5) [ 840.875923][ T2239] usb 4-1: 5:0: cannot get min/max values for control 8 (id 5) [ 840.933830][ T2239] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 840.955716][ T2239] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 841.067317][ T2239] usb 4-1: USB disconnect, device number 16 [ 841.144700][ T5610] udevd[5610]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 841.227215][T21333] netlink: 124 bytes leftover after parsing attributes in process `syz.7.4348'. [ 841.403273][T21340] siw: device registration error -23 [ 842.061979][T21365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.062243][T21365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.095291][T21365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.095545][T21365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.250660][T12854] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 842.279723][ T2239] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 842.387432][T21271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 842.400762][T21271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 842.409007][T12854] usb 8-1: Using ep0 maxpacket: 8 [ 842.414399][T12854] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 842.427471][T21271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 842.435748][T12854] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 842.435791][T12854] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 842.435807][T12854] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 842.435821][T12854] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 842.435835][T12854] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 842.435849][T12854] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 842.435874][T12854] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.446007][ T2239] usb 9-1: Using ep0 maxpacket: 32 [ 842.467236][ T2239] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 842.505685][ T4930] Bluetooth: hci7: command tx timeout [ 842.514683][ T2239] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 842.514698][ T2239] usb 9-1: config 0 has no interface number 0 [ 842.562675][T12854] usbtmc 8-1:16.0: probe with driver usbtmc failed with error -22 [ 842.571760][ T2239] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.571783][ T2239] usb 9-1: Product: syz [ 842.571801][ T2239] usb 9-1: Manufacturer: syz [ 842.571810][ T2239] usb 9-1: SerialNumber: syz [ 842.608405][T21271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 842.618341][ T2239] usb 9-1: config 0 descriptor?? [ 842.631529][T21271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 842.640140][ T2239] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 842.657590][ T2239] usb 9-1: selecting invalid altsetting 1 [ 842.657612][ T2239] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 842.679898][T21271] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 842.687541][T21271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 842.702528][ T2239] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 842.702821][ T2239] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 842.702849][ T2239] usb 9-1: media controller created [ 842.754952][T21271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 842.783661][ T2239] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 842.795692][T21362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 842.804452][T21362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 842.844457][ T5775] usb 8-1: USB disconnect, device number 43 [ 842.862954][T21377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4361'. [ 842.894138][ T2239] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 842.894180][ T2239] zl10353_read_register: readreg error (reg=127, ret==-71) [ 842.901475][ T2239] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 843.014190][ T2239] usb 9-1: USB disconnect, device number 46 [ 843.070843][T21271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.115045][T21271] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.133870][ T6635] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.133937][ T6635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.169813][ T6635] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.169880][ T6635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.343224][T21271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.484249][T21271] veth0_vlan: entered promiscuous mode [ 843.536793][T21271] veth1_vlan: entered promiscuous mode [ 843.594711][T21400] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4363'. [ 843.627753][T21271] veth0_macvtap: entered promiscuous mode [ 843.635555][T15651] IPVS: starting estimator thread 0... [ 843.657385][T21271] veth1_macvtap: entered promiscuous mode [ 843.715306][T21271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 843.731355][T21404] IPVS: using max 54 ests per chain, 129600 per kthread [ 843.760039][T21271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 843.811681][T15651] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.811879][T15651] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.821727][T15651] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 843.921170][ T6638] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.082402][ T6635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.082426][ T6635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.114601][T21411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 844.114744][T21411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 844.114757][T21411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 844.114768][T21411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 844.115008][T21411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 844.115020][T21411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 844.115032][T21411] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 844.253934][T21411] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 844.273452][T21411] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 844.304637][ T6635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 844.304661][ T6635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 844.579221][T14726] Bluetooth: hci7: command tx timeout [ 844.835618][T21432] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4374'. [ 844.916887][T21434] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4375'. [ 845.032838][T21438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.791999][T21420] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.860751][ T9] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 846.023468][ T9] usb 8-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 846.023506][ T9] usb 8-1: too many configurations: 25, using maximum allowed: 8 [ 846.052125][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.062213][ T9] usb 8-1: config 0 descriptor?? [ 846.078530][ T9] pwc: Creative Labs Webcam Pro Ex detected. [ 846.086526][ T9] pwc: Warning: more than 1 configuration available. [ 846.254226][T21420] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.607953][T21420] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.660570][T14726] Bluetooth: hci7: command tx timeout [ 846.809744][ T9] pwc: send_video_command error -71 [ 846.809767][ T9] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 846.809838][ T9] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 846.836912][ T9] usb 8-1: USB disconnect, device number 44 [ 847.014751][T21420] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.349123][T21467] netlink: 'syz.4.4387': attribute type 3 has an invalid length. [ 847.349147][T21467] netlink: 'syz.4.4387': attribute type 1 has an invalid length. [ 847.349164][T21467] netlink: 610 bytes leftover after parsing attributes in process `syz.4.4387'. [ 847.860525][T10106] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.949398][T10106] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.981536][T21479] FAULT_INJECTION: forcing a failure. [ 847.981536][T21479] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 847.981578][T21479] CPU: 0 UID: 0 PID: 21479 Comm: syz.4.4391 Tainted: G L syzkaller #0 PREEMPT(full) [ 847.981594][T21479] Tainted: [L]=SOFTLOCKUP [ 847.981598][T21479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 847.981605][T21479] Call Trace: [ 847.981610][T21479] [ 847.981617][T21479] dump_stack_lvl+0xe8/0x150 [ 847.981636][T21479] should_fail_ex+0x3eb/0x540 [ 847.981657][T21479] prepare_alloc_pages+0x223/0x600 [ 847.981677][T21479] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 847.981695][T21479] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 847.981713][T21479] ? __pfx_policy_nodemask+0x10/0x10 [ 847.981730][T21479] alloc_pages_mpol+0x21e/0x390 [ 847.981744][T21479] alloc_pages_noprof+0xb1/0x2b0 [ 847.981757][T21479] get_zeroed_page_noprof+0x1a/0x90 [ 847.981773][T21479] mon_bin_open+0x236/0x530 [ 847.981791][T21479] chrdev_open+0x4d9/0x600 [ 847.981809][T21479] ? __pfx_chrdev_open+0x10/0x10 [ 847.981826][T21479] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 847.981846][T21479] ? __pfx_chrdev_open+0x10/0x10 [ 847.981862][T21479] do_dentry_open+0x816/0x1380 [ 847.981878][T21479] vfs_open+0x3b/0x340 [ 847.981888][T21479] ? path_openat+0x1428/0x1d60 [ 847.981904][T21479] path_openat+0x1443/0x1d60 [ 847.981928][T21479] do_file_open+0x23e/0x4a0 [ 847.981945][T21479] ? __pfx_do_file_open+0x10/0x10 [ 847.981970][T21479] ? _raw_spin_unlock+0x28/0x50 [ 847.981981][T21479] ? alloc_fd+0x651/0x6c0 [ 847.981999][T21479] do_sys_openat2+0x115/0x200 [ 847.982011][T21479] ? __pfx_do_sys_openat2+0x10/0x10 [ 847.982023][T21479] ? exc_page_fault+0x6a/0xc0 [ 847.982037][T21479] ? do_user_addr_fault+0xc4c/0x1340 [ 847.982054][T21479] __x64_sys_openat+0x138/0x170 [ 847.982068][T21479] do_syscall_64+0x166/0x520 [ 847.982080][T21479] ? trace_irq_disable+0x3b/0x140 [ 847.982095][T21479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.982106][T21479] ? clear_bhb_loop+0x70/0xc0 [ 847.982119][T21479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.982129][T21479] RIP: 0033:0x7fcde8b5e98e [ 847.982141][T21479] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 847.982151][T21479] RSP: 002b:00007fcde9a99b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 847.982163][T21479] RAX: ffffffffffffffda RBX: 00007fcde9a9a6c0 RCX: 00007fcde8b5e98e [ 847.982171][T21479] RDX: 0000000000101300 RSI: 00007fcde9a99c00 RDI: ffffffffffffff9c [ 847.982179][T21479] RBP: 00007fcde9a99c00 R08: 0000000000000000 R09: 0000000000000000 [ 847.982186][T21479] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 847.982193][T21479] R13: 00007fcde8e26038 R14: 00007fcde8e25fa0 R15: 00007ffee8e291e8 [ 847.982209][T21479] [ 848.469654][ T6638] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.469694][ T6638] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.668088][T21490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 848.668223][T21490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 848.668243][T21490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 848.668255][T21490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 848.668493][T21490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 848.668505][T21490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 848.668517][T21490] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 848.797899][T21490] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 848.813525][T21490] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 849.258526][T21500] loop7: detected capacity change from 0 to 16384 [ 849.265554][ T5776] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 849.412998][ T5776] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 849.426171][ T5776] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 849.426196][ T5776] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 849.426215][ T5776] usb 5-1: config 8 has no interface number 0 [ 849.426239][ T5776] usb 5-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 849.426255][ T5776] usb 5-1: config 8 interface 177 has no altsetting 0 [ 849.426276][ T5776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.514158][ T5776] ir_toy 5-1:8.177: required endpoints not found [ 849.830965][T21501] loop7: detected capacity change from 16384 to 0 [ 849.840770][ C0] I/O error, dev loop7, sector 14344 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 849.912381][T21494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.924893][T21494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.021521][T12854] usb 5-1: USB disconnect, device number 10 [ 850.255779][T21518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4403'. [ 850.306352][T21518] netlink: 'syz.3.4403': attribute type 10 has an invalid length. [ 850.689697][ T5776] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 850.798261][T21529] netlink: 'syz.4.4407': attribute type 11 has an invalid length. [ 850.819959][ T5776] usb 4-1: device descriptor read/64, error -71 [ 850.905339][T21531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 851.060143][ T5776] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 851.078374][T21534] misc userio: No port type given on /dev/userio [ 851.104016][T21535] veth0_macvtap: left promiscuous mode [ 851.189295][ T5776] usb 4-1: device descriptor read/64, error -71 [ 851.299796][ T5776] usb usb4-port1: attempt power cycle [ 851.639750][ T5776] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 851.659550][ T5776] usb 4-1: device descriptor read/8, error -71 [ 851.679315][T12854] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 851.829501][T12854] usb 8-1: Using ep0 maxpacket: 16 [ 851.835190][T12854] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 851.845797][T12854] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 851.845832][T12854] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 851.880241][T12854] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.880267][T12854] usb 8-1: Product: syz [ 851.880285][T12854] usb 8-1: Manufacturer: syz [ 851.880295][T12854] usb 8-1: SerialNumber: syz [ 851.904372][ T5776] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 851.916715][T12854] usb 8-1: config 0 descriptor?? [ 851.925554][T12854] appledisplay 8-1:0.0: Could not find int-in endpoint [ 851.936516][ T5776] usb 4-1: device descriptor read/8, error -71 [ 851.950593][T12854] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 852.040644][ T5776] usb usb4-port1: unable to enumerate USB device [ 852.137946][T12854] usb 8-1: USB disconnect, device number 45 [ 852.237271][T21545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4414'. [ 852.508571][ T30] audit: type=1800 audit(1787968469.340:475): pid=21549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4416" name="nl80211" dev="sda1" ino=2041 res=0 errno=0 [ 852.758915][T21554] rust_binder: Write failure EFAULT in pid:461 [ 852.889864][ T5776] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 853.050688][ T5776] usb 5-1: Using ep0 maxpacket: 32 [ 853.061214][ T5776] usb 5-1: unable to get BOS descriptor or descriptor too short [ 853.061253][ T5776] usb 5-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 853.080608][ T5776] usb 5-1: config 12 has an invalid interface number: 183 but max is 1 [ 853.080633][ T5776] usb 5-1: config 12 has an invalid interface number: 229 but max is 1 [ 853.080652][ T5776] usb 5-1: config 12 has no interface number 0 [ 853.080663][ T5776] usb 5-1: config 12 has no interface number 1 [ 853.080686][ T5776] usb 5-1: config 12 interface 183 has no altsetting 0 [ 853.080698][ T5776] usb 5-1: config 12 interface 229 has no altsetting 0 [ 853.125909][ T5776] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.125934][ T5776] usb 5-1: Product: syz [ 853.125951][ T5776] usb 5-1: Manufacturer: syz [ 853.125962][ T5776] usb 5-1: SerialNumber: syz [ 853.249561][T12854] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 853.400428][T12854] usb 8-1: Using ep0 maxpacket: 16 [ 853.406050][T12854] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 853.417541][T12854] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 853.429880][T12854] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.429904][T12854] usb 8-1: Product: syz [ 853.429920][T12854] usb 8-1: Manufacturer: syz [ 853.429930][T12854] usb 8-1: SerialNumber: syz [ 853.457391][T12854] usb 8-1: config 0 descriptor?? [ 853.475729][T12854] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 853.475759][T12854] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 853.509701][ T5776] usb 5-1: USB disconnect, device number 11 [ 853.741617][T12854] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 853.847643][T12854] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 853.847684][T12854] em28xx 8-1:0.0: board has no eeprom [ 853.940709][T12854] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 853.940738][T12854] em28xx 8-1:0.0: dvb set to bulk mode. [ 853.941573][ T5776] em28xx 8-1:0.0: Binding DVB extension [ 853.988373][T12854] usb 8-1: USB disconnect, device number 46 [ 853.997253][T12854] em28xx 8-1:0.0: Disconnecting em28xx [ 854.141120][T21569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4423'. [ 854.204784][ T5776] em28xx 8-1:0.0: Registering input extension [ 854.218207][T12854] em28xx 8-1:0.0: Closing input extension [ 854.756411][T12854] em28xx: Freeing device [ 854.937272][T21583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4428'. [ 854.954859][T21583] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4428'. [ 855.781998][T21592] Unknown vers= option specified: 3.1.1\ [ 855.781998][T21592] [ 855.782024][T21592] CIFS: VFS: Unknown vers= option specified: 3.1.1\ [ 855.936522][T21597] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4432'. [ 856.417576][T21587] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.818334][T21614] can: request_module (can-proto-0) failed. [ 856.905168][T21621] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.3.4437: No space for directory leaf checksum. Please run e2fsck -D. [ 856.905199][T21621] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.3.4437: checksumming directory block 0 [ 856.905364][T21621] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 856.905433][T21621] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.3.4437: No space for directory leaf checksum. Please run e2fsck -D. [ 856.905449][T21621] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.3.4437: checksumming directory block 0 [ 856.905554][T21621] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 856.905619][T21621] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.3.4437: No space for directory leaf checksum. Please run e2fsck -D. [ 856.905634][T21621] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.3.4437: checksumming directory block 0 [ 856.905746][T21621] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 856.905811][T21621] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.3.4437: No space for directory leaf checksum. Please run e2fsck -D. [ 856.905827][T21621] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.3.4437: checksumming directory block 0 [ 856.905929][T21621] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 856.905972][T21621] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 856.905985][T21621] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 856.954024][T21614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.954277][T21614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.172622][T21618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.172923][T21618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.173619][ T5776] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 857.208330][T21618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.208612][T21618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.236915][T21618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.252577][T21618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.253258][T21618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.253495][T21618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.329372][ T5776] usb 8-1: device descriptor read/64, error -71 [ 857.350266][T21587] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.508339][T21587] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.589332][ T5776] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 857.719483][ T5776] usb 8-1: device descriptor read/64, error -71 [ 857.818151][T21587] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.829391][ T5776] usb usb8-port1: attempt power cycle [ 858.169214][ T5776] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 858.189752][ T5776] usb 8-1: device descriptor read/8, error -71 [ 858.420108][ T6635] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.429046][ T5776] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 858.436871][ T6635] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.445527][ T6635] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.454954][ T5776] usb 8-1: device descriptor read/8, error -71 [ 858.500513][ T6638] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.561786][ T5776] usb usb8-port1: unable to enumerate USB device [ 858.938680][T21632] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4442'. [ 858.987010][T21632] overlayfs: failed to decode file handle (len=32, type=1, flags=0, err=-22) [ 859.449322][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 859.599558][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 859.605246][ T10] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 859.615851][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 859.615876][ T10] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 859.615912][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 859.644656][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.644681][ T10] usb 4-1: Product: syz [ 859.644697][ T10] usb 4-1: Manufacturer: syz [ 859.644707][ T10] usb 4-1: SerialNumber: syz [ 859.670659][ T10] usb 4-1: config 0 descriptor?? [ 859.901500][ T10] gs_usb 4-1:0.0: Configuring for 1 interfaces [ 860.536929][T21641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.537214][T21641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.562991][ T5776] usb 4-1: USB disconnect, device number 21 [ 861.204171][T21670] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 861.218216][T21670] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 861.229157][T21670] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 861.237764][T21670] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 861.247684][T21670] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 861.337788][T21678] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 861.337916][T21678] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 861.337936][T21678] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 861.337948][T21678] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 861.338169][T21678] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 861.338180][T21678] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 861.338191][T21678] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 861.482255][T21678] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 861.493688][T21678] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 861.500821][T21669] lo speed is unknown, defaulting to 1000 [ 861.515622][T21669] dummy0 speed is unknown, defaulting to 1000 [ 861.835959][T20894] syz_tun (unregistering): left allmulticast mode [ 862.171199][ T6638] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.340609][ T2535] block nbd0: Possible stuck request ffff888027940000: control (read@0,1024B). Runtime 600 seconds [ 862.340651][ T2535] block nbd0: Possible stuck request ffff8880279401c0: control (read@1024,1024B). Runtime 600 seconds [ 862.340675][ T2535] block nbd0: Possible stuck request ffff888027940380: control (read@2048,1024B). Runtime 600 seconds [ 862.340691][ T2535] block nbd0: Possible stuck request ffff888027940540: control (read@3072,1024B). Runtime 600 seconds [ 862.462221][ T6638] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.612555][ T6638] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.744023][ T6638] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.934250][T21669] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.944591][T21669] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.944711][T21669] bridge_slave_0: entered allmulticast mode [ 862.963080][T21669] bridge_slave_0: entered promiscuous mode [ 862.982082][T21669] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.982157][T21669] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.982239][T21669] bridge_slave_1: entered allmulticast mode [ 862.983197][T21669] bridge_slave_1: entered promiscuous mode [ 863.054314][T21722] syzkaller1: entered promiscuous mode [ 863.054339][T21722] syzkaller1: entered allmulticast mode [ 863.201385][T21669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.227199][T21669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.270589][T21729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 863.379300][T21670] Bluetooth: hci8: command tx timeout [ 863.618706][T21669] team0: Port device team_slave_0 added [ 863.656496][T21669] team0: Port device team_slave_1 added [ 863.701273][T21737] netlink: 'syz.4.4475': attribute type 3 has an invalid length. [ 863.701299][T21737] netlink: 'syz.4.4475': attribute type 1 has an invalid length. [ 863.701315][T21737] netlink: 610 bytes leftover after parsing attributes in process `syz.4.4475'. [ 863.825169][T21669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.825191][T21669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.825215][T21669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.878388][T21669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.878411][T21669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.878434][T21669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.011178][ T5275] 8021q: adding VLAN 0 to HW filter on device eth5 [ 864.066786][ T6638] bridge_slave_1: left allmulticast mode [ 864.066813][ T6638] bridge_slave_1: left promiscuous mode [ 864.066944][ T6638] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.095673][ T6638] bridge_slave_0: left allmulticast mode [ 864.104977][ T6638] bridge_slave_0: left promiscuous mode [ 864.105164][ T6638] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.133121][ T6638] pim6reg: left allmulticast mode [ 864.314138][ T30] audit: type=1800 audit(1787968481.150:476): pid=21749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4479" name="nl80211" dev="sda1" ino=2041 res=0 errno=0 [ 864.407389][T21752] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 864.674493][T21758] FAULT_INJECTION: forcing a failure. [ 864.674493][T21758] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 864.691111][T21758] CPU: 0 UID: 0 PID: 21758 Comm: syz.3.4483 Tainted: G L syzkaller #0 PREEMPT(full) [ 864.691131][T21758] Tainted: [L]=SOFTLOCKUP [ 864.691136][T21758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 864.691143][T21758] Call Trace: [ 864.691149][T21758] [ 864.691154][T21758] dump_stack_lvl+0xe8/0x150 [ 864.691176][T21758] should_fail_ex+0x3eb/0x540 [ 864.691196][T21758] prepare_alloc_pages+0x223/0x600 [ 864.691216][T21758] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 864.691235][T21758] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 864.691255][T21758] ? __pfx_policy_nodemask+0x10/0x10 [ 864.691272][T21758] alloc_pages_mpol+0x21e/0x390 [ 864.691287][T21758] alloc_pages_noprof+0xb1/0x2b0 [ 864.691299][T21758] get_zeroed_page_noprof+0x1a/0x90 [ 864.691315][T21758] mon_bin_open+0x236/0x530 [ 864.691333][T21758] chrdev_open+0x4d9/0x600 [ 864.691352][T21758] ? __pfx_chrdev_open+0x10/0x10 [ 864.691368][T21758] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 864.691387][T21758] ? __pfx_chrdev_open+0x10/0x10 [ 864.691402][T21758] do_dentry_open+0x816/0x1380 [ 864.691419][T21758] vfs_open+0x3b/0x340 [ 864.691428][T21758] ? path_openat+0x1428/0x1d60 [ 864.691445][T21758] path_openat+0x1443/0x1d60 [ 864.691469][T21758] do_file_open+0x23e/0x4a0 [ 864.691486][T21758] ? __pfx_do_file_open+0x10/0x10 [ 864.691512][T21758] ? _raw_spin_unlock+0x28/0x50 [ 864.691524][T21758] ? alloc_fd+0x651/0x6c0 [ 864.691541][T21758] do_sys_openat2+0x115/0x200 [ 864.691554][T21758] ? __pfx_do_sys_openat2+0x10/0x10 [ 864.691566][T21758] ? exc_page_fault+0x6a/0xc0 [ 864.691580][T21758] ? do_user_addr_fault+0xc4c/0x1340 [ 864.691597][T21758] __x64_sys_openat+0x138/0x170 [ 864.691611][T21758] do_syscall_64+0x166/0x520 [ 864.691623][T21758] ? trace_irq_disable+0x3b/0x140 [ 864.691639][T21758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.691650][T21758] ? clear_bhb_loop+0x70/0xc0 [ 864.691663][T21758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.691673][T21758] RIP: 0033:0x7fd9e775e98e [ 864.691685][T21758] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 864.691694][T21758] RSP: 002b:00007fd9e86a3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 864.691707][T21758] RAX: ffffffffffffffda RBX: 00007fd9e86a46c0 RCX: 00007fd9e775e98e [ 864.691715][T21758] RDX: 0000000000101300 RSI: 00007fd9e86a3c00 RDI: ffffffffffffff9c [ 864.691723][T21758] RBP: 00007fd9e86a3c00 R08: 0000000000000000 R09: 0000000000000000 [ 864.691730][T21758] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 864.691737][T21758] R13: 00007fd9e7a26038 R14: 00007fd9e7a25fa0 R15: 00007fff76cc9dd8 [ 864.691754][T21758] [ 865.070341][ T6638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.096147][ T6638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.110237][ T6638] bond0 (unregistering): Released all slaves [ 865.321709][T21761] syz_tun: entered allmulticast mode [ 865.375055][T21669] hsr_slave_0: entered promiscuous mode [ 865.386860][T21669] hsr_slave_1: entered promiscuous mode [ 865.387265][T21669] debugfs: 'hsr0' already exists in 'hsr' [ 865.387280][T21669] Cannot create hsr debugfs directory [ 865.459674][T21670] Bluetooth: hci8: command tx timeout [ 865.595420][ T5275] 8021q: adding VLAN 0 to HW filter on device eth6 [ 865.614483][ T30] audit: type=1800 audit(1787968482.450:477): pid=21772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4488" name="nl80211" dev="sda1" ino=2041 res=0 errno=0 [ 865.821568][ T6638] hsr_slave_0: left promiscuous mode [ 865.843942][ T6638] hsr_slave_1: left promiscuous mode [ 865.844476][ T6638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 865.844499][ T6638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 865.873313][ T6638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 865.873337][ T6638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 865.906628][T21782] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4491'. [ 865.921624][ T6638] veth1_macvtap: left promiscuous mode [ 865.921660][ T6638] veth0_macvtap: left promiscuous mode [ 865.921726][ T6638] veth1_vlan: left promiscuous mode [ 865.921765][ T6638] veth0_vlan: left promiscuous mode [ 866.179236][ T5776] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 866.337386][ T6638] team0 (unregistering): Port device team_slave_1 removed [ 866.354180][ T5776] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 866.366488][ T5776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.366514][ T5776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.366534][ T5776] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 866.366559][ T5776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.412257][ T5776] usb 5-1: config 0 descriptor?? [ 866.451916][ T6638] team0 (unregistering): Port device team_slave_0 removed [ 866.694632][ T5275] 8021q: adding VLAN 0 to HW filter on device eth8 [ 866.926271][ T5275] 8021q: adding VLAN 0 to HW filter on device eth7 [ 866.946633][ T30] audit: type=1800 audit(1787968483.780:478): pid=21794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4494" name="nl80211" dev="sda1" ino=2041 res=0 errno=0 [ 866.976333][ T5776] hid_parser_main: 12 callbacks suppressed [ 866.976364][ T5776] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 866.976385][ T5776] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 866.976403][ T5776] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 866.976421][ T5776] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 866.976438][ T5776] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 866.976455][ T5776] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 866.976473][ T5776] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 866.976490][ T5776] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 866.976507][ T5776] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 866.976524][ T5776] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 866.989475][T21670] Bluetooth: hci1: command 0x0406 tx timeout [ 867.151176][ T5776] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 867.220206][T21801] udevd[21801]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 867.253010][ T6638] IPVS: stop unused estimator thread 0... [ 867.409635][ T5776] usb 5-1: USB disconnect, device number 12 [ 867.535098][T21798] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 867.545368][T14726] Bluetooth: hci8: command tx timeout [ 867.559832][T21798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 867.989250][ T5776] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 868.096339][T21815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4497'. [ 868.139035][ T5776] usb 8-1: device descriptor read/64, error -71 [ 868.202302][T21819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4498'. [ 868.274286][T21818] netlink: 'syz.4.4498': attribute type 10 has an invalid length. [ 868.379439][ T5776] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 868.519706][ T5776] usb 8-1: device descriptor read/64, error -71 [ 868.603568][T21841] loop7: detected capacity change from 0 to 16384 [ 868.631821][ T5776] usb usb8-port1: attempt power cycle [ 868.893567][T21845] loop7: detected capacity change from 16384 to 0 [ 868.901486][ C0] I/O error, dev loop7, sector 6656 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 868.969125][ T5776] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 868.990615][ T5776] usb 8-1: device descriptor read/8, error -71 [ 868.999341][ T30] audit: type=1800 audit(1787968485.840:479): pid=21847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4502" name="nl80211" dev="sda1" ino=2041 res=0 errno=0 [ 869.178312][T21849] netlink: 'syz.3.4503': attribute type 4 has an invalid length. [ 869.178339][T21849] netlink: 'syz.3.4503': attribute type 1 has an invalid length. [ 869.178426][T21849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.229926][ T5776] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 869.250052][ T5776] usb 8-1: device descriptor read/8, error -71 [ 869.353821][T21669] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 869.361450][ T5776] usb usb8-port1: unable to enumerate USB device [ 869.374084][T21669] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 869.374667][T21669] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 869.401082][T21669] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 869.411581][T21669] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 869.434342][T21669] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 869.434903][T21669] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 869.463019][T21669] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 869.619195][T14726] Bluetooth: hci8: command tx timeout [ 869.673552][T21669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.713652][T21669] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.727487][ T7498] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.727562][ T7498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.760289][ T6638] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.760360][ T6638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.800753][ T2239] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 869.895892][T21863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4507'. [ 869.961828][ T2239] usb 4-1: Using ep0 maxpacket: 8 [ 869.969986][T21669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.977743][ T2239] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 869.989113][ T2239] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 869.989147][ T2239] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 869.989168][ T2239] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 870.023498][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.023547][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.048160][ T2239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.048185][ T2239] usb 4-1: Product: 壴椁‾踊ﴞ菅쏕⸐폚ແ컆ᮏ惉尥횒럕ബ꾸῎繓鸑∋⃴ঝﰕ䂃輅黜☱ᕣ懌㌶ꦌ춋羷䕘쏔⼲눔猹펊澀쮥⋡籴罐塖먵᝖勣行䟌洘㣀䁩ѽ㦶੠㗆哎뚁蕻㨈衠⛩欆楬₀咿㘏횹뼳켴㏉箬ಪ迫ἲ糱퐈鮸茙✋ٟ꨹垤⼘胾贃굯策瀡ঞ⋷笧鲄䋺⎏鲺粕繠벳↸㩁㫄馴졯뱇쬻঳딐 [ 870.048211][ T2239] usb 4-1: Manufacturer: Ћ [ 870.048221][ T2239] usb 4-1: SerialNumber: syz [ 870.258079][T21669] veth0_vlan: entered promiscuous mode [ 870.295077][T21669] veth1_vlan: entered promiscuous mode [ 870.375868][T21669] veth0_macvtap: entered promiscuous mode [ 870.396510][T21669] veth1_macvtap: entered promiscuous mode [ 870.410464][ T2239] cdc_ncm 4-1:1.0: bind() failure [ 870.424698][ T2239] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 870.437062][ T2239] cdc_ncm 4-1:1.1: bind() failure [ 870.456463][ T2239] usb 4-1: USB disconnect, device number 22 [ 870.475487][T21669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.502578][T21669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.579774][T10106] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.579931][T10106] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.579963][T10106] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.579983][T10106] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.836337][ T7500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.836368][ T7500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.949689][ T6638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.949714][ T6638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 871.061056][T21885] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 871.074141][T21885] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 871.208563][T21891] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 871.239237][ T2239] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 871.399908][ T2239] usb 8-1: Using ep0 maxpacket: 32 [ 871.407003][ T2239] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 871.422443][ T2239] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 871.422467][ T2239] usb 8-1: config 0 has no interface number 0 [ 871.443636][ T2239] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.443661][ T2239] usb 8-1: Product: syz [ 871.443679][ T2239] usb 8-1: Manufacturer: syz [ 871.443689][ T2239] usb 8-1: SerialNumber: syz [ 871.478038][ T2239] usb 8-1: config 0 descriptor?? [ 871.544759][T21902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4515'. [ 871.914891][T21889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 871.925695][T21889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.009344][ T10] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 872.089530][T12854] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 872.152901][ T2239] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 872.152933][ T2239] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 872.164763][ T2239] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 872.164912][ T2239] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 872.202478][ T10] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 872.202512][ T10] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 872.222878][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.222916][ T10] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 872.222938][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 872.255656][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.255695][ T10] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 872.255718][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 872.265375][ T2239] usb 8-1: USB disconnect, device number 55 [ 872.280777][T12854] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 872.306921][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.306958][ T10] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 872.306981][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 872.337690][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.337730][ T10] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 872.337753][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 872.370863][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.370900][ T10] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 872.370924][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 872.381190][T12854] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 872.381218][T12854] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 872.381246][T12854] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 872.381260][T12854] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 872.381282][T12854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.463608][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.463670][ T10] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 872.463688][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 872.507484][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.507523][ T10] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 872.507564][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 872.545628][ T10] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 872.545668][ T10] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 872.545692][ T10] usb 10-1: config 0 interface 0 has no altsetting 0 [ 872.585964][ T10] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 872.586005][ T10] usb 10-1: Product: syz [ 872.586022][ T10] usb 10-1: Manufacturer: syz [ 872.586033][ T10] usb 10-1: SerialNumber: syz [ 872.624249][ T10] usb 10-1: config 0 descriptor?? [ 872.651277][ T10] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 872.888808][ T2239] usb 10-1: USB disconnect, device number 39 [ 872.902550][ T2239] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 872.926356][T21922] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4522'. [ 873.048578][ T10] libceph: connect (1)[c::]:6789 error -101 [ 873.048720][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 873.071353][T21912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 873.071645][T21912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.090382][T12854] gud 5-1:1.0: No supported pixel formats found [ 873.090411][T12854] gud 5-1:1.0: probe with driver gud failed with error -22 [ 873.324188][T12854] libceph: connect (1)[c::]:6789 error -101 [ 873.324310][T12854] libceph: mon0 (1)[c::]:6789 connect error [ 873.346273][T21939] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 873.428459][T21942] bpf: Bad value for 'gid' [ 873.436522][T21942] fuse: Bad value for 'group_id' [ 873.436550][T21942] fuse: Bad value for 'group_id' [ 873.679707][ T2239] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 873.734539][T21929] ceph: No mds server is up or the cluster is laggy [ 873.832401][ T2239] usb 10-1: Using ep0 maxpacket: 16 [ 873.841938][ T2239] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 873.853588][ T2239] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 873.853624][ T2239] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 873.853641][ T2239] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 873.853655][ T2239] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 873.853669][ T2239] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 873.919241][ T2239] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 873.919256][ T2239] usb 10-1: Manufacturer: syz [ 873.943745][ T2239] usb 10-1: config 0 descriptor?? [ 874.171915][ T2239] rc_core: Couldn't load IR keymap rc-hauppauge [ 874.171938][ T2239] Registered IR keymap rc-empty [ 874.172137][ T2239] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 874.193097][ T2239] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 874.223593][ T2239] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 874.243334][ T2239] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input135 [ 874.275885][ T2239] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 874.289397][ T2239] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 874.310397][ T2239] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 874.329974][ T2239] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 874.350335][ T2239] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 874.371205][ T2239] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 874.389142][ T2239] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 874.409538][ T2239] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 874.429093][ T2239] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 874.449104][ T2239] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 874.471190][ T2239] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 874.482119][ T2239] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 874.987679][ T2239] usb 5-1: USB disconnect, device number 13 [ 875.086176][T21963] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4529'. [ 875.560712][ T2239] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 875.598509][T21963] loop4: detected capacity change from 0 to 524287964 [ 875.722935][ T2239] usb 5-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 875.733815][ T2239] usb 5-1: config 0 has an invalid interface number: 6 but max is 0 [ 875.733847][ T2239] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.733866][ T2239] usb 5-1: config 0 has no interface number 0 [ 875.761942][ T2239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.761965][ T2239] usb 5-1: Product: syz [ 875.761982][ T2239] usb 5-1: Manufacturer: syz [ 875.761992][ T2239] usb 5-1: SerialNumber: syz [ 875.796539][ T2239] usb 5-1: config 0 descriptor?? [ 875.885315][ T2239] vmk80xx 5-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 876.010484][ T2239] usb 5-1: USB disconnect, device number 14 [ 876.297315][ T2239] usb 10-1: USB disconnect, device number 40 [ 876.599199][T12854] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 876.765181][T12854] usb 4-1: unable to get BOS descriptor or descriptor too short [ 876.765221][T12854] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 876.783594][T12854] usb 4-1: config 247 has an invalid interface number: 20 but max is 0 [ 876.783618][T12854] usb 4-1: config 247 has no interface number 0 [ 876.783642][T12854] usb 4-1: config 247 interface 20 has no altsetting 0 [ 876.794232][ T2239] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 876.829600][T12854] usb 4-1: string descriptor 0 read error: -22 [ 876.829690][T12854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.855477][T12854] go7007 4-1:247.20: probe with driver go7007 failed with error -12 [ 876.950052][ T2239] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 876.962089][ T2239] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.962127][ T2239] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.984947][ T2239] usb 10-1: config 0 descriptor?? [ 877.048981][ T5692] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 877.174940][T22000] sg_write: data in/out 394205/258 bytes for SCSI command 0x0-- guessing data in; [ 877.174940][T22000] program syz.3.4535 not setting count and/or reply_len properly [ 877.209669][ T5692] usb 5-1: Using ep0 maxpacket: 32 [ 877.215442][ T5692] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 877.226617][ T5692] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 877.226635][ T5692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 877.226650][ T5692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 877.226662][ T5692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 877.226676][ T5692] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 877.240106][ T2239] usbhid 10-1:0.0: can't add hid device: -71 [ 877.240217][ T2239] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 877.254314][ T5692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.254329][ T5692] usb 5-1: Product: syz [ 877.254337][ T5692] usb 5-1: Manufacturer: syz [ 877.254345][ T5692] usb 5-1: SerialNumber: syz [ 877.317936][ T5692] usb 5-1: config 0 descriptor?? [ 877.340543][ T2239] usb 10-1: USB disconnect, device number 41 [ 877.719048][ T2239] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 877.768867][T22004] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.7.4544: No space for directory leaf checksum. Please run e2fsck -D. [ 877.768899][T22004] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.7.4544: checksumming directory block 0 [ 877.769125][T22004] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 877.769198][T22004] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.7.4544: No space for directory leaf checksum. Please run e2fsck -D. [ 877.769214][T22004] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.7.4544: checksumming directory block 0 [ 877.769352][T22004] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 877.769442][T22004] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.7.4544: No space for directory leaf checksum. Please run e2fsck -D. [ 877.769459][T22004] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.7.4544: checksumming directory block 0 [ 877.769583][T22004] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 877.769664][T22004] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm syz.7.4544: No space for directory leaf checksum. Please run e2fsck -D. [ 877.769680][T22004] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm syz.7.4544: checksumming directory block 0 [ 877.769804][T22004] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 877.769825][T22004] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 877.769839][T22004] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 877.888669][ T2239] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 877.900129][ T2239] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.900175][ T2239] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.994208][ T2239] usb 10-1: config 0 descriptor?? [ 878.203076][T21988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.203403][T21988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.238241][ T2239] usbhid 10-1:0.0: can't add hid device: -71 [ 878.238331][ T2239] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 878.257443][ T2239] usb 10-1: USB disconnect, device number 42 [ 878.590005][ T5692] iforce 5-1:0.0: usb_submit_urb failed: -110 [ 878.590125][ T5692] input input136: Device does not respond to id packet M [ 878.596536][ T5692] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 878.596562][ T5692] input input136: Device does not respond to id packet P [ 878.605366][ T5692] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 878.605392][ T5692] input input136: Device does not respond to id packet B [ 878.611704][ T5692] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 878.611729][ T5692] input input136: Device does not respond to id packet N [ 878.619062][ T5692] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 878.620831][ T5692] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 878.627086][ T5692] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 878.636122][ T5692] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 878.637573][ T5692] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input136 [ 878.689543][ T2239] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 878.761213][T22010] netlink: 124 bytes leftover after parsing attributes in process `syz.7.4545'. [ 878.791925][T21993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.803356][T21993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.817153][ T5692] usb 5-1: USB disconnect, device number 15 [ 878.839715][ T2239] usb 10-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice= 0.00 [ 878.849918][ T2239] usb 10-1: config index 0 descriptor too short (expected 53, got 36) [ 878.849942][ T2239] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.849976][ T2239] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 897 [ 878.849992][ T2239] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 878.850017][ T2239] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.322692][T12854] usb 10-1: USB disconnect, device number 43 [ 879.322793][ C0] Bluetooth: hci0: urb ffff888049eedc00 failed to resubmit (19) [ 879.322845][ C0] Bluetooth: hci0: urb ffff888049eedb00 failed to resubmit (19) [ 879.588259][T22022] siw: device registration error -23 [ 879.906358][T22030] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4552'. [ 880.169871][ T10] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 880.290151][ T5776] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:9: No space for directory leaf checksum. Please run e2fsck -D. [ 880.290182][ T5776] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:9: checksumming directory block 0 [ 880.290306][ T5776] usb 7-1: loading /lib/firmware/updates/syzkaller/htc_9271.fw failed with error -74 [ 880.290364][ T5776] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:9: No space for directory leaf checksum. Please run e2fsck -D. [ 880.290380][ T5776] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:9: checksumming directory block 0 [ 880.290469][ T5776] usb 7-1: loading /lib/firmware/updates/htc_9271.fw failed with error -74 [ 880.290519][ T5776] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:9: No space for directory leaf checksum. Please run e2fsck -D. [ 880.290534][ T5776] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:9: checksumming directory block 0 [ 880.290617][ T5776] usb 7-1: loading /lib/firmware/syzkaller/htc_9271.fw failed with error -74 [ 880.290672][ T5776] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #274: comm kworker/0:9: No space for directory leaf checksum. Please run e2fsck -D. [ 880.290686][ T5776] EXT4-fs error (device sda1): __ext4_find_entry:1628: inode #274: comm kworker/0:9: checksumming directory block 0 [ 880.290767][ T5776] usb 7-1: loading /lib/firmware/htc_9271.fw failed with error -74 [ 880.290786][ T5776] usb 7-1: Direct firmware load for htc_9271.fw failed with error -74 [ 880.290798][ T5776] usb 7-1: Falling back to sysfs fallback for: htc_9271.fw [ 880.390240][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 880.393045][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 880.393065][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 880.420091][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 240, changing to 4 [ 880.472800][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.472816][ T10] usb 5-1: Product: syz [ 880.472824][ T10] usb 5-1: Manufacturer: syz [ 880.472832][ T10] usb 5-1: SerialNumber: syz [ 881.061778][T21670] Bluetooth: hci0: command 0xfc0e tx timeout [ 881.359195][T10106] netdevsim netdevsim10 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.496513][ T10] usb 5-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 881.507915][ T10] usb 5-1: unit 4 not found! [ 881.507937][ T10] usb 5-1: unit 0 not found! [ 881.724552][ T10] usb 5-1: USB disconnect, device number 16 [ 881.946246][T12408] udevd[12408]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 882.369015][T12854] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 882.527902][T12854] usb 8-1: Using ep0 maxpacket: 16 [ 882.533806][T12854] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 882.545347][T12854] usb 8-1: config index 0 descriptor too short (expected 51443, got 18) [ 882.566534][T12854] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.566559][T12854] usb 8-1: Product: syz [ 882.566575][T12854] usb 8-1: Manufacturer: syz [ 882.566586][T12854] usb 8-1: SerialNumber: syz [ 882.599935][T12854] r8152-cfgselector 8-1: Unknown version 0x0000 [ 882.599960][T12854] r8152-cfgselector 8-1: config 0 descriptor?? [ 882.636823][T22054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.637107][T22054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.657493][T22057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.657773][T22057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.811405][T22042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.828604][T22042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.847536][T12854] r8152-cfgselector 8-1: Unknown version 0x0000 [ 882.854069][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 882.863312][T12854] r8152-cfgselector 8-1: No union descriptors [ 882.902824][T12854] r8152-cfgselector 8-1: USB disconnect, device number 56 [ 883.019103][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 883.019604][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 883.037612][ T10] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 883.037632][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 883.037652][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.039382][ T10] usb 5-1: config 0 descriptor?? [ 883.250799][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 883.250874][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 883.270383][ T10] usb 5-1: USB disconnect, device number 17 [ 883.830121][ T9] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 883.980384][ T9] usb 10-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 883.992824][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.992850][ T9] usb 10-1: Product: མ構㻫禶♘ẁ㇪⎕䖅䆜ᜢ䢟讝距ﺂ㷻荑ܺ첅᠏ė椸嫧⓱⋳⯇﹔抙腩츑悤悀儳娨ù緿瑥슭㔝튣㶗듷᥂쾞ᓐ쥃⚧爹꿭儦ꇸꚞⳳ岝ꥡ﫜쒍洀ණ‒꓾渨ȫ쓀⃫諺췅発봙․現旝屻㴫嫂葲鸠ᙙ쐄ጉ轰昁禤⢪龂땬潣礴喈헄찱胯䌙瞛ၟᄳ큹؋ạ쨈낾 [ 884.037816][ T9] usb 10-1: Manufacturer: 㸖뜑퓴열⚊闥䞰鴀⏍鴅젌鈣텩➼饽᐀顽芨 [ 884.037847][ T9] usb 10-1: SerialNumber: ခ [ 884.097126][ T2239] usb 4-1: USB disconnect, device number 23 [ 884.293555][ T9] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 884.301015][ T9] usb 10-1: MIDIStreaming interface descriptor not found [ 884.417113][ T9] usb 10-1: USB disconnect, device number 44 [ 884.489626][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 884.506967][T12854] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 884.639129][T12854] usb 5-1: device descriptor read/64, error -71 [ 884.659618][ T989] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 884.821562][ T989] usb 4-1: New USB device found, idVendor=0000, idProduct=024e, bcdDevice= 0.00 [ 884.832045][ T989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 884.832072][ T989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 884.832101][ T989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 884.863406][ T989] usb 4-1: config 0 descriptor?? [ 884.879471][T12854] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 885.009162][T12854] usb 5-1: device descriptor read/64, error -71 [ 885.079547][T22101] netlink: 'syz.7.4573': attribute type 12 has an invalid length. [ 885.088618][T22101] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4573'. [ 885.116320][T22107] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 885.127125][T12854] usb usb5-port1: attempt power cycle [ 885.135488][T22107] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 885.148997][T22107] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 885.149035][T22107] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 885.149299][T22107] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 885.149312][T22107] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 885.149324][T22107] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 885.230847][T22107] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 885.243712][T22107] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 885.284157][ T989] hid-generic 0003:0000:024E.003C: hidraw0: USB HID v0.00 Joystick [HID 0000:024e] on usb-dummy_hcd.3-1/input0 [ 885.344543][T22110] udevd[22110]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 885.459841][T12854] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 885.477724][ T989] usb 4-1: USB disconnect, device number 24 [ 885.485565][T12854] usb 5-1: device descriptor read/8, error -71 [ 885.719010][T12854] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 885.740472][T12854] usb 5-1: device descriptor read/8, error -71 [ 885.750434][ T9] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 885.793911][T22123] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4581'. [ 885.849546][T12854] usb usb5-port1: unable to enumerate USB device [ 885.909799][ T9] usb 8-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 885.921921][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.921945][ T9] usb 8-1: Product: syz [ 885.921961][ T9] usb 8-1: Manufacturer: syz [ 885.921972][ T9] usb 8-1: SerialNumber: syz [ 885.955332][ T9] usb 8-1: invalid playback endpoint [ 886.133999][T22130] syzkaller1: entered promiscuous mode [ 886.134025][T22130] syzkaller1: entered allmulticast mode [ 886.216003][T22131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 886.225983][T22131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.242216][T22131] MTDSB: Device #1 doesn't appear to exist [ 886.242216][T22131] [ 886.763059][T22145] futex_wake_op: syz.3.4590 tries to shift op by 144; fix this program [ 886.785504][T22147] netlink: 'syz.9.4591': attribute type 3 has an invalid length. [ 886.793763][T22147] netlink: 'syz.9.4591': attribute type 1 has an invalid length. [ 886.793795][T22147] netlink: 610 bytes leftover after parsing attributes in process `syz.9.4591'. [ 886.973967][T22153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 887.157892][ T9] usb 8-1: USB disconnect, device number 57 [ 887.205214][T22160] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4595'. [ 887.469943][T14726] Bluetooth: hci2: command 0x0406 tx timeout [ 887.495212][T12854] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 887.649020][T12854] usb 10-1: Using ep0 maxpacket: 32 [ 887.654650][T12854] usb 10-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 887.669093][T12854] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.669116][T12854] usb 10-1: Product: syz [ 887.669131][T12854] usb 10-1: Manufacturer: syz [ 887.669141][T12854] usb 10-1: SerialNumber: syz [ 887.693465][T12854] usb 10-1: config 0 descriptor?? [ 887.704261][T12854] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 887.704329][T12854] dvb-usb: bulk message failed: -22 (4/0) [ 887.704348][T12854] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 887.704418][T12854] dvb-usb: bulk message failed: -22 (5/0) [ 887.704428][T12854] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 887.770090][T12854] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 887.781978][T12854] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 887.782020][T12854] usb 10-1: media controller created [ 887.843675][T12854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 887.910714][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 887.919463][T12854] usb 10-1: selecting invalid altsetting 3 [ 887.925415][T12854] ttusb2: set interface to alts=3 failed [ 887.934707][T12854] DVB: Unable to find symbol tda10086_attach() [ 887.934725][T12854] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 887.952519][T12854] dvb-usb: bulk message failed: -22 (4/0) [ 887.952539][T12854] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 887.952613][T12854] dvb-usb: bulk message failed: -22 (5/0) [ 887.952622][T12854] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 887.952669][T12854] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 887.997516][T22174] qrtr: Invalid version 0 [ 888.019496][T12854] usb 10-1: USB disconnect, device number 45 [ 888.033611][T22177] netlink: 212 bytes leftover after parsing attributes in process `syz.7.4602'. [ 888.046105][T22174] netlink: 408 bytes leftover after parsing attributes in process `syz.4.4601'. [ 888.063876][T22174] input: syz0 as /devices/virtual/input/input139 [ 888.072771][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 888.079219][ T9] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 888.094628][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.094653][ T9] usb 4-1: Product: syz [ 888.094669][ T9] usb 4-1: Manufacturer: syz [ 888.094680][ T9] usb 4-1: SerialNumber: syz [ 888.212400][T12854] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 888.311023][T22180] FAULT_INJECTION: forcing a failure. [ 888.311023][T22180] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 888.324629][T22180] CPU: 0 UID: 0 PID: 22180 Comm: syz.7.4603 Tainted: G L syzkaller #0 PREEMPT(full) [ 888.324647][T22180] Tainted: [L]=SOFTLOCKUP [ 888.324652][T22180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 888.324659][T22180] Call Trace: [ 888.324664][T22180] [ 888.324669][T22180] dump_stack_lvl+0xe8/0x150 [ 888.324690][T22180] should_fail_ex+0x3eb/0x540 [ 888.324710][T22180] prepare_alloc_pages+0x223/0x600 [ 888.324733][T22180] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 888.324751][T22180] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 888.324769][T22180] ? __pfx_policy_nodemask+0x10/0x10 [ 888.324787][T22180] alloc_pages_mpol+0x21e/0x390 [ 888.324801][T22180] alloc_pages_noprof+0xb1/0x2b0 [ 888.324814][T22180] get_zeroed_page_noprof+0x1a/0x90 [ 888.324830][T22180] mon_bin_open+0x236/0x530 [ 888.324846][T22180] chrdev_open+0x4d9/0x600 [ 888.324864][T22180] ? __pfx_chrdev_open+0x10/0x10 [ 888.324880][T22180] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 888.324900][T22180] ? __pfx_chrdev_open+0x10/0x10 [ 888.324915][T22180] do_dentry_open+0x816/0x1380 [ 888.324931][T22180] vfs_open+0x3b/0x340 [ 888.324941][T22180] ? path_openat+0x1428/0x1d60 [ 888.324957][T22180] path_openat+0x1443/0x1d60 [ 888.324980][T22180] do_file_open+0x23e/0x4a0 [ 888.324997][T22180] ? __pfx_do_file_open+0x10/0x10 [ 888.325023][T22180] ? _raw_spin_unlock+0x28/0x50 [ 888.325034][T22180] ? alloc_fd+0x651/0x6c0 [ 888.325051][T22180] do_sys_openat2+0x115/0x200 [ 888.325063][T22180] ? __pfx_do_sys_openat2+0x10/0x10 [ 888.325075][T22180] ? exc_page_fault+0x6a/0xc0 [ 888.325089][T22180] ? do_user_addr_fault+0xc4c/0x1340 [ 888.325106][T22180] __x64_sys_openat+0x138/0x170 [ 888.325120][T22180] do_syscall_64+0x166/0x520 [ 888.325132][T22180] ? trace_irq_disable+0x3b/0x140 [ 888.325148][T22180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.325159][T22180] ? clear_bhb_loop+0x70/0xc0 [ 888.325172][T22180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.325183][T22180] RIP: 0033:0x7fb3fc75e98e [ 888.325194][T22180] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 888.325204][T22180] RSP: 002b:00007fb3fd5a5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 888.325217][T22180] RAX: ffffffffffffffda RBX: 00007fb3fd5a66c0 RCX: 00007fb3fc75e98e [ 888.325225][T22180] RDX: 0000000000101300 RSI: 00007fb3fd5a5c00 RDI: ffffffffffffff9c [ 888.325233][T22180] RBP: 00007fb3fd5a5c00 R08: 0000000000000000 R09: 0000000000000000 [ 888.325240][T22180] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 888.325247][T22180] R13: 00007fb3fca26038 R14: 00007fb3fca25fa0 R15: 00007ffc26cb4758 [ 888.325263][T22180] [ 888.546753][ T9] usb 4-1: 1:1 : incorrect wMaxPacketSize for BADD profile [ 888.602402][ T9] usb 4-1: incorrect wMaxPacketSize 0x3ff for BADD profile [ 888.686514][T22182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.686778][T22182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.836235][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 888.870431][ T9] usb 4-1: USB disconnect, device number 25 [ 888.945811][ T5610] udevd[5610]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 888.964303][T12854] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 889.047916][T22194] syz_tun: entered allmulticast mode [ 889.099198][T12854] usb 5-1: device descriptor read/64, error -71 [ 889.193923][T22198] CIFS: Unable to determine destination address [ 889.313011][ T30] audit: type=1800 audit(1787968506.150:480): pid=22202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4612" name="nl80211" dev="sda1" ino=2041 res=0 errno=0 [ 889.336990][T22202] EXT4-fs error (device sda1): ext4_validate_block_bitmap:427: comm syz.9.4612: bg 1: bad block bitmap checksum [ 889.353569][T12854] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 889.439186][ T9] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 889.490407][T12854] usb 5-1: device descriptor read/64, error -71 [ 889.589281][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 889.595109][ T9] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 889.605057][T12854] usb usb5-port1: attempt power cycle [ 889.606529][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.606547][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.606568][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.652109][ T9] usb 8-1: config 0 descriptor?? [ 889.950038][T12854] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 889.971940][T12854] usb 5-1: device descriptor read/8, error -71 [ 890.211615][T12854] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 890.242550][T12854] usb 5-1: device descriptor read/8, error -71 [ 890.278041][T22198] comedi: No check for data length of config insn id 9 is implemented [ 890.278064][T22198] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 890.278169][T22198] comedi: Assuming n=15 is correct [ 890.310174][ T9] usbhid 8-1:0.0: can't add hid device: -71 [ 890.310253][ T9] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 890.333908][ T9] usb 8-1: USB disconnect, device number 58 [ 890.350542][T12854] usb usb5-port1: unable to enumerate USB device [ 890.709030][T12854] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 890.861930][T12854] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 890.873551][T12854] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 890.873597][T12854] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid maxpacket 2560, setting to 64 [ 890.873620][T12854] usb 4-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 890.912135][ T9] usb 10-1: new full-speed USB device number 46 using dummy_hcd [ 890.927487][T12854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.927512][T12854] usb 4-1: Product: syz [ 890.927528][T12854] usb 4-1: Manufacturer: syz [ 890.927538][T12854] usb 4-1: SerialNumber: syz [ 891.079732][ T9] usb 10-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 891.090528][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 891.090561][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 891.090585][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.389909][T12854] usb 4-1: unable to init card! (ret=-110) [ 891.390180][T12854] snd-usb-caiaq 4-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 891.588214][T22236] netlink: 'syz.3.4624': attribute type 10 has an invalid length. [ 891.588240][T22236] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4624'. [ 891.657605][T22250] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4631'. [ 891.709646][ T989] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 891.861282][ T989] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 891.871599][ T989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 891.871642][ T989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 891.871657][ T989] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 891.871682][ T989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.949760][ T989] usb 5-1: config 0 descriptor?? [ 892.151788][ T10] usb 4-1: USB disconnect, device number 26 [ 892.374460][ T989] hid_parser_main: 5 callbacks suppressed [ 892.374495][ T989] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 892.374517][ T989] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 892.374550][ T989] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 892.374568][ T989] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 892.374585][ T989] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 892.374602][ T989] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 892.374619][ T989] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 892.374637][ T989] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 892.374654][ T989] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 892.388769][ T989] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 892.424573][T22244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 892.424854][T22244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 892.433594][ T9] pegasus 10-1:1.0: can't reset MAC [ 892.433783][ T9] pegasus 10-1:1.0: probe with driver pegasus failed with error -5 [ 892.517296][ T9] usb 10-1: USB disconnect, device number 46 [ 892.552146][ T2535] block nbd0: Possible stuck request ffff888027940000: control (read@0,1024B). Runtime 630 seconds [ 892.552184][ T2535] block nbd0: Possible stuck request ffff8880279401c0: control (read@1024,1024B). Runtime 630 seconds [ 892.552218][ T2535] block nbd0: Possible stuck request ffff888027940380: control (read@2048,1024B). Runtime 630 seconds [ 892.552235][ T2535] block nbd0: Possible stuck request ffff888027940540: control (read@3072,1024B). Runtime 630 seconds [ 892.633171][ T989] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 892.657024][ T989] usb 5-1: USB disconnect, device number 26 [ 892.690746][T22258] udevd[22258]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 892.816611][T22260] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 893.028618][T22265] comedi comedi2: driver 'ni_daq_700' does not support attach using comedi_config [ 893.213583][T22276] netlink: 763 bytes leftover after parsing attributes in process `syz.7.4638'. [ 893.489811][ T30] audit: type=1326 audit(1787968510.330:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22277 comm="syz.4.4640" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcde8b9e159 code=0x0 [ 893.579287][T22288] netlink: 'syz.4.4640': attribute type 6 has an invalid length. [ 893.600596][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 893.761904][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice= 0.40 [ 893.776148][ T9] usb 4-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 893.776177][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 893.805094][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.805117][ T9] usb 4-1: Product: syz [ 893.805133][ T9] usb 4-1: Manufacturer: syz [ 893.805143][ T9] usb 4-1: SerialNumber: syz [ 894.186129][T22295] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 894.529038][ T10] usb 10-1: new full-speed USB device number 47 using dummy_hcd [ 894.680679][ T10] usb 10-1: New USB device found, idVendor=1802, idProduct=1100, bcdDevice=ec.c3 [ 894.692292][ T10] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 894.692323][ T10] usb 10-1: can't read configurations, error -61 [ 894.747308][T22305] syzkaller1: entered promiscuous mode [ 894.754244][T22305] syzkaller1: entered allmulticast mode [ 894.830606][ T10] usb 10-1: new full-speed USB device number 48 using dummy_hcd [ 894.999729][ T10] usb 10-1: New USB device found, idVendor=1802, idProduct=1100, bcdDevice=ec.c3 [ 895.010415][ T10] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 895.010452][ T10] usb 10-1: can't read configurations, error -61 [ 895.025934][ T10] usb usb10-port1: attempt power cycle [ 895.064109][T22307] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4647'. [ 895.369095][ T10] usb 10-1: new full-speed USB device number 49 using dummy_hcd [ 895.389856][ T10] usb 10-1: New USB device found, idVendor=1802, idProduct=1100, bcdDevice=ec.c3 [ 895.401294][ T10] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 895.401339][ T10] usb 10-1: can't read configurations, error -61 [ 895.422005][T22312] tipc: Started in network mode [ 895.422032][T22312] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 895.452322][T22312] tipc: Enabled bearer , priority 10 [ 895.467995][T22312] tipc: Enabled bearer , priority 10 [ 895.479717][T22312] tipc: Bearer : already 2 bearers with priority 10 [ 895.491312][T22312] tipc: Bearer : trying with adjusted priority [ 895.491571][T22312] tipc: New replicast peer: 255.255.255.255 [ 895.492047][T22312] tipc: Enabled bearer , priority 9 [ 895.539419][ T10] usb 10-1: new full-speed USB device number 50 using dummy_hcd [ 895.561526][ T10] usb 10-1: New USB device found, idVendor=1802, idProduct=1100, bcdDevice=ec.c3 [ 895.572409][ T10] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 895.572439][ T10] usb 10-1: can't read configurations, error -61 [ 895.580721][ T10] usb usb10-port1: unable to enumerate USB device [ 895.715453][T22315] loop7: detected capacity change from 0 to 16384 [ 896.019499][T22316] loop7: detected capacity change from 16384 to 0 [ 896.030696][ C0] I/O error, dev loop7, sector 12032 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 896.376662][T22322] input: syz0 as /devices/virtual/input/input140 [ 896.436759][ T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input141 [ 896.454680][ T4965] bcm5974 4-1:1.0: could not read from device [ 896.464558][ T4965] bcm5974 4-1:1.0: could not read from device [ 896.482892][ T4965] bcm5974 4-1:1.0: could not read from device [ 896.502354][ T9] usb 4-1: USB disconnect, device number 27 [ 896.559884][T22091] tipc: Node number set to 4269801491 [ 896.753970][ T30] audit: type=1800 audit(1787968769.597:482): pid=22326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.4655" name="(" dev="sda1" ino=2044 res=0 errno=0 [ 897.159630][T22091] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 897.289201][T22091] usb 8-1: device descriptor read/64, error -71 [ 897.306579][T22355] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x1192 instead [ 897.306715][T22355] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000840: 0x642f instead [ 897.329968][T22355] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000844: 0x6d2f instead [ 897.329996][T22355] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000848: 0x0023 instead [ 897.330228][T22355] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001980: 0x00c0 instead [ 897.330239][T22355] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001984: 0x2000 instead [ 897.330251][T22355] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001998: 0x00e4 instead [ 897.422519][T22355] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 897.432092][T22355] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 32 [ 897.540131][T22091] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 897.580516][T22364] FAULT_INJECTION: forcing a failure. [ 897.580516][T22364] name failslab, interval 1, probability 0, space 0, times 0 [ 897.593347][T22364] CPU: 0 UID: 0 PID: 22364 Comm: syz.9.4665 Tainted: G L syzkaller #0 PREEMPT(full) [ 897.593365][T22364] Tainted: [L]=SOFTLOCKUP [ 897.593369][T22364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 897.593376][T22364] Call Trace: [ 897.593382][T22364] [ 897.593387][T22364] dump_stack_lvl+0xe8/0x150 [ 897.593410][T22364] should_fail_ex+0x3eb/0x540 [ 897.593431][T22364] should_failslab+0xa8/0x100 [ 897.593446][T22364] __kmalloc_noprof+0xfe/0x720 [ 897.593461][T22364] ? rcu_is_watching+0x16/0xb0 [ 897.593475][T22364] ? tomoyo_realpath_from_path+0xef/0x640 [ 897.593488][T22364] ? tomoyo_realpath_from_path+0xef/0x640 [ 897.593502][T22364] tomoyo_realpath_from_path+0xef/0x640 [ 897.593518][T22364] ? tomoyo_path_number_perm+0x219/0x5f0 [ 897.593534][T22364] tomoyo_path_number_perm+0x246/0x5f0 [ 897.593550][T22364] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 897.593564][T22364] ? __lock_acquire+0x6df/0x2e50 [ 897.593588][T22364] ? hook_file_ioctl+0x1f2/0x600 [ 897.593614][T22364] ? __fget_files+0x2a/0x420 [ 897.593629][T22364] ? __fget_files+0x2a/0x420 [ 897.593640][T22364] ? __fget_files+0x3a2/0x420 [ 897.593651][T22364] ? __fget_files+0x2a/0x420 [ 897.593665][T22364] security_file_ioctl+0xc3/0x2a0 [ 897.593681][T22364] __se_sys_ioctl+0x47/0x170 [ 897.593705][T22364] do_syscall_64+0x166/0x520 [ 897.593717][T22364] ? trace_irq_disable+0x3b/0x140 [ 897.593734][T22364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.593746][T22364] ? clear_bhb_loop+0x70/0xc0 [ 897.593758][T22364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.593769][T22364] RIP: 0033:0x7f18b699e159 [ 897.593780][T22364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.593790][T22364] RSP: 002b:00007f18b7865028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 897.593802][T22364] RAX: ffffffffffffffda RBX: 00007f18b6c25fa0 RCX: 00007f18b699e159 [ 897.593810][T22364] RDX: 0000200000000140 RSI: 0000000080286f4e RDI: 0000000000000003 [ 897.593818][T22364] RBP: 00007f18b7865090 R08: 0000000000000000 R09: 0000000000000000 [ 897.593825][T22364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.593831][T22364] R13: 00007f18b6c26038 R14: 00007f18b6c25fa0 R15: 00007ffcec71bda8 [ 897.593848][T22364] [ 897.678070][T22364] ERROR: Out of memory at tomoyo_realpath_from_path. [ 897.684052][T22091] usb 8-1: device descriptor read/64, error -71 [ 897.793308][T22091] usb usb8-port1: attempt power cycle [ 897.920177][T22368] netlink: 'syz.3.4666': attribute type 1 has an invalid length. [ 897.920220][T22368] netlink: 'syz.3.4666': attribute type 1 has an invalid length. [ 898.040673][T22373] loop7: detected capacity change from 0 to 16384 [ 898.129168][T22091] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 898.151086][T22091] usb 8-1: device descriptor read/8, error -71 [ 898.301024][T22374] loop7: detected capacity change from 16384 to 0 [ 898.318042][ C0] I/O error, dev loop7, sector 6400 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2 [ 898.389311][T22091] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 898.410541][T22091] usb 8-1: device descriptor read/8, error -71 [ 898.519571][T22091] usb usb8-port1: unable to enumerate USB device [ 898.609867][T22384] vxcan0: tx address claim with different name [ 898.644279][T22386] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 898.970357][T22091] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 899.120403][T22091] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 899.133451][T22091] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 899.133476][T22091] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 899.144713][T22091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 899.144728][T22091] usb 5-1: SerialNumber: syz [ 899.186486][T22091] usb 5-1: 0:2 : does not exist [ 899.259114][ T9] usb 10-1: new full-speed USB device number 51 using dummy_hcd [ 899.345954][T22392] siw: device registration error -23 [ 899.421536][ T9] usb 10-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 899.431835][ T9] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 899.445549][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.445574][ T9] usb 10-1: Product: syz [ 899.445590][ T9] usb 10-1: Manufacturer: syz [ 899.445600][ T9] usb 10-1: SerialNumber: syz [ 899.483105][ T9] usb 10-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 899.592734][ T5692] usb 5-1: USB disconnect, device number 27 [ 899.749897][T22091] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 899.788117][T22390] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4674'. [ 899.798259][T22390] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4674'. [ 899.818333][T22390] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4674'. [ 899.818495][T22390] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4674'. [ 899.818639][T22390] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4674'. [ 899.818774][T22390] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4674'. [ 899.818993][T22390] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4674'. [ 899.819141][T22390] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4674'. [ 899.819316][T22390] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4674'. [ 899.819450][T22390] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4674'. [ 900.000239][T22091] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 900.007445][T22091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 900.007467][T22091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 900.018526][T22091] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 900.018541][T22091] usb 4-1: Manufacturer: syz [ 900.056674][T22091] usb 4-1: config 0 descriptor?? [ 900.265403][ T9] usb 10-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 900.305790][ T9] usb 10-1: USB disconnect, device number 51 [ 900.723533][T22410] netlink: 'syz.4.4679': attribute type 21 has an invalid length. [ 900.906930][T22394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 900.907239][T22394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.118282][T22091] input: syz Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.003E/input/input142 [ 901.208990][ T10] usb 8-1: new full-speed USB device number 63 using dummy_hcd [ 901.221726][T22091] input: syz Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.003E/input/input143 [ 901.245042][T22091] input: syz Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.003E/input/input144 [ 901.273500][T22091] input: syz Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.003E/input/input145 [ 901.310210][T12854] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 901.349045][ T10] usb 8-1: device descriptor read/64, error -71 [ 901.356737][T22091] uclogic 0003:256C:006D.003E: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0 [ 901.388755][T22091] usb 4-1: USB disconnect, device number 28 [ 901.460300][T12854] usb 10-1: Using ep0 maxpacket: 16 [ 901.466807][T12854] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 901.479238][T12854] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 901.479267][T12854] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 46, changing to 7 [ 901.479290][T12854] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 51120, setting to 1024 [ 901.516192][T12854] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.516216][T12854] usb 10-1: Product: syz [ 901.516227][T12854] usb 10-1: Manufacturer: syz [ 901.516237][T12854] usb 10-1: SerialNumber: syz [ 901.570206][T12854] usb 10-1: config 0 descriptor?? [ 901.589017][ T10] usb 8-1: new full-speed USB device number 64 using dummy_hcd [ 901.605364][T12854] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 901.616291][T12854] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 901.667899][T22425] udevd[22425]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 901.719035][ T10] usb 8-1: device descriptor read/64, error -71 [ 901.830169][ T10] usb usb8-port1: attempt power cycle [ 901.972445][T22427] rust_binder: Failure in copy_transaction_data: EFAULT [ 901.973105][T22427] rust_binder: 22426:22427 transaction call to 22426:0 failed EFAULT, code 0 size 32-24 [ 901.997943][T22091] rust_binder: 22426: undelivered TRANSACTION_ERROR: 29201 [ 902.117079][T22429] kvm: user requested TSC rate below hardware speed [ 902.142202][T22430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.142497][T22430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.169011][ T10] usb 8-1: new full-speed USB device number 65 using dummy_hcd [ 902.191580][ T10] usb 8-1: device descriptor read/8, error -71 [ 902.198604][T12854] em28xx 10-1:0.0: chip ID is em2710/2820 [ 902.359007][T22091] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 902.408416][T12854] em28xx 10-1:0.0: Config register raw data: 0x14 [ 902.429084][ T10] usb 8-1: new full-speed USB device number 66 using dummy_hcd [ 902.451456][ T10] usb 8-1: device descriptor read/8, error -71 [ 902.519243][T22091] usb 4-1: Using ep0 maxpacket: 8 [ 902.524837][T22091] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 902.538580][T22091] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 902.538610][T22091] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 902.538654][T22091] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 902.538677][T22091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.561986][ T10] usb usb8-port1: unable to enumerate USB device [ 902.596843][T22091] hub 4-1:1.0: bad descriptor, ignoring hub [ 902.605498][T22091] hub 4-1:1.0: probe with driver hub failed with error -5 [ 902.616512][T22091] cdc_wdm 4-1:1.0: skipping garbage [ 902.616548][T22091] cdc_wdm 4-1:1.0: skipping garbage [ 902.616604][T22091] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 902.653866][T12854] em28xx 10-1:0.0: AC97 chip type couldn't be determined [ 902.653891][T12854] em28xx 10-1:0.0: No AC97 audio processor [ 902.685391][T12854] usb 10-1: USB disconnect, device number 52 [ 902.696475][T12854] em28xx 10-1:0.0: Disconnecting em28xx [ 902.765113][T12854] em28xx: Freeing device [ 902.899232][T22091] usb 4-1: USB disconnect, device number 29 [ 903.297217][T22433] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 903.297234][T22433] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 903.297290][T22433] vhci_hcd vhci_hcd.0: Device attached [ 903.336577][T22434] vhci_hcd: connection closed [ 903.339021][ T6635] vhci_hcd vhci_hcd.9: stop threads [ 903.339046][ T6635] vhci_hcd vhci_hcd.9: release socket [ 903.339060][ T6635] vhci_hcd vhci_hcd.9: disconnect device [ 903.784614][T12854] hid_parser_main: 5 callbacks suppressed [ 903.791630][T12854] hid-generic 0000:0000:0000.003F: unknown main item tag 0x0 [ 903.878121][T22452] udevd[22452]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 903.887761][T12854] hid-generic 0000:0000:0000.003F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 904.059005][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 904.218337][T22460] netlink: 'syz.7.4696': attribute type 3 has an invalid length. [ 904.218362][T22460] netlink: 'syz.7.4696': attribute type 1 has an invalid length. [ 904.235658][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 904.248233][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 904.248279][ T10] usb 4-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=2a.c0 [ 904.272102][ T10] usb 4-1: config 3 has an invalid interface number: 223 but max is 1 [ 904.272127][ T10] usb 4-1: config 3 has an invalid interface number: 25 but max is 1 [ 904.272141][ T10] usb 4-1: config 3 has an invalid interface number: 223 but max is 1 [ 904.272153][ T10] usb 4-1: config 3 has no interface number 0 [ 904.272164][ T10] usb 4-1: config 3 has no interface number 1 [ 904.272194][ T10] usb 4-1: config 3 interface 25 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 904.272207][ T10] usb 4-1: config 3 interface 25 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 904.272223][ T10] usb 4-1: too many endpoints for config 3 interface 223 altsetting 155: 82, using maximum allowed: 30 [ 904.272245][ T10] usb 4-1: config 3 interface 223 altsetting 155 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 904.272262][ T10] usb 4-1: config 3 interface 223 altsetting 155 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 904.272279][ T10] usb 4-1: config 3 interface 223 altsetting 155 endpoint 0xE has invalid wMaxPacketSize 0 [ 904.272292][ T10] usb 4-1: config 3 interface 223 altsetting 155 has 4 endpoint descriptors, different from the interface descriptor's value: 82 [ 904.272308][ T10] usb 4-1: config 3 interface 223 has no altsetting 1 [ 904.272320][ T10] usb 4-1: config 3 interface 25 has no altsetting 0 [ 904.389072][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.389089][ T10] usb 4-1: Product: syz [ 904.389098][ T10] usb 4-1: Manufacturer: syz [ 904.389106][ T10] usb 4-1: SerialNumber: syz [ 904.534503][T22465] futex_wake_op: syz.7.4697 tries to shift op by 144; fix this program [ 905.398547][T22480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 905.433393][ T10] usbtv 4-1:3.223: Fushicai USBTV007 Audio-Video Grabber [ 905.474617][ T10] usb 4-1: USB disconnect, device number 30 [ 905.509233][ T5692] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 905.579732][T22485] udevd[22485]: failed to execute '/lib/udev/v4l_id' 'v4l_id /dev/video103': Exec format error [ 905.668144][ T30] audit: type=1800 audit(1787968778.507:483): pid=22487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4706" name="nl80211" dev="sda1" ino=2041 res=0 errno=0 [ 905.689194][ T5692] usb 10-1: Using ep0 maxpacket: 16 [ 905.691661][ T5692] usb 10-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 905.710871][ T5692] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.710901][ T5692] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 905.710934][ T5692] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.753451][ T5692] usb 10-1: config 0 descriptor?? [ 906.098083][T22494] FAULT_INJECTION: forcing a failure. [ 906.098083][T22494] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 906.098116][T22494] CPU: 0 UID: 0 PID: 22494 Comm: syz.4.4709 Tainted: G L syzkaller #0 PREEMPT(full) [ 906.098136][T22494] Tainted: [L]=SOFTLOCKUP [ 906.098141][T22494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 906.098150][T22494] Call Trace: [ 906.098155][T22494] [ 906.098160][T22494] dump_stack_lvl+0xe8/0x150 [ 906.098180][T22494] should_fail_ex+0x3eb/0x540 [ 906.098200][T22494] prepare_alloc_pages+0x223/0x600 [ 906.098220][T22494] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 906.098238][T22494] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 906.098256][T22494] ? __pfx_policy_nodemask+0x10/0x10 [ 906.098273][T22494] alloc_pages_mpol+0x21e/0x390 [ 906.098288][T22494] alloc_pages_noprof+0xb1/0x2b0 [ 906.098300][T22494] get_zeroed_page_noprof+0x1a/0x90 [ 906.098316][T22494] mon_bin_open+0x236/0x530 [ 906.098331][T22494] chrdev_open+0x4d9/0x600 [ 906.098355][T22494] ? __pfx_chrdev_open+0x10/0x10 [ 906.098372][T22494] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 906.098391][T22494] ? __pfx_chrdev_open+0x10/0x10 [ 906.098406][T22494] do_dentry_open+0x816/0x1380 [ 906.098423][T22494] vfs_open+0x3b/0x340 [ 906.098432][T22494] ? path_openat+0x1428/0x1d60 [ 906.098449][T22494] path_openat+0x1443/0x1d60 [ 906.098473][T22494] do_file_open+0x23e/0x4a0 [ 906.098490][T22494] ? __pfx_do_file_open+0x10/0x10 [ 906.098515][T22494] ? _raw_spin_unlock+0x28/0x50 [ 906.098526][T22494] ? alloc_fd+0x651/0x6c0 [ 906.098544][T22494] do_sys_openat2+0x115/0x200 [ 906.098556][T22494] ? __pfx_do_sys_openat2+0x10/0x10 [ 906.098568][T22494] ? exc_page_fault+0x6a/0xc0 [ 906.098581][T22494] ? do_user_addr_fault+0xc4c/0x1340 [ 906.098600][T22494] __x64_sys_openat+0x138/0x170 [ 906.098613][T22494] do_syscall_64+0x166/0x520 [ 906.098625][T22494] ? trace_irq_disable+0x3b/0x140 [ 906.098642][T22494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.098652][T22494] ? clear_bhb_loop+0x70/0xc0 [ 906.098665][T22494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.098676][T22494] RIP: 0033:0x7fcde8b5e98e [ 906.098687][T22494] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 906.098697][T22494] RSP: 002b:00007fcde9a99b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 906.098709][T22494] RAX: ffffffffffffffda RBX: 00007fcde9a9a6c0 RCX: 00007fcde8b5e98e [ 906.098717][T22494] RDX: 0000000000101300 RSI: 00007fcde9a99c00 RDI: ffffffffffffff9c [ 906.098725][T22494] RBP: 00007fcde9a99c00 R08: 0000000000000000 R09: 0000000000000000 [ 906.098732][T22494] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 906.098739][T22494] R13: 00007fcde8e26038 R14: 00007fcde8e25fa0 R15: 00007ffee8e291e8 [ 906.098755][T22494] [ 906.436552][ T5692] macally 0003:060B:0001.0040: unknown main item tag 0x0 [ 906.445685][ T5692] macally 0003:060B:0001.0040: unknown main item tag 0x0 [ 906.445725][ T5692] macally 0003:060B:0001.0040: unknown main item tag 0x0 [ 906.445744][ T5692] macally 0003:060B:0001.0040: unknown main item tag 0x0 [ 906.445761][ T5692] macally 0003:060B:0001.0040: unknown main item tag 0x0 [ 906.445778][ T5692] macally 0003:060B:0001.0040: unknown main item tag 0x0 [ 906.445796][ T5692] macally 0003:060B:0001.0040: unknown main item tag 0x0 [ 906.445813][ T5692] macally 0003:060B:0001.0040: unknown main item tag 0x0 [ 906.445830][ T5692] macally 0003:060B:0001.0040: unknown main item tag 0x0 [ 906.529895][ T5692] macally 0003:060B:0001.0040: hidraw0: USB HID v20.00 Device [HID 060b:0001] on usb-dummy_hcd.9-1/input0 [ 906.603325][T22499] udevd[22499]: failed to execute '/lib/udev/fido_id' 'fido_id': Exec format error [ 906.939001][T22091] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 907.069028][T22091] usb 8-1: device descriptor read/64, error -71 [ 907.141394][ T31] INFO: task syz.0.3915:19688 blocked for more than 143 seconds. [ 907.141422][ T31] Tainted: G L syzkaller #0 [ 907.141438][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 907.141445][ T31] task:syz.0.3915 state:D stack:19248 pid:19688 tgid:19687 ppid:18260 task_flags:0x400140 flags:0x00080002 [ 907.141477][ T31] Call Trace: [ 907.141484][ T31] [ 907.141493][ T31] __schedule+0x17db/0x58f0 [ 907.141527][ T31] ? __pfx___schedule+0x10/0x10 [ 907.141546][ T31] ? schedule+0x90/0x2b0 [ 907.141560][ T31] schedule+0x164/0x2b0 [ 907.141574][ T31] schedule_preempt_disabled+0x13/0x30 [ 907.141587][ T31] __mutex_lock+0x7c1/0x1550 [ 907.141604][ T31] ? __mutex_lock+0x5d4/0x1550 [ 907.141620][ T31] ? bdev_open+0xde/0xd70 [ 907.141639][ T31] ? __pfx___mutex_lock+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 907.141660][ T31] ? disk_block_events+0xab/0x120 [ 907.141749][ T31] ? bdev_open+0xb0/0xd70 [ 907.141785][ T31] bdev_open+0xde/0xd70 [ 907.141815][ T31] blkdev_open+0x461/0x600 [ 907.141835][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 907.141852][ T31] do_dentry_open+0x816/0x1380 [ 907.141872][ T31] vfs_open+0x3b/0x340 [ 907.141883][ T31] ? path_openat+0x1428/0x1d60 [ 907.141902][ T31] path_openat+0x1443/0x1d60 [ 907.141928][ T31] do_file_open+0x23e/0x4a0 [ 907.141948][ T31] ? __pfx_do_file_open+0x10/0x10 [ 907.141975][ T31] ? _raw_spin_unlock+0x28/0x50 [ 907.141987][ T31] ? alloc_fd+0x651/0x6c0 [ 907.142006][ T31] do_sys_openat2+0x115/0x200 [ 907.142020][ T31] ? __se_sys_futex+0x3a8/0x450 [ 907.142035][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 907.142051][ T31] ? rcu_is_watching+0x16/0xb0 [ 907.142067][ T31] __x64_sys_openat+0x138/0x170 [ 907.142082][ T31] do_syscall_64+0x166/0x520 [ 907.142096][ T31] ? trace_irq_disable+0x3b/0x140 [ 907.142114][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.142127][ T31] ? clear_bhb_loop+0x70/0xc0 [ 907.142142][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.142155][ T31] RIP: 0033:0x7f4d73d5e98e [ 907.142167][ T31] RSP: 002b:00007f4d74c43b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 907.142183][ T31] RAX: ffffffffffffffda RBX: 00007f4d74c446c0 RCX: 00007f4d73d5e98e [ 907.142193][ T31] RDX: 0000000000000000 RSI: 00007f4d74c43c00 RDI: ffffffffffffff9c [ 907.142202][ T31] RBP: 00007f4d74c43c00 R08: 0000000000000000 R09: 0000000000000000 [ 907.142211][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 907.142220][ T31] R13: 00007f4d74026038 R14: 00007f4d74025fa0 R15: 00007ffee3ca9788 [ 907.142239][ T31] [ 907.142270][ T31] [ 907.142270][ T31] Showing all locks held in the system: [ 907.142279][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 907.142390][ T31] #0: ffffffff8ef5c720 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 907.142537][ T31] locks held by udevd/4980: 1, last CPU#0: [ 907.142548][ T31] #0: ffffffff8ef5c720 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 907.142589][ T31] locks held by kworker/0:5/5700: 5, on CPU#0: [ 907.142598][ T31] #0: ffff88801eac8940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 907.142636][ T31] #1: ffffc900049ffc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 907.142673][ T31] #2: ffff88802a4b51d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 907.223265][ T31] #3: ffff88805931c1d8 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xfc/0x9a0 [ 907.322074][ T31] #4: ffff8880803151a0 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 907.322108][ T31] locks held by kworker/0:9/5776: 3, on CPU#0: [ 907.322117][ T31] #0: ffff88813ff43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 907.322145][ T31] #1: ffffc90004befc40 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 907.322171][ T31] #2: ffffffff8edf7cc8 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_lock_wait+0x10b/0x220 [ 907.322199][ T31] locks held by udevd/6780: 1, on CPU#0: [ 907.322206][ T31] #0: ffff888026811350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 907.322274][ T31] locks held by syz.0.3915/19688: 1, on CPU#1: [ 907.322282][ T31] #0: ffff888026811350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 907.322327][ T31] locks held by syz.1.4012/20227: 1, on CPU#0: [ 907.322335][ T31] #0: ffff8880322c4460 (sb_writers#3){.+.+}-{0:0}, at: direct_splice_actor+0x49/0x160 [ 907.322460][ T31] locks held by syz.6.4285/21123: 1, on CPU#0: [ 907.322469][ T31] #0: ffff88802a4b51d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 907.322589][ T31] locks held by kworker/0:7/22091: 6, on CPU#0: [ 907.322597][ T31] #0: ffff88801eac8940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 907.322624][ T31] #1: ffffc90004407c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 907.322650][ T31] #2: ffff88802a56b1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 907.322677][ T31] #3: ffff88801bbca568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 907.322703][ T31] #4: ffff88802a3d2b60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 907.322729][ T31] #5: ffffffff8fd10aa8 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14d/0x1810 [ 907.322756][ T31] locks held by syz.9.4701/22473: 3, on CPU#0: [ 907.322764][ T31] #0: ffff8880760fd880 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 907.322799][ T31] #1: ffff88801bbcc260 (sk_lock-AF_PPPOX){+.+.}-{0:0}, at: pptp_release+0x51/0x300 [ 907.322872][ T31] #2: ffffffff8ef62ae8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 907.322902][ T31] locks held by syz.4.4713/22506: 1, last CPU#0: [ 907.322909][ T31] #0: ffff8880762ef630 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0x19a/0x520 [ 907.322974][ T31] [ 907.322978][ T31] ============================================= [ 907.322978][ T31] [ 907.322984][ T31] NMI backtrace for cpu 0 [ 907.322994][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 907.323008][ T31] Tainted: [L]=SOFTLOCKUP [ 907.323012][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 907.323019][ T31] Call Trace: [ 907.323024][ T31] [ 907.323029][ T31] dump_stack_lvl+0xe8/0x150 [ 907.323045][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 907.323090][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 907.323107][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 907.323124][ T31] sys_info+0x135/0x170 [ 907.323137][ T31] watchdog+0xfd7/0x1030 [ 907.323157][ T31] ? watchdog+0x1c7/0x1030 [ 907.323175][ T31] kthread+0x38b/0x480 [ 907.323190][ T31] ? __pfx_watchdog+0x10/0x10 [ 907.323204][ T31] ? __pfx_kthread+0x10/0x10 [ 907.323218][ T31] ret_from_fork+0x514/0xb70 [ 907.323235][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 907.323249][ T31] ? __switch_to+0xc89/0x1420 [ 907.323264][ T31] ? __pfx_kthread+0x10/0x10 [ 907.323279][ T31] ret_from_fork_asm+0x1a/0x30 [ 907.323300][ T31] [ 907.323313][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 907.865080][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 907.875732][ T31] Tainted: [L]=SOFTLOCKUP [ 907.880029][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 907.890057][ T31] Call Trace: [ 907.893317][ T31] [ 907.896227][ T31] vpanic+0x56d/0xa60 [ 907.900197][ T31] ? __pfx_vpanic+0x10/0x10 [ 907.904681][ T31] ? console_srcu_read_unlock+0x3a/0x60 [ 907.910255][ T31] panic+0xc5/0xd0 [ 907.913954][ T31] ? __pfx_panic+0x10/0x10 [ 907.918351][ T31] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 907.923441][ T31] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 907.929575][ T31] watchdog+0x1030/0x1030 [ 907.933890][ T31] ? watchdog+0x1c7/0x1030 [ 907.938285][ T31] kthread+0x38b/0x480 [ 907.942336][ T31] ? __pfx_watchdog+0x10/0x10 [ 907.946988][ T31] ? __pfx_kthread+0x10/0x10 [ 907.951555][ T31] ret_from_fork+0x514/0xb70 [ 907.956122][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 907.961210][ T31] ? __switch_to+0xc89/0x1420 [ 907.965864][ T31] ? __pfx_kthread+0x10/0x10 [ 907.970434][ T31] ret_from_fork_asm+0x1a/0x30 [ 907.975183][ T31] [ 907.978265][ T31] Kernel Offset: disabled [ 907.982581][ T31] Rebooting in 86400 seconds..