last executing test programs: 27m33.822549134s ago: executing program 32 (id=930): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000640)={0x0, &(0x7f0000000000)=[@code={0x1, 0x6b, {"470f01c566baf80cb800e33687ef66bafc0cb800180000efc461bc55a52f5cf93145a4f343a6430f01cbb8010000000f01d9f30f0964f2d88c2005000000c7442400fc3df4c0c744240200200000c7442406000000000f011c24"}}, @cpuid={0x2, 0x18, {0xbfa}}, @code={0x1, 0x5c, {"b9050b0000b800000000ba000000800f303e0f01c3660f56808907a5ad66420f3881895c40bb76f30f1ef8f2450f2b933ae80000470f00519165420f01c966440f383ac565654d0fc7685c"}}, @cpuid={0x2, 0x18, {0x6, 0xa}}, @code={0x1, 0x73, {"f3450fc77162c744240084000000c74424020d630000c7442406000000000f011424460f2204440f01bd985c0000670f01f366400f38818e000000000fc718c4e381693ba9c74424009c000000c744240282285002ff2c248f8868cd850000000015"}}, @cpuid={0x2, 0x18, {0xf3b, 0xc}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x2, 0x18, {0xd, 0x5}}, @uexit={0x0, 0x18, 0x7}, @code={0x1, 0x55, {"0f20e035002000000f22e0660f381707460f01c866b8b8008ed08f6978818706000000c4017c2965e466b82c018ed066ba4000b00dee66b8b3000f00d0b9570800000f32"}}, @cpuid={0x2, 0x18, {0x9, 0x101}}, @code={0x1, 0x54, {"66b82f018ec8b9800000c00f3235000400000f300f23fd440f20c0350f000000440f22c0430f01c5433400f346aec4217c2e7c750c66b803018ee0410fc7bdf8ffffff"}}, @cpuid={0x2, 0x18, {0xfffffffb, 0x5}}, @cpuid={0x2, 0x18, {0x600, 0x6}}, @code={0x1, 0x80, {"66460f284f034d0fc72dab000000b805000000b9004000000f01d9b9800000c00f3235000800000f300f35c74424008000c0fec7442402811c0000c7442406000000000f011c2436660fe475e42ef3410fc733c7442400de000000c7442402a2000000ff1c240f38cca4e100780000"}}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x60, {"c4027d79a3000001003e3e670f01b665000000c4a3856f430f034a0fc79e7609000066ba210066ed66b868000f00d066baf80cb80e810381ef66bafc0c66edc4227913bd00800000440f22c44208e4"}}, @cpuid={0x2, 0x18, {0x8, 0x88f}}, @cpuid={0x2, 0x18, {0x6a, 0x7}}, @uexit={0x0, 0x18, 0x9}, @code={0x1, 0x4c, {"460fc79e29000000262e420fc79b00000080b9b30200000f3266660fe2400f0f300fc7635d0f01df460f01cf66ba4200ed66baa000b8b1510000ef"}}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x6a}, @uexit={0x0, 0x18, 0x8001}, @cpuid={0x2, 0x18, {0x5, 0x4}}, @code={0x1, 0x55, {"44ad8fc9c09156942e26460fc79a3fe29803460f99f3c4a285ada0ae4c0000461c000f20c035040000000f22c066baa100edb9800000c00f3235004000000f30450f013b"}}, @code={0x1, 0x59, {"450fb23f64660f7e4f05b9800000c00f3235000400000f30263e450f224166b8dc000f00d00fc7acec00000000c4214dd4eac481901577d166b8e9000f00d8c4e21bf79b0000c0fe"}}, @cpuid={0x2, 0x18, {0x5, 0x7}}, @cpuid={0x2, 0x18, {0x5, 0x8}}, @code={0x1, 0x67, {"3e0f21c1b805000000b9009800000f01d90f01c20f20e035000020000f22e02e0f381c0bc4e16de50cc436263e2e0f01c36447d3850f0000004581848c22a2000000980000b9ee080000b8f9860000ba000000000f30"}}, @uexit={0x0, 0x18, 0x1}], 0x61c}) (async) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000640)={0x0, &(0x7f0000000000)=[@code={0x1, 0x6b, {"470f01c566baf80cb800e33687ef66bafc0cb800180000efc461bc55a52f5cf93145a4f343a6430f01cbb8010000000f01d9f30f0964f2d88c2005000000c7442400fc3df4c0c744240200200000c7442406000000000f011c24"}}, @cpuid={0x2, 0x18, {0xbfa}}, @code={0x1, 0x5c, {"b9050b0000b800000000ba000000800f303e0f01c3660f56808907a5ad66420f3881895c40bb76f30f1ef8f2450f2b933ae80000470f00519165420f01c966440f383ac565654d0fc7685c"}}, @cpuid={0x2, 0x18, {0x6, 0xa}}, @code={0x1, 0x73, {"f3450fc77162c744240084000000c74424020d630000c7442406000000000f011424460f2204440f01bd985c0000670f01f366400f38818e000000000fc718c4e381693ba9c74424009c000000c744240282285002ff2c248f8868cd850000000015"}}, @cpuid={0x2, 0x18, {0xf3b, 0xc}}, @uexit={0x0, 0x18, 0x7}, @uexit={0x0, 0x18, 0x2}, @cpuid={0x2, 0x18, {0xd, 0x5}}, @uexit={0x0, 0x18, 0x7}, @code={0x1, 0x55, {"0f20e035002000000f22e0660f381707460f01c866b8b8008ed08f6978818706000000c4017c2965e466b82c018ed066ba4000b00dee66b8b3000f00d0b9570800000f32"}}, @cpuid={0x2, 0x18, {0x9, 0x101}}, @code={0x1, 0x54, {"66b82f018ec8b9800000c00f3235000400000f300f23fd440f20c0350f000000440f22c0430f01c5433400f346aec4217c2e7c750c66b803018ee0410fc7bdf8ffffff"}}, @cpuid={0x2, 0x18, {0xfffffffb, 0x5}}, @cpuid={0x2, 0x18, {0x600, 0x6}}, @code={0x1, 0x80, {"66460f284f034d0fc72dab000000b805000000b9004000000f01d9b9800000c00f3235000800000f300f35c74424008000c0fec7442402811c0000c7442406000000000f011c2436660fe475e42ef3410fc733c7442400de000000c7442402a2000000ff1c240f38cca4e100780000"}}, @uexit={0x0, 0x18, 0x5}, @code={0x1, 0x60, {"c4027d79a3000001003e3e670f01b665000000c4a3856f430f034a0fc79e7609000066ba210066ed66b868000f00d066baf80cb80e810381ef66bafc0c66edc4227913bd00800000440f22c44208e4"}}, @cpuid={0x2, 0x18, {0x8, 0x88f}}, @cpuid={0x2, 0x18, {0x6a, 0x7}}, @uexit={0x0, 0x18, 0x9}, @code={0x1, 0x4c, {"460fc79e29000000262e420fc79b00000080b9b30200000f3266660fe2400f0f300fc7635d0f01df460f01cf66ba4200ed66baa000b8b1510000ef"}}, @uexit={0x0, 0x18, 0x8}, @uexit={0x0, 0x18, 0x6a}, @uexit={0x0, 0x18, 0x8001}, @cpuid={0x2, 0x18, {0x5, 0x4}}, @code={0x1, 0x55, {"44ad8fc9c09156942e26460fc79a3fe29803460f99f3c4a285ada0ae4c0000461c000f20c035040000000f22c066baa100edb9800000c00f3235004000000f30450f013b"}}, @code={0x1, 0x59, {"450fb23f64660f7e4f05b9800000c00f3235000400000f30263e450f224166b8dc000f00d00fc7acec00000000c4214dd4eac481901577d166b8e9000f00d8c4e21bf79b0000c0fe"}}, @cpuid={0x2, 0x18, {0x5, 0x7}}, @cpuid={0x2, 0x18, {0x5, 0x8}}, @code={0x1, 0x67, {"3e0f21c1b805000000b9009800000f01d90f01c20f20e035000020000f22e02e0f381c0bc4e16de50cc436263e2e0f01c36447d3850f0000004581848c22a2000000980000b9ee080000b8f9860000ba000000000f30"}}, @uexit={0x0, 0x18, 0x1}], 0x61c}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000680)={0x4, 0x0, [{0x29b, 0x0, 0x3}, {0x9f8, 0x0, 0x4}, {0x610, 0x0, 0x1}, {0x40e, 0x0, 0x7}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)) 25m29.866871941s ago: executing program 33 (id=1613): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) creat(0x0, 0x4) prlimit64(0x0, 0x7, 0x0, 0x0) (async) prlimit64(0x0, 0x7, 0x0, 0x0) pipe2(0x0, 0x0) fadvise64(r0, 0x1000, 0x1, 0x2) (async) fadvise64(r0, 0x1000, 0x1, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x10000) (async) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x10000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000080)={0x3, &(0x7f0000000200)=[{}, {@fixed}, {}]}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000002, 0x10, r1, 0x44104000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) dup(r2) (async) r3 = dup(r2) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x4580b000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x4580b000) futex(&(0x7f000000cffc), 0x3, 0x0, 0x0, &(0x7f0000048000), 0x2) 22m3.234621028s ago: executing program 2 (id=2918): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r2 = socket$inet6(0xa, 0x802, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r1, @ANYRES16=r2], 0x1000f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) 22m2.474663664s ago: executing program 2 (id=2919): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003380)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x17, 0x0, 0x1, [@generic='}']}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) write$6lowpan_enable(r0, &(0x7f00000000c0)='0', 0x1) 22m2.41922571s ago: executing program 2 (id=2920): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x5, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Di', 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x0, 0x80000088, 0xc000067}, 0x2c) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) 22m2.275644848s ago: executing program 2 (id=2921): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x2021040, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 22m2.162403855s ago: executing program 2 (id=2922): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000001180)='pids.max\x00', 0x2, 0x0) (async) r4 = socket(0x28, 0x5, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x4) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0xe, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x34, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x7, 0x5, 0x4, 0x1, 0x40], [0x10, 0x9, 0x8000012d, 0x8004, 0x8000005, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0x10, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2af, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x0, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x7, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0xffffff6a, 0x3, 0x1, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120001, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0xf41, 0x0, 0xb9, 0xce7, 0x1ff, 0xffffffff, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0xd4cf, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x0, 0x8, 0x6, 0x226, 0x5, 0x4005, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb0e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) r6 = socket$kcm(0xa, 0x3, 0x73) sendmsg$inet(r6, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='-', @ANYRESDEC=r1], 0x8b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x2, 0x2d, &(0x7f0000000780)=ANY=[@ANYBLOB="12011001ec037e08fb09beeb8dd4010203af09021b00010700f0090904"], 0x0) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000001c0)={r8, 0x0, 0x5, 0x63, 0x0, 0xb}, 0x14) (async) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000002c0)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x50, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) (async) bind$inet6(r7, 0x0, 0x0) (async) setsockopt$sock_int(r7, 0x1, 0x24, &(0x7f0000000080)=0x80, 0x4) 22m1.826992999s ago: executing program 2 (id=2923): ptrace$setregs(0xd, 0x0, 0x100, 0x0) syz_clone3(0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x10, 0x56, 0x601}, 0x10}], 0x1, 0x0, 0x0, 0xea}, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0xfffffffc, 0x0, &(0x7f0000000280)=""/150, &(0x7f0000000100)=""/47, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r3 = dup(r0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f00000000c0)={0x8}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000974000/0x3000)=nil, 0x3000, 0x0, 0x10010, r4, 0x45809000) futex(&(0x7f000000cffc), 0x3, 0x0, 0x0, &(0x7f0000048000), 0x2) timer_create(0x2, 0x0, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_settime(r8, 0x0, &(0x7f00000001c0)={{}, {r9, r10+60000000}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}, {r11, r12+10000000}}, &(0x7f0000000080)) 22m1.631406043s ago: executing program 34 (id=2923): ptrace$setregs(0xd, 0x0, 0x100, 0x0) syz_clone3(0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)={0x10, 0x56, 0x601}, 0x10}], 0x1, 0x0, 0x0, 0xea}, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x1, 0xfffffffc, 0x0, &(0x7f0000000280)=""/150, &(0x7f0000000100)=""/47, 0xf000}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r3 = dup(r0) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f00000000c0)={0x8}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000974000/0x3000)=nil, 0x3000, 0x0, 0x10010, r4, 0x45809000) futex(&(0x7f000000cffc), 0x3, 0x0, 0x0, &(0x7f0000048000), 0x2) timer_create(0x2, 0x0, &(0x7f0000000180)=0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timer_settime(r8, 0x0, &(0x7f00000001c0)={{}, {r9, r10+60000000}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x77359400}, {r11, r12+10000000}}, &(0x7f0000000080)) 16m11.942805404s ago: executing program 0 (id=4871): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000180)={'\x00', 0x9, 0x3e, 0xfffffff7, 0xfff, 0x0, 0x0}) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x2, 0x0, 0x6d2, 0x9, r1}) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x800}, 0x8) (rerun: 32) ioprio_set$uid(0x3, 0x0, 0x0) (async) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x20102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioprio_get$pid(0x1, r2) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r3, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/29, 0x1d}, {&(0x7f0000000400)=""/98, 0x62}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f0000000600)=""/53, 0x35}], 0x5, &(0x7f00000006c0)=""/105, 0x69}, 0x4}], 0x1, 0x2000, 0x0) (async, rerun: 32) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) (rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x4, 0x2, 0x3, 0xa, 0x1ff}, 0x20) (async, rerun: 64) sendfile(r0, r0, 0x0, 0x7ffff000) (async, rerun: 64) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000040)={0x11}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r4}) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'veth0_vlan\x00', 0x8000}) (async, rerun: 32) r7 = signalfd(r6, &(0x7f0000000200)={[0x8001]}, 0x8) (rerun: 32) ioctl$SOUND_MIXER_READ_CAPS(r7, 0x80044dfc, &(0x7f0000000280)) 16m11.836484655s ago: executing program 0 (id=4872): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x26}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 16m11.771039411s ago: executing program 0 (id=4873): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, 0x0) (async, rerun: 64) ioprio_set$uid(0x3, 0x0, 0x6000) (async, rerun: 64) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) sendfile(r0, r0, 0x0, 0xb) (async, rerun: 64) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000700), &(0x7f0000000ac0)=0xfffffffffffffd1c) (async, rerun: 64) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000b00)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007b40)=ANY=[@ANYBLOB="200000002200010a000000000000000007000002"], 0x20}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) (async) r4 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) setxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0\x00', &(0x7f0000000440), &(0x7f0000000480)='./file0\x00', 0x8, 0x7) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000140)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x10000008) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0xc4}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000aeec00000a20000000000a03000000000000000000070000000900010073797a30000000005c000000373a166800000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000031200011800a00010071756f74da29f90e3b4c61000000100002800c0001400000000000000008140000001100010000000000000000000084000a"], 0xa4}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) sendmsg$inet(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="d698f84a966608a32aac97a193b8317c9ea40bb1919d33bbc85a3912bcbde001683814c4be5b452bb4bb25249af5c043a36e0c01e7fdc4a8a45992f587a07bedce983ddbcae5b9d3c7691098513b477312666f3ac006000000adbabe160f059033dd4b6de6f0fcc2c510198bd56a3ea3a5bd957e90e1c48d50284698ddcad05e7fe321b98424e11c49d48667d17ae1090bb7617cf1bdb2723cc0f483b7da56c14a0d193af8e742e0c389404cfc5996a5b5fe22ecec76a66324752c0ac03ddc263163ea60c9070b0000", 0xc9}, {&(0x7f00000005c0)="f98b09a6535e3366be513664a72b28029b5ade996cf63be5dbfd458aa97ad6a2823a62e32703a207dcf60479069a68e2748b65035584f0e0bd77", 0x3a}, {&(0x7f0000000600)="d90cd9e766e407cd92bcc92408694a8e9e37d49694f127ed3d705d8565f451479bd9aec6bd283728389abba9365623983f2e869d57a9c350223564d3a2d792e4f78d854f009e32f0d79af48913678604037fde15f97d83c85e1853d582d6e9dbeb9317edc738f71aec15c0c17de549450bc75288aa99b111e13507fc41d9d5386f708288f3da0fee2b649a27cdd3157c36f9", 0x92}, {&(0x7f00000006c0)="d0", 0x1}, {&(0x7f00000001c0)="efc5288ead973644d607000000fbd2e0670000000000", 0x16}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000000740)="3d5222dff1fe61ab215c9a30327840a4db82c53a318e91c3abff18577f4738af278dfbbca8c4c9ed349ba248747b8363d7854bb632eb03e9867b46b8f0d3890392121154d595876b6992b36d3859e2467e870a11b14f2668a2887ebcf4330340fdecfe1658a144e6704414d0093ae71f20168a99551964b8553a930c26636eced8ab336ec79065f7c02f1373e4faa035c32b17f4ebdfcd3a8e303eabc29cbb259e9b4dc535be0f075f31422b317ffa12a05eb1afb3b5cf413804e8d72ce9ea4e8ef7fb882f82143f9902eb7b02a2ce57c568e62d28fa34db4ba31693d43dfd6170d7b59efd1c", 0xe6}, {&(0x7f0000000840)="28f80e76e2ad97d9d1aaba0d862578e736bd1f2a2a80a71390c0bdd6757fa91e55241daa867761a4236ada3edbd463c2e11ee95c9fee6d4a128243750ea62ee881e032b6fc6ba3d7646911c26cf2c374005ece0038f2e53844ae885cbda5f56b2ddaaec14ffe4dadbabe9bc24b78628d043711a790e23498e4f5f69d87fdbbb2d4fb6f4aaa756361f8911f217bb9a4288bdc145cbc3c9936a19cb49c7415fb637ea18b07318105d73702742bedb1cb87b3dd2d2bd0b7a7560ca2b8302dbcab9d049689f2297316e482bc891145fe6ba5561f9f70b760d28293e674113957160f7f7bb2aa488b50eb0e014fa9b419125bb7a04f469df9c998540ffa778646", 0xfe}], 0x8, &(0x7f00000009c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x30}, 0x8800) (async) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x1ae7, 0x9001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf, 0x60, 0x8, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x5, 0x0, {0x9, 0x21, 0xfffb, 0x3, 0x1, {0x22, 0x9a}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x3, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xaa, 0xb, 0x5}}]}}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x19, 0x0, 0x80, 0x40}, 0x13, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f1300020710021602039f1521b80b2d6261"]}) (async, rerun: 32) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000b80)="9686430567b32e1723907d9490fdcb47d9490682d1328eed0417ef4f88ac3e8ef8aa59119d50c0b04c00a1bbfe696bb3cfda5f0aaad88b6e88b97bde11910979547fd039a195352b5d33299bfee27722253101596e78a6d6aedcee9f99d48882c55858ce0ab58d4595c9c95158f7e25cdee1ced5844e238216e61f964bc8a56a42b01b2456bbdc051248342f8b0b363259cc6a9503ba90") (async, rerun: 32) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) 16m11.622801134s ago: executing program 0 (id=4874): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x8e}, {{0x0, 0x0, 0x0}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/216, 0xd8}, {&(0x7f0000000b80)=""/4122, 0x101a}, {&(0x7f00000000c0)=""/99, 0x63}, {&(0x7f0000000440)=""/207, 0xcf}, {&(0x7f0000000540)=""/204, 0xcc}], 0x5}, 0x6}], 0x4, 0x20, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0x9b, 0x40000ffffffff, 0x9, 0xfffffffffffffff7, 0x6, 0x3000000002, 0xd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m11.528311566s ago: executing program 0 (id=4875): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) (async) rename(&(0x7f0000000040)='./file2\x00', &(0x7f0000000080)='./file1\x00') (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000140)) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285629, &(0x7f0000000180)={0x0, 0x0, 0x386a, '\x00', 0x0}) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) write$bt_hci(r1, &(0x7f0000000100)={0x1, @create_logical_link={{0x438, 0x21}, {0x1, {0x7, 0xb, 0x6, 0x7, 0x57f, 0xfffffffa}, {0xa, 0x1, 0x4, 0x13, 0x40}}}}, 0x25) 16m11.418894508s ago: executing program 0 (id=4877): mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='gfs2meta\x00', 0xa0c401, 0x0) 15m55.648930997s ago: executing program 35 (id=4877): mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='gfs2meta\x00', 0xa0c401, 0x0) 11m22.20867416s ago: executing program 3 (id=6634): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x26}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a0018000000000003e700001c005a8018000180140003"], 0x4c}}, 0x0) 11m22.077916958s ago: executing program 3 (id=6635): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0) (async) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x5}) 11m21.914720851s ago: executing program 3 (id=6636): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x26, 0x80000, 0x5, &(0x7f0000000600)) fsopen(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) dup(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$IPC_INFO(r1, 0x3, 0x0) clock_gettime(0x6, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x52418e567e5a9d8b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 11m19.271337476s ago: executing program 3 (id=6657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) (async) setpgid(0x0, r2) (async) chdir(&(0x7f0000000380)='./bus\x00') (async) mount$afs(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x400, 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x8000, 0x0) (async) read$watch_queue(r1, &(0x7f0000000200)=""/170, 0xaa) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x2c, 0x2, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xde3}, @CTA_STATUS_MASK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd7b463f9eab17a7e}, 0x4800) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x1c000, 0xf, 0x11b5, 0x3, 0x3]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000090) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x2, 0x0, 0x8, 0x8, 0x4}, {0x4}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x80, 0x32}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x8}}, 0xe8) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) (async) r8 = syz_io_uring_setup(0x1b49, &(0x7f0000000180)={0x0, 0xffffffff, 0x30c0, 0x1, 0x18b}, &(0x7f0000000100), &(0x7f0000000140)) (async) r9 = epoll_create(0xaf2) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000080)={0xe000200f}) r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000c401"]) 11m19.02199493s ago: executing program 3 (id=6659): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x8e}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/216, 0xd8}, {&(0x7f0000000b80)=""/4122, 0x101a}, {&(0x7f00000000c0)=""/99, 0x63}, {0x0}, {&(0x7f0000000540)=""/204, 0xcc}], 0x5}, 0x6}], 0x2, 0x20, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0x9b, 0x40000ffffffff, 0x9, 0xfffffffffffffff7, 0x6, 0x3000000002, 0xd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m18.442060384s ago: executing program 3 (id=6662): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a02, 0x0) sync_file_range(r0, 0x3, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r1, &(0x7f0000000180)={0x27}, 0x14) sendto(r1, &(0x7f0000000000)="cbb6e25ac05aace060785db5ee428b1738dfe0d32d10fb420dd94588af81759667754e78e73cba09793708e8947c044f7a33eda139266feef895a594c3cb4c7396c14b5d4e0575777725c5c42d7f6c5110341a9f5205d395c53678b8aff011ba469206e1139117fc930730b821dc68872508424a119336f06439b6", 0x7b, 0x4008840, &(0x7f00000000c0)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa0}}, 0x80) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x3, 0x100) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r3}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) recvmsg$inet_nvme(0xffffffffffffffff, 0x0, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00', 0x0, 0x0, 0x7f, 0x0, 0x0, 0x44201a6, r5}) r7 = syz_open_dev$media(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) poll(&(0x7f0000000100)=[{r8, 0x4}, {r7, 0x8200}], 0x2, 0x81) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_loaded', 0x0, 0x0) preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000080)=""/85, 0x55}], 0x1, 0x0, 0x0) ioctl$UFFDIO_WAKE(r9, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000017000/0x3000)=nil, 0x3000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x105400, 0x0) connect$802154_dgram(r10, &(0x7f0000000200)={0x24, @none={0x0, 0x1}}, 0x14) 11m17.858855649s ago: executing program 36 (id=6662): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a02, 0x0) sync_file_range(r0, 0x3, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r1, &(0x7f0000000180)={0x27}, 0x14) sendto(r1, &(0x7f0000000000)="cbb6e25ac05aace060785db5ee428b1738dfe0d32d10fb420dd94588af81759667754e78e73cba09793708e8947c044f7a33eda139266feef895a594c3cb4c7396c14b5d4e0575777725c5c42d7f6c5110341a9f5205d395c53678b8aff011ba469206e1139117fc930730b821dc68872508424a119336f06439b6", 0x7b, 0x4008840, &(0x7f00000000c0)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa0}}, 0x80) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write(0xffffffffffffffff, 0x0, 0x0) socket(0x840000000002, 0x3, 0x100) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r3}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) recvmsg$inet_nvme(0xffffffffffffffff, 0x0, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, @rand_addr=' \x01\x00', 0x0, 0x0, 0x7f, 0x0, 0x0, 0x44201a6, r5}) r7 = syz_open_dev$media(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) poll(&(0x7f0000000100)=[{r8, 0x4}, {r7, 0x8200}], 0x2, 0x81) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kexec_loaded', 0x0, 0x0) preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000080)=""/85, 0x55}], 0x1, 0x0, 0x0) ioctl$UFFDIO_WAKE(r9, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000017000/0x3000)=nil, 0x3000}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x105400, 0x0) connect$802154_dgram(r10, &(0x7f0000000200)={0x24, @none={0x0, 0x1}}, 0x14) 5m38.466740386s ago: executing program 7 (id=8785): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x1e2e81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000780)={0xfffffffe, 0x0, 0x0, 'queue0\x00', 0x48}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client0\x00', 0xffffffff80000004, "00000000ffffffe3", "e4a18560d99f00", 0x800000, 0xfffffffc}) write$sndseq(r2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"a357b6b140cbb6215dd33459"}}], 0xfffffee4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="7d1fa591", 0x4}], 0x1) r5 = accept4$unix(r3, 0x0, 0x0, 0x800) recvfrom$unix(r5, &(0x7f0000000240)=""/148, 0x94, 0x10100, 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000000)) 5m38.442662822s ago: executing program 7 (id=8786): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000) (async) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)={0x18, 0x55, 0x1, 0x70bd2b, 0x0, {0x2}, [@typed={0x4, 0x120}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) socket$inet(0x2, 0x800, 0x2) 5m38.259414406s ago: executing program 7 (id=8787): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000200)) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 5m38.154212909s ago: executing program 7 (id=8789): syz_usb_connect(0x2, 0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bd3619204433f0224def010203010902400001020000000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001340)={0x84, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x40015b13, 0x0) move_mount(r0, &(0x7f00000001c0)='./file0/../file0/file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0/file0\x00', 0x103) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000001380)='./file0\x00', 0x12c) mount(&(0x7f0000001400)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='nilfs2\x00', 0x1f008, 0x0) mmap$xdp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x80010, r3, 0x100000000) 5m36.624376394s ago: executing program 7 (id=8792): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0x41, "0062ba7d82000000000000000000f7ffffff00"}) (async, rerun: 32) r2 = syz_open_pts(r1, 0x0) (rerun: 32) r3 = dup3(r2, r1, 0x0) read$FUSE(r3, &(0x7f0000000e00)={0x2020}, 0x2020) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000200)={0x0, 0xfffffefc, 0x7c, 0xfffffffa, 0xc6, "84b53f5dc1d996eee7d479db86fe609ea2029b", 0x7f, 0x2}) (async) ioctl$KDSETMODE(r0, 0x4b63, 0x4) (async) creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 5m36.387506075s ago: executing program 7 (id=8793): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x802, 0x9141, 0x0, 0x0, 0xf42, 0x8}, {0x0, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@multicast1, 0x3502, 0x0, 0x2, 0x4, 0x0, 0x100, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x6d8, 0x513000) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000795000/0x3000)=nil}) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1c984a15, 0x8010, r0, 0x7dffb000) 5m35.825066599s ago: executing program 37 (id=8793): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x4e20, 0x0, 0x4, 0x0, 0x2}, {0x0, 0x802, 0x9141, 0x0, 0x0, 0xf42, 0x8}, {0x0, 0x0, 0x0, 0xfffefffffffffffe}, 0x0, 0x0, 0x1, 0x0, 0x4}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@multicast1, 0x3502, 0x0, 0x2, 0x4, 0x0, 0x100, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x6d8, 0x513000) ioctl$DRM_IOCTL_RM_MAP(r3, 0x4028641b, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000795000/0x3000)=nil}) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1c984a15, 0x8010, r0, 0x7dffb000) 2m55.097406172s ago: executing program 6 (id=9518): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x441202, 0x0) r0 = syz_pidfd_open(0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0x78ef2000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x5, 0x3, 0x0, 0x0, "f759ca14860e4041836dd400", '\x00\x00\a\x00', "0300", "e859ad13", ["1c9600", "808e8889dc7fb3eacf821b00", "2971088d5453005a4e5200", "ff812500004000"]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400"], 0x18, 0x81}, 0x4c800) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000000), 0x4) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x42) read$FUSE(r5, 0x0, 0x0) write$FUSE_INIT(r5, 0x0, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = fanotify_init(0x8, 0x80000) fanotify_mark(r7, 0x105, 0x4800003a, r6, 0x0) linkat(r5, &(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000140)='./file0\x00', 0x2400) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)={0x0, 0xc19, 0x0, 0x0, 0x8, "7f12ddc1517600"}) syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xebff) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r8, &(0x7f0000e15000)={0x2, 0x4e20, @local}, 0x10) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r9, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) recvmsg$unix(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10120) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000080)=0x80, 0x4) 2m54.100957591s ago: executing program 6 (id=9527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0x1, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="08000800070001000000140000004502000000000000000690780a010100ac1414bb0000000000000000000000000000000300004e2200004e220000000100000001000000020000000200000001"], 0x4e) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000400)) (async) madvise(&(0x7f0000231000/0x2000)=nil, 0x2000, 0x10) (async) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000180)='1\x00', 0x2) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) (async) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (async) setpriority(0x0, 0xff, 0xffffffffffffffff) (async) r5 = socket$nl_crypto(0x10, 0x3, 0x15) (async) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e00000001500000000000000000000006a6974746572656e74726f70795f726e6700000000020000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000bfeee3b30000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000722874205d692a50be1f5bad30000000000000"], 0xe0}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x0) sendmsg$nl_crypto(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0xe4a2c1117fc38531}, 0x4001) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) prlimit64(0x0, 0x2, &(0x7f0000000440)={0x6, 0x1000000000000000}, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) (async) tee(r0, r5, 0x2, 0xd) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKTRACESETUP(r6, 0xc0481273, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') 2m53.852047053s ago: executing program 6 (id=9530): syz_usb_connect(0x2, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a237ef10fd0b27014a7b0102030109022b0001000000000904"], 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 2m52.423106254s ago: executing program 6 (id=9538): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) mlock(&(0x7f0000663000/0x3000)=nil, 0x3000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) munmap(&(0x7f00008b2000/0x1000)=nil, 0x1000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ifreq(r1, 0x89a3, 0x0) shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x4000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000200)={&(0x7f000049b000/0x3000)=nil, &(0x7f000059e000/0x2000)=nil, 0x3000, 0x7}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r3, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[], 0x2e8}}], 0x2, 0x0) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000180), 0x13f, 0x9}}, 0x20) r5 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000f20000/0x4000)=nil) shmctl$SHM_INFO(r5, 0xe, &(0x7f0000000000)=""/210) pwritev(r0, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x7f, 0xffffdffe) 2m52.190494551s ago: executing program 6 (id=9542): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000040)={0x8, 0x120, 0xfa00, {0x2, {0x2, 0x50, "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", 0x76, 0x2, 0xdf, 0xf, 0x6c, 0x5, 0x5, 0x1}}}, 0x128) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000380)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r1, 0x1}}, 0x18) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000440)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406400, &(0x7f0000002580)={0x80000001, 0x4, 0x0, 0x1000, &(0x7f0000000480)=""/4096, 0xc7, &(0x7f0000001480)=""/199, 0x1000, &(0x7f0000001580)=""/4096}) (async) socket$kcm(0x29, 0x7, 0x0) (async) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000025c0), 0x210000, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000002600)={0xffff, 0x31364d59, 0x2, @discrete={0xd, 0xffffff00}}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002640), 0x80000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000026c0), r4) (rerun: 32) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000027c0)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x40100000}, 0xc, &(0x7f0000002780)={&(0x7f0000002700)={0x78, r6, 0x380, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x708}]}, @IPVS_CMD_ATTR_DAEMON={0x40, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wlan1\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xdd6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x40048c4) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002840), r3) sendmsg$IPVS_CMD_DEL_DAEMON(r5, &(0x7f0000002940)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x44, r7, 0x900, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xbf}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x260000c0) (async, rerun: 32) ioctl$HIDIOCSREPORT(r4, 0x400c4808, &(0x7f0000002980)={0x3, 0x200, 0x8}) (rerun: 32) syz_genetlink_get_family_id$wireguard(&(0x7f00000029c0), r4) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000002a40)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000002a00), 0x13f, 0x9}}, 0x20) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000002a80)={0x0, 0xf0f, 0x8, 0x5, 0x1, [0x0], [0x4, 0xfffffe01, 0xfffffffe, 0x2c3f], [0xfffffff9, 0x40, 0x6, 0x9], [0x27b1, 0x91e, 0x3, 0x5]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000002b00)={r8, 0x0, 0xffffffffffffffff}) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000002b40), 0x40240, 0x0) close(r10) (async) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002bc0), r4) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000002e80)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x41f4b9d01bdc81ab}, 0xc, &(0x7f0000002e40)={&(0x7f0000002c00)={0x238, r11, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0xbc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "5e00befdd9dce6919406de006b606058c149f504b2c7c0"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "8f54d23d961ba28c0bea7ac380d8d0ef59f66af5cc6f69a5680fa0f8fb56e38ef3"}}, @TIPC_NLA_NODE_ID={0x25, 0x3, "5ba88ac2b1d9721c0a2f25373419cc54a777e1d13798de636f17d0486df44baf20"}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvtap0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'netdevsim0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3fc}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcb6}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x575}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x4000}, 0x24008050) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r9, 0xc00c642e, &(0x7f0000002ec0)={0x0, 0x0, r9}) (async) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r3, 0xc06c4124, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000002f80)={'ip_vti0\x00', 0x2}) (async) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000002fc0), 0x88c0, 0x0) splice(r9, &(0x7f0000003000)=0x5, r10, &(0x7f0000003040)=0x4, 0x6a0, 0x2) 2m52.130139078s ago: executing program 6 (id=9544): creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000008c0)={0x24, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x9}]}}, 0x0}, 0x0) syz_usb_connect(0x1, 0x74, &(0x7f0000000fc0)={{0x12, 0x1, 0x310, 0x68, 0x75, 0x7a, 0x40, 0x46d, 0xc11f, 0xc9b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x2f, 0x4, 0xa0, 0x69, [{{0x9, 0x4, 0x2b, 0x0, 0x4, 0x2, 0xa, 0x0, 0xff, [@uac_control={{0xa, 0x24, 0x1, 0xffff, 0x7f}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x1ff, 0x5, 0x1, 0xa5}]}], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0x74, 0x6, 0x4}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0xe9, 0xcd, 0x67}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x7, 0x4}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x10, 0xb4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x7}, @generic={0x13, 0x21, "f4f52d54f03e063d8202f93c902295124e"}]}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000700", @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="4c000e0080000000ffffffffffff08021100000008021100000000000000000000000000640001002d1a00031105000000000000000000080001000000000303000000017606048007000600080026006c09000008009f000700000008000c006400000008000d0000000000"], 0x88}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) ioctl$KVM_GET_PIT2(r6, 0x8070ae9f, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendfile(r7, r8, 0x0, 0x800a121) 2m39.101057057s ago: executing program 5 (id=9638): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000004, 0x3b071, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="00170d7f0000d2d3529caca12adc7793690dfe4ddf00271a25df0e4aefb431dd573a2838efbc6f60885c7787690f7c6fb05c42fd399b0bf24e40b553e0cb8240fbc4a40e4af35e34cf6a6c5940a0"], 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file1\x00'}) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xdc}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000000)=0xc000000, 0x4) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x1400037e) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, &(0x7f0000000240)) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$inet(0x2, 0x802, 0x1) connect$inet(r6, &(0x7f0000002780)={0x2, 0x4e22, @remote}, 0x10) write(r6, &(0x7f0000000440)="08008edf773c8000", 0x8) recvmmsg(r6, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400001a7030b10d898edb3daa95290c26fd8ee5f7285ea84889563b214e5068ba144730ef85b8e1cbc363f50a9774bf8a13dc4d2e162653f24f75dcdaf9fa2b72fa8422409e381c7ca87f6bab743ddbe7b4c09e8ce458aa9489ba9e968907690a8b6fb411f2079ed001b6952cecc0bdb7f149c86d41", @ANYRES16=r5, @ANYBLOB="000228bd7000ffdbdf255a000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m37.86971296s ago: executing program 5 (id=9643): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05000000010000", 0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, 0x1410, 0x1, 0x70bd29, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x400c000}, 0x20040000) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x28, r2, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}]}]}, 0x28}}, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) 2m37.76041655s ago: executing program 5 (id=9644): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x8) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0x8) ioprio_set$uid(0x3, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f00000002c0)=0x7fffffe) r6 = dup2(r5, r5) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r6, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r6, &(0x7f00000001c0)={0x2, 0x0, {&(0x7f0000000140)=""/126, 0x7e, 0x0, 0x2, 0x2}}, 0x48) ioctl$sock_bt_hci(r4, 0x400448e2, &(0x7f0000000040)) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r7, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0}) prlimit64(r1, 0x3, &(0x7f0000000040)={0xae8, 0x102}, 0x0) r8 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x2a020400) fcntl$lock(r9, 0x6, &(0x7f0000002000)={0x1, 0x0, 0x200, 0x2}) fcntl$lock(r9, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x5}) fcntl$lock(r9, 0x26, &(0x7f0000000080)) fcntl$lock(r9, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) sched_setscheduler(r8, 0x1, &(0x7f0000000240)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) 2m35.981664703s ago: executing program 38 (id=9544): creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000008c0)={0x24, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x9}]}}, 0x0}, 0x0) syz_usb_connect(0x1, 0x74, &(0x7f0000000fc0)={{0x12, 0x1, 0x310, 0x68, 0x75, 0x7a, 0x40, 0x46d, 0xc11f, 0xc9b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x1, 0x2f, 0x4, 0xa0, 0x69, [{{0x9, 0x4, 0x2b, 0x0, 0x4, 0x2, 0xa, 0x0, 0xff, [@uac_control={{0xa, 0x24, 0x1, 0xffff, 0x7f}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x1ff, 0x5, 0x1, 0xa5}]}], [{{0x9, 0x5, 0xc, 0x0, 0x40, 0x74, 0x6, 0x4}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0xe9, 0xcd, 0x67}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x7, 0x4}}, {{0x9, 0x5, 0x9, 0x3, 0x3ff, 0x10, 0xb4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x7}, @generic={0x13, 0x21, "f4f52d54f03e063d8202f93c902295124e"}]}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000700", @ANYRES16=r4, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r5, @ANYBLOB="4c000e0080000000ffffffffffff08021100000008021100000000000000000000000000640001002d1a00031105000000000000000000080001000000000303000000017606048007000600080026006c09000008009f000700000008000c006400000008000d0000000000"], 0x88}, 0x1, 0x0, 0x0, 0x40005}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) ioctl$KVM_GET_PIT2(r6, 0x8070ae9f, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) sendfile(r7, r8, 0x0, 0x800a121) 2m34.350878739s ago: executing program 5 (id=9672): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r1, 0x201, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x82}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x4040054) 2m34.262333308s ago: executing program 5 (id=9673): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001f00)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000002000)=0xe8) (async) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r4, r4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002840)={0x0, 0x0}) (async) r7 = getuid() (async) read$FUSE(0xffffffffffffffff, &(0x7f00000028c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = getpid() sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000701fcffffff00000000017c000008000200", @ANYRES32=r10], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r11 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r11, &(0x7f0000005e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r11, &(0x7f0000005340)={0x78, 0x0, r12, {0x2000000007, 0x400, 0x0, {0x6, 0xfffe000000000000, 0xfffffffffffffffb, 0xff, 0x694, 0x3, 0x7f, 0x9, 0x800, 0x2000, 0x2, r13, r14, 0xb, 0x8, 0x1000000}}}, 0x78) (async) fstat(r9, &(0x7f0000004900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r16 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r16, 0x40086602, &(0x7f00000002c0)=0x20) (async) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000004980)={0x0, 0x0}) r18 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r19) fstat(r0, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="43142d77912ccee0eeae340558638495c49a8e8b31221b108e531df85a869198bb65ea59b67a128166d98ae5130881fae8e8be7e5e46f81e1720fd350ff5ddb12c5cacd4f785c3bca8417707516d5bc62ece9607836d51413b055e99e95334808da76f919f6076c426f563e4a9898c426fb9836fe55f9134fa7f2ac3aba6c8a3f86c7b23c7bca1525265d17219cc553dbb9006847c9be21d53a33eb7a5ca2d03cdeb7fdfb2122ed1cf7ba842741c8637b0dcf38c1aaa3b5836d9b787304a8de8b45dd55322ae729aaac68485dd8776f76d4761fec86ebfeae9b5c18de11aee11351c610f85c815f3", 0xe8}, {&(0x7f0000000100)="479806ac1d2f31b34200c11fdc8b4600e21ca77fde374899a529310570b2c37c9017ddfc87306f71cc043c6e65e740", 0x2f}, {&(0x7f0000000140)}], 0x3, &(0x7f0000000680)=[@rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r0, r1]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x58, 0x4011}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="762cfc53397739409d2b4e5a0dd649199318f270ebcd24277643020141624b20138afe596cf58cace4d69baf2a281a23cf56bdb3ce10f2f1b4cd08d363ba22b51ff7d7c8614554584b671134302d51c8de8fbe8a40d46aedd816581da74bd66892183fa8389993430a7f5c6658af9ee3288171c6a2c6e1b298bbd9b68b51c60230fe29f2c160b9fdf864bbe3f620f5c9d0a20f2d6e41bb68c2bbd4777123ee5566fb0d8964d8f1232ac4596088269041ee1162dbd963ae3694f98ee31c0990d36d90c4a75f9b211721d82578c1cca9c11962b1d787590d9480a21b", 0xdb}, {&(0x7f0000000800)="b0f2ba114f87428331c070787f1eccd488dffaefa60558c49fb1f82453955435d5593771f9d15b3011335154a1a55fecc00b51184f58d2ebf180a2feeed4e93459621c104af109a83fc8a0419d13321bc8ac191b5214d7ec5720219e9b74d3076232a884e4b238127acc8953a90bb2adfc5433486da35ad83f873b295120c1a86d17557d0872e1120df35fd4d23fcce5410cc4accd8f6ab7799cf43acad26f4dae2525320d0d9c0e44fede7893792e0519860040d73ffd8bc36cb15741c6864c64dac1d65d0610e5", 0xc8}], 0x2, 0x0, 0x0, 0x800}}, {{&(0x7f0000000940)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000e40)=[{&(0x7f00000009c0)="856d91b7dedf3add9842dfe8ff5d03b7606f08baddb64e8a6b281c3c852c990ec93fdab5f49598f986473a93afc9c5c03916e321f351a83e6447b6255a628cb01c54a767d1b7d64da251e0c4f925b594f36f993ba6707e40babc7957e385b7efe8b9a6c5457a1cf5", 0x68}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)="99246205844110bf769be9a2fea8cf4670481881b513a8a138413fc7f3eb", 0x1e}, {&(0x7f0000000ac0)="70219c555147e22516db76f4f3f08973812f9ca71b9318dcb38a845ff60bc1013048edf33f0639843662d513a218065497c2063a85f7635d7290e9f4fa8a717d7ce2e5db1e8f00f9cce64cf63451ba387dd808398451e40ed4c38b71f3d71442", 0x60}, {&(0x7f0000000b40)="9dda7ad2fa79d19b0ba3b6825e351ff4df5f96fddcbac0966633d53a8374d94b1057999077f6b64ecd31af028d01e153306973daaeb3464f1e3c324ffc3b1ef7ad1b705d5853cefeb85e82052fc1cdc37abb13177b6d98c4cfdcb69c519d12f8", 0x60}, {&(0x7f0000000bc0)="074cd0dc866ee955cc9345589bce355dbe92576632", 0x15}, {&(0x7f0000000c00)="a5", 0x1}, {&(0x7f0000000c40)="bf4000d2dafbbf1041d34d02f1d9aa74e9480872d030ee1b076fd230af405fee1eda79b3599a5c95d41b28c1b292d269f2f786627a337ab881d5e1b4fcdb8bd0886e930c14badaa15f6d934f6ede117b39f69b7ecfd9c5d476082f6ac4206fe9d7dd26dc1785fc0e04bdfc5cbc190260951eed985b8a4d76f2fea431a6ed81eb7b6311c3d91f3826e34d1a61ef6abf72f242afe76e32ce4c1068f1e4c3460b03", 0xa0}, {&(0x7f0000000d00)="d933f117859305b3e1fa60b681e7e81e9c976ef0892f7dd24a3503cdd92050bc2ce08c05f50dd56aa00d10d2982407923ed4d6d6b826ddd22a9fe57c6793c5348d4e7aab7a1cfb2637a804d60ba3af0cea50e5e412bb6f6d465883f3b46055abebab48fe7f826f02719ab369597a7535956bd482064bd58317c8b113c1570b3c5a1b0f9435d12cca35bd5f5db49685ac3089a73cae75", 0x96}, {&(0x7f0000000dc0)="76468641032e9ef6e1bbee3631d8b9666cebc345774db40d29091be626b06bb2e9924017007a075bf56bc268d21ed775db0c38f19feb85c71459c4c302f01657bd2c3b9eb6e665d0bd7265c36be5", 0x4e}], 0xa, &(0x7f0000001280)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x20, 0x20000840}}, {{&(0x7f00000012c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001340)=[{&(0x7f00000013c0)="4fd061ba1dde221bfb499c62469b33e0ec1e70d45a6446e4c9c9869a5f8e4d9ebfa2526ed5d1600696e692edbfa280bfaa578847897ed63c121e53d688a75905ade266865b7255e1a19ab47d5a83c21c5eeee1e2bb9f2110388c5c89382220b476da5e05858b838577208f09e81a5dba74b35c8b93062a5f09edd88ce486cad7a44f87b53afa57cb189edf6271ee99df2bb1c9ea8f962d953c49e004372ae6994c9aeb0930f8a68c26a30be47a2e092a1829c6ba749ceca402b117c232790aac8f1d4418a844e0ee63116e7f33b486be75eb4c3e61d6d7ba4b9dd3a8e3da473b24", 0xe1}], 0x1, &(0x7f0000001800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, 0xffffffffffffffff]}}], 0x80, 0x20000000}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001880)="ce820aa63ad7db60a1346d060f09c4f8912e2eafe1c2", 0x16}, {&(0x7f00000018c0)="c416193df640173298c56150f53b8facb6e8a2842ba254188de8", 0x1a}, {&(0x7f0000001900)="4b1ee8d7b37d99b0bb69e781a99f33ed8ef2ad27970e41f43603eec7856d762d4839989aefe54a571584e525fd8dc7ee6c3dd8765058480cb7739baaf3ca82d716f7c1f71745cb26733644526d8d49e117b6dfd350abd988086ca48af3c5ee4b1e607b77", 0x64}, {&(0x7f0000001980)="25ac9d46cbdcb7b6ca8fb365d0a6ec1530351e2d3a1a62b3321b7438369a8e50ddc0a4fd671ab0acd4d77c93c557a08566ec151650da20ccae77ccf7ae8d978f70b08271f287aca6afdd46032c65b0e94a9bcbe7bcf9e0a15ace212056d2b0071c95966780d8139878bb979ca319907191928a28d0e24ec2cec2609d55a28492de330294f6cdb0fa7b1e3a3e89f37aeb44ed48a842894a8bfe2deabd17f6b452014c0c3ca37abafdc8e161e3f9372567a4c681f17696736f65f7a5f0ba72d399a37b528283721a6d902dad2fc6d367c29d0bc8fdd3", 0xd5}, {&(0x7f0000001a80)="730a8a85ada61305145f4b", 0xb}], 0x5, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b40)="01dd093af5c1bb53568e5faf8b960bd4a5c1f0987fb9c045fa45f6a3386926e28b535b9b2e3c4dc73cafa61c33c8e7db30ac87e4ae1b7309155d58ee6d842c19e41677fed1431ba59059b9546f188fbbc6a5584088525e2709fa7fa42fae7515ce8f4e956ea75fb7afaa066de95f7c760ac5f9487ff66d683ae52383d2ea91f44aa1dbc26fa0a52f", 0x88}], 0x1, &(0x7f0000002040)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r2, r4}}}, @rights={{0x1c, 0x1, 0x1, [r5, r0, r0]}}], 0xa0, 0x48800}}, {{&(0x7f0000002100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002180)="5904c52131257943a61f2d3bd0c39804d31ccec1e1a1838c5342d95e4c34fe7bbf1ada2867f83619f09f8954c5ca7919fb6de2e7efeaa9", 0x37}, {&(0x7f00000021c0)="75d3f2b0545b8c83c588158737749474a5e1745f997193f2416fa9584679528adf18923d10612b6f0ca17c9dc5488c0e30196c8bbd1a20d61fef3c513e91aa92466c09120398abe47b75bc211f50aab835a241085ccc53528e8ea953ab8b7c36675d", 0x62}, {&(0x7f0000002240)="a8165780cb77d1f5d3a7d562688ba23ca168e3f3f09b8179c5fe4ec2eb36f078eab009708e29c3a8051dea30", 0x2c}, {&(0x7f0000002280)="071a6f716a485c5ad36fdc7aa38aceffadb59af147a38109e5c6a5b1a1ec8d618a39992b2a84eb25fd334052780bdc26033fb618c7c2dcd3b1736c64411d6a93dfa2b22c6d5a98c56b0d5a0d601aae3c44b96001d9703224472f2ee0fd86b09d75", 0x61}, {&(0x7f0000002300)="b31079652dd991b8f5e9093d9959f8fa879cad3737409efc056ea1ddc4a5575bec4a38c26d5316a72c5e0fb2717afa090823b07d8353a43387314f4c10311ed765f62a7afa43a849209de3095fe29d2c8c78d0e05a7d2509ac2eb36a6972c0d9", 0x60}, {&(0x7f0000002380)="2ba62cd38c13ccae7a3d92b1d67783121e3072a75bfe99abbf34126b604f30ad009f9cef9426d3ac0aab00707cfef8fccb6a72d94354d2159feedc62c74e4f7ead1e6aabe64eb26baaab7d2e4d10a0c975e660a8a07b74b469", 0x59}, {&(0x7f0000002400)="bc185a89a5fba0f728233698b57f83ad571efb0cd7dd7308b37cc72b141dcb88291d77a4d591d1143657738662534ae13a2ecf7dd1aa629c4da210e2d55823935fbf63317ad633c8a28ad30373ccff550532f5279979b750223ae51de405d12d064d3b3a9b984abbdd6d6b9e0a151eaa1d7d1d70b105147244e2fc22a8b74496c9caeac43309d6957d92d3654dc8d04cf900ccef6193eae3329ee6675c225b5080137b62799cb5df9bdd9ede08c5f6f686614021919f3ba1796e872b47ebd085f34521dc589883fc877490d6bc215f827701cbcd73492bab20ad925e6925ccd68f6b3a493a5c140520b05de4193799c0de3c0a709dfd", 0xf6}, {&(0x7f0000002500)="898fbbc776fed0bddcbaf4740062970ffd7f02e011be2677878f2b7f78a3755a91aed9d557e866a148b97d869cdbc1cb9eb3b8a4ffced5f9b8473b4ddbafbc441003d58e7cc2bb4b838b2a514087dd40d8710f8f8af315da03416c17407be46a8f18348dac662a7f891e1a25ccba09c92e160b2023bce9f5c8290feb0f04affdfbd8ff7eadc84b187716e2dcbe6021d25e9039666118467039fd0e0b6237b792034271db49ab30ff097a321c3a25a3d81ba72301b61b56d81cc1b299ba3bb2e5097e7ca3ae1d51e2d199038fe4b6e2cdd77e399dc2e6da8d16f69e5fab3cb784", 0xe0}, {&(0x7f0000002600)="e7ed3f37e76e2b46c8b6f174cbbe919cbe4cc3f863083c1ba3b7821eb14e64c84e8bf773eb78963617cad15535ad370af85a28d44740efd925e6a8be95a9a93f37f27c1e75a73590ca1b68389c2d3db984d5c76465994485e7f8761e169eb452a6806295234837f559b786960af77bae800cab10cceb4c0010b2e82759b48cdab75e81af2d348ce668b738a408a127ceb4115abd487b96f5f898d56d86905a2a28ecace6076d6dfea1bc233b0671813a53c88e037ae8f5e78c3f5baec4e24166928af47706d36a77e43f2bda416507b63eda9eb063f53113abd48a47dd", 0xdd}], 0x9, 0x0, 0x0, 0x40010}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000027c0)="51a88991c2583acfff414b09a356fac4cafa26f1e259afa577db29a83641ba", 0x1f}], 0x1, &(0x7f0000004a40)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r10, r13, r15}}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r16]}}, @rights={{0x20, 0x1, 0x1, [r1, r1, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r17, r19, r20}}}], 0xa0, 0x400488d}}], 0x8, 0x44010) (async) r21 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r23 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r23, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r21, @ANYBLOB="f1e600000000000000001300000008000300", @ANYRES32=r22, @ANYBLOB="04001300050019000000000006001200040000000500c200080000000a0006000802110000010000050029000a0000000600100009"], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async, rerun: 64) ftruncate(r23, 0x1) (rerun: 64) 2m33.974707786s ago: executing program 5 (id=9675): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000380)='./file0\x00') ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) 2m17.797873443s ago: executing program 39 (id=9675): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000380)='./file0\x00') ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) 4.106478986s ago: executing program 9 (id=10655): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) getsockname$l2tp6(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x44, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4000890) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x24, r4, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x30}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8004) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000140)={0x9, @raw_data="48ab018e40896e074ee996d539f96485de519ca1fce7d26cca83da64389f25919c7e62393d86e2e6e187a2a7764bc6fcf17690c74e6de2b2104f6ec82190e3965032ab21a3c621b2afb2feebbad3458d206de7bcef194873f391abb2a6e8b4d1b3bd03c7313d857ff0e7688f423f2731ee66b96daac5b0dc362b833078c113af32b6892ab5b4916b6c3f059374bcffa20661d03ff6858da0bc3cd2728061d868130846c26d5fb4eee96b6f41ad72eef774534275c53f7599ff901de2aa5f2abb0a80f7688f86ac8e"}) setreuid(r5, r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x3c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00'}) r10 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40814}, 0x20000000) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) 3.854534489s ago: executing program 9 (id=10656): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x2c) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xfc, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xfc}}, 0x44054) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x110, 0x0, 0x110, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@local, @local, 0xffffffff, 0xff, 0x10, 0x8, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x527, 0x6f6, 0x7, 0x5, 0x2, 0x1, 'batadv_slave_0\x00', 'sit0\x00', {0xff}, {}, 0x0, 0x2e8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @loopback, @local, 0x8, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x8001, 0x3}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @dev={0xac, 0x14, 0x14, 0x1a}, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) mount(&(0x7f0000000080)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000001140)=0x10000000) (async) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000001140)=0x10000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 2.808688372s ago: executing program 9 (id=10666): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000010c0)={'syz', 0x2}, &(0x7f0000000100)='\x9bn6,\xf5\xf5iA\xf3Q}\xe26\x88\x00\xeb\x00', 0xfffffffffffffffe) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009593d1044062180b738010203010902120001000000000904", @ANYRES64], 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000180)={0x8000, 0x6, {r1}, {r2}, 0xf, 0x7}) creat(&(0x7f0000001380)='./file0\x00', 0x4) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000140)="d23f9a2a00040066b8a40300000f23c80f21f866350400f0000f23f80f33360faea4ea560f01cf2ef20faef26764f00fb3acd934f50000650151b8af", 0x3c}], 0x1, 0x11, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.230084655s ago: executing program 1 (id=10673): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="8c6ebebecfe8e02da9025839bc", 0xd}, {&(0x7f0000000080)="62e0bf693a7e284cba4c9a6104336074cbec2e1778f298470bc8007a3676c8dc73839aa8f96b480a34051a37d07bfcbf68c6fdfb924987b4190cf7b7ef0b67d7da22c6", 0x43}, {&(0x7f0000000180)="a230fd3701bc21c1eca1944a2404ec8fcbb77d0db66c3791a6bd918b5c5d7c6a495a06cc6cdd4657ffdcf258887c0719a0a242319bb50f855a9b8b739ebbd87006768395f04249bcc200452de92e812666c6cec7d213aa8189e176e940297ea4744a06acc9016640d0d04736ef597a1caa6e85e526a2c60aecb7", 0x7a}], 0x3}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0xcf) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) r3 = socket$kcm(0x10, 0x400000000, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfe33) capset(0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000000)=0x1, 0x4) epoll_create1(0x0) poll(&(0x7f0000000040), 0x0, 0x8000db3) 2.104325342s ago: executing program 8 (id=10674): creat(&(0x7f0000001380)='./file0\x00', 0x4) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="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", 0x252}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e00"], 0x1c}], 0x1}, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 2.015924939s ago: executing program 8 (id=10675): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000040)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a310000000008000240000000030400060014000000110001"], 0x54}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000010a0102"], 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x20000000) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000001c0)="390000fa461ad7e48489bffa56020013001118680907071200000f0000ff3f21000000170a00170000000004001400100003000131d7b2d0370a00f302415af0083f52b3ac322264dd2429f5160fe70b54eec0864a", 0x55}], 0x1) r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r4]) recvmmsg(r3, &(0x7f0000000ec0)=[{{&(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)=""/247, 0xf7}, {&(0x7f00000003c0)=""/102, 0x66}, {&(0x7f00000001c0)}], 0x3, &(0x7f0000000fc0)=""/226, 0xe2}, 0x1}, {{&(0x7f0000000440)=@isdn, 0x80, &(0x7f0000000680), 0x0, &(0x7f00000006c0)=""/212, 0xd4}, 0x7}, {{&(0x7f00000007c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000840)=""/147, 0x93}], 0x1, &(0x7f0000000940)=""/163, 0xa3}, 0x2c1}, {{&(0x7f0000000a00)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000a80)=""/171, 0xab}, {&(0x7f0000000b40)=""/126, 0x7e}, {&(0x7f0000000bc0)=""/26, 0x1a}, {&(0x7f0000000c00)=""/33, 0x21}, {&(0x7f0000000c40)=""/238, 0xee}, {&(0x7f0000000d40)=""/73, 0x49}], 0x6, &(0x7f0000000e40)=""/77, 0x4d}, 0x8a9}], 0x4, 0x40000003, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_int(r5, 0x0, 0x16, 0x0, &(0x7f0000000080)) sendfile(r0, r1, 0x0, 0x800a121) 1.902673055s ago: executing program 8 (id=10676): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r5, 0x2) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r6, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) r7 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x54c, 0x5c4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x50, 0x4, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x6, 0x2, 0x1, {0x22, 0x3c}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4a, 0xe, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1, 0xa, 0x7}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x7, 0x1, 0x3, 0x20}, 0x48, &(0x7f0000000100)={0x5, 0xf, 0x48, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x22, 0x2, 0x8, 0xf000, 0x2, [0xff0000, 0x3fc0]}, @ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0xe, 0xf000, 0x4, [0xc0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x55, 0x2, 0x7, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xf, 0x8, 0xff, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x6, 0x9, 0x101}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x411}}, {0x35, &(0x7f0000000200)=@string={0x35, 0x3, "044d56356e4ae905ce2f6ffe28479125dbb080dd0b0cab9895dc0d52ab8b2012577bc27fcf02e7f25ecfefce9ef379b41a7e84"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x63, &(0x7f0000000340)=@string={0x63, 0x3, "f4894048d0d0ff2f82c004164b738500e8c1398fd191aa0bfb93dd7881dbcc80020b100eb8267eac6a9a1b1e7429de2de8469f6e81ef65a9dc5b469ce625b01afd95ccb93867e2fec21adb9014f37066e3a344017a115a27a61f7a3ed6b99d6f73"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x426}}]}) syz_usb_control_io$hid(r7, &(0x7f0000000640)={0x24, &(0x7f0000000940)={0x0, 0x4, 0xed, {0xed, 0x23, "63fed3cbc7a5cb336d06e21bfe4a213e4da77b4cf26dc4af360cc67853a4a4136111ac9d34408c35c9eca5e69bd52e58f4c9903358130d2d2333cc739f6cdcaf88b5907c9c6823c91e2b2fcdf8341b5f844280b31d0797b86113b8ed435d81d76533e0d1fd9e0218ecd394e9c5d2c4f9c3d1548eb2176098a3d41168b0d2bde1d5e821c22aebbe0de3b32af2b129d43457914f611623fe4ff40ddfb9ed92c5a10d302a33963f19c90db8792cfa567891305eb5378a5beff8b45db20a489909688b23d8a639e21b0de4f2e0683ff37a5b424d960b873625b394bf6b3aadfaeab7fd8795530442026d306d79"}}, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x380a}}, &(0x7f00000005c0), &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0xff, 0x1, {0x22, 0xf6f}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000680)={0x20, 0x7, 0xa8, "0952ea969f9268ea2795a2b9a7216398153332e58699b43007af34a0623f85586c9390d0df8c72a24ea4f7ac4b662378f9bd275103d5af6e738d8f3ef7e2f407e4dc0ae57a2deeee3f5e9fe078dfa20db854abdd69857a76dbd4aee46119d466f8279886e5284ba52a7c2aa3f360f4110c5972c5bb1ac94aeac486d793ec549e830a40579cb26abb332db4f13af8d85859c1cb1fedfd99926e12f78764a56216adf4c55338b3193c"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0xfc}, &(0x7f00000007c0)={0x20, 0x1, 0xbd, "4b7231823327f6e7d3b831e0e93483316c99b86665ce7f29109864ba37a88aafa59ddf746c79c21e65ec8036d3533405f4b96423630a9696040a46a2ffb8289d8b7d180e6bb2e03f483175184ce076e4df64e5c8e325ef2248469cf024091e5801b16a9384626be1fad7b0b907ba1323ad7ec1a08c2cd3b986fd958ec27f68c6f79b505ec8352596f268de399f9b145928646c4fd6bd9818351ef3a75121bab2fe0cbd2867579d35f1140033a4a6a5a9cce3ffc19d17e6ac449f1d9e8a"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x1}}) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) flock(r5, 0x8) ioprio_set$uid(0x3, 0x0, 0x6000) sendfile(r2, r2, 0x0, 0x7ffff000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000180), 0x1, 0x2) fstat(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r9, 0x0) dup3(r8, r2, 0x0) 1.28166192s ago: executing program 9 (id=10677): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000140)={0x3, 0x500}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)) 1.204245113s ago: executing program 1 (id=10678): keyctl$clear(0x3, 0xfffffffffffffffd) request_key(0x0, &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='@(^\x00', 0x0) 1.15072611s ago: executing program 8 (id=10679): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000746000/0x2000)=nil, 0x2000, 0x3000001, 0x8a013, r0, 0x17607000) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/99, 0x63}], 0x1, 0xfffffffc, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x14) (async) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x14) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x1, 0x5, 0x4) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setresuid(0xee01, 0xee01, 0x0) socket$unix(0x1, 0x5, 0x0) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs}) connect(r3, &(0x7f0000000080)=@hci={0x1f, 0x4, 0x3}, 0x80) (async) connect(r3, &(0x7f0000000080)=@hci={0x1f, 0x4, 0x3}, 0x80) 1.117662049s ago: executing program 9 (id=10680): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) r0 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x27, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x60, 0xcc, [{{0x9, 0x4, 0x0, 0xdc, 0x1, 0x3, 0x1, 0x2, 0xd, {0x9, 0x21, 0xfbff, 0xb, 0x1, {0x22, 0x2ce}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x5, 0xfc, 0xab}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x5, 0x9e, 0x7f}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x2, 0x7d, 0x0, 0x8}, 0x2c, &(0x7f0000000140)={0x5, 0xf, 0x2c, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "0c331f861f8abe3f46a77a2b99e7093f"}, @ssp_cap={0x10, 0x10, 0xa, 0xea, 0x1, 0x5, 0xf, 0x8, [0x3f0f]}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x401}}]}) syz_usb_disconnect(r0) 1.099096404s ago: executing program 1 (id=10681): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@host}, 0x1}) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) 1.01064109s ago: executing program 8 (id=10682): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x6, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x1a}}, 0x91e1516366f54ac2) (async) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x4) (async, rerun: 32) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002680)=""/122, 0x7a}, {&(0x7f0000002700)=""/169, 0xa9}], 0x2}, 0xe48}], 0x1, 0x100, 0x0) (async) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r5, 0x0, 0x0) (async, rerun: 32) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x7}, &(0x7f0000000380)=0x8) (rerun: 32) r6 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2102}) (async, rerun: 64) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400}) (rerun: 64) ioctl$TUNSETTXFILTER(r6, 0x401054d5, &(0x7f00000002c0)=ANY=[]) mount(&(0x7f0000001400)=@filename='./file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 998.406987ms ago: executing program 1 (id=10683): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000000)={[0x9, 0x9e, 0x1, 0x9, 0x7b00000, 0x5, 0x1, 0x2, 0x95, 0x3, 0x7, 0xfff, 0x1, 0x80, 0x7, 0x3793, 0x9, 0x295, 0xf, 0x8, 0x101, 0x4, 0x5, 0xfffffbff, 0xe76f, 0x6, 0x4, 0x400, 0x7, 0x2720, 0x3, 0x3, 0x4, 0x0, 0xfff, 0xa22, 0xf, 0xffff, 0x9d, 0x2, 0x0, 0x0, 0x3, 0x7, 0x7, 0x101, 0x7, 0x2, 0x9, 0xfffffff8, 0x9, 0xfffffff9, 0xe55, 0x6, 0x0, 0x10b, 0xfffffff4, 0x7b49, 0x1, 0x9, 0x2, 0x200, 0x1, 0x6, 0x2, 0x3, 0x101, 0x31, 0xb, 0x7, 0x200, 0x10, 0x5, 0xd1, 0x7ff, 0xfffff870, 0x3c1, 0x6, 0x0, 0x9, 0xd01c, 0x0, 0x10000, 0xed2e, 0x3, 0x7, 0xffff, 0x6, 0xd, 0x8, 0x3a, 0x3, 0x2, 0x3, 0x10001, 0x9, 0x8001, 0x8, 0xffffffff, 0xa, 0xfffffff5, 0x2, 0x8, 0x5, 0xd, 0x6, 0x81, 0x7, 0x37, 0x4, 0x1bd8, 0x39, 0x100, 0x4, 0x1ff, 0x4000000, 0x8, 0x80000001, 0xfff, 0x9, 0x6, 0x2, 0xc3b5, 0x100, 0xd14, 0x80000000, 0x1, 0x8b, 0xc3, 0x9f68, 0x1c0000, 0x7, 0x6, 0x10, 0x818, 0x9, 0xdb, 0x2, 0x9fc4, 0xfffffff2, 0xe5a, 0x2, 0x0, 0x7fffffff, 0x9, 0x3, 0xffffffff, 0x0, 0x8, 0xa, 0x4, 0x8, 0x1, 0x7626, 0x0, 0x200, 0x6, 0xfff, 0x2, 0x7, 0xd, 0x9, 0x5aaf0222, 0x2, 0xcf32, 0x8000, 0x4, 0xc60, 0xefbc, 0xffffffff, 0xe7eaefd, 0x3ff, 0x0, 0x3ff, 0x5, 0x3, 0x1, 0xe, 0xffff, 0x9, 0x7, 0x9, 0x1ff, 0x6, 0x800, 0x4, 0x2, 0xa, 0x5, 0x2, 0xbd2, 0x2, 0x6, 0x80000001, 0x1, 0x1, 0xbb7, 0xf859, 0xffffffff, 0x4, 0x80, 0x7, 0x3, 0x7, 0x100, 0x3, 0x40, 0x1, 0xfffffffd, 0xd6c, 0x5, 0x9, 0xce, 0x3, 0x401e, 0x6, 0x2, 0x8, 0x4, 0xa73, 0x1, 0xa7, 0xe, 0x558d, 0x8, 0x6, 0x2233, 0x0, 0x1, 0x8, 0x5, 0x101, 0xde7, 0x8, 0x3, 0x8001, 0x8, 0x7f, 0x9aaac83, 0x5, 0xa00000, 0x10001, 0x2, 0x0, 0x52cb, 0x4, 0x9, 0x3, 0x1, 0x4, 0x226, 0x9, 0xa0e, 0x5, 0x1, 0x0, 0x858, 0x4, 0x7, 0xd54e, 0x1, 0x8, 0x4, 0x3, 0x1, 0x53a5, 0x44, 0x5, 0x8b, 0xcb50, 0x1, 0x3, 0x8, 0x2, 0x6, 0x5, 0x42e, 0xe94d, 0x8, 0x2, 0xffff, 0x7ff, 0x9, 0xd, 0xf944, 0x5, 0x2dd63989, 0xfffffffa, 0x8, 0x2, 0x3ff, 0x5, 0xb3e00000, 0x4, 0x8, 0xddf, 0x6, 0x0, 0x57, 0x4bb6d835, 0x3, 0x9, 0xe, 0x9, 0x0, 0x5, 0x80, 0x10000, 0x1, 0x4, 0x2, 0x480, 0x7, 0x4cd0, 0x0, 0x1, 0x7, 0x6, 0x2, 0x5, 0x10001, 0xca, 0xc, 0x6, 0x6, 0xa499, 0x2f, 0x7, 0x80000000, 0xbe012ae, 0xfff, 0x9, 0x6, 0x8, 0x26b1, 0x3, 0xd7, 0xa, 0xfff, 0xb, 0x7fffffff, 0x5, 0x1000, 0x7, 0x7, 0xffffffff, 0x9, 0x1, 0xc000, 0x5, 0x7ff, 0xffff, 0x7, 0xb5, 0x400, 0xd244, 0x7, 0x0, 0x3, 0x40, 0x9, 0x1, 0xffffff29, 0xf907, 0x0, 0x6, 0x4, 0x0, 0x1000, 0x7, 0x8, 0xb, 0x401, 0x6804, 0xf, 0x56, 0x9, 0x1, 0x8, 0x7, 0x0, 0x5, 0x2, 0x7, 0x3, 0xb1, 0x6, 0x10000, 0x0, 0x6, 0x7, 0x4, 0x18000000, 0x4, 0x5, 0x4, 0x4, 0x4, 0x2, 0x5, 0x4c, 0x7, 0x5, 0x5, 0xa, 0x7, 0xfff, 0x5, 0x5, 0x7, 0x1068, 0x8000, 0x4, 0x5, 0xf9, 0xfffffff7, 0xc0, 0x8, 0xfffffff9, 0x3, 0x2, 0xb, 0x26c, 0x4, 0xfff, 0x3, 0x7fff, 0x4, 0x81, 0x0, 0x4, 0x9f4, 0x5, 0x2, 0xb, 0x6, 0xfc, 0x5, 0x1, 0x7f, 0xa51, 0x81d, 0x400, 0x8, 0x1, 0x0, 0x8, 0xefa, 0xe0000, 0x3, 0x3cd, 0x6, 0xc14, 0x9, 0xf8, 0x4, 0x83, 0xae6a, 0x1, 0x7ff, 0xfffffff8, 0x7, 0x80000000, 0x200, 0x14000000, 0x8, 0x9, 0x2a56, 0x7, 0x8, 0xb7d, 0x7, 0x69, 0x7, 0xbb2f, 0x2, 0x5, 0xfffffbff, 0x1, 0x2, 0x1, 0x2, 0x8, 0xa, 0x9, 0x200, 0x1, 0x4, 0x9, 0x10000, 0x5, 0x80, 0x4, 0x3, 0x7f1, 0x10, 0x2, 0x1, 0x6, 0xfffffe00, 0x1, 0xfff, 0x93, 0xff, 0x0, 0xfffffffe, 0x8, 0x2, 0x2, 0x0, 0xaf, 0x5, 0x7a, 0x4, 0x5, 0x7fff, 0x7a, 0x0, 0x5, 0x8, 0x81, 0x7b, 0x2, 0x5, 0x3ff, 0x101, 0x4, 0x1c4d, 0x80, 0x97b0, 0x0, 0x6, 0x6, 0xb1be, 0x8, 0x5, 0x4, 0x1, 0x7fffffff, 0x101, 0x5, 0x400, 0x4, 0x9, 0x3, 0x7, 0x6, 0x4, 0x9, 0x3, 0x10, 0x3ff, 0x5, 0x3, 0xf32, 0x7, 0x81, 0x7fffffff, 0xffffffff, 0xd, 0x9, 0x0, 0x2, 0x6, 0x4, 0x0, 0xac, 0x800000, 0x9c1, 0x2, 0x2, 0x3, 0x3, 0x8dc, 0xad, 0x9, 0x3, 0xff, 0xf6, 0xfff, 0x3ff, 0x1, 0x101, 0x3, 0x1, 0x7fffffff, 0x80, 0x2, 0x6, 0x9, 0x8, 0x4, 0x1, 0x7, 0x6, 0x5, 0x5, 0x2, 0x4d510c8, 0x1, 0x7, 0x0, 0x9, 0x1, 0x6, 0xfffffffe, 0x2, 0x1, 0x2, 0x1ff, 0x8, 0xa6, 0x6, 0xfffffff8, 0x6, 0x4, 0x1ff, 0x11e, 0x4, 0x4, 0x1, 0x0, 0x10, 0x7ff, 0x7fffffff, 0x2, 0x1, 0x10001, 0x7fffffff, 0xa007, 0x5, 0x1, 0x7, 0x2, 0x8, 0xd, 0x401, 0x0, 0x0, 0x7acc, 0x8, 0x7, 0x9, 0x3ff8, 0x3, 0x9586, 0x2, 0xf1, 0x81, 0x0, 0x6, 0x8001, 0xff, 0x5, 0x2, 0x6, 0x7, 0x8, 0x8, 0x7, 0x7, 0x2206, 0x1, 0x1000, 0x7, 0x80000001, 0x82, 0x6000000, 0x7, 0x9, 0x10000, 0x10, 0x6, 0x3, 0x8, 0x6cf, 0x2, 0x5, 0x0, 0x6, 0x34b, 0x9, 0xacda, 0x1, 0xd, 0x1, 0x1, 0x20000000, 0x3c0a, 0xed, 0x8, 0xc5, 0x4, 0x1, 0x2, 0x3, 0x10000, 0x1, 0x3, 0xff, 0x9, 0x16, 0x6, 0x4, 0xc2d, 0x5, 0x2, 0xffff, 0x401, 0x200, 0x4, 0x2, 0x2, 0x9, 0xb, 0xfffff801, 0x5, 0xc, 0x0, 0x2, 0x8, 0x401, 0x1, 0x8, 0x805, 0x81, 0x5, 0x4, 0xc3e, 0x4, 0x6, 0x1000, 0x8, 0xf, 0x7, 0x4, 0x7, 0xc, 0x7fff, 0x3a3, 0x3, 0xfffffffc, 0x461572d5, 0x5, 0x9, 0x4, 0x3, 0x7, 0x10, 0x2, 0xe, 0x4, 0x101, 0x3, 0x86, 0xc9d, 0x3, 0x5, 0x80, 0x3, 0xfffffffd, 0x6, 0x3f6, 0xee4, 0x4, 0x2, 0x9a, 0x80000000, 0x7, 0x9, 0x7, 0x5, 0x9, 0xbb79, 0x8, 0xec1, 0xffffffd9, 0x7, 0x7, 0xb, 0x7, 0x8, 0x0, 0x1, 0x3, 0xd, 0x4, 0x8001, 0x3ff, 0x3, 0x0, 0x80000000, 0x3, 0x7ff, 0x9, 0x100, 0x1, 0xa9, 0x7e, 0x480000, 0x1, 0x400, 0x8000, 0x9, 0x0, 0xfffffffc, 0x9, 0x1, 0x7, 0x9, 0x7, 0x7fff, 0xd99, 0x1084, 0x7, 0x1, 0x81, 0x4, 0x2, 0x4, 0x5, 0x8, 0xe, 0xa, 0xf, 0x480000, 0x5f, 0x7, 0x6, 0x1ff, 0xffffffff, 0x6, 0x0, 0x5, 0x2, 0xff, 0x9, 0x56eb5e15, 0x1, 0x9ae, 0xfffffffa, 0xd1, 0x2, 0x4, 0x5, 0xd88d, 0x9, 0x4, 0x2, 0x9, 0x6, 0x17, 0x9, 0x8, 0x80000001, 0x8, 0x8, 0x1, 0x5571, 0x1, 0xd4c, 0x10000, 0x3, 0x1, 0x7, 0x6, 0xffff8e5d, 0x7, 0x2, 0x5, 0x9800, 0x4, 0x6, 0xad, 0xfffffffc, 0x2, 0x0, 0x1ff, 0x4, 0x4, 0x9, 0x8001, 0x200, 0x9, 0x8001, 0x9, 0x7, 0x1, 0xfffffc01, 0x2, 0x6, 0x0, 0x0, 0x400000, 0x0, 0x1e6, 0x6, 0x1, 0xc0000000, 0x0, 0x0, 0xc, 0x4, 0x2, 0xc, 0xa1d, 0x101, 0x1, 0x5, 0x9, 0x2, 0x7, 0x0, 0xed7, 0x8000, 0x200, 0x8, 0x7fffffff, 0xfffffffc, 0x1000, 0x4, 0x1ff, 0x401, 0xc, 0x7ff, 0x900, 0x9, 0x2, 0x9, 0x9, 0x7, 0x7, 0x8, 0x7fffffff, 0x10, 0x4, 0x5, 0x10, 0x8, 0xfff, 0xfffffffc, 0x80000001, 0x7, 0x0, 0x1, 0x168, 0x1, 0x8, 0x2, 0x80000000, 0xbbd, 0x3, 0x0, 0x5, 0x7, 0x3, 0xf894, 0x4, 0x8, 0x5, 0x2, 0x2, 0x1, 0xd, 0x0, 0x2, 0x7, 0x6, 0x1, 0x6, 0x3, 0x1000, 0x40, 0x9, 0x174, 0x0, 0x9, 0x7, 0x80, 0x5, 0x1, 0x5, 0x10000, 0x9, 0x7, 0x0, 0xc, 0xdb04, 0x2, 0x9, 0x6, 0x4, 0x0, 0x6, 0x7f, 0x4b27, 0x10001, 0x10, 0x0, 0x85b1, 0xb3, 0xfffffffc, 0x1000, 0xb9b3, 0x80000001, 0x5, 0x8, 0x8, 0xffff2142, 0x1a, 0x6, 0x3, 0x3, 0x1, 0x400, 0x5, 0x2, 0x1, 0xf, 0x1, 0x1, 0x2, 0x5, 0x1]}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000001000)={'syz1\x00', {0x400, 0x7, 0x1, 0x9}, 0x31, [0x3, 0xc, 0x2, 0x800, 0x8, 0x5, 0x4, 0x67, 0x7, 0x200, 0x200000, 0x7, 0x10001, 0xbeec, 0x4, 0x8, 0x6, 0x7f, 0x5, 0x4, 0xfffffff7, 0x4, 0x75d2, 0x6, 0x1, 0x3, 0x100, 0x2, 0x9, 0xffff7fff, 0x200, 0x9, 0x962, 0x4, 0x1, 0x3, 0x7fffffff, 0x10000, 0xfffffff9, 0x7, 0xa, 0x1, 0x7, 0x9, 0x2, 0x2, 0x52, 0x187, 0x5, 0x7, 0x5, 0x400, 0x7, 0x1, 0x3, 0x14c0, 0x7, 0x2, 0x8ff, 0x2, 0xa, 0x10ad, 0x4, 0x4], [0x0, 0xe, 0x3, 0x7, 0x4, 0x3, 0x9, 0x3, 0xc, 0x0, 0xe10, 0x66f3, 0x10001, 0x80000000, 0x9, 0x35b7, 0x8, 0x6, 0xa5, 0x5, 0x1, 0x6, 0x0, 0x80000000, 0xd61, 0x181196b7, 0x40, 0x6ff6, 0xe1be, 0x1000, 0x6, 0x6, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1, 0x0, 0x3, 0xffffffff, 0x8, 0x7, 0x0, 0x7, 0x7, 0x7f, 0x8, 0x8f, 0x9, 0x0, 0x5, 0xffffffff, 0x1000, 0x5, 0x3, 0x0, 0x3fd, 0x3, 0x0, 0x4, 0x0, 0xfffffffd, 0x2], [0x1, 0x10001, 0x2, 0x5d5f, 0x7, 0x2, 0x6, 0x0, 0x3f, 0x1, 0x9, 0x2, 0xc1f, 0x56dc, 0x2, 0x0, 0x4f, 0xb9, 0x1ef7, 0x1, 0x3, 0x100, 0x7ff, 0x8, 0x7, 0x5, 0x7, 0x13c, 0x7, 0x3, 0xff, 0x7, 0xe70, 0x7, 0x0, 0x800, 0x2f, 0x0, 0x400, 0x6, 0x1, 0x0, 0x9, 0x2, 0x0, 0x4, 0x7, 0x400, 0xd, 0x100, 0x10000, 0x81, 0x10, 0x8, 0x8001, 0x5cb, 0xffffff0e, 0x4, 0x0, 0x0, 0x54, 0x8, 0xfff, 0x8], [0x0, 0x0, 0x4, 0x5, 0x2d, 0x8000, 0x8000, 0x7, 0xae2f, 0x2, 0x1, 0x33d, 0x1, 0x0, 0x7, 0x7, 0x1ff, 0x1, 0x81, 0x0, 0x5, 0x7, 0x8000, 0x4, 0xc, 0xd3c5, 0x6, 0xca, 0x7, 0x9, 0xc, 0x7, 0xfffffff7, 0x7, 0x2, 0x7, 0x10001, 0x200, 0xa, 0x7, 0x3, 0x8001, 0x0, 0xed53, 0x7, 0xfff, 0x94, 0x2, 0x2, 0x1ff, 0x4, 0x7, 0x1, 0x8d6, 0x3, 0xd66, 0xa8f, 0x7, 0x767a2def, 0x3, 0x4, 0x8, 0x2, 0x7]}, 0x45c) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000001480), 0x66c300, 0x0) fcntl$getflags(r1, 0x40a) mkdirat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0xf0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0xf0) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000001500)=0xd) r2 = syz_open_dev$vcsa(&(0x7f0000001540), 0x5, 0x80100) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000001580)={0x30, 0x5, 0x0, {0x0, 0x6, 0x9, 0x6}}, 0x30) clock_gettime(0x0, &(0x7f0000001600)) (async) clock_gettime(0x0, &(0x7f0000001600)={0x0, 0x0}) utimensat(r2, &(0x7f00000015c0)='./file0\x00', &(0x7f0000001640)={{r3, r4/1000+60000}, {0x0, 0xea60}}, 0x0) syz_open_pts(r2, 0x240001) (async) r5 = syz_open_pts(r2, 0x240001) ioctl$TIOCGISO7816(r5, 0x80285442, &(0x7f0000001680)) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f00000016c0)={0x6400, 0x6a, 0xf36e}) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001700), 0x2, 0x0) getpid() (async) r7 = getpid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003a40), &(0x7f0000003a80)=0xc) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003a40)={0x0, 0x0}, &(0x7f0000003a80)=0xc) getresgid(&(0x7f0000003ac0)=0x0, &(0x7f0000003b00), &(0x7f0000003b40)) read$FUSE(r2, &(0x7f0000003c00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000005c40)={0x0, 0x0, 0x0}, &(0x7f0000005c80)=0xc) getresuid(&(0x7f0000005e40)=0x0, &(0x7f0000005e80), &(0x7f0000005ec0)) read$FUSE(r2, &(0x7f0000006000)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000001740)="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", 0x2000, &(0x7f0000008180)={&(0x7f0000003740)={0x50, 0x0, 0x2, {0x7, 0x2b, 0x9, 0x102804, 0x575d, 0x7, 0x6, 0x1000, 0x0, 0x0, 0x4, 0x3}}, &(0x7f00000037c0)={0x18, 0x0, 0x2, {0x7}}, &(0x7f0000003800)={0x18, 0x0, 0xf2, {0x916}}, &(0x7f0000003840)={0x18, 0x0, 0x7, {0x3}}, &(0x7f0000003880)={0x18, 0xb, 0x8, {0x3}}, &(0x7f00000038c0)={0x28, 0xfffffffffffffff5, 0x1, {{0x1, 0x80, 0x2, r7}}}, &(0x7f0000003900)={0x60, 0x0, 0xffffffff, {{0x6, 0x2, 0xa, 0x3, 0x9, 0x4, 0x0, 0x8}}}, &(0x7f0000003980)={0x18, 0x0, 0x1, {0x404}}, &(0x7f00000039c0)={0x13, 0x0, 0x3, {'+}\x00'}}, &(0x7f0000003a00)={0x20, 0x0, 0x10001, {0x0, 0x4}}, &(0x7f0000003b80)={0x78, 0x0, 0x0, {0x100000000, 0x9, 0x0, {0x0, 0x1, 0x1, 0x3, 0x1, 0xfffffffffffffe68, 0xb, 0xff, 0x4, 0x2000, 0x7fffffff, r8, r9, 0x0, 0xe0c5}}}, &(0x7f0000005cc0)={0x90, 0xfffffffffffffff5, 0x2, {0x2, 0x0, 0x7fffffff, 0x3, 0x10001, 0x242, {0x5, 0x2, 0x8001, 0x6, 0x5, 0x2, 0x4, 0x1, 0x7, 0xa000, 0x1, r10, r11, 0xc, 0x86}}}, &(0x7f0000005d80)={0x80, 0x0, 0x30000000000, [{0x1, 0xff}, {0x3, 0x1000, 0x5, 0x1, 'syz1\x00'}, {0x3, 0x2, 0x5, 0x9, 'syz1\x00'}, {0x6, 0x10000, 0x0, 0x10}]}, &(0x7f0000005e00)={0x10, 0xffffffffffffffda}, &(0x7f0000005f00)={0xa0, 0xfffffffffffffff5, 0x9, {{0x0, 0x2, 0x392d, 0x80, 0x7, 0x6, {0x3, 0x6, 0x3, 0xd63f, 0x5, 0x100000000, 0x8, 0xffffffff, 0x6, 0x8000, 0x4, r12, 0x0, 0x3ff, 0x1}}, {0x0, 0x2}}}, &(0x7f0000005fc0)={0x20, 0x0, 0x3, {0xd7f9, 0x0, 0x1, 0x2}}, &(0x7f0000008040)={0x130, 0x0, 0x600, {0x3, 0x5, 0x0, '\x00', {0x4000, 0xc8b, 0x7, 0xf, 0xee00, r13, 0x6000, '\x00', 0x3, 0xb978, 0x7ff, 0x3, {0x2000000000000}, {0x7, 0xee29}, {0x0, 0xfffff001}, {0x0, 0xd99d}, 0xf, 0x3ff, 0x4, 0xed0}}}}) (async) syz_fuse_handle_req(r6, &(0x7f0000001740)="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", 0x2000, &(0x7f0000008180)={&(0x7f0000003740)={0x50, 0x0, 0x2, {0x7, 0x2b, 0x9, 0x102804, 0x575d, 0x7, 0x6, 0x1000, 0x0, 0x0, 0x4, 0x3}}, &(0x7f00000037c0)={0x18, 0x0, 0x2, {0x7}}, &(0x7f0000003800)={0x18, 0x0, 0xf2, {0x916}}, &(0x7f0000003840)={0x18, 0x0, 0x7, {0x3}}, &(0x7f0000003880)={0x18, 0xb, 0x8, {0x3}}, &(0x7f00000038c0)={0x28, 0xfffffffffffffff5, 0x1, {{0x1, 0x80, 0x2, r7}}}, &(0x7f0000003900)={0x60, 0x0, 0xffffffff, {{0x6, 0x2, 0xa, 0x3, 0x9, 0x4, 0x0, 0x8}}}, &(0x7f0000003980)={0x18, 0x0, 0x1, {0x404}}, &(0x7f00000039c0)={0x13, 0x0, 0x3, {'+}\x00'}}, &(0x7f0000003a00)={0x20, 0x0, 0x10001, {0x0, 0x4}}, &(0x7f0000003b80)={0x78, 0x0, 0x0, {0x100000000, 0x9, 0x0, {0x0, 0x1, 0x1, 0x3, 0x1, 0xfffffffffffffe68, 0xb, 0xff, 0x4, 0x2000, 0x7fffffff, r8, r9, 0x0, 0xe0c5}}}, &(0x7f0000005cc0)={0x90, 0xfffffffffffffff5, 0x2, {0x2, 0x0, 0x7fffffff, 0x3, 0x10001, 0x242, {0x5, 0x2, 0x8001, 0x6, 0x5, 0x2, 0x4, 0x1, 0x7, 0xa000, 0x1, r10, r11, 0xc, 0x86}}}, &(0x7f0000005d80)={0x80, 0x0, 0x30000000000, [{0x1, 0xff}, {0x3, 0x1000, 0x5, 0x1, 'syz1\x00'}, {0x3, 0x2, 0x5, 0x9, 'syz1\x00'}, {0x6, 0x10000, 0x0, 0x10}]}, &(0x7f0000005e00)={0x10, 0xffffffffffffffda}, &(0x7f0000005f00)={0xa0, 0xfffffffffffffff5, 0x9, {{0x0, 0x2, 0x392d, 0x80, 0x7, 0x6, {0x3, 0x6, 0x3, 0xd63f, 0x5, 0x100000000, 0x8, 0xffffffff, 0x6, 0x8000, 0x4, r12, 0x0, 0x3ff, 0x1}}, {0x0, 0x2}}}, &(0x7f0000005fc0)={0x20, 0x0, 0x3, {0xd7f9, 0x0, 0x1, 0x2}}, &(0x7f0000008040)={0x130, 0x0, 0x600, {0x3, 0x5, 0x0, '\x00', {0x4000, 0xc8b, 0x7, 0xf, 0xee00, r13, 0x6000, '\x00', 0x3, 0xb978, 0x7ff, 0x3, {0x2000000000000}, {0x7, 0xee29}, {0x0, 0xfffff001}, {0x0, 0xd99d}, 0xf, 0x3ff, 0x4, 0xed0}}}}) r14 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSSOFTCAR(r14, 0x541a, &(0x7f0000008240)) (async) ioctl$TIOCSSOFTCAR(r14, 0x541a, &(0x7f0000008240)) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000008280)={0x0, 0x9, 0x8, 0x8001, 0x9, "e449d4dc630cdadc23cdbecebb4025a997d049", 0x5, 0x5}) (async) ioctl$TCSETSW2(r5, 0x402c542c, &(0x7f0000008280)={0x0, 0x9, 0x8, 0x8001, 0x9, "e449d4dc630cdadc23cdbecebb4025a997d049", 0x5, 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000008300), r2) (async) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000008300), r2) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000008440)={&(0x7f00000082c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000008400)={&(0x7f0000008340)={0x8c, r15, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x10}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x80}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x12}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8050}, 0x20040000) execveat(r2, &(0x7f0000008480)='./file0\x00', &(0x7f0000008500)={[&(0x7f00000084c0)='&/\x00']}, &(0x7f00000085c0)={[&(0x7f0000008540)=':\x00', &(0x7f0000008580)='/dev/ttynull\x00']}, 0x400) (async) execveat(r2, &(0x7f0000008480)='./file0\x00', &(0x7f0000008500)={[&(0x7f00000084c0)='&/\x00']}, &(0x7f00000085c0)={[&(0x7f0000008540)=':\x00', &(0x7f0000008580)='/dev/ttynull\x00']}, 0x400) 857.570115ms ago: executing program 1 (id=10684): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) creat(&(0x7f0000000140)='./file0\x00', 0x71) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) write$proc_mixer(r1, &(0x7f0000000100)=[{'ALTPCM', @val={' \'', 'Master Capture'}}], 0x2d) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000005010000000900030073797a320000000014000480080002401300000408000140000000000900010073797a300000000008000a4000000002"], 0xb8}}, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (async) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) (async) landlock_restrict_self(r0, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) (async) creat(&(0x7f0000000140)='./file0\x00', 0x71) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) (async) write$proc_mixer(r1, &(0x7f0000000100)=[{'ALTPCM', @val={' \'', 'Master Capture'}}], 0x2d) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000005010000000900030073797a320000000014000480080002401300000408000140000000000900010073797a300000000008000a4000000002"], 0xb8}}, 0x0) (async) mount(&(0x7f0000000180)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) (async) 750.629346ms ago: executing program 1 (id=10685): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) request_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000010c0)={'syz', 0x2}, &(0x7f0000000100)='\x9bn6,\xf5\xf5iA\xf3Q}\xe26\x88\x00\xeb\x00', 0xfffffffffffffffe) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009593d1044062180b738010203010902120001000000000904", @ANYRES64], 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000180)={0x8000, 0x6, {r1}, {r2}, 0xf, 0x7}) creat(&(0x7f0000001380)='./file0\x00', 0x4) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000140)="d23f9a2a00040066b8a40300000f23c80f21f866350400f0000f23f80f33360faea4ea560f01cf2ef20faef26764f00fb3acd934f50000650151b8af", 0x3c}], 0x1, 0x11, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 609.550845ms ago: executing program 4 (id=10687): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) creat(&(0x7f0000000140)='./file0\x00', 0x8) (async, rerun: 64) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) write$P9_RVERSION(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="150000006bffff"], 0x15) (async, rerun: 64) r3 = dup(r2) (rerun: 64) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) (async) add_key(&(0x7f0000000240)='.request_key_auth\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) syz_80211_inject_frame(&(0x7f0000000000), &(0x7f0000000080)=ANY=[@ANYBLOB="580a3e5945e77ead619221dc2519e883d700080211000001ffffffffffff505050505050"], 0x24) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 486.780198ms ago: executing program 4 (id=10688): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind(r2, &(0x7f0000000600)=@pppol2tpv3in6={0x23, 0x1, {0x0, r2, 0x0, 0x2, 0x4, 0x4, {0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x80) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) (async) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) 396.005175ms ago: executing program 4 (id=10689): keyctl$clear(0x3, 0xfffffffffffffffd) request_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f00000001c0)='@(^\x00', 0x0) 378.47724ms ago: executing program 4 (id=10690): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) fadvise64(r0, 0x65f, 0x2, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45819000) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 328.257538ms ago: executing program 4 (id=10691): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x7fff, 0x9, 0xff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) (async) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) (async) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f250040290000000109021200010000000009bd000000cafba897"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r6 = socket(0x2, 0x2, 0x1) bind$unix(r6, &(0x7f0000000000)=@abs, 0x6e) (async) r7 = socket(0x2, 0x2, 0x1) bind$unix(r7, &(0x7f0000000000)=@abs, 0x6e) (async) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000100)={0x0, 0x8, 0x7, &(0x7f0000000080)={0x10, "349e0282cf0361428eb2189cf26f77ed059d1ac6f5382059a6d2dd15c61f32099f"}}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x8, 0x1, 0x7}) dup(r2) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 210.163098ms ago: executing program 9 (id=10692): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x8201, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f00000000c0)) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x8) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x4, 0xfffffffffffffff8]}}) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x4c0, 0xc, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x488, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x21, 0x1, "ea22a49a7ad33f9cf8e3704446b7ad2e634a057ed838a73d2d49e7ead0"}]}]}, {0x44c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @cmp={{0x8}, @val={0x4}}}, @NFTA_SET_ELEM_USERDATA={0xf3, 0x6, 0x1, 0x0, "934742aa3fe66bad323ca6244b45504f6f138407332dfc7de8e5992d3f77ef9a784f18e9876811141ff963ac58a5197f7cd919b0b43d827e8a31471299b0bae575e7aefa1e09ada88ac414998df1d8622f7d0f4e6a6b3568653581645269f7cb69ac916a64b48c4e4c1572f1a2815810b46316c04d13d0ab7bcefde5a74fe10030401b0a8bb8b5a86984d63c1c05c276f32f1fb3f37da9ca0a8fa59d6970b4f5a0a53cc82f9f4e29db5731053c32ba8d147946a93a8a612e6f05a4c251e389faedf852d31a4d7c0e251d6615eade978b2c5d429511c09aee497937ab0c730d7d8aae8b54d917d232147cc01b1edac1"}, @NFTA_SET_ELEM_KEY={0x278, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcd, 0x1, "1fab0509cb12a98959d6412a8a0ba40eb1a3e31e595138a7f86153f1da87cec67cb287dfef3dde73f9e5d01b6da1d295250248e33637054c8417ca584afbb4885c6800f9a12e8b8dfd41fce5d19c4eb23581bad3e1273adea9d89c629358a6fe50d29012708ab8870c6bafa993d16a425db9a30b502ba04c99414ab5a3fce305c56a4251ca2594ca3b4c800b12c71136f41e3d2f34f986793a705932a98a9f1e5bd392749c5b87fea311b59353e38a99a52ab4af791444408f694d683f7448bac887183c4967a59de8"}, @NFTA_DATA_VALUE={0xa8, 0x1, "8fe7ba5437fa03cbb52039c10738e21215abd9ba620c0fa6331ddc4d95c80cec53d453320c593f22de38887fc6646606201379a5f60b5aee070a4d6bf260665a2a25bcfb209a818b6903113ae710b6be965f72eb75ef3267c092dffc090f915dc269741cd4af36ce9a59b4581183b5331041409970566a4648fc95ce03b9c154d9d59f6fbc997268482d948af3302876ec703fc0ec40d47f6e72f01a47a27ac453318d79"}, @NFTA_DATA_VALUE={0xfb, 0x1, "1ff0b6ddc1cee72b4253d14ac81a3ac5e95a333d0c0ef725beceeeaa703f1446156630c0504990c025654fc9e5b36bef221e5450b33847a81fe82c028e34e92e212104fdbe19f3ffdbac1801e30c0fa93bfab7cdf4019706def909dfcac0b6524b369c4c07494f0ab6b739df4ae4cce66154cc93f097bb7e2fb0f67f11d21d274cfc008946b5b75d63f9cf76caf4187fddc548f503b530fc6baaab333e157b1c8394152cebc7899a2b61be727e0a8657fc640d025e33cdbc7cd80160cdc9f2edf021911acf2b4b0ce3abc8e023434b24083fadeb9b876624be00b48e302c66516e000ae31b8a7484dba83ace42fcc21e6fbf15fed43728"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000001}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x98, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x15d}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x4e8}, 0x1, 0x0, 0x0, 0x800}, 0xfd8f26fc1fabbd18) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000240)='hpfs\x00', 0x20080c4, 0x0) 98.322218ms ago: executing program 4 (id=10693): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x140, r3, 0x100, 0x70bd2d, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8}, {0x6, 0x11, 0x3ff}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x56}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6a7}, {0x6, 0x11, 0x3fe}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0xfe4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffff9}, {0x6}, {0x8, 0x15, 0x341c}}]}, 0x140}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={@remote, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x7000000, 0x7ff, 0x4, 0x400, 0xfffffffffffffff8, 0x0, r1}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x94, r5, 0x500, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "665ee04b232389b6b49a53e3ac"}, @NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x28, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x20040040) bind$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e20, 0x5, @mcast1, 0x8}, 0x1c) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xb4, r3, 0x10, 0x70bd25, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40c4}, 0x840) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000700)={0x0, 'macvlan1\x00', {0x4}, 0x1ff}) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000740), &(0x7f0000000780)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f00000007c0), &(0x7f0000000800)=0x4) r7 = syz_io_uring_setup(0x7db, &(0x7f0000000840)={0x0, 0x2353, 0x4000, 0x0, 0x2ae}, &(0x7f00000008c0), &(0x7f0000000900)) syz_io_uring_setup(0x7418, &(0x7f0000000940)={0x0, 0xc2d1, 0x1, 0x2, 0x3be, 0x0, r7}, &(0x7f00000009c0), &(0x7f0000000a00)) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r8 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000c40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fsetxattr$system_posix_acl(r8, &(0x7f0000000a80)='system.posix_acl_default\x00', &(0x7f0000002c80)={{}, {0x1, 0x1}, [{0x2, 0x4, r9}, {0x2, 0x2, r10}], {0x4, 0x1}, [{0x8, 0x1, 0xffffffffffffffff}, {0x8, 0x1, r11}], {0x10, 0x2}, {0x20, 0x5}}, 0x44, 0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000002d00)={0x0, @in={{0x2, 0x4e22, @empty}}}, &(0x7f0000002dc0)=0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000002e00)={r12, 0x0, 0x2}, 0x8) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000002f40)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002f00)={&(0x7f0000002e80)={0x48, r5, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x101}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'wg1\x00'}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4018800}, 0x400) r13 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002f80)='syz1\x00', 0x200002, 0x0) r14 = openat$cgroup_ro(r13, &(0x7f0000002fc0)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r14, 0xc400941d, &(0x7f0000003000)={0x0, 0x0, 0x8}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r13, 0xc400941d, &(0x7f0000003400)={r15, 0x1, 0x7fffffff, 0x1}) 0s ago: executing program 8 (id=10694): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505330, &(0x7f0000000940)={{0xee}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000002, 0x28011, r1, 0xf5ce9000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$inet6(0xa, 0x3, 0x8) r3 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x4e24, 0x0, 0x4e23, 0x0, 0xa}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x8}, {0xcb29, 0x1000000000, 0x53e5, 0xc9d7}, 0x0, 0x1, 0x1, 0x0, 0x2, 0x3}, {{@in=@remote, 0x0, 0x6c}, 0x2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1502, 0x4, 0x2, 0x0, 0x0, 0xfffffffd}}, 0xe8) write$binfmt_elf64(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003003e000839a59434d90a2742a24e000000000000000000deef14b40028e27ebdfd74dafc20380003"], 0xfebe) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000002100), 0x0, 0x0) ioctl$I2C_PEC(r4, 0x708, 0x9) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000040)={0x0, 0x0, 0x2, &(0x7f0000000000)={0x0, "3e16dc03ae1d0efb54e80022dab9695aa8aab2f7b6aa5b62bb8124726f2cb9420c"}}) recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010000, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000100)) r5 = creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) r6 = getpgid(0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)={0x34, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@nested={0x4, 0x12a}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0xb, 0x0, 0x1, [@generic="e8"]}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) tkill(r6, 0xb) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0286415, &(0x7f0000000040)={&(0x7f00004c0000/0x4000)=nil, 0x5, 0x0, 0xca}) kernel console output (not intermixed with test programs): ][T28677] ? local_irq_enable_exit_to_user+0x5/0x10 [ 1816.673538][T28677] irqentry_exit_to_user_mode+0x81/0x120 [ 1816.673562][T28677] exc_page_fault+0x9f/0xf0 [ 1816.673587][T28677] asm_exc_page_fault+0x26/0x30 [ 1816.673603][T28677] RIP: 0033:0x7f3f5ed8e931 [ 1816.673619][T28677] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 1816.673635][T28677] RSP: 002b:0000000000000030 EFLAGS: 00010217 [ 1816.673652][T28677] RAX: 0000000000000000 RBX: 00007f3f5efb5fa0 RCX: 00007f3f5ed8e929 [ 1816.673664][T28677] RDX: 0000000000000000 RSI: 0000000000000030 RDI: 0000000081040400 [ 1816.673675][T28677] RBP: 00007f3f5ee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1816.673687][T28677] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1816.673697][T28677] R13: 0000000000000000 R14: 00007f3f5efb5fa0 R15: 00007fffff5853c8 [ 1816.673726][T28677] [ 1816.673734][T28677] memory: usage 307200kB, limit 307200kB, failcnt 19165 [ 1816.747801][T29134] /dev/rnullb0: Can't lookup blockdev [ 1816.793228][T28677] memory+swap: usage 432172kB, limit 9007199254740988kB, failcnt 0 [ 1817.192917][T29140] /dev/rnullb0: Can't lookup blockdev [ 1817.310280][T28677] kmem: usage 8644kB, limit 9007199254740988kB, failcnt 0 [ 1817.332998][T28677] Memory cgroup stats for /syz9: [ 1817.333326][T28677] cache 305451008 [ 1817.342218][T28677] rss 258048 [ 1817.345844][T28677] rss_huge 0 [ 1817.349057][T28677] shmem 305451008 [ 1817.352711][T28677] mapped_file 0 [ 1817.356261][T28677] dirty 0 [ 1817.359205][T28677] writeback 0 [ 1817.362819][T28677] workingset_refault_anon 10 [ 1817.367802][T28677] workingset_refault_file 0 [ 1817.372323][T28677] swap 127971328 [ 1817.375943][T28677] swapcached 24576 [ 1817.379698][T28677] pgpgin 173527 [ 1817.383171][T28677] pgpgout 98889 [ 1817.387319][T28677] pgfault 86287 [ 1817.390791][T28677] pgmajfault 8 [ 1817.400182][T29143] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9995'. [ 1817.435237][T29143] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 1817.450808][T28677] inactive_anon 127959040 [ 1817.457323][T29143] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1817.476908][T28677] active_anon 177741824 [ 1817.488447][T28677] inactive_file 0 [ 1817.501610][T28677] active_file 0 [ 1817.523654][T28677] unevictable 0 [ 1817.547323][T28677] hierarchical_memory_limit 314572800 [ 1817.567657][T28677] hierarchical_memsw_limit 9223372036854771712 [ 1817.586650][T28677] total_cache 305451008 [ 1817.605692][T28677] total_rss 258048 [ 1817.620850][T28677] total_rss_huge 0 [ 1817.629787][T29153] /dev/rnullb0: Can't lookup blockdev [ 1817.641103][T28677] total_shmem 305451008 [ 1817.668477][T28677] total_mapped_file 0 [ 1817.686576][T28677] total_dirty 0 [ 1817.703495][T28677] total_writeback 0 [ 1817.736582][T28677] total_workingset_refault_anon 10 [ 1817.754927][ T7838] usb 10-1: USB disconnect, device number 42 [ 1817.778224][T28677] total_workingset_refault_file 0 [ 1817.850126][T28677] total_swap 127971328 [ 1817.854259][T28677] total_swapcached 24576 [ 1817.882521][T29170] FAULT_INJECTION: forcing a failure. [ 1817.882521][T29170] name failslab, interval 1, probability 0, space 0, times 0 [ 1817.916723][T28677] total_pgpgin 173527 [ 1817.931503][T29170] CPU: 1 UID: 0 PID: 29170 Comm: syz.1.9997 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1817.931524][T29170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1817.931534][T29170] Call Trace: [ 1817.931540][T29170] [ 1817.931546][T29170] dump_stack_lvl+0x189/0x250 [ 1817.931574][T29170] ? __pfx____ratelimit+0x10/0x10 [ 1817.931593][T29170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1817.931614][T29170] ? __pfx__printk+0x10/0x10 [ 1817.931639][T29170] ? __pfx___might_resched+0x10/0x10 [ 1817.931678][T29170] should_fail_ex+0x414/0x560 [ 1817.931708][T29170] should_failslab+0xa8/0x100 [ 1817.931727][T29170] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1817.931750][T29170] ? __alloc_skb+0x112/0x2d0 [ 1817.931785][T29170] __alloc_skb+0x112/0x2d0 [ 1817.931807][T29170] netlink_sendmsg+0x5c6/0xb30 [ 1817.931833][T29170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1817.931854][T29170] ? __lock_acquire+0xab9/0xd20 [ 1817.931869][T29170] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1817.931893][T29170] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1817.931910][T29170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1817.931930][T29170] __sock_sendmsg+0x219/0x270 [ 1817.931949][T29170] sock_write_iter+0x258/0x330 [ 1817.931966][T29170] ? __pfx_sock_write_iter+0x10/0x10 [ 1817.931989][T29170] ? bpf_lsm_file_permission+0x9/0x20 [ 1817.932007][T29170] ? security_file_permission+0x75/0x290 [ 1817.932030][T29170] vfs_write+0x54b/0xa90 [ 1817.932047][T29170] ? __pfx_sock_write_iter+0x10/0x10 [ 1817.932063][T29170] ? __pfx_vfs_write+0x10/0x10 [ 1817.932084][T29170] ? __fget_files+0x2a/0x420 [ 1817.932107][T29170] ksys_write+0x145/0x250 [ 1817.932122][T29170] ? __pfx_ksys_write+0x10/0x10 [ 1817.932134][T29170] ? rcu_is_watching+0x15/0xb0 [ 1817.932156][T29170] ? do_syscall_64+0xbe/0x3b0 [ 1817.932178][T29170] do_syscall_64+0xfa/0x3b0 [ 1817.932197][T29170] ? lockdep_hardirqs_on+0x9c/0x150 [ 1817.932215][T29170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1817.932229][T29170] ? clear_bhb_loop+0x60/0xb0 [ 1817.932245][T29170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1817.932259][T29170] RIP: 0033:0x7f131e38e929 [ 1817.932272][T29170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1817.932285][T29170] RSP: 002b:00007f131f2c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1817.932300][T29170] RAX: ffffffffffffffda RBX: 00007f131e5b5fa0 RCX: 00007f131e38e929 [ 1817.932310][T29170] RDX: 0000000000000014 RSI: 0000200000000100 RDI: 0000000000000003 [ 1817.932320][T29170] RBP: 00007f131f2c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1817.932328][T29170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1817.932337][T29170] R13: 0000000000000000 R14: 00007f131e5b5fa0 R15: 00007ffd515e9128 [ 1817.932357][T29170] [ 1818.215021][T28677] total_pgpgout 98889 [ 1818.219066][T28677] total_pgfault 86287 [ 1818.234760][T28677] total_pgmajfault 8 [ 1818.236116][T29166] /dev/rnullb0: Can't lookup blockdev [ 1818.238686][T28677] total_inactive_anon 127959040 [ 1818.238701][T28677] total_active_anon 177741824 [ 1818.238713][T28677] total_inactive_file 0 [ 1818.266900][T28677] total_active_file 0 [ 1818.285552][T28677] total_unevictable 0 [ 1818.289585][T28677] anon_cost 0 [ 1818.292917][T28677] file_cost 0 [ 1818.296295][T28677] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.9915,pid=28643,uid=0 [ 1818.313374][T28677] Memory cgroup out of memory: Killed process 28643 (syz.9.9915) total-vm:98244kB, anon-rss:952kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 1818.571115][T29174] syz.9.9998 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1818.636647][T29174] CPU: 0 UID: 0 PID: 29174 Comm: syz.9.9998 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1818.636676][T29174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1818.636688][T29174] Call Trace: [ 1818.636697][T29174] [ 1818.636705][T29174] dump_stack_lvl+0x189/0x250 [ 1818.636737][T29174] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1818.636763][T29174] ? __pfx__printk+0x10/0x10 [ 1818.636800][T29174] dump_header+0xd3/0x480 [ 1818.636831][T29174] oom_kill_process+0x3b6/0x950 [ 1818.636856][T29174] out_of_memory+0xf09/0x12a0 [ 1818.636885][T29174] ? __pfx_out_of_memory+0x10/0x10 [ 1818.636913][T29174] mem_cgroup_out_of_memory+0x145/0x240 [ 1818.636936][T29174] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1818.636966][T29174] ? _raw_spin_unlock+0x28/0x50 [ 1818.636988][T29174] ? memcg1_oom_prepare+0x37f/0x450 [ 1818.637014][T29174] try_charge_memcg+0xdff/0x1290 [ 1818.637045][T29174] ? __pfx_try_charge_memcg+0x10/0x10 [ 1818.637072][T29174] ? get_mem_cgroup_from_objcg+0x1b0/0x1d0 [ 1818.637096][T29174] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 1818.637124][T29174] obj_cgroup_charge_pages+0x1e/0xa0 [ 1818.637150][T29174] obj_cgroup_charge_account+0xcf/0x660 [ 1818.637174][T29174] ? obj_cgroup_charge_account+0x13b/0x660 [ 1818.637201][T29174] __memcg_slab_post_alloc_hook+0x3e6/0x7f0 [ 1818.637241][T29174] kmem_cache_alloc_noprof+0x2bf/0x3c0 [ 1818.637275][T29174] ? alloc_empty_file+0x55/0x1d0 [ 1818.637302][T29174] alloc_empty_file+0x55/0x1d0 [ 1818.637326][T29174] path_openat+0x107/0x3830 [ 1818.637351][T29174] ? arch_stack_walk+0xfc/0x150 [ 1818.637403][T29174] ? kasan_save_track+0x4f/0x80 [ 1818.637427][T29174] ? kasan_save_track+0x3e/0x80 [ 1818.637449][T29174] ? __kasan_slab_alloc+0x6c/0x80 [ 1818.637473][T29174] ? getname_flags+0xb8/0x540 [ 1818.637494][T29174] ? __pfx_path_openat+0x10/0x10 [ 1818.637516][T29174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.637550][T29174] do_filp_open+0x1fa/0x410 [ 1818.637575][T29174] ? __lock_acquire+0xab9/0xd20 [ 1818.637598][T29174] ? __pfx_do_filp_open+0x10/0x10 [ 1818.637645][T29174] ? _raw_spin_unlock+0x28/0x50 [ 1818.637665][T29174] ? alloc_fd+0x64c/0x6c0 [ 1818.637696][T29174] do_sys_openat2+0x121/0x1c0 [ 1818.637724][T29174] ? __pfx_do_sys_openat2+0x10/0x10 [ 1818.637749][T29174] ? exc_page_fault+0x76/0xf0 [ 1818.637775][T29174] ? do_user_addr_fault+0xc8a/0x1390 [ 1818.637798][T29174] __x64_sys_openat+0x138/0x170 [ 1818.637827][T29174] do_syscall_64+0xfa/0x3b0 [ 1818.637852][T29174] ? lockdep_hardirqs_on+0x9c/0x150 [ 1818.637875][T29174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.637892][T29174] ? clear_bhb_loop+0x60/0xb0 [ 1818.637914][T29174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.637931][T29174] RIP: 0033:0x7f3f5ed8e929 [ 1818.637948][T29174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1818.637964][T29174] RSP: 002b:00007f3f5fbe9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1818.637990][T29174] RAX: ffffffffffffffda RBX: 00007f3f5efb5fa0 RCX: 00007f3f5ed8e929 [ 1818.638004][T29174] RDX: 0000000000000040 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1818.638017][T29174] RBP: 00007f3f5ee10b39 R08: 0000000000000000 R09: 0000000000000000 [ 1818.638028][T29174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1818.638038][T29174] R13: 0000000000000001 R14: 00007f3f5efb5fa0 R15: 00007fffff5853c8 [ 1818.638066][T29174] [ 1818.638075][T29174] memory: usage 306996kB, limit 307200kB, failcnt 19640 [ 1819.031678][T29174] memory+swap: usage 421540kB, limit 9007199254740988kB, failcnt 0 [ 1819.096333][T29174] kmem: usage 8476kB, limit 9007199254740988kB, failcnt 0 [ 1819.103512][T29174] Memory cgroup stats for /syz9: [ 1819.103791][T29174] cache 304644096 [ 1819.145065][T29174] rss 184320 [ 1819.148400][T29174] rss_huge 0 [ 1819.214264][T29174] shmem 304644096 [ 1819.217996][T29174] mapped_file 0 [ 1819.221486][T29174] dirty 0 [ 1819.267975][T29174] writeback 0 [ 1819.271311][T29174] workingset_refault_anon 10 [ 1819.275908][T29174] workingset_refault_file 0 [ 1819.367305][T29174] swap 115965952 [ 1819.370902][T29174] swapcached 49152 [ 1819.448801][T29174] pgpgin 173555 [ 1819.452306][T29174] pgpgout 99125 [ 1819.455770][T29174] pgfault 86346 [ 1819.494001][T29174] pgmajfault 8 [ 1819.497739][T29174] inactive_anon 126468096 [ 1819.555507][T29174] active_anon 177393664 [ 1819.559701][T29174] inactive_file 0 [ 1819.563442][T29174] active_file 0 [ 1819.630325][T29174] unevictable 0 [ 1819.633853][T29174] hierarchical_memory_limit 314572800 [ 1819.639242][T29174] hierarchical_memsw_limit 9223372036854771712 [ 1819.710090][T29174] total_cache 304644096 [ 1819.714316][T29174] total_rss 184320 [ 1819.737067][T29174] total_rss_huge 0 [ 1819.740890][T29174] total_shmem 304644096 [ 1819.799446][T29174] total_mapped_file 0 [ 1819.834064][T29174] total_dirty 0 [ 1819.837607][T29174] total_writeback 0 [ 1819.841438][T29174] total_workingset_refault_anon 10 [ 1819.960769][T29174] total_workingset_refault_file 0 [ 1820.008080][T29174] total_swap 115965952 [ 1820.012233][T29174] total_swapcached 49152 [ 1820.027715][T29174] total_pgpgin 173555 [ 1820.031760][T29174] total_pgpgout 99125 [ 1820.035769][T29174] total_pgfault 86346 [ 1820.078433][T29174] total_pgmajfault 8 [ 1820.105731][T29174] total_inactive_anon 126468096 [ 1820.110649][T29174] total_active_anon 177393664 [ 1820.165322][T29174] total_inactive_file 0 [ 1820.194676][T29174] total_active_file 0 [ 1820.205851][T29174] total_unevictable 0 [ 1820.229348][T29174] anon_cost 0 [ 1820.232699][T29174] file_cost 0 [ 1820.236031][T29174] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.9915,pid=28677,uid=0 [ 1820.336684][T29174] Memory cgroup out of memory: Killed process 28677 (syz.9.9915) total-vm:98244kB, anon-rss:952kB, file-rss:53504kB, shmem-rss:0kB, UID:0 pgtables:180kB oom_score_adj:1000 [ 1820.354655][ T48] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1820.583541][ T48] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1820.636553][ T48] usb 5-1: config 0 has no interface number 0 [ 1820.642714][ T48] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1820.709828][ T48] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1820.765601][ T48] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1820.801303][ T48] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1820.846304][ T48] usb 5-1: Product: syz [ 1820.866683][T29219] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1820.869943][ T48] usb 5-1: SerialNumber: syz [ 1820.911207][ T48] usb 5-1: config 0 descriptor?? [ 1820.949812][ T48] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1820.971396][ T48] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input124 [ 1821.117439][T29231] netlink: 'syz.1.10007': attribute type 1 has an invalid length. [ 1821.191186][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1821.200725][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1821.207983][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1821.218738][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1821.226353][ T48] usb 5-1: USB disconnect, device number 42 [ 1821.232490][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1821.239448][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1821.267500][ T48] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1822.418746][T29272] overlayfs: failed to clone upperpath [ 1822.865969][T29288] /dev/rnullb0: Can't lookup blockdev [ 1823.446730][T29297] /dev/rnullb0: Can't lookup blockdev [ 1823.477190][T23479] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1823.706290][T23479] usb 5-1: Using ep0 maxpacket: 32 [ 1823.741115][T23479] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1823.787901][T23479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1823.860807][T23479] usb 5-1: Product: syz [ 1823.925486][T23479] usb 5-1: Manufacturer: syz [ 1823.930250][T23479] usb 5-1: SerialNumber: syz [ 1823.974827][T23479] usb 5-1: config 0 descriptor?? [ 1824.014830][T23479] gspca_main: 174f:6a31 too many config [ 1824.085926][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1824.095097][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1824.465998][ T5938] usb 5-1: USB disconnect, device number 43 [ 1824.592259][T29338] /dev/rnullb0: Can't lookup blockdev [ 1824.790510][T29340] netlink: 'syz.8.10021': attribute type 12 has an invalid length. [ 1824.920061][T29347] /dev/rnullb0: Can't lookup blockdev [ 1825.321459][T29355] /dev/rnullb0: Can't lookup blockdev [ 1825.327470][T29349] /dev/rnullb0: Can't lookup blockdev [ 1825.377874][T29355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10025'. [ 1825.382372][T29357] binder: 29356:29357 unknown command 576 [ 1825.431134][T29355] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10025'. [ 1825.446253][T29357] binder: 29356:29357 ioctl c0306201 200000000480 returned -22 [ 1825.742061][ T48] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1825.860156][T29365] /dev/rnullb0: Can't lookup blockdev [ 1825.881255][T29365] openvswitch: netlink: Message has 24 unknown bytes. [ 1825.910071][T29365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1825.924009][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 1825.941438][ T48] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 1826.007959][ T48] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1826.075602][ T48] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1826.151604][ T48] usb 5-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.40 [ 1826.194196][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1826.233820][ T48] usb 5-1: Product: syz [ 1826.238053][ T48] usb 5-1: Manufacturer: ꎪ虩᮶ಛ㘺勞唵㶺싴謕᯲颌餹쾄덡뮯ꒆ㷳㩚⻛魊柅呛㲊れ풋퀪ఱﱟ矧鎾큫ւ兔ঢ磫웏≖鶋墒闿ꊅԤ鴅⌜ᗩ鼂拓⠯쉁똜졫붵ꭀ껐껯ᇒ⠎圊ⶀ巡 [ 1826.383069][ T48] usb 5-1: SerialNumber: syz [ 1826.424384][T29369] 9pnet: Could not find request transport: {unix [ 1826.665413][ T48] usbhid 5-1:1.0: can't add hid device: -71 [ 1826.671458][ T48] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1826.709019][ T48] usb 5-1: USB disconnect, device number 44 [ 1826.727128][T29385] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10030'. [ 1827.397154][T29407] /dev/rnullb0: Can't lookup blockdev [ 1828.230054][T29427] CIFS mount error: No usable UNC path provided in device string! [ 1828.230054][T29427] [ 1828.240358][T23479] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1828.288683][T29429] 9pnet_virtio: no channels available for device ./cgroup/file0 [ 1828.296600][T29427] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1828.464316][T23479] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1828.499543][T23479] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1828.548392][T23479] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 1828.572411][T23479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1828.604626][T23479] usb 5-1: Product: syz [ 1828.633305][T23479] usb 5-1: Manufacturer: syz [ 1828.651101][T23479] usb 5-1: SerialNumber: syz [ 1828.702121][T29440] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1828.708162][T29440] /dev/rnullb0: Can't lookup blockdev [ 1828.917590][T23479] pxrc 5-1:1.0: Could not find endpoint [ 1828.956139][T23479] usb 5-1: USB disconnect, device number 45 [ 1829.365505][T29453] /dev/rnullb0: Can't lookup blockdev [ 1829.409331][T29434] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1829.415510][T29434] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1829.454937][T29434] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1829.606313][T29434] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1829.953336][T29466] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10043'. [ 1830.675909][T28662] syz.9.9915 (28662) used greatest stack depth: 15560 bytes left [ 1830.747744][T29491] /dev/rnullb0: Can't lookup blockdev [ 1830.807277][T21362] Bluetooth: hci1: command 0x0406 tx timeout [ 1831.019539][ T30] audit: type=1804 audit(1752259545.225:337): pid=29497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.10052" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=6732 res=1 errno=0 [ 1831.539155][T29514] /dev/rnullb0: Can't lookup blockdev [ 1831.578581][T21362] Bluetooth: hci0: command 0x0c1a tx timeout [ 1832.338385][T29536] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1832.370756][T29538] /dev/rnullb0: Can't lookup blockdev [ 1832.494856][ T48] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1832.655822][T29544] netlink: 'syz.4.10061': attribute type 27 has an invalid length. [ 1832.730036][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 1832.752828][ T48] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1832.767486][ T48] usb 2-1: config 0 has no interface number 0 [ 1832.782985][ T48] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1832.802890][ T48] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1832.824392][ T48] usb 2-1: New USB device found, idVendor=0572, idProduct=58a2, bcdDevice=27.0a [ 1832.862299][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1832.892889][ T48] usb 2-1: Product: syz [ 1832.908432][T29544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1832.916269][T29544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1832.932975][ T48] usb 2-1: Manufacturer: syz [ 1832.937726][ T48] usb 2-1: SerialNumber: syz [ 1832.956506][ T48] usb 2-1: config 0 descriptor?? [ 1833.210537][ T48] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a2) with 1 interfaces [ 1833.247900][ T48] cx231xx 2-1:0.1: Failed to read PCB config [ 1833.281478][ T48] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 1833.322246][T29544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1833.330280][ T48] usb 2-1: USB disconnect, device number 71 [ 1833.402944][T29544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1833.768302][T28835] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.800088][ T48] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1833.810466][T21362] Bluetooth: hci0: command 0x0c1a tx timeout [ 1833.847873][T28835] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.887053][T27716] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.969729][T27716] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.002322][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 1834.010695][ T48] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1834.019654][ T48] usb 2-1: config 0 has no interface number 0 [ 1834.026548][ T48] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1834.054213][ T48] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1834.100693][ T48] usb 2-1: New USB device found, idVendor=0572, idProduct=58a2, bcdDevice=27.0a [ 1834.154024][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.206455][ T48] usb 2-1: Product: syz [ 1834.223097][ T48] usb 2-1: Manufacturer: syz [ 1834.242024][ T48] usb 2-1: SerialNumber: syz [ 1834.268844][ T48] usb 2-1: config 0 descriptor?? [ 1834.519472][ T48] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a2) with 1 interfaces [ 1834.550597][ T48] cx231xx 2-1:0.1: Identified as Conexant Hybrid TV - CARRAERA (card=1) [ 1834.625600][T29615] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1834.631683][T29615] /dev/rnullb0: Can't lookup blockdev [ 1834.685432][ T10] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 1834.698788][ T48] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 1834.723145][ T48] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1834.751777][ T48] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1834.761822][ T7838] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1834.777416][T29528] binder: 29527:29528 ioctl c018620c 200000000140 returned -1 [ 1834.785832][ T48] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1834.814978][ T48] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1834.822837][ T48] cx231xx 2-1:0.1: Failed to set devmode to analog: error: -71 [ 1834.865625][ T48] i2c i2c-2: Added multiplexed i2c bus 4 [ 1834.872816][ T10] usb 10-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1834.876333][ T48] i2c i2c-2: Added multiplexed i2c bus 5 [ 1834.900407][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 1834.917653][ T48] cx231xx 2-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 1834.929852][ T10] usb 10-1: SerialNumber: syz [ 1834.951478][ T48] cx231xx 2-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 1834.954364][ T10] usb 10-1: config 0 descriptor?? [ 1834.976303][ T7838] usb 5-1: device descriptor read/64, error -71 [ 1835.055745][ T48] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 1835.102692][ T48] usb 2-1: USB disconnect, device number 72 [ 1835.251956][ T7838] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1835.442441][ T10] hackrf 10-1:0.0: Board ID: 00 [ 1835.444917][ T7838] usb 5-1: device descriptor read/64, error -71 [ 1835.471452][ T10] hackrf 10-1:0.0: Firmware version: -ҶTtpR㼤F G [ 1835.527211][ T10] hackrf 10-1:0.0: Registered as swradio24 [ 1835.552867][ T10] videodev: could not get a free minor [ 1835.559743][ T10] hackrf 10-1:0.0: Failed to register as video device (-23) [ 1835.572537][ T7838] usb usb5-port1: attempt power cycle [ 1835.582190][ T10] hackrf 10-1:0.0: probe with driver hackrf failed with error -23 [ 1835.685639][ T10] usb 10-1: USB disconnect, device number 43 [ 1835.957048][ T7838] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1835.999910][ T7838] usb 5-1: device descriptor read/8, error -71 [ 1836.022359][T21362] Bluetooth: hci0: command 0x0c1a tx timeout [ 1836.236546][T29696] /dev/rnullb0: Can't lookup blockdev [ 1836.256049][ T7838] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1836.301719][ T7838] usb 5-1: device descriptor read/8, error -71 [ 1836.356202][T29698] /dev/rnullb0: Can't lookup blockdev [ 1836.454360][ T7838] usb usb5-port1: unable to enumerate USB device [ 1836.492256][ T5938] hid-generic 0000:0000:0000.0068: hidraw1: HID v0.00 Device [syz0] on syz0 [ 1836.641491][T29718] /dev/rnullb0: Can't lookup blockdev [ 1836.677498][T29713] fido_id[29713]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1836.862554][T29732] /dev/rnullb0: Can't lookup blockdev [ 1836.881044][T29731] /dev/rnullb0: Can't lookup blockdev [ 1837.016190][T29740] /dev/rnullb0: Can't lookup blockdev [ 1837.086982][T29743] /dev/rnullb0: Can't lookup blockdev [ 1837.224714][T29753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10090'. [ 1837.246169][T29753] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1837.256133][T29753] /dev/rnullb0: Can't lookup blockdev [ 1837.430746][T29761] /dev/rnullb0: Can't lookup blockdev [ 1838.115108][T23479] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1838.286904][T23479] usb 5-1: Using ep0 maxpacket: 32 [ 1838.314350][T23479] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1838.340375][T23479] usb 5-1: config 0 has no interface number 0 [ 1838.354281][T23479] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1838.374869][T23479] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1838.405805][T23479] usb 5-1: New USB device found, idVendor=05b9, idProduct=0219, bcdDevice=f0.72 [ 1838.442479][T23479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1838.466665][T23479] usb 5-1: Product: syz [ 1838.492353][T23479] usb 5-1: Manufacturer: syz [ 1838.521302][T23479] usb 5-1: SerialNumber: syz [ 1838.539842][T23479] usb 5-1: config 0 descriptor?? [ 1838.735388][T29800] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1838.873824][T23479] usb 5-1: USB disconnect, device number 50 [ 1838.906760][T29800] usb 2-1: Using ep0 maxpacket: 32 [ 1838.915075][T29800] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 1838.959119][T29800] usb 2-1: config 0 has no interface number 0 [ 1838.987786][T29800] usb 2-1: config 0 interface 133 has no altsetting 0 [ 1839.004722][T29800] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=cf.79 [ 1839.027823][T29800] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.047430][T29800] usb 2-1: Product: syz [ 1839.051767][T29800] usb 2-1: Manufacturer: syz [ 1839.060878][T29800] usb 2-1: SerialNumber: syz [ 1839.082806][T29800] usb 2-1: config 0 descriptor?? [ 1839.096255][T29800] ati_remote 2-1:0.133: ati_remote_probe: Unexpected endpoint_in [ 1839.116498][T29855] tmpfs: Bad value for 'size' [ 1839.322210][T29813] tipc: Started in network mode [ 1839.335953][T29813] tipc: Node identity 8007, cluster identity 4711 [ 1839.342395][T29813] tipc: Node number set to 32775 [ 1839.352841][T23479] usb 2-1: USB disconnect, device number 73 [ 1839.929742][T29889] /dev/rnullb0: Can't lookup blockdev [ 1840.366391][T29905] /dev/rnullb0: Can't lookup blockdev [ 1840.405937][T29911] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10109'. [ 1840.430089][T29904] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10109'. [ 1840.736075][T29925] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1840.748816][T29925] /dev/rnullb0: Can't lookup blockdev [ 1840.976420][T29931] /dev/rnullb0: Can't lookup blockdev [ 1841.528496][T29954] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10118'. [ 1841.566753][T29950] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1841.894144][T29967] /dev/rnullb0: Can't lookup blockdev [ 1841.935836][T29969] /dev/rnullb0: Can't lookup blockdev [ 1842.064301][T29972] /dev/rnullb0: Can't lookup blockdev [ 1842.152129][T29979] netlink: 'syz.9.10123': attribute type 2 has an invalid length. [ 1842.406021][T29992] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1842.738262][T30003] /dev/rnullb0: Can't lookup blockdev [ 1842.930930][T30012] batadv_slave_1: entered promiscuous mode [ 1842.939958][T30012] batadv_slave_1: left promiscuous mode [ 1842.978496][T30019] /dev/rnullb0: Can't lookup blockdev [ 1843.217196][T30037] /dev/rnullb0: Can't lookup blockdev [ 1843.324060][T30045] /dev/rnullb0: Can't lookup blockdev [ 1843.334519][T30046] /dev/rnullb0: Can't lookup blockdev [ 1843.361606][T23479] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 1843.511071][T23479] usb 10-1: device descriptor read/64, error -71 [ 1843.549250][ T5938] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1843.600726][T30060] /dev/rnullb0: Can't lookup blockdev [ 1843.668398][T30063] /dev/rnullb0: Can't lookup blockdev [ 1843.762790][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1843.767451][T23479] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1843.790485][ T5938] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1843.815206][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.865589][ T5938] usb 2-1: config 0 descriptor?? [ 1843.938906][T23479] usb 10-1: device descriptor read/64, error -71 [ 1844.070335][T23479] usb usb10-port1: attempt power cycle [ 1844.108136][ T5938] usbhid 2-1:0.0: can't add hid device: -71 [ 1844.114975][ T5912] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1844.122794][ T5938] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1844.134787][ T5938] usb 2-1: USB disconnect, device number 74 [ 1844.295425][ T5912] usb 5-1: config 7 has an invalid interface number: 18 but max is 3 [ 1844.303778][ T5912] usb 5-1: config 7 has an invalid interface number: 71 but max is 3 [ 1844.314695][ T5912] usb 5-1: config 7 has an invalid interface number: 241 but max is 3 [ 1844.322922][ T5912] usb 5-1: config 7 has an invalid interface number: 31 but max is 3 [ 1844.339996][ T5912] usb 5-1: config 7 has an invalid interface number: 64 but max is 3 [ 1844.348443][ T5912] usb 5-1: config 7 has 6 interfaces, different from the descriptor's value: 4 [ 1844.357712][ T5912] usb 5-1: config 7 has no interface number 0 [ 1844.363949][ T5912] usb 5-1: config 7 has no interface number 1 [ 1844.370700][ T5912] usb 5-1: config 7 has no interface number 2 [ 1844.376950][ T5912] usb 5-1: config 7 has no interface number 4 [ 1844.383063][ T5912] usb 5-1: config 7 has no interface number 5 [ 1844.389437][ T5912] usb 5-1: config 7 interface 18 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1844.404776][ T5912] usb 5-1: config 7 interface 18 altsetting 127 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 1844.417406][ T5912] usb 5-1: config 7 interface 18 altsetting 127 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 1844.428574][ T5912] usb 5-1: config 7 interface 18 altsetting 127 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1844.430086][T23479] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1844.441465][ T5912] usb 5-1: config 7 interface 18 altsetting 127 endpoint 0xA has invalid maxpacket 1552, setting to 64 [ 1844.467374][ T5912] usb 5-1: config 7 interface 18 altsetting 127 endpoint 0x2 has invalid maxpacket 1463, setting to 1024 [ 1844.473445][T23479] usb 10-1: device descriptor read/8, error -71 [ 1844.481237][ T5912] usb 5-1: config 7 interface 18 altsetting 127 has a duplicate endpoint with address 0x1, skipping [ 1844.496437][ T5912] usb 5-1: config 7 interface 18 altsetting 127 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 1844.515360][ T5912] usb 5-1: config 7 interface 18 altsetting 127 bulk endpoint 0xB has invalid maxpacket 16 [ 1844.525409][ T5912] usb 5-1: config 7 interface 18 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1844.539337][ T5912] usb 5-1: config 7 interface 18 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1844.552007][ T5912] usb 5-1: config 7 interface 18 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1844.564872][ T5912] usb 5-1: config 7 interface 18 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 1844.578759][ T5912] usb 5-1: config 7 interface 71 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1844.589870][ T5912] usb 5-1: config 7 interface 71 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 1844.590237][T29770] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1844.603312][ T5912] usb 5-1: too many endpoints for config 7 interface 241 altsetting 202: 119, using maximum allowed: 30 [ 1844.622494][ T5912] usb 5-1: config 7 interface 241 altsetting 202 has a duplicate endpoint with address 0xF, skipping [ 1844.633665][ T5912] usb 5-1: config 7 interface 241 altsetting 202 has a duplicate endpoint with address 0xF, skipping [ 1844.644977][ T5912] usb 5-1: config 7 interface 241 altsetting 202 has a duplicate endpoint with address 0x1, skipping [ 1844.656558][ T5912] usb 5-1: config 7 interface 241 altsetting 202 has a duplicate endpoint with address 0xF, skipping [ 1844.670863][ T5912] usb 5-1: config 7 interface 241 altsetting 202 has a duplicate endpoint with address 0xB, skipping [ 1844.682108][ T5912] usb 5-1: config 7 interface 241 altsetting 202 has 5 endpoint descriptors, different from the interface descriptor's value: 119 [ 1844.707329][ T5912] usb 5-1: config 7 interface 31 altsetting 7 has a duplicate endpoint with address 0x8D, skipping [ 1844.728067][ T5912] usb 5-1: config 7 interface 31 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 1844.738766][ T5912] usb 5-1: config 7 interface 31 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1844.751636][T23479] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1844.761077][ T5912] usb 5-1: config 7 interface 31 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1844.773860][ T5912] usb 5-1: config 7 interface 31 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 1844.782563][T23479] usb 10-1: device descriptor read/8, error -71 [ 1844.801571][T29770] usb 2-1: Using ep0 maxpacket: 32 [ 1844.809919][T29770] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1844.815813][ T5912] usb 5-1: config 7 interface 31 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 1844.843958][T29770] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 1844.855264][ T5912] usb 5-1: config 7 interface 31 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 1844.864579][T29770] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.873218][ T5912] usb 5-1: config 7 interface 31 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 1844.888055][ T5912] usb 5-1: config 7 interface 31 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 1844.891580][T29770] usb 2-1: config 0 descriptor?? [ 1844.911364][T23479] usb usb10-port1: unable to enumerate USB device [ 1844.922054][ T5912] usb 5-1: config 7 interface 31 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1844.939109][T29770] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1844.965156][ T5912] usb 5-1: config 7 interface 31 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 1844.965813][T29770] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1844.979669][ T5912] usb 5-1: config 7 interface 31 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 1845.031584][ T5912] usb 5-1: config 7 interface 31 altsetting 7 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 1845.057953][ T5912] usb 5-1: too many endpoints for config 7 interface 3 altsetting 221: 185, using maximum allowed: 30 [ 1845.080008][ T5912] usb 5-1: config 7 interface 3 altsetting 221 has a duplicate endpoint with address 0x7, skipping [ 1845.104986][ T5912] usb 5-1: config 7 interface 3 altsetting 221 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1845.126743][ T5912] usb 5-1: config 7 interface 3 altsetting 221 has 2 endpoint descriptors, different from the interface descriptor's value: 185 [ 1845.141089][ T5912] usb 5-1: config 7 interface 64 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 1845.154020][ T5912] usb 5-1: config 7 interface 64 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1845.164941][ T5912] usb 5-1: config 7 interface 64 altsetting 3 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 1845.177251][ T5912] usb 5-1: config 7 interface 64 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 1845.177458][T30039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1845.202279][ T5912] usb 5-1: config 7 interface 18 has no altsetting 0 [ 1845.209005][ T5912] usb 5-1: config 7 interface 71 has no altsetting 0 [ 1845.218173][T30039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1845.226454][ T5912] usb 5-1: config 7 interface 241 has no altsetting 0 [ 1845.247264][ T5912] usb 5-1: config 7 interface 31 has no altsetting 0 [ 1845.263535][ T5912] usb 5-1: config 7 interface 3 has no altsetting 0 [ 1845.270203][ T5912] usb 5-1: config 7 interface 64 has no altsetting 0 [ 1845.292623][ T5912] usb 5-1: New USB device found, idVendor=045e, idProduct=0479, bcdDevice= 4.f4 [ 1845.303276][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1845.311614][ T5912] usb 5-1: Product: Ќ [ 1845.315812][ T5912] usb 5-1: Manufacturer: ま茅煡穥銀쥳변촻協頰册ꇫ羿沄洹ﻭ蛣弩鱯핛渫몮捸᠃戳፪䵏髲Ƛ˕曔諊㮴剙쑔䘂䔹融ẓ楈鶼騁캍魯퓕꟤縕ᢠ㖺㸤䃒⹤ﴋࢵ昌᠁襼舢儩㻜짧砧磮역䏴킮៦漪쇵鮭꭬倵軓믂᳒덵㇌瓮ᕌ [ 1845.343253][ T5912] usb 5-1: SerialNumber: 둪礳䯦ꐜﱷ产듴ᄍ㔅Ň綸ᮑ渋 [ 1845.358977][T30071] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1845.369024][T30071] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1845.629164][T30111] /dev/rnullb0: Can't lookup blockdev [ 1845.684174][ T5912] usb 5-1: USB disconnect, device number 51 [ 1846.464443][T30152] /dev/rnullb0: Can't lookup blockdev [ 1846.509978][T30154] /dev/rnullb0: Can't lookup blockdev [ 1846.663169][ T7838] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1846.726452][ T5943] usb 2-1: USB disconnect, device number 75 [ 1846.748051][ T5943] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1846.823366][T29770] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1846.830439][T30178] IPVS: set_ctl: invalid protocol: 60 172.20.20.46:20000 [ 1846.839807][ T7838] usb 10-1: Using ep0 maxpacket: 16 [ 1846.847701][ T7838] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1846.858338][T30178] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1846.864440][ T7838] usb 10-1: too many configurations: 188, using maximum allowed: 8 [ 1846.892162][ T7838] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1846.900187][ T7838] usb 10-1: can't read configurations, error -61 [ 1846.982350][T30183] /dev/rnullb0: Can't lookup blockdev [ 1846.995465][T29770] usb 5-1: device descriptor read/64, error -71 [ 1847.037098][ T7838] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1847.072101][T30186] input: syz1 as /devices/virtual/input/input125 [ 1847.143331][T30189] /dev/rnullb0: Can't lookup blockdev [ 1847.225358][T30196] /dev/rnullb0: Can't lookup blockdev [ 1847.225955][ T7838] usb 10-1: Using ep0 maxpacket: 16 [ 1847.252964][T29770] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1847.253838][ T7838] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1847.293504][ T7838] usb 10-1: too many configurations: 188, using maximum allowed: 8 [ 1847.318356][ T7838] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1847.326956][ T7838] usb 10-1: can't read configurations, error -61 [ 1847.333830][ T7838] usb usb10-port1: attempt power cycle [ 1847.411041][T29770] usb 5-1: device descriptor read/64, error -71 [ 1847.529130][T29770] usb usb5-port1: attempt power cycle [ 1847.635469][ T5912] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1847.699758][ T7838] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1847.736793][ T7838] usb 10-1: Using ep0 maxpacket: 16 [ 1847.751336][ T7838] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1847.759231][ T7838] usb 10-1: too many configurations: 188, using maximum allowed: 8 [ 1847.769129][ T7838] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1847.783172][ T7838] usb 10-1: can't read configurations, error -61 [ 1847.806798][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 1847.813905][ T5912] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1847.822505][ T5912] usb 2-1: config 0 has no interface number 0 [ 1847.829966][ T5912] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1847.841335][ T5912] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1847.860448][ T5912] usb 2-1: config 0 interface 255 has no altsetting 0 [ 1847.869285][ T5912] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1847.878601][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.886698][ T5912] usb 2-1: Product: syz [ 1847.890880][ T5912] usb 2-1: Manufacturer: syz [ 1847.892020][T29770] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1847.895529][ T5912] usb 2-1: SerialNumber: syz [ 1847.911058][ T5912] usb 2-1: config 0 descriptor?? [ 1847.934621][ T7838] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1847.935775][T29770] usb 5-1: device descriptor read/8, error -71 [ 1847.981439][ T7838] usb 10-1: Using ep0 maxpacket: 16 [ 1847.989251][ T7838] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1847.997248][ T7838] usb 10-1: too many configurations: 188, using maximum allowed: 8 [ 1848.007700][ T7838] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1848.015561][ T7838] usb 10-1: can't read configurations, error -61 [ 1848.023620][ T7838] usb usb10-port1: unable to enumerate USB device [ 1848.202839][T29770] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1848.219354][T30199] /dev/rnullb0: Can't lookup blockdev [ 1848.223927][T29770] usb 5-1: device descriptor read/8, error -71 [ 1848.295524][ T5912] hub 2-1:0.255: bad descriptor, ignoring hub [ 1848.305673][ T5912] hub 2-1:0.255: probe with driver hub failed with error -5 [ 1848.343355][T29770] usb usb5-port1: unable to enumerate USB device [ 1848.357894][ T5912] usb 2-1: USB disconnect, device number 76 [ 1848.561632][T30230] openvswitch: netlink: VXLAN extension 206 out of range max 1 [ 1848.573128][T30230] /dev/rnullb0: Can't lookup blockdev [ 1848.644276][T30232] /dev/rnullb0: Can't lookup blockdev [ 1849.313912][T30249] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1849.932044][ T30] audit: type=1804 audit(1752259562.932:338): pid=30264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.10173" name="rnullb0" dev="tmpfs" ino=607 res=1 errno=0 [ 1850.208452][T30285] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10177'. [ 1851.820620][T30302] /dev/rnullb0: Can't lookup blockdev [ 1851.845310][ T5912] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1851.917254][T30305] /dev/rnullb0: Can't lookup blockdev [ 1852.029714][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1852.052215][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1852.073512][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1852.116911][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1852.154867][ T5912] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1852.186269][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.218761][ T5912] usb 2-1: config 0 descriptor?? [ 1852.243177][T30319] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1852.719373][ T5912] plantronics 0003:047F:FFFF.0069: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1852.743222][T29770] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1852.892402][T29770] usb 10-1: device descriptor read/64, error -71 [ 1853.148899][T29770] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1853.300928][T29770] usb 10-1: device descriptor read/64, error -71 [ 1853.423093][T29770] usb usb10-port1: attempt power cycle [ 1853.575672][ T48] usb 2-1: USB disconnect, device number 77 [ 1853.645555][T30380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10196'. [ 1853.655136][T30380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10196'. [ 1853.670284][T30380] /dev/rnullb0: Can't lookup blockdev [ 1853.800939][T29770] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1853.833287][T29770] usb 10-1: device descriptor read/8, error -71 [ 1854.011734][T30402] /dev/rnullb0: Can't lookup blockdev [ 1854.100524][T29770] usb 10-1: new high-speed USB device number 55 using dummy_hcd [ 1854.132691][T29770] usb 10-1: device descriptor read/8, error -71 [ 1854.208144][ T30] audit: type=1800 audit(1752259566.928:339): pid=30402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.8.10201" name="/newroot/syzcgroup/unified/syz8" dev="tmpfs" ino=903 res=0 errno=0 [ 1854.260763][T29770] usb usb10-port1: unable to enumerate USB device [ 1854.292568][ T30] audit: type=1804 audit(1752259567.003:340): pid=30414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.10203" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=6732 res=1 errno=0 [ 1854.313966][ C0] vkms_vblank_simulate: vblank timer overrun [ 1854.320521][T30414] binder: 30413:30414 ioctl c018620b 200000000000 returned -14 [ 1854.389280][T30419] netlink: 'syz.8.10204': attribute type 1 has an invalid length. [ 1854.407979][T30419] netlink: 624 bytes leftover after parsing attributes in process `syz.8.10204'. [ 1854.685392][T30435] /dev/rnullb0: Can't lookup blockdev [ 1854.922492][T23479] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1855.083356][T23479] usb 5-1: Using ep0 maxpacket: 8 [ 1855.096557][T23479] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1855.105242][T23479] usb 5-1: config 0 has no interface number 0 [ 1855.111361][T23479] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1855.122472][T23479] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1855.134204][T23479] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1855.145999][T23479] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1855.159193][T23479] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1855.168518][T23479] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.187644][T23479] usb 5-1: config 0 descriptor?? [ 1855.199305][T23479] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1855.414455][ T7838] usb 5-1: USB disconnect, device number 56 [ 1855.420479][ C1] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 1855.441347][ T7838] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1855.785191][T30476] netlink: 100 bytes leftover after parsing attributes in process `syz.9.10214'. [ 1855.845485][T30480] /dev/rnullb0: Can't lookup blockdev [ 1855.927285][ T7838] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1855.934318][T30485] FAULT_INJECTION: forcing a failure. [ 1855.934318][T30485] name failslab, interval 1, probability 0, space 0, times 0 [ 1855.949846][T30485] CPU: 0 UID: 0 PID: 30485 Comm: syz.9.10217 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1855.949873][T30485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1855.949886][T30485] Call Trace: [ 1855.949895][T30485] [ 1855.949904][T30485] dump_stack_lvl+0x189/0x250 [ 1855.949941][T30485] ? __pfx____ratelimit+0x10/0x10 [ 1855.949970][T30485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1855.949982][ T5912] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1855.950000][T30485] ? __pfx__printk+0x10/0x10 [ 1855.950032][T30485] ? __pfx___might_resched+0x10/0x10 [ 1855.950061][T30485] ? fs_reclaim_acquire+0x7d/0x100 [ 1855.950105][T30485] should_fail_ex+0x414/0x560 [ 1855.950150][T30485] should_failslab+0xa8/0x100 [ 1855.950174][T30485] __kmalloc_cache_noprof+0x70/0x3d0 [ 1855.950212][T30485] ? alloc_pipe_info+0xe9/0x4d0 [ 1855.950243][T30485] alloc_pipe_info+0xe9/0x4d0 [ 1855.950272][T30485] splice_direct_to_actor+0xa5d/0xcc0 [ 1855.950318][T30485] ? __pfx_aa_file_perm+0x10/0x10 [ 1855.950341][T30485] ? __lock_acquire+0xab9/0xd20 [ 1855.950368][T30485] ? __pfx_direct_splice_actor+0x10/0x10 [ 1855.950395][T30485] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1855.950433][T30485] do_splice_direct+0x181/0x270 [ 1855.950464][T30485] ? __pfx_do_splice_direct+0x10/0x10 [ 1855.950487][T30485] ? common_file_perm+0x1b5/0x230 [ 1855.950523][T30485] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1855.950555][T30485] ? bpf_lsm_file_permission+0x9/0x20 [ 1855.950585][T30485] ? security_file_permission+0x75/0x290 [ 1855.950617][T30485] ? rw_verify_area+0x255/0x4d0 [ 1855.950646][T30485] do_sendfile+0x4da/0x7e0 [ 1855.950676][T30485] ? __pfx_vfs_write+0x10/0x10 [ 1855.950705][T30485] ? __pfx_do_sendfile+0x10/0x10 [ 1855.950735][T30485] ? __fget_files+0x3a0/0x420 [ 1855.950776][T30485] __se_sys_sendfile64+0x13e/0x190 [ 1855.950820][T30485] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1855.950846][T30485] ? rcu_is_watching+0x15/0xb0 [ 1855.950890][T30485] ? do_syscall_64+0xbe/0x3b0 [ 1855.950926][T30485] do_syscall_64+0xfa/0x3b0 [ 1855.950951][T30485] ? lockdep_hardirqs_on+0x9c/0x150 [ 1855.950976][T30485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1855.950997][T30485] ? clear_bhb_loop+0x60/0xb0 [ 1855.951020][T30485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1855.951039][T30485] RIP: 0033:0x7f3f5ed8e929 [ 1855.951057][T30485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1855.951089][T30485] RSP: 002b:00007f3f5fbe9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1855.951111][T30485] RAX: ffffffffffffffda RBX: 00007f3f5efb5fa0 RCX: 00007f3f5ed8e929 [ 1855.951125][T30485] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 1855.951137][T30485] RBP: 00007f3f5fbe9090 R08: 0000000000000000 R09: 0000000000000000 [ 1855.951150][T30485] R10: 000000007ffff004 R11: 0000000000000246 R12: 0000000000000001 [ 1855.951162][T30485] R13: 0000000000000000 R14: 00007f3f5efb5fa0 R15: 00007fffff5853c8 [ 1855.951193][T30485] [ 1856.418781][ T7838] usb 5-1: Using ep0 maxpacket: 8 [ 1856.426688][ T7838] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1856.434863][ T7838] usb 5-1: config 0 has no interface number 0 [ 1856.441040][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 1856.446295][ T7838] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1856.458997][ T5912] usb 2-1: too many configurations: 254, using maximum allowed: 8 [ 1856.467921][ T7838] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1856.480090][ T7838] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1856.491455][ T7838] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1856.505604][ T7838] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1856.506242][ T5912] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1856.523319][ T7838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1856.531469][ T5912] usb 2-1: can't read configurations, error -61 [ 1856.542921][ T7838] usb 5-1: config 0 descriptor?? [ 1856.560435][ T7838] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1856.638459][T30501] /dev/rnullb0: Can't lookup blockdev [ 1856.696360][ T5912] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1856.720324][ T30] audit: type=1800 audit(1752259569.296:341): pid=30503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.10222" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1856.766345][T30434] ldusb: No device or device unplugged -19 [ 1856.774391][T30434] /dev/rnullb0: Can't lookup blockdev [ 1856.780612][T30434] sctp: [Deprecated]: syz.4.10209 (pid 30434) Use of int in max_burst socket option. [ 1856.780612][T30434] Use struct sctp_assoc_value instead [ 1856.808574][T29770] usb 5-1: USB disconnect, device number 57 [ 1856.820588][T29770] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1856.889835][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 1856.899733][ T5912] usb 2-1: too many configurations: 254, using maximum allowed: 8 [ 1856.914210][ T5912] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1856.923118][ T5912] usb 2-1: can't read configurations, error -61 [ 1856.933569][ T5912] usb usb2-port1: attempt power cycle [ 1857.294848][ T5912] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1857.327568][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 1857.334949][ T5912] usb 2-1: too many configurations: 254, using maximum allowed: 8 [ 1857.364230][ T5912] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1857.373142][ T5912] usb 2-1: can't read configurations, error -61 [ 1857.521809][ T5912] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1857.605525][ T5912] usb 2-1: Using ep0 maxpacket: 32 [ 1857.632399][ T5912] usb 2-1: too many configurations: 254, using maximum allowed: 8 [ 1857.650096][ T5912] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1857.672227][ T5912] usb 2-1: can't read configurations, error -61 [ 1857.679333][ T5912] usb usb2-port1: unable to enumerate USB device [ 1858.443938][ T30] audit: type=1326 audit(1752259570.906:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30556 comm="syz.9.10233" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f5ed8e929 code=0x0 [ 1858.644977][T30561] netlink: 165 bytes leftover after parsing attributes in process `syz.4.10234'. [ 1858.858456][T30569] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1859.205479][T30594] /dev/sg0: Can't lookup blockdev [ 1859.357857][ T7838] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 1859.544187][ T7838] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1859.575902][ T7838] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1859.599961][T30618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1859.635018][T30623] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10247'. [ 1859.648425][T30618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1859.665796][ T7838] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1859.697102][ T7838] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1859.725422][T30629] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1859.732180][ T7838] usb 2-1: SerialNumber: syz [ 1859.776352][ T7838] cdc_ether 2-1:1.0: skipping garbage [ 1859.781823][ T7838] usb 2-1: bad CDC descriptors [ 1859.807312][ T7838] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1859.812843][T30634] /dev/rnullb0: Can't lookup blockdev [ 1859.847265][ T7838] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1859.870366][ T5912] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1859.993729][T29770] usb 2-1: USB disconnect, device number 82 [ 1860.044903][ T5912] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1860.061687][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1860.071450][ T5912] usb 5-1: Product: syz [ 1860.076098][ T5912] usb 5-1: Manufacturer: syz [ 1860.080786][ T5912] usb 5-1: SerialNumber: syz [ 1860.085510][T29609] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 1860.104014][ T5912] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1860.128798][ T7838] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1860.232918][T29609] usb 10-1: device descriptor read/64, error -71 [ 1860.346355][ T5912] usb 5-1: USB disconnect, device number 58 [ 1860.463265][T30659] /dev/rnullb0: Can't lookup blockdev [ 1860.500207][T29609] usb 10-1: new high-speed USB device number 57 using dummy_hcd [ 1860.651192][T29609] usb 10-1: device descriptor read/64, error -71 [ 1860.666760][T30665] /dev/rnullb0: Can't lookup blockdev [ 1860.715011][T30668] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1860.743588][T30672] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 1860.753680][T30672] PKCS7: Only support pkcs7_signedData type [ 1860.763592][T30672] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1860.788961][T29609] usb usb10-port1: attempt power cycle [ 1860.802618][T30668] kvm: pic: non byte read [ 1860.820058][T30668] kvm: pic: non byte read [ 1860.837927][T30668] /dev/rnullb0: Can't lookup blockdev [ 1861.096176][T30685] /dev/rnullb0: Can't lookup blockdev [ 1861.173217][T29609] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 1861.195277][T29609] usb 10-1: device descriptor read/8, error -71 [ 1861.222838][T30693] /dev/rnullb0: Can't lookup blockdev [ 1861.246889][ T7838] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1861.281124][ T7838] ath9k_htc: Failed to initialize the device [ 1861.288323][ T5912] usb 5-1: ath9k_htc: USB layer deinitialized [ 1861.374810][T30703] /dev/rnullb0: Can't lookup blockdev [ 1861.397914][T30704] /dev/rnullb0: Can't lookup blockdev [ 1861.468433][T30708] /dev/rnullb0: Can't lookup blockdev [ 1861.483300][T29609] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 1861.537712][T29609] usb 10-1: device descriptor read/8, error -71 [ 1861.686375][T29609] usb usb10-port1: unable to enumerate USB device [ 1861.716268][T30725] netlink: 'syz.8.10267': attribute type 5 has an invalid length. [ 1861.838934][T30731] /dev/rnullb0: Can't lookup blockdev [ 1861.849391][T30731] /dev/rnullb0: Can't lookup blockdev [ 1861.878476][ T5912] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1862.072721][ T5912] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1862.082200][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1862.113534][ T5912] usb 2-1: config 0 descriptor?? [ 1862.132831][ T5912] cp210x 2-1:0.0: cp210x converter detected [ 1862.768154][T30718] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1862.776443][ T5912] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1862.797879][ T5912] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1862.820909][ T5912] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1862.849572][ T5912] usb 2-1: USB disconnect, device number 83 [ 1862.873976][ T5912] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1862.899844][ T5912] cp210x 2-1:0.0: device disconnected [ 1863.249223][T30801] netlink: 'syz.9.10282': attribute type 1 has an invalid length. [ 1863.267349][T30801] netlink: 624 bytes leftover after parsing attributes in process `syz.9.10282'. [ 1863.287282][T30801] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 1863.293830][T30801] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1863.304943][T30801] vhci_hcd vhci_hcd.0: Device attached [ 1863.320015][T30802] usbip_core: unknown command [ 1863.325087][T30802] vhci_hcd: unknown pdu 1952801133 [ 1863.330249][T30802] usbip_core: unknown command [ 1863.337776][T25588] vhci_hcd: stop threads [ 1863.351290][T25588] vhci_hcd: release socket [ 1863.358936][T25588] vhci_hcd: disconnect device [ 1863.413069][T30806] /dev/rnullb0: Can't lookup blockdev [ 1863.939138][T30834] /dev/rnullb0: Can't lookup blockdev [ 1864.020873][T30838] netlink: 72 bytes leftover after parsing attributes in process `syz.9.10291'. [ 1864.320518][T30858] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1864.592568][ T5912] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 1864.790468][ T5912] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1864.799167][ T5912] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1864.810214][ T5912] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1864.819263][ T5912] usb 2-1: config 1 has no interface number 0 [ 1864.825451][ T5912] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1864.837454][ T5912] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1864.851753][ T5912] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1864.867776][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1864.891553][ T48] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 1864.907202][ T5912] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1865.075225][ T48] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1865.087795][ T48] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1865.098785][ T48] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1865.113063][ T48] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1865.134996][ T5912] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1865.171061][ T48] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1865.192893][ T5912] usb 2-1: USB disconnect, device number 84 [ 1865.207799][ T48] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1865.221944][ T5912] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1865.233736][ T48] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1865.265152][ T48] usb 10-1: Product: syz [ 1865.271117][ T48] usb 10-1: Manufacturer: syz [ 1865.298704][ T48] cdc_wdm 10-1:1.0: skipping garbage [ 1865.310903][ T48] cdc_wdm 10-1:1.0: skipping garbage [ 1865.326539][ T48] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1865.332949][ T48] cdc_wdm 10-1:1.0: Unknown control protocol [ 1865.522794][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1865.523365][T23479] usb 10-1: USB disconnect, device number 60 [ 1865.529562][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1865.529588][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1866.779289][T30947] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 1866.954233][T23479] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 1866.975404][T30955] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10311'. [ 1866.989425][T30955] IPVS: Error joining to the multicast group [ 1867.150694][T23479] usb 10-1: config 0 has an invalid interface number: 220 but max is 0 [ 1867.184934][T23479] usb 10-1: config 0 has no interface number 0 [ 1867.209570][T23479] usb 10-1: config 0 interface 220 has no altsetting 0 [ 1867.239997][T23479] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=89.24 [ 1867.263960][T23479] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.279101][T23479] usb 10-1: Product: syz [ 1867.291299][T23479] usb 10-1: Manufacturer: syz [ 1867.302682][T23479] usb 10-1: SerialNumber: syz [ 1867.343772][T23479] usb 10-1: config 0 descriptor?? [ 1867.449326][ T30] audit: type=1804 audit(1752259579.329:343): pid=30983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.10315" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=6732 res=1 errno=0 [ 1867.744904][T31000] /dev/rnullb0: Can't lookup blockdev [ 1868.002222][T31008] /dev/rnullb0: Can't lookup blockdev [ 1868.020604][T23479] usbtest 10-1:0.220: couldn't get endpoints, -22 [ 1868.051582][T23479] usbtest 10-1:0.220: probe with driver usbtest failed with error -22 [ 1868.084941][T23479] usb 10-1: USB disconnect, device number 61 [ 1868.535776][T21362] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1868.543464][T21362] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1868.600433][T21362] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1869.294366][T31059] /dev/rnullb0: Can't lookup blockdev [ 1869.881080][T31077] mkiss: ax0: crc mode is auto. [ 1870.837339][T31136] /dev/rnullb0: Can't lookup blockdev [ 1870.911612][T31140] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10347'. [ 1870.953475][T31140] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1871.342122][T31150] netlink: 'syz.4.10348': attribute type 29 has an invalid length. [ 1871.383221][T31150] netlink: 'syz.4.10348': attribute type 29 has an invalid length. [ 1871.394597][T31151] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10349'. [ 1871.433065][T31149] /dev/rnullb0: Can't lookup blockdev [ 1871.433065][T31151] /dev/rnullb0: Can't lookup blockdev [ 1871.733827][T31158] kvm: user requested TSC rate below hardware speed [ 1871.781449][T31158] /dev/rnullb0: Can't lookup blockdev [ 1872.125031][T31177] /dev/rnullb0: Can't lookup blockdev [ 1872.317677][ T5943] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 1872.511575][ T5943] usb 10-1: Using ep0 maxpacket: 8 [ 1872.546886][ T5943] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1872.560236][ T30] audit: type=1804 audit(1752259584.111:344): pid=31190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.10359" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=6732 res=1 errno=0 [ 1872.587851][ T5943] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1872.643065][ T5943] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1872.687326][ T5943] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1872.747761][ T5943] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 1872.769523][ T5943] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1872.798432][ T5943] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1872.850461][ T5943] usb 10-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 1872.873764][ T5943] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.937011][ T5943] usb 10-1: Product: syz [ 1872.972364][ T5943] usb 10-1: Manufacturer: syz [ 1872.990713][T31200] binder: 31199:31200 ioctl c0306201 200000000640 returned -22 [ 1873.001489][ T5943] usb 10-1: SerialNumber: syz [ 1873.026336][ T5943] usb 10-1: config 0 descriptor?? [ 1873.063153][T31170] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1873.110159][ T5943] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1873.188053][T31219] /dev/rnullb0: Can't lookup blockdev [ 1873.336372][T31235] binder: 31233:31235 ioctl c0306201 200000000540 returned -14 [ 1873.347877][ T7838] usb 10-1: USB disconnect, device number 62 [ 1873.440122][T27258] udevd[27258]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1873.511719][T31248] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1873.589273][ T5912] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1873.760221][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 1873.773248][ T5912] usb 2-1: config 0 has an invalid interface number: 111 but max is 0 [ 1873.793552][ T5912] usb 2-1: config 0 has no interface number 0 [ 1873.830301][ T5912] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=fc.66 [ 1873.845570][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1873.875518][ T5912] usb 2-1: Product: syz [ 1873.888359][ T5912] usb 2-1: Manufacturer: syz [ 1873.893002][ T5912] usb 2-1: SerialNumber: syz [ 1873.925694][ T5912] usb 2-1: config 0 descriptor?? [ 1874.178223][T29609] usb 2-1: USB disconnect, device number 85 [ 1874.284402][ T5912] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1874.454800][ T5912] usb 5-1: device descriptor read/64, error -71 [ 1874.687145][T31284] kAFS: No cell specified [ 1874.711233][ T5912] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1874.893049][ T5912] usb 5-1: device descriptor read/64, error -71 [ 1875.038810][ T5912] usb usb5-port1: attempt power cycle [ 1875.249125][T31304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1875.265964][T31304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1875.417106][T31314] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1875.427777][ T5912] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1875.463072][ T5912] usb 5-1: device descriptor read/8, error -71 [ 1875.513770][T29609] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 1875.698183][T29609] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1875.722668][T29609] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1875.753817][T29609] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1875.768751][ T5912] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1875.791297][T29609] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1875.805686][ T5912] usb 5-1: device descriptor read/8, error -71 [ 1875.813517][T29609] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.828310][T29609] usb 10-1: config 0 descriptor?? [ 1875.930571][ T5912] usb usb5-port1: unable to enumerate USB device [ 1875.993212][ T48] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1876.164146][ T48] usb 2-1: Using ep0 maxpacket: 16 [ 1876.176733][ T48] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1876.185186][ T48] usb 2-1: config 0 has no interface number 0 [ 1876.192325][ T48] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1876.204760][ T48] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1876.218766][ T48] usb 2-1: config 0 interface 255 has no altsetting 0 [ 1876.230891][ T48] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1876.245203][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.254996][ T48] usb 2-1: Product: syz [ 1876.259984][ T48] usb 2-1: Manufacturer: syz [ 1876.266073][ T48] usb 2-1: SerialNumber: syz [ 1876.283787][ T48] usb 2-1: config 0 descriptor?? [ 1876.316957][T29609] plantronics 0003:047F:FFFF.006A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1876.705644][ T48] hub 2-1:0.255: bad descriptor, ignoring hub [ 1876.726847][ T48] hub 2-1:0.255: probe with driver hub failed with error -5 [ 1876.818984][ T48] usb 2-1: USB disconnect, device number 86 [ 1877.138253][ T48] usb 10-1: USB disconnect, device number 63 [ 1877.167696][T31371] /dev/rnullb0: Can't lookup blockdev [ 1877.381227][T31396] /dev/rnullb0: Can't lookup blockdev [ 1877.428585][T31400] /dev/rnullb0: Can't lookup blockdev [ 1877.552781][T31404] /dev/rnullb0: Can't lookup blockdev [ 1877.702749][ T48] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 1877.788359][T23479] usb 2-1: new low-speed USB device number 87 using dummy_hcd [ 1877.875927][ T48] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1877.889802][ T48] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1877.903844][ T48] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1877.937838][ T48] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1877.951266][ T48] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1877.953057][T23479] usb 2-1: config 7 interface 0 has no altsetting 0 [ 1877.962583][ T48] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1877.971064][T29770] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1877.995404][ T48] usb 10-1: config 0 descriptor?? [ 1878.012304][T31423] netlink: 188 bytes leftover after parsing attributes in process `syz.8.10395'. [ 1878.016229][T23479] usb 2-1: string descriptor 0 read error: -22 [ 1878.029790][T23479] usb 2-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 1878.040030][T23479] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=16 [ 1878.054695][T23479] usb 2-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 1878.056142][T31423] /dev/rnullb0: Can't lookup blockdev [ 1878.068414][T23479] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1878.109039][T23479] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 1878.118519][T23479] usb 2-1: media controller created [ 1878.157683][T23479] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1878.176776][T29770] usb 5-1: Using ep0 maxpacket: 16 [ 1878.193167][T29770] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1878.227382][T29770] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1878.250989][T29770] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1878.282027][T29770] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 57608, setting to 1024 [ 1878.332084][T31383] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1878.351468][T29770] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 1878.396593][T29770] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1878.463384][T29770] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1878.483041][T29770] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1878.493368][T29770] usb 5-1: SerialNumber: syz [ 1878.525439][T31418] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1878.535885][T29770] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1878.559130][T29770] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12 [ 1878.681251][ T48] plantronics 0003:047F:FFFF.006B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1878.791306][ T5943] usb 5-1: USB disconnect, device number 63 [ 1878.873450][T29609] usb 2-1: USB disconnect, device number 87 [ 1878.992732][T31475] overlayfs: failed to resolve 'TޠYCQ?': -2 [ 1879.836952][T31505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10405'. [ 1880.175722][ T5943] usb 10-1: reset high-speed USB device number 64 using dummy_hcd [ 1880.449291][T31548] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1880.455385][T31548] /dev/rnullb0: Can't lookup blockdev [ 1880.629176][T31559] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1880.660322][T31563] /dev/rnullb0: Can't lookup blockdev [ 1880.808761][T31568] cgroup2: Unknown parameter 'fowner>00000000000000000007' [ 1881.009186][T31580] /dev/rnullb0: Can't lookup blockdev [ 1881.018183][T29770] usb 10-1: USB disconnect, device number 64 [ 1881.638998][ T30] audit: type=1804 audit(1752259592.609:345): pid=31629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.10438" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=6732 res=1 errno=0 [ 1881.694216][T31631] /dev/rnullb0: Can't lookup blockdev [ 1881.795309][T29770] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1881.917386][T31641] binder: 31640:31641 ioctl c018620b 200000000000 returned -14 [ 1881.966312][T29770] usb 2-1: Using ep0 maxpacket: 8 [ 1881.993314][T29770] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1882.012739][T29770] usb 2-1: config 7 has an invalid interface number: 204 but max is 0 [ 1882.024698][T21362] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1882.024930][ T5863] Bluetooth: hci0: hardware error 0x09 [ 1882.033516][T21362] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1882.048572][T29770] usb 2-1: config 7 has no interface number 0 [ 1882.055185][T29770] usb 2-1: too many endpoints for config 7 interface 204 altsetting 80: 241, using maximum allowed: 30 [ 1882.083379][T29770] usb 2-1: config 7 interface 204 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 241 [ 1882.098073][T29770] usb 2-1: config 7 interface 204 has no altsetting 0 [ 1882.108096][T29770] usb 2-1: string descriptor 0 read error: -22 [ 1882.114394][T29770] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 1882.139209][T29770] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.173247][T29770] hub 2-1:7.204: bad descriptor, ignoring hub [ 1882.189679][T29770] hub 2-1:7.204: probe with driver hub failed with error -5 [ 1882.223462][T31656] /dev/rnullb0: Can't lookup blockdev [ 1882.401404][T29770] asix 2-1:7.204 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1882.487797][T31666] /dev/rnullb0: Can't lookup blockdev [ 1882.508869][T31660] /dev/rnullb0: Can't lookup blockdev [ 1882.619549][T29770] asix 2-1:7.204 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1882.642874][T29770] asix 2-1:7.204 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1882.685784][T31679] netlink: 'syz.4.10449': attribute type 4 has an invalid length. [ 1882.700935][T31679] netlink: 'syz.4.10449': attribute type 1 has an invalid length. [ 1882.709094][T31679] netlink: 624 bytes leftover after parsing attributes in process `syz.4.10449'. [ 1882.799600][T29609] usb 10-1: new high-speed USB device number 65 using dummy_hcd [ 1882.842845][T29770] asix 2-1:7.204 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1882.868035][T29770] asix 2-1:7.204 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 1882.991733][T29609] usb 10-1: Using ep0 maxpacket: 16 [ 1883.026696][T29609] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1883.070883][T29609] usb 10-1: config 7 has an invalid interface number: 191 but max is 0 [ 1883.084832][T31702] /dev/rnullb0: Can't lookup blockdev [ 1883.108192][T29609] usb 10-1: config 7 has no interface number 0 [ 1883.118207][T29770] asix 2-1:7.204 eth17: register 'asix' at usb-dummy_hcd.1-1, ASIX AX88178 USB 2.0 Ethernet, 0e:f8:26:dc:41:f5 [ 1883.135417][T29609] usb 10-1: config 7 interface 191 has no altsetting 0 [ 1883.184875][T29609] usb 10-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=9d.86 [ 1883.194079][T29609] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.208573][T29770] usb 2-1: USB disconnect, device number 88 [ 1883.233728][T29770] asix 2-1:7.204 eth17: unregister 'asix' usb-dummy_hcd.1-1, ASIX AX88178 USB 2.0 Ethernet [ 1883.251195][T29609] usb 10-1: Product: syz [ 1883.255504][T29609] usb 10-1: Manufacturer: syz [ 1883.267681][T29609] usb 10-1: SerialNumber: syz [ 1883.438530][T31725] /dev/rnullb0: Can't lookup blockdev [ 1883.471677][T31728] netlink: 'syz.4.10456': attribute type 1 has an invalid length. [ 1883.507999][T31728] netlink: 624 bytes leftover after parsing attributes in process `syz.4.10456'. [ 1883.600204][T29609] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:7.191/input/input130 [ 1883.675410][ T5208] bcm5974 10-1:7.191: could not read from device [ 1883.693910][ T5208] bcm5974 10-1:7.191: could not read from device [ 1883.708988][T29609] usb 10-1: USB disconnect, device number 65 [ 1883.744728][T31752] /dev/rnullb0: Can't lookup blockdev [ 1883.798296][T31754] /dev/rnullb0: Can't lookup blockdev [ 1883.917110][T31767] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1883.958896][T31767] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 1883.993736][T31767] Error validating options; rc = [-22] [ 1884.024466][T31771] /dev/rnullb0: Can't lookup blockdev [ 1884.219993][T31783] /dev/rnullb0: Can't lookup blockdev [ 1884.233101][ T5863] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1884.401082][T31790] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1884.467272][ T5938] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1884.648263][ T5938] usb 2-1: Using ep0 maxpacket: 16 [ 1884.784713][ T30] audit: type=1804 audit(1752259595.548:346): pid=31807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.10466" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=6732 res=1 errno=0 [ 1884.822979][T31807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10466'. [ 1884.845293][ T5938] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1884.878713][ T5938] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1884.900670][ T5938] usb 2-1: can't read configurations, error -71 [ 1885.126874][T31826] netlink: 168 bytes leftover after parsing attributes in process `syz.9.10469'. [ 1885.147928][T31826] program syz.9.10469 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1885.157520][T29770] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1885.339393][T29770] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1885.352884][T29770] usb 5-1: config 0 has no interface number 0 [ 1885.368196][T29770] usb 5-1: too many endpoints for config 0 interface 1 altsetting 48: 120, using maximum allowed: 30 [ 1885.383943][T29770] usb 5-1: config 0 interface 1 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 1885.405654][T29770] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1885.437059][T29770] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1885.470913][T29770] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.490002][T29770] usb 5-1: Product: syz [ 1885.514294][T29770] usb 5-1: Manufacturer: syz [ 1885.525873][T29770] usb 5-1: SerialNumber: syz [ 1885.543093][T29770] usb 5-1: config 0 descriptor?? [ 1885.559582][T31838] /dev/rnullb0: Can't lookup blockdev [ 1885.737062][T31848] netlink: 'syz.9.10472': attribute type 10 has an invalid length. [ 1885.746125][T31848] bridge0: port 2(bridge_slave_1) entered disabled state [ 1885.753553][T31848] bridge0: port 1(bridge_slave_0) entered disabled state [ 1885.788717][T31848] bridge0: port 2(bridge_slave_1) entered blocking state [ 1885.795948][T31848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1885.803485][T31848] bridge0: port 1(bridge_slave_0) entered blocking state [ 1885.810641][T31848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1885.845503][T31848] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1886.069069][T29609] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 1886.076862][ T5938] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1886.218402][T31854] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10473'. [ 1886.229508][T29609] usb 10-1: device descriptor read/64, error -71 [ 1886.285811][ T5938] usb 2-1: Using ep0 maxpacket: 16 [ 1886.306375][ T5938] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1886.323313][ T5938] usb 2-1: config 7 has an invalid interface number: 191 but max is 0 [ 1886.331625][ T5938] usb 2-1: config 7 has no interface number 0 [ 1886.338331][ T5938] usb 2-1: config 7 interface 191 has no altsetting 0 [ 1886.345997][T31860] /dev/rnullb0: Can't lookup blockdev [ 1886.353544][ T5938] usb 2-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=9d.86 [ 1886.365681][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.376246][ T5938] usb 2-1: Product: syz [ 1886.380697][ T5938] usb 2-1: Manufacturer: syz [ 1886.385349][ T5938] usb 2-1: SerialNumber: syz [ 1886.449237][T31865] ./cgroup: Can't lookup blockdev [ 1886.496640][T29609] usb 10-1: new high-speed USB device number 67 using dummy_hcd [ 1886.648339][T29609] usb 10-1: device descriptor read/64, error -71 [ 1886.676830][ T5938] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.191/input/input131 [ 1886.690172][ T5208] bcm5974 2-1:7.191: could not read from device [ 1886.728437][ T5208] bcm5974 2-1:7.191: could not read from device [ 1886.739292][ T5938] usb 2-1: USB disconnect, device number 90 [ 1886.807801][T29609] usb usb10-port1: attempt power cycle [ 1887.190935][T29609] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 1887.212916][T29609] usb 10-1: device descriptor read/8, error -71 [ 1887.439007][T31894] /dev/rnullb0: Can't lookup blockdev [ 1887.501252][T29609] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 1887.536024][T29609] usb 10-1: device descriptor read/8, error -71 [ 1887.672359][T29609] usb usb10-port1: unable to enumerate USB device [ 1887.694621][T31906] Malformed UNC in devname [ 1887.694621][T31906] [ 1887.701402][T31906] CIFS: VFS: Malformed UNC in devname [ 1888.014067][T29770] dvb_usb_ec168 5-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1888.056610][T29770] usb 5-1: USB disconnect, device number 64 [ 1888.100400][T31927] /dev/rnullb0: Can't lookup blockdev [ 1888.291076][T31942] /dev/rnullb0: Can't lookup blockdev [ 1888.599436][T31956] /dev/rnullb0: Can't lookup blockdev [ 1888.669537][T31961] ieee802154 phy1 wpan1: encryption failed: -22 [ 1888.732564][T31964] ieee802154 phy1 wpan1: encryption failed: -22 [ 1888.744098][T31964] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1889.248207][T31981] ufs: You didn't specify the type of your ufs filesystem [ 1889.248207][T31981] [ 1889.248207][T31981] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1889.248207][T31981] [ 1889.248207][T31981] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1889.299030][T31981] ufs: ufstype=old is supported read-only [ 1889.315937][T31981] syz.4.10501: attempt to access beyond end of device [ 1889.315937][T31981] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1889.335950][T31984] syz.9.10502: attempt to access beyond end of device [ 1889.335950][T31984] nbd9: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1889.517706][T31993] netlink: 'syz.4.10504': attribute type 12 has an invalid length. [ 1889.600991][T31998] /dev/rnullb0: Can't lookup blockdev [ 1889.722840][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1889.732251][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1889.785558][T32004] /dev/rnullb0: Can't lookup blockdev [ 1889.798256][ T5912] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1889.943723][T32011] /dev/rnullb0: Can't lookup blockdev [ 1889.958583][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 1889.971239][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1889.997525][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1890.023207][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1890.033272][ T5912] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1890.052209][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1890.063380][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1890.078334][ T5912] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 1890.088199][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1890.096337][ T5912] usb 5-1: Product: syz [ 1890.101329][ T5912] usb 5-1: Manufacturer: syz [ 1890.106379][T32018] /dev/rnullb0: Can't lookup blockdev [ 1890.112176][ T5912] usb 5-1: SerialNumber: syz [ 1890.123627][ T5912] usb 5-1: config 0 descriptor?? [ 1890.327046][T32031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1890.344016][T32031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1890.372900][T32031] netlink: 60 bytes leftover after parsing attributes in process `syz.9.10511'. [ 1890.384086][ T5912] usb 5-1: USB disconnect, device number 65 [ 1890.567621][T29770] usb 10-1: new high-speed USB device number 70 using dummy_hcd [ 1890.731122][T32054] netlink: 'syz.8.10514': attribute type 10 has an invalid length. [ 1890.758418][T32054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1890.768751][T32054] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1890.786371][T32054] netlink: 'syz.8.10514': attribute type 10 has an invalid length. [ 1890.794654][T32054] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10514'. [ 1890.822022][T32054] batadv0: entered promiscuous mode [ 1890.831751][T32054] batadv0: entered allmulticast mode [ 1890.850688][T32059] /dev/rnullb0: Can't lookup blockdev [ 1890.854164][T32054] bond0: (slave batadv0): Releasing backup interface [ 1890.876965][T32054] bridge0: port 3(batadv0) entered blocking state [ 1890.884656][T32054] bridge0: port 3(batadv0) entered disabled state [ 1890.952807][T27716] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1890.962145][T27716] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1891.377956][T32094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10523'. [ 1891.525959][T32098] qrtr: Invalid version 43 [ 1891.539640][T23479] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1891.712245][T23479] usb 2-1: Using ep0 maxpacket: 16 [ 1891.720164][T23479] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1891.728971][T23479] usb 2-1: config 0 has no interface number 0 [ 1891.735244][T23479] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1891.746690][T23479] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1891.761449][T23479] usb 2-1: config 0 interface 255 has no altsetting 0 [ 1891.777815][T23479] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1891.788012][T23479] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1891.797030][T23479] usb 2-1: Product: syz [ 1891.801226][T23479] usb 2-1: Manufacturer: syz [ 1891.805827][T23479] usb 2-1: SerialNumber: syz [ 1891.813370][T23479] usb 2-1: config 0 descriptor?? [ 1891.903052][T29770] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 1891.956406][ T985] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1892.042408][T29770] usb 10-1: device descriptor read/64, error -71 [ 1892.122821][ T985] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1892.135309][ T985] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1892.146140][ T985] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1892.155568][ T985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1892.163900][ T985] usb 5-1: SerialNumber: syz [ 1892.229603][T23479] hub 2-1:0.255: bad descriptor, ignoring hub [ 1892.241606][T23479] hub 2-1:0.255: probe with driver hub failed with error -5 [ 1892.300262][T23479] usb 2-1: USB disconnect, device number 91 [ 1892.309490][T29770] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 1892.392341][T32105] /dev/rnullb0: Can't lookup blockdev [ 1892.479994][T29770] usb 10-1: device descriptor read/64, error -71 [ 1892.597987][T29770] usb usb10-port1: attempt power cycle [ 1892.982178][T29770] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 1893.004370][T29770] usb 10-1: device descriptor read/8, error -71 [ 1893.227910][ T48] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 1893.260324][T29770] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 1893.284131][T29770] usb 10-1: device descriptor read/8, error -71 [ 1893.393640][ T48] usb 2-1: config 2 has an invalid interface number: 118 but max is 0 [ 1893.400801][T29770] usb usb10-port1: unable to enumerate USB device [ 1893.402288][ T48] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1893.418590][ T48] usb 2-1: config 2 has no interface number 0 [ 1893.426067][ T48] usb 2-1: config 2 interface 118 has no altsetting 0 [ 1893.436989][ T48] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1893.446408][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.454565][ T48] usb 2-1: Product: syz [ 1893.458868][ T48] usb 2-1: Manufacturer: syz [ 1893.464163][ T48] usb 2-1: SerialNumber: syz [ 1894.021584][T32155] /dev/rnullb0: Can't lookup blockdev [ 1894.165224][T32159] /dev/rnullb0: Can't lookup blockdev [ 1894.751598][ T985] usb 5-1: 0:2 : does not exist [ 1894.802273][ T985] usb 5-1: USB disconnect, device number 66 [ 1894.909305][T27225] udevd[27225]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1895.386720][T32212] netlink: 24 bytes leftover after parsing attributes in process `syz.8.10537'. [ 1895.434433][T32214] tipc: New replicast peer: 255.255.255.255 [ 1895.450549][T32214] tipc: Enabled bearer , priority 10 [ 1895.457482][T32214] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10539'. [ 1895.472128][T32214] tipc: Disabling bearer [ 1895.473184][ T48] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1895.654570][ T48] usb 5-1: Using ep0 maxpacket: 16 [ 1895.661694][ T48] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1895.670175][ T48] usb 5-1: config 0 has no interface number 0 [ 1895.676535][ T48] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1895.689129][ T48] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1895.702637][ T48] usb 5-1: config 0 interface 255 has no altsetting 0 [ 1895.712835][ T48] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1895.722120][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.730252][ T48] usb 5-1: Product: syz [ 1895.734634][ T48] usb 5-1: Manufacturer: syz [ 1895.739340][ T48] usb 5-1: SerialNumber: syz [ 1895.746987][ T48] usb 5-1: config 0 descriptor?? [ 1896.109118][ T48] hub 5-1:0.255: bad descriptor, ignoring hub [ 1896.122111][ T48] hub 5-1:0.255: probe with driver hub failed with error -5 [ 1896.179691][ T48] usb 5-1: USB disconnect, device number 67 [ 1896.235073][ T985] usb 2-1: USB disconnect, device number 92 [ 1896.339236][T32246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1896.355922][T32246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1896.401923][T32255] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10542'. [ 1896.411116][T32255] netlink: 16 bytes leftover after parsing attributes in process `syz.8.10542'. [ 1896.422181][T32255] fuse: Bad value for 'user_id' [ 1896.428367][T32255] fuse: Bad value for 'user_id' [ 1896.438011][T32255] /dev/rnullb0: Can't lookup blockdev [ 1896.549114][T32260] /dev/rnullb0: Can't lookup blockdev [ 1896.630771][T32264] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10546'. [ 1896.647213][ T985] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1896.763429][T32273] /dev/rnullb0: Can't lookup blockdev [ 1896.839901][ T985] usb 2-1: Using ep0 maxpacket: 8 [ 1896.861400][ T985] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1896.875208][ T985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.903236][ T985] usb 2-1: Product: syz [ 1896.907865][ T985] usb 2-1: Manufacturer: syz [ 1896.912534][ T985] usb 2-1: SerialNumber: syz [ 1896.937209][ T985] usb 2-1: config 0 descriptor?? [ 1897.167538][ T985] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1897.238966][T32293] fuse: Unknown parameter 'fB00000000000000000000003' [ 1897.249382][T32293] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1897.256527][T32293] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1897.268399][T32293] /dev/rnullb0: Can't lookup blockdev [ 1897.411469][T32303] /dev/sg0: Can't lookup blockdev [ 1897.635560][T32247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.659867][T32246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.660314][T32247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.684120][ T48] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 1897.698176][T32246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.821648][ T985] usb write operation failed. (-71) [ 1897.849303][ T985] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1897.866312][ T48] usb 10-1: Using ep0 maxpacket: 16 [ 1897.874684][ T985] dvbdev: DVB: registering new adapter (Terratec H7) [ 1897.881975][ T48] usb 10-1: config 0 has an invalid interface number: 255 but max is 0 [ 1897.918432][ T48] usb 10-1: config 0 has no interface number 0 [ 1897.918499][ T985] usb 2-1: media controller created [ 1897.935722][ T48] usb 10-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1897.966975][ T985] usb read operation failed. (-71) [ 1897.970081][ T48] usb 10-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1897.977349][ T985] usb write operation failed. (-71) [ 1897.994324][ T48] usb 10-1: config 0 interface 255 has no altsetting 0 [ 1898.006972][ T48] usb 10-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1898.028779][ T985] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1898.049444][ T48] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1898.061475][ T48] usb 10-1: Product: syz [ 1898.065813][ T48] usb 10-1: Manufacturer: syz [ 1898.071095][ T48] usb 10-1: SerialNumber: syz [ 1898.093093][ T985] usb 2-1: USB disconnect, device number 93 [ 1898.135794][ T48] usb 10-1: config 0 descriptor?? [ 1898.462225][T32368] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1898.472987][T32373] tty tty3: ldisc open failed (-12), clearing slot 2 [ 1898.528192][ T48] hub 10-1:0.255: bad descriptor, ignoring hub [ 1898.570547][ T48] hub 10-1:0.255: probe with driver hub failed with error -5 [ 1898.656878][ T48] usb 10-1: USB disconnect, device number 75 [ 1899.054393][T32414] /dev/rnullb0: Can't lookup blockdev [ 1899.191970][T23479] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1899.222225][ T985] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1899.371679][T23479] usb 5-1: Using ep0 maxpacket: 32 [ 1899.384903][T23479] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1899.402190][T23479] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1899.414174][T23479] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 1899.424210][T23479] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1899.438433][ T985] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1899.449105][ T30] audit: type=1326 audit(1752259609.268:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32424 comm="syz.9.10575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5ed8e929 code=0x7fc00000 [ 1899.471617][ C0] vkms_vblank_simulate: vblank timer overrun [ 1899.483925][ T985] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1899.494511][T23479] usb 5-1: config 0 descriptor?? [ 1899.501175][ T985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1899.533721][ T985] usb 2-1: config 0 descriptor?? [ 1899.542938][ T30] audit: type=1326 audit(1752259609.315:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32424 comm="syz.9.10575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f5ed8e929 code=0x7fc00000 [ 1899.582975][ T985] pwc: Askey VC010 type 2 USB webcam detected. [ 1899.765268][ T985] pwc: send_video_command error -71 [ 1899.777785][ T985] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1899.786965][ T985] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1899.824966][ T985] usb 2-1: USB disconnect, device number 94 [ 1899.900221][T32457] netlink: 14 bytes leftover after parsing attributes in process `syz.8.10579'. [ 1899.951501][T23479] kone 0003:1E7D:2CED.006C: unknown main item tag 0x0 [ 1899.980505][T32462] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10579'. [ 1899.989814][T23479] kone 0003:1E7D:2CED.006C: unknown main item tag 0x0 [ 1900.003846][T32462] openvswitch: netlink: Flow key attr not present in new flow. [ 1900.016590][T23479] kone 0003:1E7D:2CED.006C: unknown main item tag 0x0 [ 1900.052605][T23479] kone 0003:1E7D:2CED.006C: unknown main item tag 0x0 [ 1900.074224][T23479] kone 0003:1E7D:2CED.006C: unknown main item tag 0x0 [ 1900.078579][T32464] /dev/rnullb0: Can't lookup blockdev [ 1900.112761][T23479] kone 0003:1E7D:2CED.006C: hidraw1: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.4-1/input0 [ 1900.423448][T32480] /dev/rnullb0: Can't lookup blockdev [ 1900.472561][ T5943] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1900.525882][ T985] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 1900.621881][ T5943] usb 2-1: device descriptor read/64, error -71 [ 1900.687534][ T985] usb 10-1: Using ep0 maxpacket: 16 [ 1900.694736][ T985] usb 10-1: config 0 has an invalid interface number: 255 but max is 0 [ 1900.703580][ T985] usb 10-1: config 0 has no interface number 0 [ 1900.710831][ T985] usb 10-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1900.724318][T23479] kone 0003:1E7D:2CED.006C: couldn't init struct kone_device [ 1900.733895][ T985] usb 10-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1900.753168][T23479] kone 0003:1E7D:2CED.006C: couldn't install mouse [ 1900.761301][ T985] usb 10-1: config 0 interface 255 has no altsetting 0 [ 1900.774001][ T985] usb 10-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1900.785666][T23479] kone 0003:1E7D:2CED.006C: probe with driver kone failed with error -5 [ 1900.800546][ T985] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1900.815157][T23479] usb 5-1: USB disconnect, device number 68 [ 1900.823298][ T985] usb 10-1: Product: syz [ 1900.832260][ T985] usb 10-1: Manufacturer: syz [ 1900.839506][ T985] usb 10-1: SerialNumber: syz [ 1900.866550][ T985] usb 10-1: config 0 descriptor?? [ 1900.900243][ T5943] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1901.049246][ T5943] usb 2-1: device descriptor read/64, error -71 [ 1901.169771][ T5943] usb usb2-port1: attempt power cycle [ 1901.227739][ T985] hub 10-1:0.255: bad descriptor, ignoring hub [ 1901.236131][ T985] hub 10-1:0.255: probe with driver hub failed with error -5 [ 1901.285624][ T985] usb 10-1: USB disconnect, device number 76 [ 1901.350705][T23479] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1901.519315][T23479] usb 5-1: Using ep0 maxpacket: 16 [ 1901.526260][T23479] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1901.537367][T23479] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1901.548715][ T5943] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1901.556464][T23479] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1901.567423][T23479] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1901.577429][T23479] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1901.592199][T23479] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1901.601390][T23479] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1901.609546][T23479] usb 5-1: Manufacturer: syz [ 1901.614248][ T5943] usb 2-1: device descriptor read/8, error -71 [ 1901.623361][T23479] usb 5-1: config 0 descriptor?? [ 1901.718615][T32530] /dev/rnullb0: Can't lookup blockdev [ 1901.803177][T32532] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1901.873909][ T5943] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1901.943768][ T5943] usb 2-1: device descriptor read/8, error -71 [ 1901.957778][T23479] rc_core: IR keymap rc-hauppauge not found [ 1901.964879][T23479] Registered IR keymap rc-empty [ 1901.978852][T23479] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1902.021600][T23479] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1902.047150][T23479] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1902.065608][ T5943] usb usb2-port1: unable to enumerate USB device [ 1902.089733][T23479] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input132 [ 1902.157073][T23479] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1902.235711][T23479] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1902.289163][T23479] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1902.331598][T23479] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1902.364842][T23479] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1902.400288][T23479] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1902.428547][T32532] ?H: renamed from lo (while UP) [ 1902.455263][T23479] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1902.491174][T32563] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1902.492956][T23479] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1902.497840][T32563] /dev/rnullb0: Can't lookup blockdev [ 1902.545335][T23479] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1902.579575][T23479] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1902.609620][T23479] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1902.617611][T32566] /dev/rnullb0: Can't lookup blockdev [ 1902.647950][T23479] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1902.659704][T23479] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1902.686023][T23479] usb 5-1: USB disconnect, device number 69 [ 1902.744975][T32576] /dev/rnullb0: Can't lookup blockdev [ 1902.874132][T32587] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10595'. [ 1903.038235][T32597] /dev/rnullb0: Can't lookup blockdev [ 1903.150693][T32600] /dev/rnullb0: Can't lookup blockdev [ 1903.175935][ T985] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1903.239328][T32607] netlink: 'syz.9.10599': attribute type 1 has an invalid length. [ 1903.261030][ T30] audit: type=1804 audit(1752259612.844:349): pid=32607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.10599" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=6732 res=1 errno=0 [ 1903.282436][ C0] vkms_vblank_simulate: vblank timer overrun [ 1903.379273][ T985] usb 2-1: Using ep0 maxpacket: 16 [ 1903.390885][ T985] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1903.406169][ T985] usb 2-1: config 0 has no interface number 0 [ 1903.416785][ T985] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1903.467395][ T985] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1903.540153][ T985] usb 2-1: config 0 interface 255 has no altsetting 0 [ 1903.566753][ T985] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1903.590107][ T985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.600029][ T985] usb 2-1: Product: syz [ 1903.609155][ T985] usb 2-1: Manufacturer: syz [ 1903.618276][ T985] usb 2-1: SerialNumber: syz [ 1903.638161][ T985] usb 2-1: config 0 descriptor?? [ 1903.767851][T32633] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1903.841554][T32637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1904.005766][ T985] hub 2-1:0.255: bad descriptor, ignoring hub [ 1904.014925][ T985] hub 2-1:0.255: probe with driver hub failed with error -5 [ 1904.065935][ T985] usb 2-1: USB disconnect, device number 99 [ 1904.466579][ T30] audit: type=1326 audit(1752259613.976:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32664 comm="syz.8.10608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4620d2ab19 code=0x7ffc0000 [ 1904.489805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1904.504487][ T30] audit: type=1326 audit(1752259614.004:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32664 comm="syz.8.10608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4620d2ab19 code=0x7ffc0000 [ 1904.527001][ C0] vkms_vblank_simulate: vblank timer overrun [ 1904.586118][ T30] audit: type=1326 audit(1752259614.004:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32664 comm="syz.8.10608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4620d2ab19 code=0x7ffc0000 [ 1904.638387][ T30] audit: type=1326 audit(1752259614.004:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32664 comm="syz.8.10608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4620d8e929 code=0x7ffc0000 [ 1904.692826][ T30] audit: type=1326 audit(1752259614.004:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32664 comm="syz.8.10608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4620d2ab19 code=0x7ffc0000 [ 1904.785405][ T30] audit: type=1326 audit(1752259614.004:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32664 comm="syz.8.10608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4620d8e929 code=0x7ffc0000 [ 1904.822006][ T30] audit: type=1326 audit(1752259614.004:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32664 comm="syz.8.10608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4620d2ab19 code=0x7ffc0000 [ 1904.859008][ T30] audit: type=1326 audit(1752259614.004:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32664 comm="syz.8.10608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4620d8e929 code=0x7ffc0000 [ 1904.900991][ T30] audit: type=1326 audit(1752259614.004:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32664 comm="syz.8.10608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4620d2ab19 code=0x7ffc0000 [ 1904.946140][ T30] audit: type=1326 audit(1752259614.004:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32664 comm="syz.8.10608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4620d8e929 code=0x7ffc0000 [ 1905.085886][ T30] audit: type=1326 audit(1752259614.004:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32664 comm="syz.8.10608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4620d8e929 code=0x7ffc0000 [ 1905.182922][ T30] audit: type=1326 audit(1752259614.004:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32664 comm="syz.8.10608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4620d2ab19 code=0x7ffc0000 [ 1905.291194][T23479] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1905.320641][ T30] audit: type=1326 audit(1752259614.013:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32664 comm="syz.8.10608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4620d8e929 code=0x7ffc0000 [ 1905.408925][ T30] audit: type=1326 audit(1752259614.013:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32664 comm="syz.8.10608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4620d2ab19 code=0x7ffc0000 [ 1905.463088][T23479] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 1905.495244][T23479] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1905.517393][ T30] audit: type=1326 audit(1752259614.013:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32664 comm="syz.8.10608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4620d2ab19 code=0x7ffc0000 [ 1905.522546][T32677] binder: 32676:32677 ioctl c0306201 200000000040 returned -22 [ 1905.552601][T23479] usb 2-1: config 0 has no interface number 0 [ 1905.565894][T23479] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 1905.577602][T23479] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.588420][ T30] audit: type=1326 audit(1752259614.013:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32664 comm="syz.8.10608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4620d8e929 code=0x7ffc0000 [ 1905.623879][T32679] /dev/rnullb0: Can't lookup blockdev [ 1905.627241][T23479] usb 2-1: Product: syz [ 1905.650955][T23479] usb 2-1: Manufacturer: syz [ 1905.665418][T23479] usb 2-1: SerialNumber: syz [ 1905.692426][T23479] usb 2-1: config 0 descriptor?? [ 1905.729435][T23479] pn533_usb 2-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint [ 1905.943357][ T48] usb 2-1: USB disconnect, device number 100 [ 1906.026676][T32697] binder: 32696:32697 ioctl c018620b 200000000000 returned -14 [ 1906.370864][ T985] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 1906.530663][ T985] usb 10-1: Using ep0 maxpacket: 16 [ 1906.540361][ T985] usb 10-1: config 0 has an invalid interface number: 255 but max is 0 [ 1906.551873][ T985] usb 10-1: config 0 has no interface number 0 [ 1906.558138][ T985] usb 10-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1906.598590][ T985] usb 10-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1906.621450][ T985] usb 10-1: config 0 interface 255 has no altsetting 0 [ 1906.641034][ T985] usb 10-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1906.658495][ T985] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.667600][ T985] usb 10-1: Product: syz [ 1906.681012][ T985] usb 10-1: Manufacturer: syz [ 1906.686681][ T985] usb 10-1: SerialNumber: syz [ 1906.713266][ T985] usb 10-1: config 0 descriptor?? [ 1906.942626][ T985] hub 10-1:0.255: bad descriptor, ignoring hub [ 1906.957147][ T985] hub 10-1:0.255: probe with driver hub failed with error -5 [ 1907.044641][ T985] usb 10-1: USB disconnect, device number 77 [ 1907.389167][ T301] /dev/rnullb0: Can't lookup blockdev [ 1907.501247][T32750] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10623'. [ 1907.672196][ T311] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10627'. [ 1907.699164][ T314] netlink: 240 bytes leftover after parsing attributes in process `syz.9.10626'. [ 1907.741057][ T316] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1907.752185][ T314] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1907.763662][ T311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10627'. [ 1908.034112][ T332] /dev/rnullb0: Can't lookup blockdev [ 1908.076138][ T335] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10633'. [ 1908.449685][ T355] netlink: 'syz.1.10638': attribute type 5 has an invalid length. [ 1908.458847][ T355] /dev/rnullb0: Can't lookup blockdev [ 1908.472127][ T356] netlink: 'syz.1.10638': attribute type 5 has an invalid length. [ 1908.480956][ T357] /dev/rnullb0: Can't lookup blockdev [ 1908.794076][ T368] netlink: 'syz.9.10641': attribute type 1 has an invalid length. [ 1908.813948][ T368] netlink: 624 bytes leftover after parsing attributes in process `syz.9.10641'. [ 1908.937646][ T377] tipc: Enabling of bearer rejected, failed to enable media [ 1908.960025][ T377] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1909.023425][ T5943] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1909.192596][ T5943] usb 2-1: Using ep0 maxpacket: 8 [ 1909.205781][ T388] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10647'. [ 1909.215493][ T5943] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d [ 1909.225037][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.244123][ T5943] usb 2-1: Product: syz [ 1909.255147][ T5943] usb 2-1: Manufacturer: syz [ 1909.259771][ T5943] usb 2-1: SerialNumber: syz [ 1909.277745][ T5943] usb 2-1: config 0 descriptor?? [ 1909.315969][ T5943] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1909.325602][ T395] /dev/rnullb0: Can't lookup blockdev [ 1909.521690][T29609] usb 2-1: USB disconnect, device number 101 [ 1909.704127][ T985] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1909.855344][ T444] /dev/rnullb0: Can't lookup blockdev [ 1909.864585][ T985] usb 5-1: Using ep0 maxpacket: 16 [ 1909.896818][ T985] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1909.905034][ T985] usb 5-1: config 0 has no interface number 0 [ 1909.928309][ T985] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1909.942739][ T410] /dev/rnullb0: Can't lookup blockdev [ 1909.949079][ T985] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1909.994149][ T985] usb 5-1: config 0 interface 255 has no altsetting 0 [ 1910.013087][ T985] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1910.034389][ T985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.052763][ T985] usb 5-1: Product: syz [ 1910.077206][ T985] usb 5-1: Manufacturer: syz [ 1910.083689][ T985] usb 5-1: SerialNumber: syz [ 1910.113038][ T985] usb 5-1: config 0 descriptor?? [ 1910.397239][ T985] hub 5-1:0.255: bad descriptor, ignoring hub [ 1910.407337][ T985] hub 5-1:0.255: probe with driver hub failed with error -5 [ 1910.508406][ T985] usb 5-1: USB disconnect, device number 70 [ 1910.603723][T27225] udevd[27225]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.255/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1910.745442][ T482] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10657'. [ 1911.317172][ T491] /dev/rnullb0: Can't lookup blockdev [ 1911.559694][ T501] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1911.575600][ T501] /dev/rnullb0: Can't lookup blockdev [ 1911.580562][ T504] /dev/rnullb0: Can't lookup blockdev [ 1911.752194][ T520] /dev/rnullb0: Can't lookup blockdev [ 1911.888420][ T527] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10669'. [ 1911.926498][ T48] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 1912.097984][ T48] usb 10-1: Using ep0 maxpacket: 16 [ 1912.110516][ T48] usb 10-1: config 0 has an invalid interface number: 255 but max is 0 [ 1912.120815][ T48] usb 10-1: config 0 has no interface number 0 [ 1912.127049][ T48] usb 10-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1912.143571][ T48] usb 10-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1912.157746][ T48] usb 10-1: config 0 interface 255 has no altsetting 0 [ 1912.182128][ T48] usb 10-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1912.203107][ T48] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.221744][ T48] usb 10-1: Product: syz [ 1912.237076][ T48] usb 10-1: Manufacturer: syz [ 1912.241789][ T48] usb 10-1: SerialNumber: syz [ 1912.265770][ T48] usb 10-1: config 0 descriptor?? [ 1912.304666][ T5912] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1912.324745][ T547] /dev/rnullb0: Can't lookup blockdev [ 1912.473593][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1912.483707][ T5912] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1912.493996][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1912.506198][ T5912] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1912.519761][ T48] hub 10-1:0.255: bad descriptor, ignoring hub [ 1912.526153][ T5912] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1912.538062][ T48] hub 10-1:0.255: probe with driver hub failed with error -5 [ 1912.547908][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1912.586538][ T5912] usb 5-1: config 0 descriptor?? [ 1912.611807][ T48] usb 10-1: USB disconnect, device number 78 [ 1912.649871][T27225] udevd[27225]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.255/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1912.821850][ T5912] hdpvr 5-1:0.0: firmware version 0x14 dated 9٤]5լM9ėcKӥ)k_ffpi [ 1912.831956][ T5912] hdpvr 5-1:0.0: untested firmware, the driver might not work. [ 1913.037945][ T532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1913.046747][ T532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1913.071914][ T532] usb usb8: usbfs: process 532 (syz.4.10670) did not claim interface 0 before use [ 1913.102511][ T5912] hdpvr 5-1:0.0: device init failed [ 1913.134975][ T5912] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 1913.168807][ T5912] usb 5-1: USB disconnect, device number 71 [ 1913.324359][ T592] Failed to get privilege flags for destination (handle=0x2:0x0) [ 1913.336166][ T592] /dev/rnullb0: Can't lookup blockdev [ 1913.404675][ T596] MTD: Couldn't look up './file0': -15 [ 1913.723050][ T615] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1913.735963][ T615] overlayfs: missing 'lowerdir' [ 1913.892540][T23479] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1914.074104][T23479] usb 2-1: Using ep0 maxpacket: 16 [ 1914.094940][T23479] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 1914.127708][T23479] usb 2-1: config 0 has no interface number 0 [ 1914.133914][T23479] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1914.180038][T23479] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1914.198512][ T639] loop2: detected capacity change from 0 to 7 [ 1914.226620][T27225] Dev loop2: unable to read RDB block 7 [ 1914.232435][T27225] loop2: unable to read partition table [ 1914.240828][T27225] loop2: partition table beyond EOD, truncated [ 1914.245032][T23479] usb 2-1: config 0 interface 255 has no altsetting 0 [ 1914.320615][T23479] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1914.330138][ T31] INFO: task syz.6.9544:25805 blocked for more than 143 seconds. [ 1914.349665][ T639] Dev loop2: unable to read RDB block 7 [ 1914.360381][T23479] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1914.369460][ T31] Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 [ 1914.375724][ T639] loop2: unable to read partition table [ 1914.391099][T23479] usb 2-1: Product: syz [ 1914.395621][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1914.402988][ T639] loop2: partition table beyond EOD, [ 1914.404301][ T31] task:syz.6.9544 state:D stack:26024 pid:25805 tgid:25717 ppid:10952 task_flags:0x400140 flags:0x00004004 [ 1914.422610][T23479] usb 2-1: Manufacturer: syz [ 1914.427721][T23479] usb 2-1: SerialNumber: syz [ 1914.433065][ T639] truncated [ 1914.435752][T23479] usb 2-1: config 0 descriptor?? [ 1914.447078][ T639] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1914.465761][ T31] Call Trace: [ 1914.495790][ T31] [ 1914.498813][ T31] __schedule+0x16f5/0x4d00 [ 1914.516616][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1914.535792][ T31] ? schedule+0x165/0x360 [ 1914.547759][ T31] ? __lock_acquire+0xab9/0xd20 [ 1914.571029][ T31] ? __pfx___schedule+0x10/0x10 [ 1914.593060][ T31] ? schedule+0x91/0x360 [ 1914.597350][ T31] schedule+0x165/0x360 [ 1914.618972][ T31] __fuse_simple_request+0xf15/0x18d0 [ 1914.624419][ T31] ? __pfx___fuse_simple_request+0x10/0x10 [ 1914.651025][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1914.657368][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1914.683041][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1914.694802][T23479] hub 2-1:0.255: bad descriptor, ignoring hub [ 1914.703288][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 1914.712447][ T31] fuse_file_open+0x481/0x910 [ 1914.717354][ T31] ? __pfx_fuse_file_open+0x10/0x10 [ 1914.721126][T23479] hub 2-1:0.255: probe with driver hub failed with error -5 [ 1914.722876][ T31] ? __pfx_apparmor_file_open+0x10/0x10 [ 1914.736586][ T31] ? mnt_get_write_access+0x68/0x2a0 [ 1914.741955][ T31] fuse_open+0x370/0x750 [ 1914.746236][ T31] ? __pfx_fuse_open+0x10/0x10 [ 1914.758797][ T31] do_dentry_open+0x953/0x13f0 [ 1914.768095][ T31] vfs_open+0x3b/0x340 [ 1914.774531][ T31] ? path_openat+0x2ecd/0x3830 [ 1914.779949][ T31] path_openat+0x2ee5/0x3830 [ 1914.786409][ T31] ? arch_stack_walk+0xfc/0x150 [ 1914.806967][ T31] ? __pfx_path_openat+0x10/0x10 [ 1914.812503][T23479] usb 2-1: USB disconnect, device number 102 [ 1914.825749][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1914.843539][ T31] do_filp_open+0x1fa/0x410 [ 1914.864011][ T31] ? __lock_acquire+0xab9/0xd20 [ 1914.881228][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1914.901020][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1914.913318][ T31] ? alloc_fd+0x64c/0x6c0 [ 1914.929799][ T31] do_sys_openat2+0x121/0x1c0 [ 1914.943209][ T31] ? __se_sys_futex+0x36f/0x400 [ 1914.961160][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1914.966442][ T31] ? rcu_is_watching+0x15/0xb0 [ 1914.971238][ T31] __x64_sys_openat+0x138/0x170 [ 1914.977912][ T31] do_syscall_64+0xfa/0x3b0 [ 1914.992899][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1914.998326][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1915.014301][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1915.019036][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1915.033474][ T31] RIP: 0033:0x7fd26e18e929 [ 1915.040683][ T31] RSP: 002b:00007fd26f010038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1915.056796][ T31] RAX: ffffffffffffffda RBX: 00007fd26e3b6080 RCX: 00007fd26e18e929 [ 1915.089167][ T31] RDX: 00000000000a4901 RSI: 000020000000c380 RDI: ffffffffffffff9c [ 1915.097348][ T31] RBP: 00007fd26e210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1915.106281][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1915.114652][ T31] R13: 0000000000000000 R14: 00007fd26e3b6080 R15: 00007fffa7a18aa8 [ 1915.122833][ T31] [ 1915.126112][ T31] [ 1915.126112][ T31] Showing all locks held in the system: [ 1915.140118][ T31] 2 locks held by kworker/u8:0/12: [ 1915.158437][ T31] #0: ffff888146ee7148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1915.182828][ T31] #1: ffffc90000117bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1915.195619][ T31] 1 lock held by khungtaskd/31: [ 1915.200679][ T31] #0: ffffffff8e53c4e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1915.211034][ T31] 1 lock held by kworker/u8:7/3487: [ 1915.216273][ T31] #0: ffff8880b8639fd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 1915.226482][ T31] 2 locks held by getty/5614: [ 1915.231412][ T31] #0: ffff888030bdb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1915.241496][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1915.259373][ T31] 2 locks held by kworker/u8:10/28835: [ 1915.281177][ T31] #0: ffff888146ee7148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1915.301281][ T31] #1: ffffc9000c1f7bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1915.319911][ T31] [ 1915.322281][ T31] ============================================= [ 1915.322281][ T31] [ 1915.334240][ T31] NMI backtrace for cpu 1 [ 1915.334257][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1915.334278][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1915.334290][ T31] Call Trace: [ 1915.334297][ T31] [ 1915.334306][ T31] dump_stack_lvl+0x189/0x250 [ 1915.334337][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1915.334354][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1915.334377][ T31] ? __pfx__printk+0x10/0x10 [ 1915.334411][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1915.334433][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1915.334449][ T31] ? _printk+0xcf/0x120 [ 1915.334476][ T31] ? __pfx__printk+0x10/0x10 [ 1915.334500][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1915.334521][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1915.334542][ T31] watchdog+0xfee/0x1030 [ 1915.334561][ T31] ? watchdog+0x1de/0x1030 [ 1915.334583][ T31] kthread+0x711/0x8a0 [ 1915.334612][ T31] ? __pfx_watchdog+0x10/0x10 [ 1915.334627][ T31] ? __pfx_kthread+0x10/0x10 [ 1915.334655][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1915.334676][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1915.334697][ T31] ? __pfx_kthread+0x10/0x10 [ 1915.334725][ T31] ret_from_fork+0x3f9/0x770 [ 1915.334749][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1915.334776][ T31] ? __switch_to_asm+0x39/0x70 [ 1915.334790][ T31] ? __switch_to_asm+0x33/0x70 [ 1915.334805][ T31] ? __pfx_kthread+0x10/0x10 [ 1915.334832][ T31] ret_from_fork_asm+0x1a/0x30 [ 1915.334862][ T31] [ 1915.486536][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1915.491962][ C0] NMI backtrace for cpu 0 [ 1915.491978][ C0] CPU: 0 UID: 0 PID: 17509 Comm: kworker/u8:5 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1915.492001][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1915.492013][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1915.492036][ C0] RIP: 0010:lock_release+0x63/0x3e0 [ 1915.492058][ C0] Code: 00 89 c0 48 0f a3 05 6c 86 46 0e 73 16 e8 e5 e4 08 00 84 c0 75 0d f6 05 9b 7b 30 0e 01 0f 84 ad 02 00 00 83 3d 8d b7 46 0e 00 <0f> 84 44 02 00 00 65 8b 05 50 bb 4a 11 85 c0 0f 85 35 02 00 00 65 [ 1915.492077][ C0] RSP: 0018:ffffc90014fbf370 EFLAGS: 00000202 [ 1915.492094][ C0] RAX: 0000000000000001 RBX: ffffffff90744201 RCX: 13d63a3a96e84f00 [ 1915.492108][ C0] RDX: ffffc90014fbf501 RSI: ffffffff8c04cb20 RDI: ffffffff8c04cae0 [ 1915.492121][ C0] RBP: dffffc0000000000 R08: ffffc90014fbf590 R09: 0000000000000000 [ 1915.492135][ C0] R10: ffffc90014fbf558 R11: fffff520029f7ead R12: ffffc90014fbf5a0 [ 1915.492148][ C0] R13: ffffffff8172eea5 R14: ffffffff8e53c4e0 R15: ffffffff8172eea5 [ 1915.492162][ C0] FS: 0000000000000000(0000) GS:ffff888125798000(0000) knlGS:0000000000000000 [ 1915.492177][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1915.492189][ C0] CR2: 00007f131e580678 CR3: 0000000075c84000 CR4: 00000000003526f0 [ 1915.492205][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1915.492217][ C0] DR3: 00000000000032e7 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1915.492230][ C0] Call Trace: [ 1915.492239][ C0] [ 1915.492247][ C0] ? deref_stack_reg+0x19f/0x230 [ 1915.492275][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1915.492297][ C0] unwind_next_frame+0x19a9/0x2390 [ 1915.492324][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1915.492347][ C0] ? arch_stack_walk+0xe4/0x150 [ 1915.492385][ C0] __unwind_start+0x5b9/0x760 [ 1915.492412][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1915.492440][ C0] arch_stack_walk+0xe4/0x150 [ 1915.492467][ C0] ? stack_trace_save+0x9c/0xe0 [ 1915.492495][ C0] stack_trace_save+0x9c/0xe0 [ 1915.492524][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1915.492550][ C0] ? chacha_block_generic+0x53/0xc80 [ 1915.492580][ C0] ? __lock_acquire+0xab9/0xd20 [ 1915.492601][ C0] kasan_save_track+0x3e/0x80 [ 1915.492659][ C0] kasan_save_free_info+0x46/0x50 [ 1915.492684][ C0] __kasan_slab_free+0x62/0x70 [ 1915.492709][ C0] ? skb_release_data+0x62d/0x7c0 [ 1915.492725][ C0] kfree+0x18e/0x440 [ 1915.492752][ C0] skb_release_data+0x62d/0x7c0 [ 1915.492774][ C0] consume_skb+0x9e/0xf0 [ 1915.492799][ C0] nsim_dev_trap_report_work+0x7cf/0xb80 [ 1915.492831][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1915.492855][ C0] process_scheduled_works+0xade/0x17b0 [ 1915.492893][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1915.492925][ C0] worker_thread+0x8a0/0xda0 [ 1915.492949][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1915.492982][ C0] ? __kthread_parkme+0x7b/0x200 [ 1915.493011][ C0] kthread+0x711/0x8a0 [ 1915.493039][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1915.493061][ C0] ? __pfx_kthread+0x10/0x10 [ 1915.493087][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1915.493111][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1915.493135][ C0] ? __pfx_kthread+0x10/0x10 [ 1915.493162][ C0] ret_from_fork+0x3f9/0x770 [ 1915.493184][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1915.493209][ C0] ? __switch_to_asm+0x39/0x70 [ 1915.493224][ C0] ? __switch_to_asm+0x33/0x70 [ 1915.493239][ C0] ? __pfx_kthread+0x10/0x10 [ 1915.493270][ C0] ret_from_fork_asm+0x1a/0x30 [ 1915.493296][ C0] [ 1915.529439][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1915.529466][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1915.529496][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1915.529512][ T31] Call Trace: [ 1915.529523][ T31] [ 1915.529538][ T31] dump_stack_lvl+0x99/0x250 [ 1915.529576][ T31] ? __asan_memcpy+0x40/0x70 [ 1915.529614][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1915.529665][ T31] ? __pfx__printk+0x10/0x10 [ 1915.529714][ T31] panic+0x2e2/0x7b0 [ 1915.529750][ T31] ? __pfx_panic+0x10/0x10 [ 1915.529779][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1915.529818][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1915.529848][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1915.529885][ T31] watchdog+0x102d/0x1030 [ 1915.529913][ T31] ? watchdog+0x1de/0x1030 [ 1915.529948][ T31] kthread+0x711/0x8a0 [ 1915.529987][ T31] ? __pfx_watchdog+0x10/0x10 [ 1915.530012][ T31] ? __pfx_kthread+0x10/0x10 [ 1915.530050][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1915.530079][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1915.530110][ T31] ? __pfx_kthread+0x10/0x10 [ 1915.530153][ T31] ret_from_fork+0x3f9/0x770 [ 1915.530186][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1915.530223][ T31] ? __switch_to_asm+0x39/0x70 [ 1915.530244][ T31] ? __switch_to_asm+0x33/0x70 [ 1915.530266][ T31] ? __pfx_kthread+0x10/0x10 [ 1915.530303][ T31] ret_from_fork_asm+0x1a/0x30 [ 1915.530343][ T31] [ 1915.987571][ T31] Kernel Offset: disabled [ 1915.991890][ T31] Rebooting in 86400 seconds..