last executing test programs: 2m57.173373397s ago: executing program 0 (id=571): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1a00855, 0x0) 2m56.85039176s ago: executing program 0 (id=575): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r1 = open(&(0x7f0000000080)='./bus\x00', 0x4001410c2, 0x766c618eb221465a) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000600, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) splice(r3, 0x0, r2, &(0x7f0000000580)=0x3, 0x2, 0xa) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000150001002dbd7000ffdbdf25ac1414aa000000000000000000000000fc0100000000000000000000000000004e2301ff4e2200040200008011000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="be6b6e000000f5ff08001f0002000000"], 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'wg1\x00', &(0x7f0000000000)=@ethtool_cmd={0x9, 0x2, 0x3, 0x3ff, 0x3f, 0x7, 0x1, 0x3, 0x6, 0x3, 0x101, 0x142f, 0x8, 0x3, 0x0, 0xa, [0x4000000, 0xff]}}) mount(&(0x7f0000000100)=@rnullb, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000240)='coda\x00', 0x0, &(0x7f0000000300)=',\\:/,\xe5)\\{\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r8 = memfd_create(&(0x7f0000000400)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x11, r8, 0xe7e47000) r9 = dup(r6) sendfile(r9, r5, 0x0, 0x40008) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r10, r10, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000340)=@loop={'/dev/loop', 0x0}, r10, &(0x7f0000000380)='./bus\x00') mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='vfat\x00', 0x808898, 0x0) 2m54.915902022s ago: executing program 0 (id=592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 64) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x1c}}, 0x2000004) (async, rerun: 64) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x8001, 0x8, 0xe000000000000000}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r2, 0x7dfff000) 2m54.741320001s ago: executing program 0 (id=595): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "73f0c351b8a0e7375288a7675433062487034d33b46bfd3c406777500a5c9596", "c228588101cad0591918a61e3f716ad1866c7b64c15666613584bd00", "015204d84ed9d4c55745118a38fcad54b9518d8bdffcdb58937f2f032368d622", "54446eeee75fd3f1d31f613c947240a26d56c0ba30f02bfa7cdad8f74614d80e", "31704466c0732ab891fd8acfe66e1e8ae3fcc2bc3b5773fe7e7ca45b0383c020", "20d39965be3beb2bc876cc3f", 0x9, 0x800, 0x78f6, 0x10000, 0x4}}) mkdir(&(0x7f0000000e40)='./file0\x00', 0x1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) chdir(&(0x7f0000000640)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x12) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)="180c4552", 0x4) write$dsp(0xffffffffffffffff, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f", 0x2d) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000380)={0x48, 0x1, r5, 0x0, 0x4, 0xd}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r5, 0x0, 0xffffffffffffffff, 0xa3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r5, 0x0, 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r5, 0x0, 0x4ffffffffffffff, 0xf}) ioctl$IOMMU_DESTROY$stdev(r4, 0x3b80, &(0x7f0000000040)={0x8, r6}) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r1, 0x7dfff000) 2m54.406517129s ago: executing program 0 (id=596): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305839, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r5, &(0x7f0000000480)=[{0x1, 0x1}, {0x0, 0x2}], 0xdeadbeef, 0x8, 0x200000b9}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) 2m54.002999296s ago: executing program 0 (id=599): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair(0x12, 0x5, 0x807, &(0x7f0000000600)) fsopen(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$inet_mtu(r3, 0x111, 0xa, &(0x7f0000000000), 0x4) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, r4, 0x30, 0x1, @in6={0xa, 0x4e20, 0x1, @private0, 0xfffffffb}}}, 0xa0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async) dup(0xffffffffffffffff) (async) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) r5 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async) shmctl$IPC_INFO(r5, 0x3, 0x0) clock_gettime(0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 2m53.604221426s ago: executing program 32 (id=599): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) (async) socketpair(0x12, 0x5, 0x807, &(0x7f0000000600)) fsopen(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = fcntl$dupfd(r1, 0x0, r2) setsockopt$inet_mtu(r3, 0x111, 0xa, &(0x7f0000000000), 0x4) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000100)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x4, r4, 0x30, 0x1, @in6={0xa, 0x4e20, 0x1, @private0, 0xfffffffb}}}, 0xa0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async) dup(0xffffffffffffffff) (async) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) r5 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) (async) shmctl$IPC_INFO(r5, 0x3, 0x0) clock_gettime(0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 2m41.99614112s ago: executing program 2 (id=664): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x16c0, 0x5e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x91, 0xa0, 0x6, [{{0x9, 0x4, 0x0, 0x63, 0x1, 0x3, 0x1, 0x1, 0xde, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0xf66}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x4, 0xf}}}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) (async) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x123201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12) write$dsp(r0, &(0x7f0000000240)="9bfb", 0x2) (async) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) (async) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x123201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000200)=0x12) (async) write$dsp(r2, &(0x7f0000000240)="9bfb", 0x2) (async) r3 = creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fcffffff0200000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900009632bbf197db342e3685b6701bebbe00000000000000"], 0x28}}, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1803000082cca7c6ded59901cd00000000000001008c00048094"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) recvmmsg(r6, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/29, 0x1d}, {&(0x7f0000000400)=""/104, 0x68}, {&(0x7f0000002900)=""/4096, 0xe17}, {&(0x7f0000000000)=""/127, 0x7f}, {&(0x7f0000000600)=""/53, 0x35}], 0x5, &(0x7f00000006c0)=""/105, 0x69}, 0x4}], 0x48, 0x2000, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000047c0)=""/4060, 0xfdc}, {&(0x7f00000027c0)=""/4069, 0xfe5}, {&(0x7f0000000700)=""/244, 0xf4}, {&(0x7f0000000140)=""/120, 0x78}, {&(0x7f00000005c0)=""/138, 0x8a}], 0x5}, 0x40000100) sendmsg$inet(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x40000000) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (rerun: 64) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) (async) r9 = socket(0xa, 0x3, 0x3a) ioctl$SIOCSIFMTU(r9, 0x5411, &(0x7f0000000000)={'veth0_vlan\x00', 0x200}) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_tcp_int(r8, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) (async) sendmmsg(r8, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000580)='T', 0x1}], 0x1}}], 0x1, 0x8855) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0) 2m41.646701977s ago: executing program 2 (id=668): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x406, r1) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r3) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'team0\x00', &(0x7f0000000280)=@ethtool_rx_ntuple={0x35, {0x5, @udp_ip4_spec={@rand_addr=0x64010100, @broadcast, 0x4e23, 0x4e23, 0x1}, @ether_spec={@broadcast, @local, 0xb58}, 0xfff, 0xff, 0xf6e, 0x8, 0xfffffffffffffffe}}}) syz_open_procfs$pagemap(r4, &(0x7f00000000c0)) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r6, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000bfe000/0x400000)=nil, 0x400000, 0x1000007, 0x12, r6, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) 2m41.328156778s ago: executing program 2 (id=672): creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) (async) bind$nfc_llcp(r0, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x14, 0x14, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4, 0x2}]}, 0x14}], 0x1, 0x0, 0x0, 0x4000}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 2m41.029166679s ago: executing program 2 (id=675): recvmmsg(0xffffffffffffffff, &(0x7f000000cec0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000004200)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000006200)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000042c0), 0x101041, 0x0) write$vga_arbiter(r1, &(0x7f0000004300)=@other={'lock', ' ', 'none'}, 0xa) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)={0x40, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24004415}, 0x20000000) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xffffffff, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xffffffff}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) (async, rerun: 64) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0xff, 0x2) (rerun: 64) read(r6, 0x0, 0x0) (async) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r7, 0x8994, &(0x7f0000000300)={'bond0\x00', @ifru_names='bridge_slave_1\x00'}) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r8, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0) (async, rerun: 64) mount(&(0x7f0000000080)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='cifs\x00', 0x208002, 0x0) (rerun: 64) 2m40.918159084s ago: executing program 2 (id=677): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x8, 0x1}) syz_usb_connect(0x5, 0x34, &(0x7f0000000e80)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540040904ce0109000000000705f71f22"], 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0xf74, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x0, @pix_mp={0x0, 0x0, 0x38415261, 0x0, 0x1, [{0xfffffffc}, {}, {0x4, 0x800}, {0x20}, {0x0, 0x4}], 0x0, 0x10}}) sendmmsg$inet6(r2, &(0x7f0000002fc0), 0x0, 0x240040c5) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) connect$netrom(r4, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x560f, 0x0) shutdown(r2, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000002c0)={0x0, 0x24, 0x1ff, 0x100, 0x7fffffff, 0x8}, 0x14) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000000)="f0", 0x1}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0x0, &(0x7f0000000540)) ptrace$cont(0x21, r7, 0x0, 0x0) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0xfffffbff, @private2={0xfc, 0x2, '\x00', 0x40}}]}, &(0x7f0000000180)=0x10) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f00000001c0)={r9, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}, 0x0, 0x1}, 0x90) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r9, 0x9}, &(0x7f0000000300)=0x8) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r1, 0x7dfff000) 2m39.056420606s ago: executing program 2 (id=679): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, 0x0, 0x1, 0x204}) creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000340)='\"', 0x1}], 0x1) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRESHEX=0x0, @ANYRESHEX=r6, @ANYRES16=r6], 0xffe) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000140)) listen(r2, 0x802) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',no=\x00\x00\x00', @ANYRESHEX=r7, @ANYBLOB=',\x00']) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 2m23.85392296s ago: executing program 33 (id=679): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000040)={0xc, 0x0, 0x1, 0x204}) creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000340)='\"', 0x1}], 0x1) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f0000000800)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRESHEX=0x0, @ANYRESHEX=r6, @ANYRES16=r6], 0xffe) listen(r2, 0x0) mount$9p_unix(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000140)) listen(r2, 0x802) close(r1) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',no=\x00\x00\x00', @ANYRESHEX=r7, @ANYBLOB=',\x00']) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 2m13.389889109s ago: executing program 5 (id=801): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x101000, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r5 = gettid() tkill(r5, 0x11) rt_sigaction(0x11, &(0x7f0000000100)={0x0, 0x10000006, 0x0, {[0x7fffffff]}}, 0x0, 0x8, &(0x7f0000000000)) ioctl$BLKIOOPT(r2, 0x1279, &(0x7f00000000c0)) fallocate(r1, 0xe, 0xaf, 0x0) write$binfmt_script(r4, &(0x7f0000000180), 0xfea7) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x100000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r7 = openat$cgroup_ro(r2, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r2], 0x4}}, 0x0) sendfile(r8, r7, 0x0, 0x100000002) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_kvm_setup_cpu$x86(r4, r7, &(0x7f000085a000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000340)="43d81d05000000b97a020000b849000000ba000000000f3066660f3882be89000000c744240092ba2e72c744240200000000c7442406000000000f0114240f01c4f3f264f4b8010000000f01c1260f35672e0f32470f01c9", 0x58}], 0x1, 0x0, &(0x7f0000000240), 0x0) mmap(&(0x7f00003e5000/0x4000)=nil, 0x4000, 0xb, 0x810, r0, 0x7dfff000) 2m13.326963737s ago: executing program 5 (id=802): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe80000000400000000000000000001b000000fb00000000000020000400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) 2m13.214664723s ago: executing program 5 (id=803): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) (async) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301) socket(0x28, 0x5, 0x0) (async) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x0) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) (async) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) accept4$unix(r2, 0x0, 0x0, 0x0) (async) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000140)=""/246, 0xf6, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000400)=0x13) (async) ioctl$TIOCL_GETMOUSEREPORTING(r6, 0x5412, &(0x7f0000000400)=0x13) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xd) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000000)={0x10, 0x3, 0x8c, 0x8, 0x19, "007de521ec070ef4f834bbeda7f6647bbfdef7"}) ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000040)={{{0x1, 0x1}}, 0x11, 0x9, &(0x7f0000000180)="c6ad3258ef04b8f9c37150cc2981e2a996"}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x32600) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000740)=0x11) ioctl$TIOCVHANGUP(r8, 0x5437, 0x200000000000000) (async) ioctl$TIOCVHANGUP(r8, 0x5437, 0x200000000000000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') (async) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00') preadv(r9, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) (async) setresuid(0x0, 0x0, 0x0) writev(r9, &(0x7f00000003c0), 0x100000000000022d) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000001, 0x8010, r0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009058103"], 0x0) (async) r10 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, &(0x7f0000000400)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="002225000000a2"], 0x0}, 0x0) 2m12.906794407s ago: executing program 5 (id=804): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setresgid(0xffffffffffffffff, r2, r2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000400)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f0000004280)='.\x00', 0x800, 0x0) lseek(r4, 0x3, 0x2) getdents64(r4, 0x0, 0x0) getdents(r4, 0x0, 0x0) r5 = ioctl$TIOCGPTPEER(r4, 0x5441, 0x3) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, 0x0, 0x10, 0x66}}, 0x50) syz_fuse_handle_req(r6, &(0x7f0000006280)="c9614df797d5bbaf2d529ccfe807cb2396820ca614edc8f52d067330a81f6c26f4cc0f48e5ae1d42335297538a44b9b28f2d36c39510bcdb6cf2fc17d9b35688d0447cc7167668496bdd28d8df1292b12b61894268f707c212263b3f1ae188c8a69527ac8e196f23028853fd4009294124f18fc47bd2322220e5f0d5d30223095e4e748803b6bf25ba87f40183766b5d2c3a6b3d2f7566b160f0e0742a6cabf6b0071295bc4d5ca4ee60a1fbdc8bbc1f2a59428bc836a1ef0c2dfcbe514f9857f7230f848af37be100dc4f4115ffcb0198774affeb7690dd6782a9f51987dba5d9fd0b6a3426c1ce1e04e48f4255c157450791ba022f0bad4844a22679bb17601987f461d7a35d7de8874cc3c47f360b3c31dfdbf7bb9f93ec80046118660e8bbb18930914f087c05df436073b9ccc5a740f8f634cc827245366b1179aaaddd2bd161f2fa413e1beded9f3063cabd52ece7139af17db00b63117a6b6a1ad8c33ed779d7dddf5b40c17635397b878c7117923f26767864e788da1f79dbbc769fbab45b34198b69dd0599904a0c1297812f9ad9cbf48c59d553b1004ab8213802f3a0852b5b827ab3ea7220873b379b459d7a09af061ccda8bd857d3b2bf2dbaea1b00e2cd0bcc8d6eb11c04bd21532bec66ae36d674a4dd01ab54c27d3267961ecfad0042837fea87d75cecc7a1a58f79f77d72fede0757b7c1f54a5040e741a0fc785ea0ad13bcfc0b69df4dc29dc75e331d2ba03c3cdf04e0a4490159b43c6ae2c010f276c85f3bc46ca94e73e11762739e40e6bfbc113f46ee6ab801b97d42fadc067e23a3151ae90ff64c80e64bba5313475948fbd24a6a95f7ec0b221c9f901c68d184d38b2e09cde68fbd6dd022b6fa1db26aa6ebe2128a93fcb7259ebcde896bd81685c881cb25f581e27479f929e1094852559209c255b0dd5317b148567674b235b10e093363e8e4bd15c4ab90c44abaadbfeabd65e26223543c415befff4d280ad0f0dc132b5413bbe96fdedcabc55e9f3eeead53a1f2d7c0455c8a3bda363a8c33c99888a05546f49dc4c3593aeb30b8ea314b77b8d117334d9c3f800a132e4c3bab461863f027dcfc066bf93f0426d74e02c92a0727309d5bf5bf8242a2b594b81de0e030e55f0125b5d4e12dbffc6806a6c7bd6d62c3d54e87f0607e08750d808a2f442a7eac0ec311c3498b9709ae2f505d5e8b3670079847644147741ffca679bbd1b658bc6c422e58d070f8608c246677af0e2efff5cbf88b3b4a0431a2f26648d64991cf99848012cb6eecb8a13ea91ce77d3c8f2bc047370f4811ae5c341371e3b65bed88294580ba90258c8d36683f21d91a8a914948b2222e4127b061cc0121b97a1b9b1c4ebb7ee166b5af58497d7e0ac90fda25e41a2490ec5d143d0e47475741b30138585637d7997fff2a8805a88c4bd75975ccffcbabefa3576328d86e802b8490e8a773e01afa74fa26c6849deb15b05596e7226cdc0c0ff364bcb4e62ec54984c9485b6eb819165972b9c935a3ae18c698438582e170437c538d7d24a935036964c77e6ed37de77c64384b258f7bbe944f630d3ca82c441c6b2c5bc73dd9f90ecff67a816de7b15bdcaa5a5f1bb8b270a8ac1119e1626e29eb5f2ae4595ca2e10c2e6b297c30c3eeb432ad374101938916c77aefd2ed0f5bb658922bdec9bd76767b9a4b56a15aaa2f7e7d06dba36710a4c8d69d2361aa5f1864710d0868d8f7616cffac40e0accd9b44df8cb5b5324039d82c44e9b97d3a77d914a3738cab84541f0dfc2ed93fb3a746d19cf73495cab380afcdac8acf300e34bb68917009ec1d205dc315669c6341218ebbd0a380c0d14396732e430544ea02d9aff1ffd199c475c4cd313aac4de1121055d806858ee1538436a5f3a549230a42698aeaa3b58b5b9dbf6e11292dad9e0535f5c0685105a448888101ca2228ab50af16b657bb9abb5d4c40cf03931f345663ef6e7655048f78bd23227c6a78bd8b8a457abad7267c8d3ed8decb74cfb21c98471c31f068fd8fea32f13d4478e476d7b5ee10579bda100686db9b3fac14b71e614fd156bddbbde1bf759d0023eb50345e970fa93efd99469583eecec690147f3c075da4efeda849b172829f34e31b281d844fb7c04ca49b30a15abbe493c191e003b76ccb8b2e560ddc3573c6182a87f8e5bdbe10333b3ff3381705984e5595831c025335d0438b053d17fe2f43424735ec3e9d0e8dc278d9e3f35d8d6881e47801d9f77ddf9954ba8f4fe95c295a67968b07bde6378b5ccf24f3d0d228b3cfb4624318828a2649af11698c56860c85617a5151f879846383f5fcf0e9ac483bc4c60beda3bd273a594fc26850d31a852839f23f9e5ffd31d63a7cee2341f22f385d41521aacfe6faf1c5b1e024cd6c6cd4b8696b8e66c6268196da27dc4090552748260bba916b932cbf8066b07dbf5f75b5ea04c385d2ac971d079ab7d4a6bec1008b7564f167aa903acda2ef1756ddbdee86ad25b172479756036d1e11b5c2ab10e657e3b3c768840fd111477bfa05b9e7a2ee765d685f7688765f2441e052a60f56286e6d15ea19d98306a0a5b5efd5b1363bf357d836cb20bb2420ecff7fd682c78763bd1ab31561e6a36a20bf57024852e168bdbc82efa42f7302dc5519c2b56ba3e960437e69f5502048e914540bd4e6138e04e3cb04c75abaee441dd29e23a23948eecb2a7883ae6f3c35b3a3a965fd062688a5975059da47b6029f38baec8d3932295a2257c83a0f966aa7c19db13ccadb86c6c81d84a09bd0782cc87369c8b3a006fee64323c964dcd731fbcaa2f1c1b19f55688365f183bc26bcb636eb0622fc5f5804d46db493737078fe6a6e82f34e48eef5974787c8c4b8abd8a0dcf516862454915b7b9d81a48b9d14a3a08a9408e41c3522480a925cb9521f02cf4380aa44796fa9569aa5043787d9c3a0a345f202d66e28f6c5fc17f8998655bff0351687e2ef6ee523f965d37ed7c4c1fedc51ad7024d8c1102fef833ecf9289050b944e2e9a5646e090f5ab5be3759ea66ee79d5f870fea4ed505a231461421084317c6c5379c74ba5eef02b77c9687f49b05606c5969ae5c84f74a7d43b148dddaffcbd45e8c4eefacdd5c8c07f926baf0b1e7f65c7184c56c9ac355fde5df39557d4011b7eeb65a18fca8de446d9879404bf64f3e460232642960938e6c797d3d942534fa64b9fb0ec5648940456ae4ec22df6ccbaca34ff8a296640ed28f903db33533e0bb4927ac96312580810a38738d5c5ae638359379d244d0c45cc9bc4525648748f4a2becb101c08d7c4ecc407067cf1008cb0f14279bae658ea5f16084769ad66a8e6a9a5137ec65764ec6d25e688cf8a357252420b1ba619e8ab19d28019060434a9d2579be998e8a735778b690cad9512cc9604d2e60e01f2cbb714dbfd87795092e0ff7acb8217074a6d0b9ae00d80685798eb4bee828dff6e1f6858202381cb4051c6a5b6918f8c042a3698ac5eb402abc1f27932764ebd54daa45105666041c1a51e55bf1761c2dbe2c75a511b168f4961385d1a7b7c780fc1c23f1710b7c1e4716e99ed044ce4697fa3b649bc85443ef1b111549d342cd2a417158d01c483e6a2d6535a5801c00f5a7bb47a0d51656bd50824b2f998ea59cde88a7c329e09f19a704104309b674e9b6dd48acd0abee6366ae1ccc24fc2cb1fc0666e71c57e314464c2f2b950b76d426441265f34ae20af7e5dbf47773459f2e34a3b1a2af5d2f406cda82049ca734f22c6ac5e284c4f4c3f10edf89ba7eac611dfd27c46fbad61aa3c5acfd1a29611b917a26ba070169f08e81441e7d6f77f73837dcf6c758c40fecebab6475fee4a6105c844fc52eb603159d4762408911fce84b736a4fae34cb79dd525ebdd53b3b241a08c664a90a6bab087052b82db1f0a9e2f98b78b4998504b148711f47caac7229b708a562e6968b91720b585b2446f7f8aa848d433ebdf0d9d5c866ae7c3660f0be9734959533da9b9484dd10954c7bbc631fc07cf74d1a103076721639a19dec9ba88904c55c3d0e4829d14e48c3f93097521c4a9f4fbcf7b0d17baa7b742afd32a2e78be29f6fb37018bd0579af59985171a8dd5dd35af833fd8816cdd704fa5214260994cd64bae6c7d1376b864874de542dafb0a5c4b29c5bd887bf1dc8ec0e2f907fcffeb6522a3aa20c8ae5912b519049719cba277be7bb6c4341d65fc530804dec7ce5c1a64c4aef279c0da8a1bcc89a63542fc2af2cd1d69701c78db225c596190e81fadabd718b794689fafc929ed092b90218642ae0c75ffe6b9fa9baff10f2424d43ecda2867013d4f2e7562d3bcaa7f51f1f5a96bcc9bff8dd1bce4eaaf49626550183dc19eb358c146b657c2b34fe67a8ecb12b1b29b3d0bf28d6ecc13578f7d1ec1c7f7f76f325d920ff717c7d01baffa0d52166f6849832895f9ec960c65b06506caf39ea6ececccfa197ae151b948d415338c18b3ac35f6f96e67c7662de01f8a92c2a224f4567fc72333b43fb099dda8c49c3cbaee48cff545894390165fc290d798888a84c583b0096513a5c61b2ee1e836b17632cff8f71f9c73546882961cf25a010c7276791167e0dd7d2de8bf44abe9f12419c8776d84418d8e26463ea139e64f82f81fc5b577957f6d34b247a6d7d79aec95d80320b7999f398347835d82a74f3f5637a37ca08158d4022e39ef514f264ba84dacb3c5270272ae94ee3858eaf4de98e8d944273398e315dc42a277fb97d9ee7ddc4f7dbb6cbdbb9283ff1ecbde638ce6edeb18e680addd942f6632e73fc11ba5874a179c79ae67a6406d19ab7293af407cd319862fd4c9568a3bcf31a11adc4ddd8a924e10768594e4689a109daeff28f15a182ee3bfb347f0500005d8dcc691421b6fad377a9ceda726d195eb847ee879664861d4e2e0d3567362524303feafc2b552f0f1f64436ce9efaa63b2b268c674969c879d027c37aca197b71cfe47670cc268de9714a91a3a50c7c205daa613c56c1b1f13d34eaf8dbfc126e0e9fc10cd3e508154e6cea0572e179e424d2270454b1000a3bf4aac26b18efeb9115b6fcd3fcee6ed5b9c3d585394077c35850ef697c5f8a57a270431a0a2e81f6a6269bff09be4da7640fb600130375de62e9796eed4e4e25bfd3f6addfe62addcf2b8fa8eb28d8c3fb20800a8e9ae87c114a1ae91ed347f8ff589cead9e646722180fd60bdc9d0923a1a6ec8fc6de5fadc2203344d459ef6f0145ff71a4cacdabaf1b55f262c86733dd109b747f8740a3959a13a32377e522997fbf93c41fe3408a67d7253df6e399345d9216600f82fefcba9db303442ab3f184c012b1359e8601d85d6b0312ea7b0474d0c8dbca06625643e94ffdacd9a0a2839674249370fa67a5681df0442079cf67bd073859cf3d423711639f8addb6a9acceda893f017f3ca1f23f1245473be8bc6b5c51afc5d088fc764b3d96c9bbe7908806e2b64908bd0be73aa09eeb09de1117d0159b17a166bdb1394892b815aabb68dd7aef00bb6660a31088c88d16d433079552f25801472a7302a44fcdaf13410d15ab5e690cabdfddf112046f58ded90f4d4cdc4de5bfbc5259456ace66f7dbde5c49446d377b87181f0ba03598973137ec2f9b038c0a8ddcd46a6d963086c383c9e86b98fafc0a3b8d7ace5e5f96a0414a4afd5ae75847997f982b338901d81a852081bd47ccd553c2a41aac73f2381e611c8c2581052779e0494f0e1efa0974e11659866f8687fae4236556988b24e0bfc2dceb6f71fe09ee3b4e723dbf369dd22b7889ba296d8c4062aeef1113839c793e4bf16a35b1388ec6af47c363855e03137e9e1d4795beef29d4bb62d611e14fd8f880ff1c8267f259b46229b96bd0e8f7068503b223fc01ba9d8986c601e9807bcd3c232babbbb3112c87d7c30ae496841c03b361045a31e9819b69ec7b94a12d1793ee0b9267a3f9b77e965d1089a2356c46a05f6facfe3e1fe10f5257dd1e83972a9bdf1275ed03ee0c32d8021f264ecd67f635051c9f51f69d4848876c7d68703cbdacaaac18c1ea5e43d9554ddfaeb22f72e73e53760ca15ee52fee57e153702f7f78001a282c8389adc9f1a9b33bda27d4ac6b29dca8b082db3f858df468570d2c099a2b2e5c0897e0183ab8b4dfb62d65d7492347d51ed7b69b414d0de1be678664c7209f849d62d0a5e3a64daeccd1f332831c4b91a11a5c48444e39cd19d0e45120d5ac9c03856df66c8615d359e2f89484a068468a3e319166631932b643d73ad3879b8c8854232384ec62bf7d3c68c51deacdf8685870842e57464659fc9cbfe75f97d8a34d730a74828757661040f9f2cd1832d4c15cb774e0af4d4d0dad5e0098e580f6259bcacb3557fd8442910c8222feb58104d075ef976218a6ceaf10a807b0df2fa5b08945ad17dbc17cd88d7a9bbe2d21332d2ce8a29abbfca7df2f498798e0cb0846c10e4a9125c0b7ab06902f15d8521c10def1ddc94e4f563252894f844a3ee109aec35f766001520926351795ecaa582e90598503a22a9d75bd60c8cb631897d98ea5d66d8f9f06345bb889c4aa21115518b444c2d9d45de72abc73659aafc00465cd3564834389576c5c04f911e2ac0082d72c58e2cec954e6ae72dba6c8b7ed682f488e81bc706d34c723fa3a7ba967b6b00e1abea0e7622a0d9ca17d403bcbf5e2316ab4d46734226ed6797c84161384fbb46b8fe8653cd351e526cca50e7ab8885dd7b5d240cfd15a0253830a7ceb9db44bb12529b77e3cc835442b4d58c7db6a762b7e2c5a3fb37ae9f1426a99823c2df6ca2f6fbf886af52e8565abb7904da69ad7f7029cf73ecc37b5a8c1da6a9e9e1cde38506c96bd7c8d2303d494e422fe181c96a6359b377f18917ae78729911b40b7e69cbefea3c25dd9803aee3183ee3933b5c19d84a400e6c57cb20dc7c7e68739edbf1e8e3475e0a64823dedb46c27780ad01a90a4244891c262d8b0f99e3b1adbb906f82e1977a6101a9d2b44b4b9bfc1f102490ae19e657fa8e7f432eb52d2a4ce932d5346566b887ad4c4f4b5d0dbce790a429f546593e52979c8400441bfe8485c8b864f81b627cf1e20c800b0197b562d0f9b173ca3ba0fae69fe11b91909df9a98ba358e59edbd73da0707a170b3e51928c9c27863dbc83bdecf632b0cc757ab90a270312b2949fdd93f6bea54e303fb0a97b380d516a36f86f053e55e81504affaf7d7b1b8bbde5da525d3f60a628ae17918e07b32b408b51ad3ba6030c3555556334f2fe7c11098007f3e232c8953754c794f807b0ac3680b2a3688f5205d90ccce3ba9c7907508cec61287ad0aa55a151e639bb9086444bdcd149bc5c003340b8381d8c35b073729d2e95a21af1d9995c8093d570b59d8730dd04f3e26ac85e20166e5596082680de90522bcb9532d9e9dce3a10e998f25503902fd7814577ded668bbf3de129c024135a8af420ded350479f13d55290274e3ac63f4568ec7c7a8244f610458d85ecf29aa135d0e56ee52d743200a754ee4508e94d5bc15b3cc8a28c8f37de84fb3cf27ad7590dcaedb78fd8c8f46aaa3529fbb1a2536956c940b605eda0668b1a0f763060bba65d471450a2b34c328c9fb5971851b341a092e315e34a6801cc0808559e5de6d2d9508d11d3072426aa2d43e65f8429c48dbd03197c4f616c253a5b1b50e7ff7cd44df88f5f142997adf976cd2f0cffd673c1791ab969f9dad5867abe531227c059e7b7a9c2343aad230c83513a130ce6e0c4d6815e2bd91f99b6c514703f50fb43139f2e83c521b7e5a3ff4603f006bc7d162047e647234b87439278b10ccd92a4fca136f74d211592235e602d3643fa190cecc8edaf2d727dd5db07f9873048b1f75e19e7c39ef839c0703ec53f70c9fe39b43b98fdacd56b49a416e3b8c66604fb912e3672b8b1a6c5ff7db16320b599513d39460098138b7336d9152df98179f2e07c5abffd4ecf8a2cc8903a40563f187da3a99071bf0c93a65708cb36cd6a69545b78be13a3df9b6c336166b591637bc1be3dfc502200ea982d3b428824cf257184ee93f2d0f3168d4179d238497b84cb73abead20f710057b52ed535adee055081cee4aa842c82c220c160477c16bd1baaa73f46442d2a00658303a9433aa858ce880ed80fa04b592da3c3452a0810f759cbfccd7143d10427c1d39b5c5ecffc590377ce68976315db340e0c00d35d34bec22cfe95882f52f40248281c94758c809d5e65cbf9aeb2dffbdbf2f9a7d10dcd6e7eccc5781851c26990d4a2a2e71598dca6973bfabc82a6135bcc1ee3f1611ced7454e271cbd85a07a583fe89ea98dc4c1b52293adaadfd195b95e6fef37525736a048bd3bb7cc769c50b26c42445f2d5aa37c5ae529b90a5638d920a330ce1ebaf9d979e1b8ee70aba747f7f1a0b9a873167fb5829e64ad08facdfed0fdb76718ef97eeb028cbea23578969190d46e27f81d5eae27987007e217d540d11a33cb36e5768d34d7607ea83221cda3cfefb1cc65f171711160eaadc737013ec1d51de97afd4afc67aa15a23f197800a0566ef4937a6bba9f3334c0aa0e1ed7e9b5c3fc52a3ee112169ed5bce66e88a06f7f3fdda21a10b818c080f2e08e16af6eaac777dff81bfc2231f4cd7360d460091929035b268785e54b3704d52b8c32ffcdf00f21e7f8d3434b3e1ee711a8427596a0e8ae606d02b06914ba09c0a75b2858c7a8dcfff15e2a78549a447dd5d0d5ce912623e4b43fa4106d98e0a5f7960deef827fa30e52697f486cc9928e9b614253a461435d9e993f4a2a700dd0bc54519a2044f36e8f02fb78ca1025d1ce8c35366eddc90818ca1cf9e28bb8ae0f337efe98b82af2547fa03c3eb0813e942d92f1dedac412fa6738c73339959d8f620ceb02ef65dc0a9e4ca272d1965c73c2b06810ba6e13d83de07c4eecbb9e43744b414003057bc26fce09696e98146e59b79a6d817e26b132e3c935d8e5230335ae363a42084ba271058fb25268b139397ef984861d4adbec66e66477df46049fcb8e5f0179846ca020284eccac22b51c3273ae69898295686843bfe2c2ce4f43ea8668a3121558c52d4eb967341197f650e3f145877eb1f5de8377434b18eb2a7bdbb5d7db569d0564d2db7b31f174113d8487be7a5f91f97cda158aac83f0b84eb6a787d30f35f8a1e5ce28f9f86999a06cec497fcd1c8c1c570eb00f1946f300a03bf9b08584df33e2050950dcf4010928365d667d8ee42403c9d1bab54a7518428f7679e0a0e172f33bb3b8b0a829ea3d53fe478fc2556fdb4e51bfa638e9343f628ea570a096e016f5e47e4b72b29b445f9eb12d133277b1213eae6a2ea224ee80e30eb2fd12b08bfb56a588f2f2e67b9c2cb4795c025bb257e954a7720f57687482d119b1850208267eefe0e65b0dc022da6c3324a0d4e1d35dea840b6bdf2fc652579ba3fe55c41126ca4cd54636e86089451e97e5ce3d7cc2499f0882a2c761f0c74640d5152a5bad5091187cbc0c11683f53b5f2b8d4202e33f42070f13e77a63e0794c6ac5dc986a531ab49225d408d8da33a3c89ec856b336faaee251afabc4895afc41165fb558e6c26a3dc12037945f47fc6e60d710f68ca3dd2f18ca8d96cb9e60d2d91cd5b5f56168dc8bda3d3d31779e02c9c6349847504fac30a82466cd692becd3aec74238d336e20a31c2b97be3bbd90c3a2ad938d7ff1b033fc899006acb36eb561a37d4397c09403c845f6081a36d9e4c590f335ebffdee96a0208bf18a9a5ce84ee45c76a22786822e296a957920150f5e11c3354329d4dc328552fa3f2a93d506c7159ddc3054cb1447808cd87c78b9cf74ace81847d712a68d5e88f9c75808fe57383d9867b264e7e3ba233a6bc79a13bf35531e40a1c0d8becacf3d51b07a0cd50e81153e4a0a70128d36ffc096c408b55f47496d08b0153a3e669688a4354ba7dcb65fad21760813afa8a8e4789a9466d7997a27f92e9dfd0e3f9e499c188a200dddc7b57794a2239feb263e8421b79df4f0e6444704476e209101ac5fbc55d41ed0ea466b05401148963ae15dbebfb8d6981330e5b9dcdb01c9d6f9f95ccf28a878e891ae69163071eebd1b738861c58c7b8b0022379412596ea8c2914977e419c5ed53c32e7b191cb148784f42044947eb19e61daf6c853364037a9f734732c8fe5ef76fcec755569621aa4cb7cffd79ffb01b18630bff7751a7e13c3e1427f3cc068ff199ddfe132eaeb4ecd69e48ce59230eff0a81f98ed2835afe2f8911bd9b03ea42cf67abe104cc8b6ee648b515c53f082aaf2ff9cccd1c5c11b920ad82b3bab7e301547713acc37a507059d5a854d08c1330827c87bcf9fb8a337f9d786f653ae90fa293285d5b2b8baf0bc97214dceb9ce1f882acdc45fc1b1c9c1ab8b9931c284fdd21a1c459a064b66f9ccecdc34bf616d9c96c44d741410307968b30d5d4512d5e3c130e2837c10a534bdc7598015c2c0fd1ced2b19628494e5726e55816da6f64c599f7617298c5e1cf4459622dfbf795488238ae1c2716843d2c8ecd1427e068d868ff4d1fa4ba4c701ac81962372867d7c021dd1d0056ef9426e5f8f0579cb26c812abf463d954d5776a3b9f52691ba69ef9dc8fbad3bbafabf6080a9811d23fc9ef802a85a5c315c4700b4d8c68544ca96203f606065bd5e42e1f593d34ef6a086a5399505d12dcd85aafb81da899eb2f01d742b735ec7820330cc92e10b243cafb228c195ade2a4f096b0170bb1be7d5265af0b9598740a5a874326e60cf475c99cacecb013d1eb5202169bcc3d8a1b98484d0dd5b06e4c432e6af4b1fe2a897215295febd579ef3ff568cf02ff1a5c6ba147c4505b3a6119a43b0f960e5fafbcf50135b7efe743580d399f1b21dd8566ab93c12efe9a00902e9fdd333c08ddeebd1a0bcad6cf5ad53fbfa2ce04bb6aa24fe9367c63e2f4f90359b7db4d68d9b68d3d40a5722c6c1fb1e62b27ebbf1bdb39ed409fb579572d64078d1391bad71b2816183da174f2d5c956ae58fd926750a272921b919f0a4aa5f824a79ddaab60c7da7c282053274df30d1df6df3e7e023e9675c329f921999c3afd1ba877b1e19ed260f2119795db264fbb9d72f4a31f230d26e12ebfa04ff480f2e6636daf722ef11df1ee5d99cf999f7dd61606c132d5f8ce95e0b154af0cb9f9ad20a49dc86bb2ad7e2f86069123aa8e25347ab2367c10b3835b72f25e953041dea58242a9b6dcd3635c24bc75f69fc7f18e90fc7c02e11c5243fa9ffceb2951eef8538f49b05c08779e8b68ce637a95e41d057522b60e5b1ed27d5a9bbb1400d01c40ce78ca77ba40cfbfbf7a9104b5d3db2f27bc78136599f3c9434167c8c09a8cb159034cac86167174cda08f81f384a8ea3d0fb9344d2eb1ee9171a2ed8e8eb1d60b669db2274c6811a9d254083f5d0f65aacd3dd4dad307c48a1d46f354bab93bcf98b174c40b00717fd55381519ed602675faa9a7f9cad1c46f66bdfd0c8c16f93ab11cb5773227af6a104dd57783b3e03cfa19f5183af3c908bc53d62bcdcb68d767c6afe9fc3be46ff9a9e94833bd39", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x10, 0xfffffffffffffffe, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x4, 0x5, 0x7, 0x80000000, 0xfff, 0xffff, 0x7d59, 0x7fff, 0x4, 0x2000, 0x7f, r8, r9, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000100)='./cgroup\x00', &(0x7f0000002680), 0x88000, &(0x7f00000026c0)=ANY=[@ANYBLOB='trans=fd0x0}) open(&(0x7f0000000480)='.\x00', 0x101000, 0x0) (async) r3 = open(&(0x7f0000000480)='.\x00', 0x101000, 0x0) statx(r3, 0x0, 0x1000, 0x1, 0x0) ioctl$SNDCTL_SYNTH_INFO(r3, 0xc08c5102, &(0x7f0000000840)={"4f5663e2b2e2bb06d8433db2e9b3be29f5ebdee7f5580ade8cc565f1f8db", 0x2, 0x1, 0x0, 0x3, 0x9, 0x4, 0x1, 0x3, [0x2c029498, 0x7, 0xc, 0xb00, 0x6, 0x1, 0x2, 0x9, 0x7, 0x401, 0x800, 0x400, 0x2, 0x13, 0x4, 0x220, 0x1, 0x3, 0x2790f6f]}) (async) ioctl$SNDCTL_SYNTH_INFO(r3, 0xc08c5102, &(0x7f0000000840)={"4f5663e2b2e2bb06d8433db2e9b3be29f5ebdee7f5580ade8cc565f1f8db", 0x2, 0x1, 0x0, 0x3, 0x9, 0x4, 0x1, 0x3, [0x2c029498, 0x7, 0xc, 0xb00, 0x6, 0x1, 0x2, 0x9, 0x7, 0x401, 0x800, 0x400, 0x2, 0x13, 0x4, 0x220, 0x1, 0x3, 0x2790f6f]}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x16, r2, 0x1, 0x6, 0x6, @broadcast}, 0x14) (async) bind$packet(r1, &(0x7f0000000080)={0x11, 0x16, r2, 0x1, 0x6, 0x6, @broadcast}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file1\x00', 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x19e799e, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xf8}}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xf8}}, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x80000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="205dbb582d367b244463000000", @ANYRES16=r7, @ANYBLOB="000128bd7000fcdbdf25130000000c009900090000001600000005007400000000000600120005000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x400c0) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="410027bd7000fe0100000000000008000300", @ANYRES32=r8, @ANYBLOB="0a000600ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x2400c010) (async) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="410027bd7000fe0100000000000008000300", @ANYRES32=r8, @ANYBLOB="0a000600ffffffffffff0000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x2400c010) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r10 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) lsetxattr$security_evm(&(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000300), &(0x7f0000000680)=ANY=[@ANYBLOB="02eeeb2c8c0c38ece6781406a11b0fd7b56331"], 0x12, 0x3) (async) lsetxattr$security_evm(&(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000300), &(0x7f0000000680)=ANY=[@ANYBLOB="02eeeb2c8c0c38ece6781406a11b0fd7b56331"], 0x12, 0x3) sendfile(r10, r9, 0x0, 0x80000000) mmap(&(0x7f000047b000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r0, 0xf8cc000) (async) mmap(&(0x7f000047b000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r0, 0xf8cc000) 1m14.187146844s ago: executing program 4 (id=1184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4804) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) r1 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_notify(r2, &(0x7f0000000280)={0x0, 0x18, 0x0, @thr={0x0, 0x0}}) r3 = dup(r1) write$nbd(r3, &(0x7f0000000240)=ANY=[], 0x10) finit_module(r3, 0x0, 0x2) bind$unix(r3, &(0x7f0000000140)=@file={0x1, './cgroup/file0\x00'}, 0x6e) 1m13.885044066s ago: executing program 4 (id=1186): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x8, 0x1, 0xff}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x8, 0x1, 0xff}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x2, 0x4, 0x4, 0x8}, 0x20) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}]}, 0x30}], 0x1}, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}]}, 0x30}], 0x1}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 1m13.714058109s ago: executing program 35 (id=1186): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x8, 0x1, 0xff}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x8, 0x1, 0xff}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x1, 0x2, 0x4, 0x4, 0x8}, 0x20) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}]}, 0x30}], 0x1}, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)={0x30, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}]}, 0x30}], 0x1}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 23.081463951s ago: executing program 7 (id=1638): openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x8000, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x1c9e01) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, 0xffffffffffffffff) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r2 = gettid() r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x0, @local}}, 0x0, 0x8, 0x0, 0x0, 0x5a1, 0x400}, 0x9c) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4, 0x0, @mcast2}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1}, 0x5c) tkill(r2, 0xb) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x218a02, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2080, 0x180) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000064000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000280)={0x7}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="acc4e238f34b000fc79b140000000f627c1b1fc4e179284614363e0f01c93e0f67341c0f080f019b60700000670f885d900000", 0x33}], 0x1, 0x17, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000035e000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000200)="0f01c8baf80c66b8d6cf2b8666efbafc0cb055ee0f2177f30f09660f3a60054f65dec80f01cf670f099abd008300baf80c66b8784e358966efbafc0c66b883638f1e66ef", 0x44}], 0x1, 0x21, 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x31d208e, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x40010, r6, 0x45809000) r10 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) recvfrom(r10, 0x0, 0x0, 0x40002002, 0x0, 0x0) 22.570083467s ago: executing program 7 (id=1643): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c000000"], 0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305829, 0x0) ioctl$HIDIOCSUSAGE(r1, 0x4018480c, &(0x7f0000000680)={0x1, 0x1, 0x4, 0x80000001, 0x5, 0x3}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x470, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x7f, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x7, 0x1, 0x3, 0x40, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x2, 0x5, 0x80}}, [{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1, 0xba}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x6, 0x0, 0x4, 0x40, 0x2}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x81d}}, {0xb, &(0x7f0000000280)=@string={0xb, 0x3, "f0905af6f2786f1aa3"}}, {0xfc, &(0x7f00000004c0)=ANY=[@ANYBLOB="fc0359c2ee17438857a2fdb97e07121c8aad090d4a19465a04000000e8f02c8cdb386eaa55cf21a0e2da1b78b59487a741e637b4f3f5f70400dcac1c9c9c768863b95440009335fb9ef61caee16bd941759c87b594126272cb5f480afdb48ff6e4cac7916edb1babb7e5c3de88dd8ff59a7c6cd32f2be14826e40f9214c5eb3eb3aa8653ddc9bfa54b5827a74bfbfa77a9d240db48f614b4b158eba4c683a43e2ccd94aef2be4ccae2293bcde96fedae478a912074d130ee4a18dec4e18a2e9820e086ef939e3c9bcd019cc06141ce68b1a4ce30cb49debbdd3ed649d923285474c25dc665cd00"/241]}, {0x50, &(0x7f00000002c0)=@string={0x50, 0x3, "f6a7e0ff2f6cd876b469cb86a2cf96abc28dc2e739d69218d38263b9aab6c7901124930460a53b394f37bc999f67da1a7154ff3fe46511c272afe3964369ca3de3999aeddb77c0a703482d5d0f71"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xc04}}]}) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="41000000010006", 0x7) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20a00, 0x0) mmap(&(0x7f00006bd000/0x3000)=nil, 0x3000, 0x1000003, 0x10, r3, 0x45806000) r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) openat$cgroup_ro(r1, &(0x7f00000006c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000400)={r6, @in6={{0xa, 0x4e21, 0x4, @empty, 0x9}}, 0x4, 0x4, 0x624e, 0xa, 0x55, 0x7f}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={r6, @in={{0x2, 0x4e23, @empty}}, 0xfffffffe, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69ad, 0x2, 0x81}, 0x9c) connect$802154_dgram(r4, &(0x7f0000000180)={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000640)=0x18, 0x4) 19.532347672s ago: executing program 7 (id=1688): ioprio_set$pid(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a0001", 0x37}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) ioprio_get$pid(0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x80a80, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syzkaller1\x00'}) r3 = socket(0x40000000015, 0x5, 0x2) getsockopt(r3, 0x200000000114, 0x8, 0x0, &(0x7f0000000180)=0x17) 18.543949466s ago: executing program 7 (id=1704): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) r1 = geteuid() read$FUSE(r0, &(0x7f00000005c0)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) write$FUSE_LK(r0, &(0x7f00000001c0)={0x28, 0x0, r2, {{0x25f, 0x0, 0x1, r3}}}, 0x28) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r1, &(0x7f00000000c0)={0x8, 0xff, 0x7fffffff, 0xa1, 0x1, 0x5, 0x6, 0x1, 0x5}) 18.414738703s ago: executing program 7 (id=1706): creat(&(0x7f0000001380)='./file0\x00', 0x4) timer_create(0x0, 0x0, &(0x7f0000000140)) timer_delete(0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) 18.3658218s ago: executing program 7 (id=1708): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, 0x0}, 0x4000080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x77, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="0f"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) write$UHID_INPUT(r0, &(0x7f0000001480)={0xfc, {"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", 0x1000}}, 0x1006) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) 3.652615355s ago: executing program 6 (id=1836): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r0, r3, 0xfffffffffffffc01, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x98c}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffeffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) tee(r0, r3, 0x60000000000, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r6, 0x2000) 2.724687995s ago: executing program 36 (id=1708): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, 0x0}, 0x4000080) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x77, 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="0f"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) write$UHID_INPUT(r0, &(0x7f0000001480)={0xfc, {"a483885aed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f073063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801118c20b8f16bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a64002bebc2407aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827475e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b94025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b03512629f46366e7205dd8d6f37525c1a0e94210dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9154f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d603994732d6b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed608000000a006e39336d07c2b80817a28ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030f81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) 2.702892639s ago: executing program 1 (id=1839): syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) (async) r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000000)={0x0, 0x38, 0x3b, 0x1e, 0x1, 0x1040003, 0x5}) syz_usb_connect(0x0, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000077f1c910720c0c0059f60102030109022d0001000000000904000003d3223a00090501"], 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 2.588876878s ago: executing program 6 (id=1841): set_mempolicy(0xc000, 0x0, 0x3) creat(&(0x7f0000000140)='./file0\x00', 0x71) (async) creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 2.537856009s ago: executing program 3 (id=1842): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) (async) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r0, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x48002, 0x48) write$cgroup_devices(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r1], 0x9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0x8}}, 0x20) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) (async) r5 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) sendmmsg$sock(r5, &(0x7f0000004940)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="afea1c", 0x3}], 0x1}}], 0x1, 0x40000) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000440)=ANY=[@ANYBLOB="58000000020605000000000000000000050000020900020073797a3100000000050005000500000016000300686173683a6e65742c706f72742c6e65740000000500040003000000050001000600"], 0x58}}, 0x4008800) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000040)=0x8) (async) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) (async) getsockopt$inet_tcp_int(r7, 0x6, 0x2c, 0x0, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x41) (async) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) syz_fuse_handle_req(r8, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7808, 0x2100039, 0x0, 0x0, 0x1, 0x57, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dcf26f2e472a5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb0910c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0xa, 0xcbff, 0x0, {0x5, 0x5, 0x3, 0x6c, 0x7, 0x6, 0x1, 0x7, 0x101, 0x4000, 0x8, 0x0, 0xffffffffffffffff, 0x2, 0x7f}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x3100, 0x4c) (async) lremovexattr(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00') 2.438683486s ago: executing program 6 (id=1843): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x82000, 0x0) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040)) 2.406794857s ago: executing program 6 (id=1844): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="bbdf35bd7000fedbdf251f"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r2 = syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000380)) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x8000, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x80010, r4, 0x45c0c000) ioctl$COMEDI_BUFCONFIG(r3, 0x8020640d, &(0x7f0000000000)={0x8000, 0x9c09, 0x7, 0x1000}) 2.370976393s ago: executing program 3 (id=1845): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x81) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000080)={0x7, 0x1000, 0x7, {0x7ff, 0x4}, 0x2, 0xff}) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000140)="7b3ff5898274a62148cca768b50b721024a025355567c9788d2213a947477fdd25f9de31e54b79efeff19caeed01345d740f46dd9d12ea784082521d", 0x3c}], 0x1, 0x9, 0x4) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0x40405515, &(0x7f0000000140)) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) 2.24246229s ago: executing program 6 (id=1846): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x401}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@empty}]}, 0x104}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000300)=0x3, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x48, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000085}, 0x810) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000540)="ea001800000200c744240062000000c744240200500000c7442406000000000f011c240f926e0f0f01c92ff22edbeef3a50f09ec660f3a09df9f", 0x3a}], 0x1, 0x80, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c0000000a0a050000000000000000000a000009090001007381a131000000000900020073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x4c, 0x9e, 0x58, 0x10, 0x545, 0x8080, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x2, 0x0, 0x0, 0x5c, 0xf, 0x46}}]}}]}}, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r7, 0x7dfff000) 1.984995294s ago: executing program 3 (id=1847): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r4, r1) setresgid(0xffffffffffffffff, 0x0, r3) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, 0x0) 1.717136476s ago: executing program 3 (id=1848): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000000040)="363c8f3fca5d66571e583e7c88a8", 0x112e, 0x0, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$packet(r0, &(0x7f0000000040)="363c8f3fca5d66571e583e7c88a8", 0x112e, 0x0, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f00000014c0)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010038bd7000fddbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) (async) close(r6) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, r3, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dfdc984759"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x40010) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40e00, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x40e00, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r9, 0x201, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x82}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x4040014) (async) sendmsg$NL80211_CMD_SET_STATION(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x34, r9, 0x201, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x82}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000011}, 0x4040014) 1.470545012s ago: executing program 3 (id=1849): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x13, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7f, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB='@0Y'], 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000400)={0x40, 0x17, 0x8, "ce5cf2d3677b5522"}, 0x0, &(0x7f0000000500)={0x0, 0x8, 0x1, 0xff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0xf9}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x8}}) r1 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x1) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect$uac1(0x2, 0xa4, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x56, 0xc0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x101, 0xbb}, [@selector_unit={0x5, 0x24, 0x5, 0xb, 0xf}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x5, 0x1, [0x2], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x93, 0x1, 0x9, {0x7, 0x25, 0x1, 0x0, 0x3, 0xf48}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8, 0x3, 0xc, 0x40}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xf8, 0x4, 0x66, 0x7, "8fbd", "05a4"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0xaf87, 0xfff6, 0xa2, "2847193dd49e5630"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xd, 0x2, 0xa, {0x7, 0x25, 0x1, 0x91e8570469aa5526, 0x8, 0x3}}}}}}}]}}, 0x0) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000100)={0x2, r4}) (async) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) mount(&(0x7f0000000200)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x284010, 0x0) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000280)) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}}, 0x4010) (async) read(r5, &(0x7f00000000c0)=""/243, 0xf3) 1.31794165s ago: executing program 1 (id=1850): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x100, 0x70bd25, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x434, 0x3f3, 0x100, 0x70bd2c, 0x25dfdbfc, {0x0, 0x3, 0x5, [0xcb, 0x1ff, 0x200, 0xa, 0xa, 0x7, 0x4, 0x9, 0x2, 0x0, 0x1020000, 0x6, 0x3, 0xf, 0x7, 0x3, 0x4, 0x5, 0x200, 0x2, 0x2, 0x7, 0x200, 0x8, 0x4, 0x1, 0x2, 0x8, 0x6, 0x3, 0x2, 0x100, 0x8, 0x101, 0x8, 0x4, 0x945, 0xffffffff, 0x40000000, 0x5, 0x6, 0xe4, 0x6, 0xd, 0x9, 0x3, 0x4, 0xd296, 0x2, 0xa, 0x5f, 0x0, 0x400, 0x8, 0x200, 0x0, 0x1, 0x72, 0x6, 0x2, 0x5, 0x14, 0x7, 0x67800000], [0x7ff, 0x0, 0x54a032dc, 0x6, 0xc9ea, 0x2, 0x100, 0x2, 0x2, 0x9, 0x6, 0x9, 0xec40, 0x2, 0xffffffff, 0xfffffff7, 0x1ae60, 0x3, 0x4, 0x8, 0x0, 0x2, 0x400, 0x3, 0x0, 0x8, 0x6, 0x8, 0x4, 0x80000001, 0x5a5, 0x2, 0x8000, 0x6, 0x6, 0x400, 0xe94a, 0xa, 0x1, 0x9, 0xfff, 0x3, 0x9, 0xffffbbbc, 0x5fa5cebe, 0x5, 0xa, 0x9, 0x8, 0x0, 0x1, 0x0, 0x1, 0x3, 0x8, 0x7, 0x9b, 0x4, 0x1000, 0x9, 0x5, 0xffffff7f, 0x800, 0xd02], [0x8, 0x8, 0x4, 0x2, 0x3, 0x67f8, 0x838, 0x0, 0x5, 0x80, 0x1000, 0x400, 0x8, 0x4, 0x0, 0x9, 0x6, 0x4, 0x5, 0x8, 0x6, 0xc6f, 0x8, 0x0, 0x0, 0x1, 0x0, 0x10001, 0x28, 0x40, 0x973e, 0x8000, 0x2, 0x6, 0x5e8c, 0xf53, 0x2c8d, 0x7, 0xa4d, 0x285, 0x5, 0xfd2, 0x3, 0x7778, 0x0, 0x8, 0xe, 0x7c, 0xd, 0xf, 0x4, 0x7ff, 0x4, 0xf0, 0x1, 0x5, 0x10000, 0x9, 0xffffffc0, 0x9, 0x80000000, 0x401, 0x6, 0xe4], [0x7fffffff, 0x3, 0x7fff, 0x4, 0x101, 0x0, 0x5, 0x401, 0x4, 0x200, 0x5, 0x2, 0x2, 0x7f, 0x80000000, 0x7, 0x7, 0x9, 0x4, 0x1ff, 0x10001, 0x8, 0x6, 0x1, 0x6, 0x8, 0x80000000, 0x7f, 0x3, 0x9, 0x0, 0xb69, 0x401, 0x6, 0x10000, 0x400, 0x7, 0x6, 0x80000001, 0x8001, 0x7d, 0x0, 0x8, 0x7, 0x7fff, 0x4, 0x3ff, 0x7, 0x0, 0x7, 0x7, 0x29, 0x7, 0xd, 0x10001, 0x4, 0xb, 0x0, 0x99, 0x3, 0x3, 0x1, 0x693, 0x2], 0x13, ['}@\x00', '{\x00', '\x00', '@(]\x00', '@.\\@-/%.\x00']}, ["", "", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x804}, 0x4000010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'syztnl1\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x20, 0x20, 0x7, 0x7, {{0x12, 0x4, 0x1, 0x2, 0x48, 0x67, 0x0, 0x39, 0x29, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x11}, {[@timestamp={0x44, 0xc, 0x2e, 0x0, 0x5, [0x101, 0x7]}, @rr={0x7, 0x23, 0xa8, [@empty, @private=0xa010101, @broadcast, @empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @remote]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'syztnl1\x00', &(0x7f0000000740)={'syztnl0\x00', 0x0, 0x0, 0x3, 0x4b, 0x3, 0x20, @dev={0xfe, 0x80, '\x00', 0x29}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa569598cf887f872, 0x7, 0x2, 0x1}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000ac0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000800)={0x280, r2, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0x264, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x9, 0x4, 0xf7, 0x1}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffb}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x78}}, {0x8}}}]}}]}, 0x280}, 0x1, 0x0, 0x0, 0x4001}, 0x2000c040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b40)={0x9c, 0x0, 0x9, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x48, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @NFCTH_TUPLE={0x28, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x9c}}, 0x4040000) bind$netlink(r5, &(0x7f0000000c80)={0x10, 0x0, 0x25dfdbfc, 0x200000}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r6, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080001}, 0x40000) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000ec0)={'syztnl0\x00', &(0x7f0000000e40)={'ip6_vti0\x00', r4, 0x2f, 0x0, 0x3, 0xb, 0x60, @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x700, 0x78c0, 0x7dea, 0x1}}) sendto(0xffffffffffffffff, &(0x7f0000000f00)="88825ad425ad004e113082bf90380300498177b82b46a9a7dea057b803e211fff5e29a8250368c522e9bc83f60f1b71fb8eb643ffdd55a541751105510f004702b37882db6440a7ede0c", 0x4a, 0x4000000, &(0x7f0000000f80)=@qipcrtr={0x2a, 0x0, 0x1}, 0x80) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r9, 0x8982, &(0x7f0000001000)={0x0, 'bridge_slave_1\x00', {0x3}, 0xecb8}) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001040)='./file0\x00', &(0x7f0000001080)={0x129100}, 0x18) getdents(r10, &(0x7f00000010c0)=""/226, 0xe2) r11 = socket$netlink(0x10, 0x3, 0x4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000001, 0x2010, 0xffffffffffffffff, 0x8000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r11) geteuid() r12 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r12, 0x84, 0x4, &(0x7f0000001200), &(0x7f0000001240)=0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x44, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x14}}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) add_key$user(&(0x7f00000013c0), &(0x7f0000001400)={'syz', 0x1}, &(0x7f0000001440)="4d49718f95369e2c5f4ae46904e1b9523dbbf41ef017313b1bff", 0x1a, 0xfffffffffffffff9) 975.096893ms ago: executing program 6 (id=1851): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000004784010000000000000000000700000a"], 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401010000000008000000000004000500010001"], 0x1c}}, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r3, &(0x7f00000000c0), 0x10) sendto$l2tp(r3, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r3, 0x0, 0x0, 0x40004000, &(0x7f0000000400)={0x2, 0x0, @initdev}, 0x10) close(0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = epoll_create1(0x0) epoll_pwait(r5, &(0x7f0000000000)=[{}], 0x1, 0x240000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r1, 0x2000) 626.462793ms ago: executing program 1 (id=1852): capset(&(0x7f0000001680)={0x20071026}, &(0x7f0000000180)={0x7, 0x7, 0x7, 0x10001, 0xf}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000ff9000/0x4000)=nil) setpgid(0x0, 0xffffffffffffffff) 534.794227ms ago: executing program 1 (id=1853): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz0\x00', {0x3, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x5, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x7ff, 0x0, 0x8, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x8, 0x1, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x40000005, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x23], [0x1, 0x9, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x8, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xd, 0x10, 0x2, 0x9, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x3, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x10000, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c13, 0x5, 0x1, 0x7, 0x3, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x1, 0x9, 0xc3, 0x7751c64, 0x7a3], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x6, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x7, 0xffff, 0xd, 0x0, 0xffffff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x3, 0x20000000, 0x8, 0x1d, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0xa0, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="9fc7dd11321b3f9738f9fcdc0e447958", 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xf3, 0x1b1c07, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc}) creat(&(0x7f0000000080)='./file0\x00', 0x2) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) (async) write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz0\x00', {0x3, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x5, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x7ff, 0x0, 0x8, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x8, 0x1, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x40000005, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x23], [0x1, 0x9, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x8, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xd, 0x10, 0x2, 0x9, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x3, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x10000, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c13, 0x5, 0x1, 0x7, 0x3, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x1, 0x9, 0xc3, 0x7751c64, 0x7a3], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x6, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x7, 0xffff, 0xd, 0x0, 0xffffff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x3, 0x20000000, 0x8, 0x1d, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0xa0, 0x8]}, 0x45c) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) (async) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="9fc7dd11321b3f9738f9fcdc0e447958", 0x10) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xf3, 0x1b1c07, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc}) (async) creat(&(0x7f0000000080)='./file0\x00', 0x2) (async) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) (async) 414.285512ms ago: executing program 3 (id=1854): openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054010b805001"], 0x184}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, 0x0, 0x0) close(0x3) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns\x00') ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af03, &(0x7f00000001c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="02009e1aff3b850800000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000014421079110f5dff4e4c1daa14cbbd4be1a7c8ccd143fe97c62e008f061d6faa7ac442ee8a1d10797a8977146a5ba0ab24838870dcf5029365739320b66dc8b33cea5937d2a16ec55e9ea8c87743c2fc838f1e0cbd35ce1ccf7a3532a6cb7adc7bff6ed043832c449dc082feb7d5e225324d612c3ec55065c797bcea738b4f5572fac8a360200d33c58e3d5064cb06326284bc17a9af867853f7dcd187"], 0x90) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x2, 0x5, 0x0) sendmmsg$inet(r8, &(0x7f0000000200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000003c0)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000480)={r10, 0x9}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="430000003d4f696e5de4be8304068631d35b18dce2ed5dde7f817ab839df36e1c0bb873c4feb164cc3edd838849bf622203e96c72172c9231890", @ANYRES16=r5, @ANYBLOB="0108fd030000000000000b00000008000300", @ANYRES32=r11, @ANYBLOB="1c006e8004000100100002000000020004000200040001000400020009000700c69502a7710000000a000600080211000001000008003700020000000500080003000000"], 0x60}}, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r13 = accept4(r12, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r13, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) 238.584268ms ago: executing program 1 (id=1855): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r4, r1) setresgid(0xffffffffffffffff, 0x0, r3) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, 0x0) 0s ago: executing program 1 (id=1856): ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000040)) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040810}, 0x800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, r2, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xa, 0x77}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000090}, 0x20000004) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x110, r1, 0x110, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x82}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1c0}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}]}, 0x110}, 0x1, 0x0, 0x0, 0x4010}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, r4, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x8001) write$binfmt_misc(r0, &(0x7f0000000700)="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", 0xfc) r6 = dup3(r3, r3, 0x80000) r7 = open_tree(0xffffffffffffffff, &(0x7f0000000800)='./file0\x00', 0x81101) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x48, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xd, 0x78}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}]]}, 0x48}, 0x1, 0x0, 0x0, 0x4044}, 0x20000090) gettid() ioctl$TUNGETVNETBE(r7, 0x800454df, &(0x7f0000000980)=0x1) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f00000009c0)={0x7, 0x1b, 0x1}, 0x7) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r7, 0x8982, &(0x7f0000000a00)={0x0, 'ipvlan1\x00', {0x1}, 0x4}) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, r1, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000100}, 0x40000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000b80)={0x0, 0x1b, "87a5505a4706ae4b73011c3b417e0d352156c8d1033183e2daff09"}, &(0x7f0000000bc0)=0x23) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000c00)={r8, @in6={{0xa, 0x4e22, 0xed9, @rand_addr=' \x01\x00', 0x9}}, 0x6, 0x9}, &(0x7f0000000cc0)=0x90) pselect6(0x40, &(0x7f0000000d00)={0x2, 0x6, 0x2, 0x2, 0x1, 0x1, 0x3, 0x3}, &(0x7f0000000d40)={0x100000001, 0x8, 0xfffffffffffffffd, 0x6, 0x200, 0x5, 0x826, 0xd9a}, &(0x7f0000000d80)={0x5, 0x1, 0x6, 0x2, 0x1, 0x4, 0x3, 0x6}, &(0x7f0000000dc0)={0x77359400}, &(0x7f0000000e40)={&(0x7f0000000e00)={[0x8]}, 0x8}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000e80)={r9, 0x800, 0x1, 0x357, 0x1, 0xffff}, &(0x7f0000000ec0)=0x14) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000f00)=@sack_info={r10, 0x7ff, 0x7}, &(0x7f0000000f40)=0xc) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000f80)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r7, 0x3b8d, &(0x7f0000001040)={0x20, r11, &(0x7f0000001000)=[{0x0, 0x1}, {0x0, 0x3}], 0xdeadbeef, 0x8, 0x2}) pipe2(&(0x7f0000001080), 0x800) write$binfmt_misc(r7, &(0x7f00000010c0)="43942eea82c298e5c52a8ee2f17f0455e8e80d15d93946c9ce2ac76a7d73473318f4209bd028ce5c72ac535efcf6f38f7346671fd183902d93844652e8", 0x3d) accept$alg(r6, 0x0, 0x0) kernel console output (not intermixed with test programs): -1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 227.848063][ T7085] usb 5-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.861325][ T7085] usb 5-1: config 1 interface 0 has no altsetting 0 [ 227.871131][ T7085] usb 5-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.40 [ 227.880637][ T7085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.889994][ T7085] usb 5-1: Product: ъ╢┐р╗дтИ╛сСЙш│зъЗ╖ф╣ЧыЕ░у╕▓ънмуТСюЦЗтДбф┐ЖяЪ╣чагыНЯч╡Кснас┐ГфСЖр╖исЪлре▒х╝аъаИфдЩсДЕц║╢сЦохЩ┤швлс┤зщЧ┤юТОх┐░ъвРшаПфЕор╡╝ъЯЦыЧЯшЫ╡шл╖ю│йщБкхмЧъ╡╗хппуб░юаГщ│ошЩЧы│жшЖ╣ъЦГъЕньзЛчЧ╗тнЪъзДр│ЖшЫичЭЙсжФу╢ФхлВтомщМФцФзщРЩцаИщОлъ┐жюИРэПЮюдУцЭПщ░гыЛГуМмц╣УхХ╢ю┐Зю╖▓╚Жыйбц┐ЧшЪ▓тнЧсЙИщЯЭывЫщапчМ┐щУИьИПфЬП [ 227.919416][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.925833][ T7085] usb 5-1: Manufacturer: эЖГхл╖щжкчФйхЮ░уИЗсЭАцаиф╕еуж╢ь░ЬщАйс╣╝ьлЮч┐ЩудБюЧ╣р╢Ъъ╕ашбзх┐╖сХЧыЦа╒бцБЧхАЗтг╡ыеР├Лш╡Жъ▒ЙэУ╗ш╕еяйХьВ╖цж╣юЙТюКОх╝гьРмэУ╗юЙНхСДхФЭч╝а [ 227.942593][ T7085] usb 5-1: SerialNumber: уРБ [ 227.950897][ T9746] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 227.958511][ T9746] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 228.304873][ T9753] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 228.371947][ T9746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.382596][ T9746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.402240][ T7085] usbhid 5-1:1.0: can't add hid device: -71 [ 228.408631][ T7085] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 228.422911][ T7085] usb 5-1: USB disconnect, device number 19 [ 229.339166][ T9781] overlay: Unknown parameter 'dont_hash' [ 229.379228][ T9787] fuse: Bad value for 'group_id' [ 229.384199][ T9787] fuse: Bad value for 'group_id' [ 229.417044][ T1096] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xfa [ 229.605098][ T10] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 229.757292][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 229.764129][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.775398][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.785447][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 229.798419][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 229.807549][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.819246][ T10] usb 2-1: config 0 descriptor?? [ 230.125233][ T9799] ptrace attach of "./syz-executor exec"[5849] was attempted by "╔Ї╘УА7чE\x09┼╗ хомЫЄ╛сP╒"[9799] [ 230.238158][ T10] hid_parser_main: 4 callbacks suppressed [ 230.238179][ T10] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 230.269880][ T10] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 230.286191][ T10] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 230.303657][ T10] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 230.335740][ T10] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 230.408373][ T10] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 230.436832][ T10] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 230.464688][ T10] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 230.482469][ T10] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 230.508140][ T10] microsoft 0003:045E:07DA.0010: unknown main item tag 0x0 [ 230.586396][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0010/input/input16 [ 230.744321][ T10] microsoft 0003:045E:07DA.0010: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 230.811420][ T10] usb 2-1: USB disconnect, device number 57 [ 230.908634][ T9819] fido_id[9819]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 231.056925][ T9827] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 231.085216][ T9825] comedi comedi1: dt2817: I/O port conflict (0x3,5) [ 231.269706][ T9835] kvm: pic: level sensitive irq not supported [ 231.270034][ T9835] kvm: pic: non byte read [ 231.284321][ T9835] kvm: pic: level sensitive irq not supported [ 231.284383][ T9835] kvm: pic: non byte read [ 231.299532][ T9835] kvm: pic: level sensitive irq not supported [ 231.299593][ T9835] kvm: pic: non byte read [ 231.310929][ T9835] kvm: pic: level sensitive irq not supported [ 231.310989][ T9835] kvm: pic: non byte read [ 231.321896][ T9838] syz_tun: entered allmulticast mode [ 231.415381][ T7089] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 231.528720][ T9834] syz_tun: left allmulticast mode [ 231.579017][ T7089] usb 2-1: Using ep0 maxpacket: 32 [ 231.580859][ T7089] usb 2-1: config 1 interface 0 altsetting 143 bulk endpoint 0x1 has invalid maxpacket 383 [ 231.580888][ T7089] usb 2-1: config 1 interface 0 altsetting 143 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 231.580914][ T7089] usb 2-1: config 1 interface 0 has no altsetting 0 [ 231.583075][ T7089] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 231.583099][ T7089] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.583117][ T7089] usb 2-1: Product: syz [ 231.583131][ T7089] usb 2-1: Manufacturer: syz [ 231.583145][ T7089] usb 2-1: SerialNumber: syz [ 231.606616][ T9829] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 231.833744][ T7089] usb 2-1: USB disconnect, device number 58 [ 232.002113][ T9857] 9p: Unknown uid 00000000004294967295 [ 232.019832][ T5851] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 232.245456][ T9862] fuse: Bad value for 'group_id' [ 232.261490][ T9862] fuse: Bad value for 'group_id' [ 232.425063][ T7091] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 232.556093][ T7091] usb 5-1: device descriptor read/64, error -71 [ 232.795096][ T7091] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 232.885069][ T7085] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 232.935148][ T7091] usb 5-1: device descriptor read/64, error -71 [ 233.039206][ T7085] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 233.048947][ T7091] usb usb5-port1: attempt power cycle [ 233.054453][ T7085] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.064063][ T7085] usb 2-1: Product: syz [ 233.068988][ T7085] usb 2-1: Manufacturer: syz [ 233.073619][ T7085] usb 2-1: SerialNumber: syz [ 233.081646][ T7085] usb 2-1: config 0 descriptor?? [ 233.395256][ T7091] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 233.416538][ T7091] usb 5-1: device descriptor read/8, error -71 [ 233.561492][ T7085] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 233.593206][ T7085] asix 2-1:0.0: probe with driver asix failed with error -71 [ 233.614653][ T7085] usb 2-1: USB disconnect, device number 59 [ 233.675087][ T7091] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 233.704403][ T9886] /dev/rnullb0: Can't open blockdev [ 233.719294][ T7091] usb 5-1: device descriptor read/8, error -71 [ 233.766430][ T9888] netlink: 'syz.6.965': attribute type 4 has an invalid length. [ 233.786343][ T9888] netlink: 17 bytes leftover after parsing attributes in process `syz.6.965'. [ 233.831109][ T9893] afs: Unknown parameter 'dynp' [ 233.865453][ T7091] usb usb5-port1: unable to enumerate USB device [ 234.017069][ T9899] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 234.031378][ T9900] netlink: 16 bytes leftover after parsing attributes in process `syz.1.969'. [ 234.043334][ T9901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.969'. [ 234.435117][ T10] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 234.605099][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 234.613862][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 234.623073][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.631128][ T10] usb 2-1: Product: syz [ 234.635522][ T10] usb 2-1: Manufacturer: syz [ 234.640117][ T10] usb 2-1: SerialNumber: syz [ 234.648469][ T10] usb 2-1: config 0 descriptor?? [ 234.659046][ T10] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 234.856194][ T10] gspca_sn9c2028: read1 error -32 [ 234.861880][ T10] gspca_sn9c2028: read1 error -32 [ 235.068899][ T9905] /dev/rnullb0: Can't open blockdev [ 235.104347][ T10] usb 2-1: USB disconnect, device number 60 [ 235.298449][ T9922] /dev/rnullb0: Can't open blockdev [ 235.312480][ T9922] netlink: 52 bytes leftover after parsing attributes in process `syz.4.977'. [ 235.332852][ T9922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.977'. [ 235.649274][ T9939] /dev/rnullb0: Can't open blockdev [ 235.762032][ T30] audit: type=1800 audit(1752589147.427:12): pid=9943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.981" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 236.451151][ T7091] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 236.569003][ T9976] 9pnet_fd: Insufficient options for proto=fd [ 236.577140][ T9977] /dev/rnullb0: Can't open blockdev [ 236.634096][ T7091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 236.655698][ T7091] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 236.671093][ T7091] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 236.701331][ T9982] net_ratelimit: 76 callbacks suppressed [ 236.701355][ T9982] netlink: ct family unspecified [ 236.707010][ T7091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 236.707035][ T7091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.707052][ T7091] usb 2-1: Product: syz [ 236.707065][ T7091] usb 2-1: Manufacturer: syz [ 236.707077][ T7091] usb 2-1: SerialNumber: syz [ 236.728161][ T7091] hub 2-1:1.0: bad descriptor, ignoring hub [ 236.734838][ T9982] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.745040][ T7091] hub 2-1:1.0: probe with driver hub failed with error -5 [ 236.991029][ T9995] /dev/rnullb0: Can't open blockdev [ 237.010205][ T7091] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 237.549206][ T5912] usb 2-1: USB disconnect, device number 61 [ 237.585661][ T5912] usblp0: removed [ 237.625282][ T7091] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 237.814863][ T7091] usb 5-1: not running at top speed; connect to a high speed hub [ 237.841628][ T7091] usb 5-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 237.861032][ T7091] usb 5-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 237.875693][ T7091] usb 5-1: config 1 interface 0 has no altsetting 0 [ 237.890323][ T7091] usb 5-1: New USB device found, idVendor=05ac, idProduct=0220, bcdDevice= 0.40 [ 237.905139][ T7091] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.929521][ T7091] usb 5-1: Product: щЩЧтО┐юЯ░ъгЫэЗ╝ю▓╢чВ┤чоЕтА║тгУфЙФу┐лсБ░шн╝ъФ▒ъЩйшЫкыа│щООт┐ищ╝лувЗуагрйШы╢РшвИьЫ╕щбОъЧНс║Зт│ор╡Кы║Рщ╗▓ьЮЪы╡кяЩ╕╫╛фА│фЛХъТ┐█аяЩЬшЬЙхУЙсаСцЗжя┐│шЖкчаЙь╜╖цжбыА╝фи║▐ЕщЩ░яФЦъЦишГ╡ш╕Эцнач║╢хНОыСНшбПсоея║ДщМ║ю╕▒яП╣ъй╖я╗иъЧ┤шДду╗Эч╣БщФ╡эР┤яДЫуоРьЕТыМЭшХлывЭхЛ╣яЛкц║░ч╣╕тЫВюДЦяЛ░ьЗЫщеЭягВынИь┤ИыЙ╝яаСр░ЙузЦыв▒щ▒ЭъКГчАПымнщ╛зыЭШюА│щ│РъомюЖСцЬ┐эРЖщкТцЖЙювЗсежяжню╝┐ыЛ╛ьмм [ 237.969370][ T7091] usb 5-1: Manufacturer: щдЦт╗▒ьЧпыОишИ╝р┐ИтлР┼░ф║всп▒сВощЧмшУЖцпЦчШЙы▒Тюи╣уд▒р╕ЗуФкфбаыНещТ╣ъМ┐ъХ▓хХЯчмДрг▓хРЯыйГф│ЩэИгjьбЦъ╝РэЫ╝хегтШПуоУюПЮуЛЭх╛их╢ГшЮ║ямМсИеь▓НэЭ▒чКдр│кьйняХЖ [ 237.993885][ T7091] usb 5-1: SerialNumber: ч╡лэСЩщзЬьиЪцИмшДИшЕЦсФЮыпиьвеюдЖт╗Эя▒ЦьГНше┤хЗ▓ьнйя╢╛чЮЙkрнзыФйяХЕъВечПОъЬЫт┤Щц░╜ф░╗хСЗсжДщЯЫсйЛюидшгп [ 238.039752][T10012] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 238.055594][T10029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.995'. [ 238.082034][T10032] /dev/rnullb0: Can't open blockdev [ 238.280710][ T7091] usbhid 5-1:1.0: can't add hid device: -71 [ 238.295267][ T7091] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 238.333378][ T7091] usb 5-1: USB disconnect, device number 24 [ 238.536223][T10046] /dev/rnullb0: Can't open blockdev [ 239.202272][T10066] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1001'. [ 239.275833][ T7091] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 239.321490][T10069] /dev/rnullb0: Can't open blockdev [ 239.353105][T10070] /dev/rnullb0: Can't open blockdev [ 239.485341][ T7091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.513570][ T7091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.533868][ T7091] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 239.564213][ T7091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.617131][ T7091] usb 5-1: config 0 descriptor?? [ 240.157720][T10095] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1006'. [ 240.180372][T10095] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1006'. [ 240.180545][T10095] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1006'. [ 240.180706][T10095] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1006'. [ 240.180858][T10095] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1006'. [ 240.181017][T10095] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1006'. [ 240.181190][T10095] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1006'. [ 240.181349][T10095] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1006'. [ 240.181504][T10095] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1006'. [ 241.022167][T10029] syz.1.995 (10029): drop_caches: 1 [ 241.183558][T10129] /dev/rnullb0: Can't open blockdev [ 241.194486][T10129] /dev/rnullb0: Can't open blockdev [ 241.358164][T10136] /dev/rnullb0: Can't open blockdev [ 241.370564][T10136] /dev/rnullb0: Can't open blockdev [ 241.379450][T10136] /dev/rnullb0: Can't open blockdev [ 241.399501][T10136] /dev/rnullb0: Can't open blockdev [ 241.452560][T10136] /dev/rnullb0: Can't open blockdev [ 241.478382][T10136] /dev/rnullb0: Can't open blockdev [ 241.497949][T10136] /dev/rnullb0: Can't open blockdev [ 241.516877][T10136] /dev/rnullb0: Can't open blockdev [ 241.536656][T10136] /dev/rnullb0: Can't open blockdev [ 241.546277][T10136] /dev/rnullb0: Can't open blockdev [ 241.552520][T10136] /dev/rnullb0: Can't open blockdev [ 241.592154][T10136] /dev/rnullb0: Can't open blockdev [ 241.612939][T10136] /dev/rnullb0: Can't open blockdev [ 241.637585][T10136] /dev/rnullb0: Can't open blockdev [ 241.639923][T10136] /dev/rnullb0: Can't open blockdev [ 241.643082][T10136] /dev/rnullb0: Can't open blockdev [ 241.644675][T10136] /dev/rnullb0: Can't open blockdev [ 241.649569][T10136] /dev/rnullb0: Can't open blockdev [ 241.652965][T10136] /dev/rnullb0: Can't open blockdev [ 241.659089][T10136] /dev/rnullb0: Can't open blockdev [ 241.697881][T10136] /dev/rnullb0: Can't open blockdev [ 241.698944][T10136] /dev/rnullb0: Can't open blockdev [ 241.699926][T10136] /dev/rnullb0: Can't open blockdev [ 241.700897][T10136] /dev/rnullb0: Can't open blockdev [ 241.701955][T10136] /dev/rnullb0: Can't open blockdev [ 241.722417][T10149] fuse: Bad value for 'fd' [ 241.724797][T10136] /dev/rnullb0: Can't open blockdev [ 241.726298][T10136] /dev/rnullb0: Can't open blockdev [ 241.727385][T10136] /dev/rnullb0: Can't open blockdev [ 241.728393][T10136] /dev/rnullb0: Can't open blockdev [ 241.729447][T10136] /dev/rnullb0: Can't open blockdev [ 241.731171][T10136] /dev/rnullb0: Can't open blockdev [ 241.732164][T10136] /dev/rnullb0: Can't open blockdev [ 241.733114][T10136] /dev/rnullb0: Can't open blockdev [ 241.752042][T10136] /dev/rnullb0: Can't open blockdev [ 241.753095][T10136] /dev/rnullb0: Can't open blockdev [ 241.754085][T10136] /dev/rnullb0: Can't open blockdev [ 241.756518][ T30] audit: type=1326 audit(1752589153.417:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.6.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f436678e929 code=0x7fc00000 [ 241.756668][T10136] /dev/rnullb0: Can't open blockdev [ 241.758929][T10136] /dev/rnullb0: Can't open blockdev [ 241.759783][T10136] /dev/rnullb0: Can't open blockdev [ 241.760748][T10136] /dev/rnullb0: Can't open blockdev [ 241.761701][T10136] /dev/rnullb0: Can't open blockdev [ 241.762684][T10136] /dev/rnullb0: Can't open blockdev [ 241.766916][T10136] /dev/rnullb0: Can't open blockdev [ 241.771253][T10136] /dev/rnullb0: Can't open blockdev [ 241.774401][T10136] /dev/rnullb0: Can't open blockdev [ 241.775882][T10136] /dev/rnullb0: Can't open blockdev [ 241.777970][T10136] /dev/rnullb0: Can't open blockdev [ 241.780727][T10136] /dev/rnullb0: Can't open blockdev [ 241.781788][T10136] /dev/rnullb0: Can't open blockdev [ 241.782752][T10136] /dev/rnullb0: Can't open blockdev [ 241.783700][T10136] /dev/rnullb0: Can't open blockdev [ 241.784661][T10136] /dev/rnullb0: Can't open blockdev [ 241.798413][T10136] /dev/rnullb0: Can't open blockdev [ 241.799465][T10136] /dev/rnullb0: Can't open blockdev [ 241.800392][T10136] /dev/rnullb0: Can't open blockdev [ 241.801441][T10136] /dev/rnullb0: Can't open blockdev [ 241.802396][T10136] /dev/rnullb0: Can't open blockdev [ 241.803373][T10136] /dev/rnullb0: Can't open blockdev [ 241.804353][T10136] /dev/rnullb0: Can't open blockdev [ 241.807578][T10136] /dev/rnullb0: Can't open blockdev [ 241.808629][T10136] /dev/rnullb0: Can't open blockdev [ 241.810087][T10136] /dev/rnullb0: Can't open blockdev [ 241.810951][T10136] /dev/rnullb0: Can't open blockdev [ 241.834809][T10136] /dev/rnullb0: Can't open blockdev [ 242.066165][T10136] /dev/rnullb0: Can't open blockdev [ 242.172184][ T7091] usbhid 5-1:0.0: can't add hid device: -71 [ 242.198989][ T7091] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 242.240612][ T7091] usb 5-1: USB disconnect, device number 25 [ 242.578630][ T7091] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 243.144076][ T7091] usb 5-1: Using ep0 maxpacket: 16 [ 243.158574][ T7091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.191999][ T7091] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.207132][ T7091] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 243.275663][ T7091] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.299773][ T7091] usb 5-1: config 0 descriptor?? [ 243.521686][T10211] /dev/rnullb0: Can't open blockdev [ 243.746304][ T7091] kye 0003:0458:5016.0011: control desc unexpectedly large [ 243.749856][T10219] /dev/rnullb0: Can't open blockdev [ 243.769971][ T7091] kye 0003:0458:5016.0011: control desc unexpectedly large [ 243.788645][ T7091] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0011/input/input17 [ 243.816273][T10220] /dev/rnullb0: Can't open blockdev [ 243.839574][ T7091] kye 0003:0458:5016.0011: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 243.960406][T10160] /dev/rnullb0: Can't open blockdev [ 243.976407][T10160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.991756][T10160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.042294][ T5999] usb 5-1: USB disconnect, device number 26 [ 244.065705][ T5912] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 244.178588][T10221] fido_id[10221]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 244.239318][ T5912] usb 2-1: config 16 has an invalid interface number: 7 but max is 0 [ 244.268460][ T5912] usb 2-1: config 16 has no interface number 0 [ 244.282528][ T5912] usb 2-1: config 16 interface 7 has no altsetting 0 [ 244.306096][ T5912] usb 2-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=e1.e1 [ 244.326418][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.343405][ T5912] usb 2-1: Product: syz [ 244.359687][ T5912] usb 2-1: Manufacturer: syz [ 244.364414][ T5912] usb 2-1: SerialNumber: syz [ 244.426585][T10238] (syz.4.1036,10238,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 244.528821][T10243] /dev/rnullb0: Can't open blockdev [ 244.692101][T10247] /dev/rnullb0: Can't open blockdev [ 245.605008][T10246] comedi comedi3: reset error (fatal) [ 246.179692][T10257] __nla_validate_parse: 57 callbacks suppressed [ 246.179710][T10257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1042'. [ 246.325661][T10259] /dev/rnullb0: Can't open blockdev [ 246.542853][T10264] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1045'. [ 246.762060][ T5912] gspca_main: touptek-2.14.0 probing 0547:6801 [ 246.800023][T10273] tmpfs: Bad value for 'mpol' [ 246.823609][ T5912] usb 2-1: USB disconnect, device number 62 [ 247.055178][ T1213] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 247.205055][ T1213] usb 5-1: Using ep0 maxpacket: 16 [ 247.212306][ T1213] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 247.221607][ T1213] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 247.231805][ T1213] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 247.242406][ T1213] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 247.252395][ T1213] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 247.262272][ T1213] usb 5-1: config 1 interface 0 has no altsetting 0 [ 247.268952][ T1213] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 247.278070][ T1213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.290732][ T1213] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 247.493369][ T1213] scsi host1: usb-storage 5-1:1.0 [ 247.699281][ T1213] usb 5-1: USB disconnect, device number 27 [ 248.010383][T10287] /dev/rnullb0: Can't open blockdev [ 248.018993][T10291] /dev/rnullb0: Can't open blockdev [ 248.185084][ T1213] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 248.246774][T10297] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1055'. [ 248.303713][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.310952][T10300] /dev/rnullb0: Can't open blockdev [ 248.317311][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.324676][T10300] /dev/rnullb0: Can't open blockdev [ 248.330700][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.336157][ T1213] usb 2-1: Invalid ep0 maxpacket: 32 [ 248.346675][T10300] /dev/rnullb0: Can't open blockdev [ 248.352216][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.359573][T10300] /dev/rnullb0: Can't open blockdev [ 248.367407][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.374382][T10300] /dev/rnullb0: Can't open blockdev [ 248.380199][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.387193][T10300] /dev/rnullb0: Can't open blockdev [ 248.392747][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.400037][T10300] /dev/rnullb0: Can't open blockdev [ 248.405714][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.412618][T10300] /dev/rnullb0: Can't open blockdev [ 248.419531][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.426865][T10300] /dev/rnullb0: Can't open blockdev [ 248.432441][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.439558][T10300] /dev/rnullb0: Can't open blockdev [ 248.446466][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.453418][T10300] /dev/rnullb0: Can't open blockdev [ 248.459171][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.466883][T10300] /dev/rnullb0: Can't open blockdev [ 248.473354][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.480277][ T1213] usb 2-1: new low-speed USB device number 64 using dummy_hcd [ 248.481099][T10300] /dev/rnullb0: Can't open blockdev [ 248.494555][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.502046][T10300] /dev/rnullb0: Can't open blockdev [ 248.508244][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.515625][T10300] /dev/rnullb0: Can't open blockdev [ 248.521220][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.528298][T10300] /dev/rnullb0: Can't open blockdev [ 248.533870][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.540933][T10300] /dev/rnullb0: Can't open blockdev [ 248.547062][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.554015][T10300] /dev/rnullb0: Can't open blockdev [ 248.560243][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.567595][T10300] /dev/rnullb0: Can't open blockdev [ 248.573749][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.581268][T10300] /dev/rnullb0: Can't open blockdev [ 248.587270][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.594207][T10300] /dev/rnullb0: Can't open blockdev [ 248.600947][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.608343][T10300] /dev/rnullb0: Can't open blockdev [ 248.613897][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.620960][T10300] /dev/rnullb0: Can't open blockdev [ 248.626921][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.633833][T10300] /dev/rnullb0: Can't open blockdev [ 248.635196][ T1213] usb 2-1: Invalid ep0 maxpacket: 32 [ 248.639614][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.648959][ T1213] usb usb2-port1: attempt power cycle [ 248.651668][T10300] /dev/rnullb0: Can't open blockdev [ 248.662264][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.674093][T10300] /dev/rnullb0: Can't open blockdev [ 248.680236][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.695452][T10300] /dev/rnullb0: Can't open blockdev [ 248.701178][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.709348][T10300] /dev/rnullb0: Can't open blockdev [ 248.717202][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.724276][T10300] /dev/rnullb0: Can't open blockdev [ 248.733237][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.740915][T10300] /dev/rnullb0: Can't open blockdev [ 248.747171][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.754327][T10300] /dev/rnullb0: Can't open blockdev [ 248.760794][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.769300][T10300] /dev/rnullb0: Can't open blockdev [ 248.776644][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.783809][T10300] /dev/rnullb0: Can't open blockdev [ 248.790197][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.797740][T10300] /dev/rnullb0: Can't open blockdev [ 248.803547][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.811303][T10300] /dev/rnullb0: Can't open blockdev [ 248.817852][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.825569][T10300] /dev/rnullb0: Can't open blockdev [ 248.831619][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.839347][T10300] /dev/rnullb0: Can't open blockdev [ 248.845813][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.852973][T10300] /dev/rnullb0: Can't open blockdev [ 248.859378][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.867075][T10300] /dev/rnullb0: Can't open blockdev [ 248.872998][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.881821][T10300] /dev/rnullb0: Can't open blockdev [ 248.888166][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.895801][T10300] /dev/rnullb0: Can't open blockdev [ 248.901661][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.911300][T10300] /dev/rnullb0: Can't open blockdev [ 248.918737][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.926564][T10300] /dev/rnullb0: Can't open blockdev [ 248.932777][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.940932][T10300] /dev/rnullb0: Can't open blockdev [ 248.948218][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.958514][T10300] /dev/rnullb0: Can't open blockdev [ 248.964232][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.974014][T10313] binder: 10312:10313 ioctl c018620b 200000000000 returned -14 [ 248.974780][T10300] /dev/rnullb0: Can't open blockdev [ 248.986632][T10313] binder: 10312:10313 ioctl c018620b 200000000000 returned -14 [ 248.992469][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.995418][ T1213] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 249.002259][T10300] /dev/rnullb0: Can't open blockdev [ 249.015885][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 249.022876][T10300] /dev/rnullb0: Can't open blockdev [ 249.033671][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 249.036056][ T1213] usb 2-1: Invalid ep0 maxpacket: 32 [ 249.043828][T10300] /dev/rnullb0: Can't open blockdev [ 249.055664][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 249.063174][T10300] /dev/rnullb0: Can't open blockdev [ 249.072148][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 249.080317][T10300] /dev/rnullb0: Can't open blockdev [ 249.090673][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 249.098752][T10300] /dev/rnullb0: Can't open blockdev [ 249.108970][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 249.117850][T10300] /dev/rnullb0: Can't open blockdev [ 249.123660][T10300] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 249.131241][T10300] /dev/rnullb0: Can't open blockdev [ 249.185472][ T1213] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 249.209887][ T1213] usb 2-1: Invalid ep0 maxpacket: 32 [ 249.224159][ T1213] usb usb2-port1: unable to enumerate USB device [ 249.715316][ T1213] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 249.866631][ T1213] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.879501][ T1213] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 249.888736][ T1213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.896823][ T1213] usb 5-1: Product: syz [ 249.900972][ T1213] usb 5-1: Manufacturer: syz [ 249.906893][ T1213] usb 5-1: SerialNumber: syz [ 249.913332][ T1213] usb 5-1: config 0 descriptor?? [ 250.123599][T10337] usb usb8: usbfs: process 10337 (syz.4.1068) did not claim interface 32 before use [ 250.138426][ T1213] usb 5-1: USB disconnect, device number 28 [ 250.707625][ T30] audit: type=1326 audit(1752589162.377:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10338 comm="syz.4.1069" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0d9638e929 code=0x0 [ 250.760883][T10341] /dev/rnullb0: Can't open blockdev [ 251.166081][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1073'. [ 251.180280][T10353] /dev/rnullb0: Can't open blockdev [ 251.473311][T10366] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 251.483881][T10366] /dev/rnullb0: Can't open blockdev [ 251.553525][T10370] /dev/rnullb0: Can't open blockdev [ 251.570895][T10370] /dev/rnullb0: Can't open blockdev [ 251.584779][T10370] /dev/rnullb0: Can't open blockdev [ 251.591161][T10370] /dev/rnullb0: Can't open blockdev [ 251.598208][T10370] /dev/rnullb0: Can't open blockdev [ 251.604492][T10370] /dev/rnullb0: Can't open blockdev [ 251.608307][T10372] /dev/rnullb0: Can't open blockdev [ 251.612158][T10370] /dev/rnullb0: Can't open blockdev [ 251.627849][T10370] /dev/rnullb0: Can't open blockdev [ 251.634183][T10370] /dev/rnullb0: Can't open blockdev [ 251.640620][T10370] /dev/rnullb0: Can't open blockdev [ 251.648699][T10370] /dev/rnullb0: Can't open blockdev [ 251.666546][T10370] /dev/rnullb0: Can't open blockdev [ 251.681512][T10370] /dev/rnullb0: Can't open blockdev [ 251.690135][T10370] /dev/rnullb0: Can't open blockdev [ 251.697816][T10370] /dev/rnullb0: Can't open blockdev [ 251.703648][T10374] binder: 10373:10374 ioctl c018620b 0 returned -14 [ 251.704059][T10370] /dev/rnullb0: Can't open blockdev [ 251.718452][T10370] /dev/rnullb0: Can't open blockdev [ 251.724719][T10370] /dev/rnullb0: Can't open blockdev [ 251.731542][T10370] /dev/rnullb0: Can't open blockdev [ 251.737909][T10370] /dev/rnullb0: Can't open blockdev [ 251.744173][T10370] /dev/rnullb0: Can't open blockdev [ 251.751692][T10370] /dev/rnullb0: Can't open blockdev [ 251.759024][T10370] /dev/rnullb0: Can't open blockdev [ 251.765817][T10370] /dev/rnullb0: Can't open blockdev [ 251.772117][T10370] /dev/rnullb0: Can't open blockdev [ 251.778692][T10370] /dev/rnullb0: Can't open blockdev [ 251.784804][T10370] /dev/rnullb0: Can't open blockdev [ 251.791274][T10370] /dev/rnullb0: Can't open blockdev [ 251.797721][T10370] /dev/rnullb0: Can't open blockdev [ 251.803563][T10370] /dev/rnullb0: Can't open blockdev [ 251.810212][T10370] /dev/rnullb0: Can't open blockdev [ 251.817484][T10370] /dev/rnullb0: Can't open blockdev [ 251.823374][T10370] /dev/rnullb0: Can't open blockdev [ 251.829637][T10370] /dev/rnullb0: Can't open blockdev [ 251.835889][T10370] /dev/rnullb0: Can't open blockdev [ 251.841796][T10370] /dev/rnullb0: Can't open blockdev [ 251.848810][T10370] /dev/rnullb0: Can't open blockdev [ 251.854665][T10370] /dev/rnullb0: Can't open blockdev [ 251.860865][T10370] /dev/rnullb0: Can't open blockdev [ 251.867156][T10370] /dev/rnullb0: Can't open blockdev [ 251.872986][T10370] /dev/rnullb0: Can't open blockdev [ 251.879920][T10370] /dev/rnullb0: Can't open blockdev [ 251.886832][T10370] /dev/rnullb0: Can't open blockdev [ 251.892671][T10370] /dev/rnullb0: Can't open blockdev [ 251.899090][T10370] /dev/rnullb0: Can't open blockdev [ 251.905347][T10370] /dev/rnullb0: Can't open blockdev [ 251.912016][T10370] /dev/rnullb0: Can't open blockdev [ 251.918713][T10370] /dev/rnullb0: Can't open blockdev [ 251.924602][T10370] /dev/rnullb0: Can't open blockdev [ 251.930896][T10370] /dev/rnullb0: Can't open blockdev [ 251.937301][T10370] /dev/rnullb0: Can't open blockdev [ 251.944434][T10370] /dev/rnullb0: Can't open blockdev [ 251.952640][T10370] /dev/rnullb0: Can't open blockdev [ 251.959051][T10370] /dev/rnullb0: Can't open blockdev [ 251.964992][T10370] /dev/rnullb0: Can't open blockdev [ 251.970780][T10370] /dev/rnullb0: Can't open blockdev [ 251.977228][T10370] /dev/rnullb0: Can't open blockdev [ 251.983044][T10370] /dev/rnullb0: Can't open blockdev [ 251.989796][T10370] /dev/rnullb0: Can't open blockdev [ 251.997737][T10370] /dev/rnullb0: Can't open blockdev [ 252.003612][T10370] /dev/rnullb0: Can't open blockdev [ 252.009881][T10370] /dev/rnullb0: Can't open blockdev [ 252.016141][T10370] /dev/rnullb0: Can't open blockdev [ 252.021969][T10370] /dev/rnullb0: Can't open blockdev [ 252.028515][T10370] /dev/rnullb0: Can't open blockdev [ 252.134768][T10380] /dev/rnullb0: Can't open blockdev [ 252.141723][T10380] /dev/rnullb0: Can't open blockdev [ 252.147648][T10380] /dev/rnullb0: Can't open blockdev [ 252.153483][T10380] /dev/rnullb0: Can't open blockdev [ 252.160082][T10380] /dev/rnullb0: Can't open blockdev [ 252.167275][T10380] /dev/rnullb0: Can't open blockdev [ 252.173073][T10380] /dev/rnullb0: Can't open blockdev [ 252.179128][T10380] /dev/rnullb0: Can't open blockdev [ 252.185930][T10380] /dev/rnullb0: Can't open blockdev [ 252.192965][T10380] /dev/rnullb0: Can't open blockdev [ 252.199466][T10380] /dev/rnullb0: Can't open blockdev [ 252.206866][T10380] /dev/rnullb0: Can't open blockdev [ 252.214312][T10380] /dev/rnullb0: Can't open blockdev [ 252.220535][T10380] /dev/rnullb0: Can't open blockdev [ 252.226623][T10380] /dev/rnullb0: Can't open blockdev [ 252.232431][T10380] /dev/rnullb0: Can't open blockdev [ 252.240232][T10380] /dev/rnullb0: Can't open blockdev [ 252.246446][T10380] /dev/rnullb0: Can't open blockdev [ 252.252246][T10380] /dev/rnullb0: Can't open blockdev [ 252.259177][T10380] /dev/rnullb0: Can't open blockdev [ 252.265098][T10380] /dev/rnullb0: Can't open blockdev [ 252.271001][T10380] /dev/rnullb0: Can't open blockdev [ 252.277865][T10380] /dev/rnullb0: Can't open blockdev [ 252.283725][T10380] /dev/rnullb0: Can't open blockdev [ 252.290642][T10380] /dev/rnullb0: Can't open blockdev [ 252.297178][T10380] /dev/rnullb0: Can't open blockdev [ 252.303377][T10380] /dev/rnullb0: Can't open blockdev [ 252.309609][T10380] /dev/rnullb0: Can't open blockdev [ 252.316131][T10380] /dev/rnullb0: Can't open blockdev [ 252.322241][T10380] /dev/rnullb0: Can't open blockdev [ 252.328621][T10380] /dev/rnullb0: Can't open blockdev [ 252.334748][T10380] /dev/rnullb0: Can't open blockdev [ 252.341573][T10380] /dev/rnullb0: Can't open blockdev [ 252.625848][T10391] /dev/rnullb0: Can't open blockdev [ 252.644822][T10393] mmap: syz.3.1087 (10393) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 252.957103][T10400] /dev/rnullb0: Can't open blockdev [ 252.983483][T10403] /dev/rnullb0: Can't open blockdev [ 253.058967][T10407] /dev/rnullb0: Can't open blockdev [ 253.279968][T10423] /dev/rnullb0: Can't open blockdev [ 253.323826][T10425] /dev/rnullb0: Can't open blockdev [ 253.365049][ T1213] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 253.384926][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1098'. [ 253.403487][T10428] /dev/rnullb0: Can't open blockdev [ 253.515062][ T1213] usb 2-1: device descriptor read/64, error -71 [ 253.553426][T10438] /dev/sg0: Can't lookup blockdev [ 253.626728][T10441] /dev/rnullb0: Can't open blockdev [ 253.755581][ T1213] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 253.905138][ T1213] usb 2-1: device descriptor read/64, error -71 [ 253.911532][ T7085] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 254.026761][ T1213] usb usb2-port1: attempt power cycle [ 254.087043][ T7085] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.098619][ T7085] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.111482][ T7085] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.124547][ T7085] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.133738][ T7085] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.145061][ T7085] usb 5-1: config 0 descriptor?? [ 254.375193][ T1213] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 254.395988][ T1213] usb 2-1: device descriptor read/8, error -71 [ 254.544776][T10459] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 254.604405][T10459] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 254.605165][T10459] ./cgroup: Can't lookup blockdev [ 254.635141][ T1213] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 254.667115][ T1213] usb 2-1: device descriptor read/8, error -71 [ 254.785560][ T1213] usb usb2-port1: unable to enumerate USB device [ 254.934857][ T7085] usbhid 5-1:0.0: can't add hid device: -71 [ 254.941836][ T7085] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 254.952724][ T7085] usb 5-1: USB disconnect, device number 29 [ 255.765058][ T9] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 255.782031][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.789572][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.799787][ T13] sl0: compressed packet ignored [ 255.937486][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.949097][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 255.960363][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 255.970106][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 255.987087][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 255.996324][ T9] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 256.004368][ T9] usb 5-1: Manufacturer: syz [ 256.011156][ T9] usb 5-1: config 0 descriptor?? [ 256.305455][ T9] rc_core: IR keymap rc-hauppauge not found [ 256.311547][ T9] Registered IR keymap rc-empty [ 256.316882][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.335147][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.356080][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 256.369352][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 256.387652][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.405276][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.425246][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.445143][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.465109][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.485162][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.505147][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.525129][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.545092][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.565164][ T9] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 256.586292][ T9] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 256.594321][ T9] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 256.609461][ T9] usb 5-1: USB disconnect, device number 30 [ 256.852396][T10477] /dev/rnullb0: Can't open blockdev [ 257.147058][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 257.315115][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 257.321746][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 257.330806][ T10] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 257.339933][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.348080][ T9] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 257.355714][ T10] usb 5-1: Product: syz [ 257.359895][ T10] usb 5-1: Manufacturer: syz [ 257.364491][ T10] usb 5-1: SerialNumber: syz [ 257.505252][ T9] usb 2-1: device descriptor read/64, error -71 [ 257.579508][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input20 [ 257.745062][ T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 257.788472][T10479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.808725][T10479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.885410][ T9] usb 2-1: device descriptor read/64, error -71 [ 258.018134][ T9] usb usb2-port1: attempt power cycle [ 258.030569][ T7085] usb 5-1: USB disconnect, device number 31 [ 258.321611][T10494] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1119'. [ 258.365133][ T9] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 258.395709][ T9] usb 2-1: device descriptor read/8, error -71 [ 258.580902][T10499] /dev/rnullb0: Can't open blockdev [ 258.635091][ T9] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 258.669115][ T9] usb 2-1: device descriptor read/8, error -71 [ 258.753255][T10509] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.1124'. [ 258.796146][ T9] usb usb2-port1: unable to enumerate USB device [ 258.884934][T10509] /dev/rnullb0: Can't open blockdev [ 259.425323][ T1213] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 259.555079][ T1213] usb 5-1: device descriptor read/64, error -71 [ 259.815174][ T1213] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 259.951098][ T1213] usb 5-1: device descriptor read/64, error -71 [ 260.073419][ T1213] usb usb5-port1: attempt power cycle [ 260.301261][T10531] /dev/rnullb0: Can't open blockdev [ 260.455056][ T1213] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 260.475697][ T1213] usb 5-1: device descriptor read/8, error -71 [ 260.537513][T10539] /dev/rnullb0: Can't open blockdev [ 260.554073][T10539] netlink: 'syz.3.1133': attribute type 27 has an invalid length. [ 260.646410][T10539] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.654250][T10539] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.674727][T10544] /dev/rnullb0: Can't open blockdev [ 260.689011][T10545] /dev/rnullb0: Can't open blockdev [ 260.703045][T10546] sctp: [Deprecated]: syz.3.1133 (pid 10546) Use of int in max_burst socket option deprecated. [ 260.703045][T10546] Use struct sctp_assoc_value instead [ 260.725181][ T1213] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 260.758153][ T1213] usb 5-1: device descriptor read/8, error -71 [ 260.848299][T10539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.864684][T10539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.923174][ T1213] usb usb5-port1: unable to enumerate USB device [ 261.015993][T10539] geneve1: left promiscuous mode [ 261.133431][ T49] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.142522][ T49] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.169701][ T49] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.200519][ T49] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.424746][T10560] /dev/rnullb0: Can't open blockdev [ 261.732147][T10565] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1141'. [ 262.405082][T10578] tipc: Trying to set illegal importance in message [ 262.961484][T10591] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1151'. [ 263.107593][T10598] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1152'. [ 263.284497][T10603] /dev/rnullb0: Can't open blockdev [ 263.516077][ T30] audit: type=1326 audit(1752589175.177:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10609 comm="syz.3.1157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa520f8e929 code=0x0 [ 263.705103][ T5912] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 263.755591][T10620] /dev/rnullb0: Can't open blockdev [ 263.845081][ T5912] usb 5-1: device descriptor read/64, error -71 [ 263.883644][T10623] /dev/sg0: Can't lookup blockdev [ 264.085213][ T5912] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 264.238892][ T5912] usb 5-1: device descriptor read/64, error -71 [ 264.356105][ T5912] usb usb5-port1: attempt power cycle [ 264.481449][T10628] /dev/rnullb0: Can't open blockdev [ 264.508542][T10628] /dev/rnullb0: Can't open blockdev [ 264.582027][T10634] /dev/rnullb0: Can't open blockdev [ 264.705145][ T5912] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 264.736122][ T5912] usb 5-1: device descriptor read/8, error -71 [ 264.785576][T10636] /dev/rnullb0: Can't open blockdev [ 264.986061][ T5912] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 265.002120][T10645] /dev/rnullb0: Can't open blockdev [ 265.023145][ T5912] usb 5-1: device descriptor read/8, error -71 [ 265.155484][ T5912] usb usb5-port1: unable to enumerate USB device [ 265.217755][T10650] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1170'. [ 265.515139][ T7089] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 265.665202][ T7089] usb 2-1: Using ep0 maxpacket: 32 [ 265.673120][ T7089] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 265.683351][ T7089] usb 2-1: config 0 has no interface number 0 [ 265.690519][ T7089] usb 2-1: config 0 interface 23 has no altsetting 0 [ 265.699608][ T7089] usb 2-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=b6.ad [ 265.708743][ T7089] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.716782][ T7089] usb 2-1: Product: syz [ 265.720938][ T7089] usb 2-1: Manufacturer: syz [ 265.725578][ T7089] usb 2-1: SerialNumber: syz [ 265.732261][ T7089] usb 2-1: config 0 descriptor?? [ 265.950508][ T7089] kaweth 2-1:0.23: Firmware present in device. [ 266.142519][ T7089] kaweth 2-1:0.23: Statistics collection: 0 [ 266.155087][ T7089] kaweth 2-1:0.23: Multicast filter limit: 0 [ 266.161087][ T7089] kaweth 2-1:0.23: MTU: 0 [ 266.188055][ T7089] kaweth 2-1:0.23: Read MAC address 00:00:00:00:00:00 [ 266.354856][ T7089] kaweth 2-1:0.23: probe with driver kaweth failed with error -5 [ 266.371277][ T7089] usb 2-1: USB disconnect, device number 76 [ 266.991581][T10673] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1178'. [ 267.315877][T10684] /dev/rnullb0: Can't open blockdev [ 267.332210][T10684] /dev/rnullb0: Can't open blockdev [ 267.346731][T10687] netlink: 'syz.4.1183': attribute type 1 has an invalid length. [ 267.355260][T10688] netlink: 'syz.4.1183': attribute type 1 has an invalid length. [ 267.725762][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.835961][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.902758][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.022245][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.054011][T10700] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1189'. [ 268.071058][T10700] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1189'. [ 268.213710][T10704] /dev/rnullb0: Can't open blockdev [ 268.297409][T10708] /dev/rnullb0: Can't open blockdev [ 268.328738][ T13] bridge_slave_1: left allmulticast mode [ 268.328940][ T5169] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.347544][ T5169] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.349730][ T13] bridge_slave_1: left promiscuous mode [ 268.363241][ T5169] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 268.363858][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.384518][ T13] bridge_slave_0: left allmulticast mode [ 268.393197][ T5169] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 268.400747][ T13] bridge_slave_0: left promiscuous mode [ 268.400960][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.422162][ T5169] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 268.698381][ T5912] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 268.783674][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.794526][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.806277][ T13] bond0 (unregistering): Released all slaves [ 268.865731][ T5912] usb 2-1: config 0 has an invalid interface number: 133 but max is 0 [ 268.884225][ T5912] usb 2-1: config 0 has no interface number 0 [ 268.899488][ T5912] usb 2-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid maxpacket 105, setting to 64 [ 268.911288][ T13] tipc: Disabling bearer [ 268.922783][ T13] tipc: Left network mode [ 268.925145][ T5912] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 268.950367][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.967861][ T5912] usb 2-1: Product: syz [ 268.982427][ T5912] usb 2-1: Manufacturer: syz [ 268.989517][ T5912] usb 2-1: SerialNumber: syz [ 269.008473][ T5912] usb 2-1: config 0 descriptor?? [ 269.019939][T10714] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 269.237393][T10714] /dev/rnullb0: Can't open blockdev [ 269.259410][ T5912] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected [ 269.279808][ T5912] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81 [ 269.288287][ T5912] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1 [ 269.299725][ T5912] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2 [ 269.316141][T10709] chnl_net:caif_netlink_parms(): no params data found [ 269.325411][ T5912] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 269.367584][ T5912] usb 2-1: USB disconnect, device number 77 [ 269.390474][ T5912] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 269.407159][ T5912] keyspan 2-1:0.133: device disconnected [ 269.434185][ T13] hsr_slave_0: left promiscuous mode [ 269.440446][ T13] hsr_slave_1: left promiscuous mode [ 269.453500][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.465474][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.473580][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.488549][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.520335][ T13] veth1_macvtap: left promiscuous mode [ 269.528345][ T13] veth0_macvtap: left promiscuous mode [ 269.534051][ T13] veth1_vlan: left promiscuous mode [ 269.545428][ T13] veth0_vlan: left promiscuous mode [ 270.057155][ T13] team0 (unregistering): Port device team_slave_1 removed [ 270.101074][ T13] team0 (unregistering): Port device team_slave_0 removed [ 270.370639][T10736] /dev/rnullb0: Can't open blockdev [ 270.498548][ T5169] Bluetooth: hci3: command tx timeout [ 270.628127][T10733] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 270.749074][T10709] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.757064][T10709] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.765235][T10709] bridge_slave_0: entered allmulticast mode [ 270.777751][T10709] bridge_slave_0: entered promiscuous mode [ 270.802578][T10709] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.810171][T10709] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.818891][T10709] bridge_slave_1: entered allmulticast mode [ 270.819262][T10743] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.1195'. [ 270.831194][T10709] bridge_slave_1: entered promiscuous mode [ 270.853571][T10743] /dev/rnullb0: Can't open blockdev [ 270.914028][T10709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.937272][T10709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.202373][T10709] team0: Port device team_slave_0 added [ 271.214842][T10757] /dev/rnullb0: Can't open blockdev [ 271.230119][T10709] team0: Port device team_slave_1 added [ 271.407756][T10709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.414730][T10709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.519020][T10709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.552828][T10709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.564336][T10709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.594392][T10773] /dev/rnullb0: Can't open blockdev [ 271.648459][T10709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.697398][T10779] /dev/rnullb0: Can't open blockdev [ 271.878509][T10709] hsr_slave_0: entered promiscuous mode [ 271.896322][T10709] hsr_slave_1: entered promiscuous mode [ 271.914731][T10709] debugfs: 'hsr0' already exists in 'hsr' [ 271.965232][T10709] Cannot create hsr debugfs directory [ 272.100031][T10786] /dev/rnullb0: Can't open blockdev [ 272.128998][T10789] syzkaller1: entered promiscuous mode [ 272.142676][T10789] syzkaller1: entered allmulticast mode [ 272.325186][ T7085] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 272.526732][ T7085] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.543170][ T7085] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.562886][T10709] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 272.580020][ T5169] Bluetooth: hci3: command tx timeout [ 272.584999][ T7085] usb 2-1: config 1 interface 0 has no altsetting 0 [ 272.606848][T10709] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 272.608145][ T7085] usb 2-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.40 [ 272.644349][ T7085] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.646385][T10709] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 272.665319][ T7085] usb 2-1: Product: ╨Ф [ 272.675054][ T7085] usb 2-1: Manufacturer: рбГ [ 272.679286][T10709] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 272.699929][ T7085] usb 2-1: SerialNumber: ьдЯъ╛Цч│ЭхФИщ╡╡яд░ц┤╡ъ╜ИшХПцд░юЬФсЗЫт╜ОчЬитРОывХ [ 272.939943][T10791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.965593][T10791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.970477][T10709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.035454][ T7085] usbhid 2-1:1.0: can't add hid device: -71 [ 273.041493][ T7085] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 273.063123][T10709] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.076341][ T7085] usb 2-1: USB disconnect, device number 78 [ 273.112566][ T2141] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.119770][ T2141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.173286][ T2141] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.180524][ T2141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.281049][T10828] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 273.319127][T10829] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 273.354445][T10828] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 273.790970][T10709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.935302][ T1213] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 274.106984][ T1213] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 274.138789][ T1213] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 274.178761][ T1213] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 274.203735][ T1213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.240123][ T1213] usb 2-1: config 0 descriptor?? [ 274.254061][T10840] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 274.414885][T10709] veth0_vlan: entered promiscuous mode [ 274.439459][T10709] veth1_vlan: entered promiscuous mode [ 274.495581][T10709] veth0_macvtap: entered promiscuous mode [ 274.548687][T10709] veth1_macvtap: entered promiscuous mode [ 274.613262][T10709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.640199][T10709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.655139][ T5169] Bluetooth: hci3: command tx timeout [ 274.678255][ T59] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.696360][ T59] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.707228][ T1213] glorious 0003:22D4:1503.0012: hidraw0: USB HID v0.00 Device [Glorious Model I] on usb-dummy_hcd.1-1/input0 [ 274.781716][ T59] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.814641][ T59] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.899223][T10840] /dev/rnullb0: Can't open blockdev [ 274.929219][ T5912] usb 2-1: USB disconnect, device number 79 [ 275.087080][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.125106][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.203868][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.219609][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.417691][T10872] /dev/rnullb0: Can't open blockdev [ 275.542858][T10880] syz.6.1218: attempt to access beyond end of device [ 275.542858][T10880] loop6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 275.562986][T10880] syz.6.1218: attempt to access beyond end of device [ 275.562986][T10880] loop6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 275.597904][ T30] audit: type=1800 audit(1752589187.257:16): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1217" name="bus" dev="tmpfs" ino=1617 res=0 errno=0 [ 275.645463][ T30] audit: type=1800 audit(1752589187.257:17): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1217" name="bus" dev="tmpfs" ino=1617 res=0 errno=0 [ 275.690849][ T30] audit: type=1800 audit(1752589187.257:18): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1217" name="bus" dev="tmpfs" ino=1617 res=0 errno=0 [ 275.772454][ T30] audit: type=1800 audit(1752589187.257:19): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1217" name="bus" dev="tmpfs" ino=1617 res=0 errno=0 [ 275.849790][T10889] batadv_slave_1: entered promiscuous mode [ 275.856506][T10889] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1219'. [ 275.863635][ T30] audit: type=1800 audit(1752589187.257:20): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1217" name="bus" dev="tmpfs" ino=1617 res=0 errno=0 [ 275.890781][ T30] audit: type=1800 audit(1752589187.257:21): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1217" name="bus" dev="tmpfs" ino=1617 res=0 errno=0 [ 275.906321][T10895] program syz.6.1221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.954487][ T30] audit: type=1800 audit(1752589187.257:22): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1217" name="bus" dev="tmpfs" ino=1617 res=0 errno=0 [ 275.967195][T10895] program syz.6.1221 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 275.975885][ T30] audit: type=1800 audit(1752589187.257:23): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1217" name="bus" dev="tmpfs" ino=1617 res=0 errno=0 [ 276.018328][ T30] audit: type=1800 audit(1752589187.257:24): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1217" name="bus" dev="tmpfs" ino=1617 res=0 errno=0 [ 276.064733][ T30] audit: type=1800 audit(1752589187.267:25): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1217" name="bus" dev="tmpfs" ino=1617 res=0 errno=0 [ 276.174191][T10895] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 276.254989][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 20460 ms [ 276.263071][ C1] sl0: transmit timed out, driver error? [ 276.336220][T10889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.360052][T10889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.373822][T10908] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1224'. [ 276.391258][T10889] bond0 (unregistering): Released all slaves [ 276.541888][T10888] batadv_slave_1: left promiscuous mode [ 276.735356][ T5169] Bluetooth: hci3: command tx timeout [ 277.141273][T10934] /dev/rnullb0: Can't open blockdev [ 277.331430][T10945] autofs4:pid:10945:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.3), cmd(0xc0189377) [ 277.374730][T10945] autofs4:pid:10945:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189377) [ 277.422559][T10945] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 277.431205][T10945] /dev/rnullb0: Can't open blockdev [ 277.680880][T10964] /dev/rnullb0: Can't open blockdev [ 277.695358][T10962] /dev/rnullb0: Can't open blockdev [ 278.222597][T10982] evm: overlay not supported [ 278.284417][T10986] /dev/rnullb0: Can't open blockdev [ 278.566238][T10999] syz.1.1248: attempt to access beyond end of device [ 278.566238][T10999] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 278.598079][T10999] isofs_fill_super: bread failed, dev=nbd1, iso_blknum=16, block=32 [ 278.786432][T11010] /dev/rnullb0: Can't open blockdev [ 279.275836][ T7085] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 279.427152][ T7085] usb 2-1: device descriptor read/64, error -71 [ 279.676800][ T7085] usb 2-1: new low-speed USB device number 81 using dummy_hcd [ 279.813739][T11048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.830843][ T7085] usb 2-1: device descriptor read/64, error -71 [ 279.843214][T11048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.945621][ T7085] usb usb2-port1: attempt power cycle [ 280.285076][ T7085] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 280.308383][ T7085] usb 2-1: device descriptor read/8, error -71 [ 280.555122][ T7085] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 280.584768][T11061] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1259'. [ 280.604120][ T7085] usb 2-1: device descriptor read/8, error -71 [ 280.619255][T11063] /dev/rnullb0: Can't lookup blockdev [ 280.694179][T11068] /dev/rnullb0: Can't open blockdev [ 280.710107][T11068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.720408][ T7085] usb usb2-port1: unable to enumerate USB device [ 280.729951][T11068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.790895][T11072] /dev/rnullb0: Can't lookup blockdev [ 280.872200][ T5169] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 280.944875][T11084] MTD: Couldn't look up '/dev/rnullb0': -15 [ 281.367974][T11093] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1269'. [ 281.397393][T11095] /dev/rnullb0: Can't open blockdev [ 281.540269][T11100] /dev/rnullb0: Can't open blockdev [ 281.572568][T11100] kvm: kvm [11099]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000079) [ 281.593566][T11100] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1272'. [ 281.753777][T11110] /dev/rnullb0: Can't open blockdev [ 281.849154][T11112] tipc: Started in network mode [ 281.854670][T11112] tipc: Node identity 2, cluster identity 2 [ 281.861224][T11112] tipc: Node number set to 2 [ 281.868753][T11112] tipc: Cannot configure node identity twice [ 281.922440][T11114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.931541][T11114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.952074][T11114] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1279'. [ 282.061873][T11116] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1280'. [ 282.373373][T11120] syzkaller1: left promiscuous mode [ 282.379859][T11120] syzkaller1: left allmulticast mode [ 282.702232][T11130] /dev/rnullb0: Can't open blockdev [ 282.774201][T11135] /dev/rnullb0: Can't open blockdev [ 282.863731][T11140] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1289'. [ 282.957516][T11144] syz.6.1292: attempt to access beyond end of device [ 282.957516][T11144] loop6: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 282.972267][T11146] /dev/rnullb0: Can't open blockdev [ 282.990119][T11144] gfs2: error -5 reading superblock [ 283.272367][T11161] netlink: 'syz.3.1297': attribute type 46 has an invalid length. [ 283.292876][T11161] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1297'. [ 283.460654][T11167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.481147][T11167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.705428][ T5999] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 283.860205][ T5999] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 283.869584][ T5999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.878126][ T5999] usb 2-1: Product: syz [ 283.882391][ T5999] usb 2-1: Manufacturer: syz [ 283.887141][ T5999] usb 2-1: SerialNumber: syz [ 283.893632][ T5999] usb 2-1: config 0 descriptor?? [ 283.903396][ T5999] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 284.240264][T11184] /dev/rnullb0: Can't lookup blockdev [ 284.283739][T11187] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1301'. [ 284.302218][T11168] /dev/rnullb0: Can't open blockdev [ 284.312632][ T5999] gspca_sunplus: reg_r err -71 [ 284.324033][ T5999] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 284.336424][ T5999] usb 2-1: USB disconnect, device number 84 [ 284.533406][T11197] MTD: Couldn't look up '/dev/rnullb0': -15 [ 284.677656][T11204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.692092][T11204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.913989][T11204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.948399][T11215] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1310'. [ 284.966736][T11204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.990289][ T5169] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 284.999279][T11204] /dev/rnullb0: Can't open blockdev [ 285.016923][T11221] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 285.023822][T11221] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 285.041419][T11221] vhci_hcd vhci_hcd.0: Device attached [ 285.086397][T11224] vhci_hcd: connection closed [ 285.105067][ T59] vhci_hcd: stop threads [ 285.132190][ T59] vhci_hcd: release socket [ 285.183293][ T59] vhci_hcd: disconnect device [ 285.216259][ T7089] vhci_hcd: vhci_device speed not set [ 285.325182][T11240] nbd7: detected capacity change from 0 to 8589934592 [ 285.339964][ T5845] block nbd7: Send control failed (result -89) [ 285.340630][T11242] /dev/rnullb0: Can't open blockdev [ 285.347694][ T5845] block nbd7: Request send failed, requeueing [ 285.361510][ T5169] block nbd7: Receive control failed (result -32) [ 285.363753][ T11] block nbd7: Dead connection, failed to find a fallback [ 285.379077][ T11] block nbd7: shutting down sockets [ 285.385566][ T11] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.396181][ T11] Buffer I/O error on dev nbd7, logical block 0, async page read [ 285.412878][ T5845] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.423009][ T5845] Buffer I/O error on dev nbd7, logical block 0, async page read [ 285.432001][ T5845] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.446365][ T5845] Buffer I/O error on dev nbd7, logical block 0, async page read [ 285.454501][ T5845] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.468535][ T5845] Buffer I/O error on dev nbd7, logical block 0, async page read [ 285.476515][ T5845] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.485619][ T5845] Buffer I/O error on dev nbd7, logical block 0, async page read [ 285.493541][ T5845] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.504729][ T5845] Buffer I/O error on dev nbd7, logical block 0, async page read [ 285.512713][ T5845] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.521851][ T5845] Buffer I/O error on dev nbd7, logical block 0, async page read [ 285.530035][ T5845] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.541911][ T5845] Buffer I/O error on dev nbd7, logical block 0, async page read [ 285.550200][ T5845] ldm_validate_partition_table(): Disk read failed. [ 285.557429][ T5845] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.566545][ T5845] Buffer I/O error on dev nbd7, logical block 0, async page read [ 285.574458][ T5845] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 285.583662][ T5845] Buffer I/O error on dev nbd7, logical block 0, async page read [ 285.591889][ T5845] Dev nbd7: unable to read RDB block 0 [ 285.605888][ T5845] nbd7: unable to read partition table [ 285.637886][ T5845] ldm_validate_partition_table(): Disk read failed. [ 285.662403][ T5845] Dev nbd7: unable to read RDB block 0 [ 285.666627][T11249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.671213][ T5845] nbd7: unable to read partition table [ 285.695481][T11249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.981769][T11265] binder: Bad value for 'stats' [ 286.073294][T11263] /dev/rnullb0: Can't open blockdev [ 286.174192][T11268] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1323'. [ 286.369248][T11275] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1325'. [ 286.399604][T11275] netlink: zone id is out of range [ 286.404826][T11275] netlink: get zone limit has 8 unknown bytes [ 287.395290][ T5999] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 287.546327][ T5999] usb 2-1: device descriptor read/64, error -71 [ 287.815800][ T5999] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 287.862342][T11301] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1333'. [ 287.976000][ T5999] usb 2-1: device descriptor read/64, error -71 [ 288.097196][ T5999] usb usb2-port1: attempt power cycle [ 288.455036][ T5999] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 288.485742][ T5999] usb 2-1: device descriptor read/8, error -71 [ 288.622326][T11312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1337'. [ 288.665061][T11312] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1337'. [ 288.741993][ T5999] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 288.779317][ T5999] usb 2-1: device descriptor read/8, error -71 [ 288.895729][ T5999] usb usb2-port1: unable to enumerate USB device [ 288.952126][T11323] /dev/rnullb0: Can't open blockdev [ 289.110137][T11329] /dev/rnullb0: Can't open blockdev [ 289.176027][T11330] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1344'. [ 289.463245][T11332] lo speed is unknown, defaulting to 1000 [ 289.501100][T11332] lo speed is unknown, defaulting to 1000 [ 289.533162][T11332] lo speed is unknown, defaulting to 1000 [ 289.559853][T11342] vcan0: entered allmulticast mode [ 289.573161][T11342] kvm: kvm [11331]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x5bcd65e0306f9c17 [ 289.590528][T11342] /dev/rnullb0: Can't open blockdev [ 289.707615][T11348] /dev/rnullb0: Can't open blockdev [ 289.778869][T11351] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1350'. [ 289.792559][T11351] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 289.800603][T11351] cramfs: wrong magic [ 289.973060][T11332] infiniband syz0: set active [ 289.978520][ T9] lo speed is unknown, defaulting to 1000 [ 289.985486][T11332] infiniband syz0: added lo [ 290.059698][T11332] RDS/IB: syz0: added [ 290.067590][T11332] smc: adding ib device syz0 with port count 1 [ 290.074120][T11332] smc: ib device syz0 port 1 has pnetid [ 290.083146][ T9] lo speed is unknown, defaulting to 1000 [ 290.109125][T11332] lo speed is unknown, defaulting to 1000 [ 290.203593][T11363] /dev/rnullb0: Can't open blockdev [ 290.316603][T11367] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1355'. [ 290.480205][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 290.480222][ T30] audit: type=1326 audit(1752589202.137:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa520f8e929 code=0x7fc00000 [ 290.556899][ T30] audit: type=1326 audit(1752589202.137:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa520f8e929 code=0x7fc00000 [ 290.615766][ T30] audit: type=1326 audit(1752589202.137:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa520f8e929 code=0x7fc00000 [ 290.638017][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.684104][ T30] audit: type=1326 audit(1752589202.137:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa520f8e929 code=0x7fc00000 [ 290.706400][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.745999][ T30] audit: type=1326 audit(1752589202.137:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa520f8e929 code=0x7fc00000 [ 290.806792][ T30] audit: type=1326 audit(1752589202.137:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa520f8e929 code=0x7fc00000 [ 290.852537][ T30] audit: type=1326 audit(1752589202.137:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa520f8e929 code=0x7fc00000 [ 290.880697][ T30] audit: type=1326 audit(1752589202.137:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa520f8e929 code=0x7fc00000 [ 290.889655][T11332] lo speed is unknown, defaulting to 1000 [ 290.903095][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.915788][ T9] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 290.917991][ T30] audit: type=1326 audit(1752589202.137:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa520f8e929 code=0x7fc00000 [ 290.955616][ T30] audit: type=1326 audit(1752589202.137:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.3.1349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa520f8e929 code=0x7fc00000 [ 291.078177][ T9] usb 2-1: device descriptor read/64, error -71 [ 291.315104][ T9] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 291.356300][T11406] /dev/rnullb0: Can't open blockdev [ 291.377246][T11408] /dev/rnullb0: Can't open blockdev [ 291.465164][ T9] usb 2-1: device descriptor read/64, error -71 [ 291.526497][T11412] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1364'. [ 291.571972][T11332] lo speed is unknown, defaulting to 1000 [ 291.585423][ T9] usb usb2-port1: attempt power cycle [ 291.955156][ T9] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 291.975945][T11332] lo speed is unknown, defaulting to 1000 [ 291.986089][ T9] usb 2-1: device descriptor read/8, error -71 [ 292.245017][ T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 292.279569][ T9] usb 2-1: device descriptor read/8, error -71 [ 292.320431][T11332] lo speed is unknown, defaulting to 1000 [ 292.415719][ T9] usb usb2-port1: unable to enumerate USB device [ 292.697930][T11446] /dev/rnullb0: Can't open blockdev [ 293.791239][T11479] program syz.6.1371 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.794862][T11480] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1370'. [ 293.836121][T11477] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1370'. [ 293.881778][T11487] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1371'. [ 293.949249][T11487] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1371'. [ 294.052560][T11494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.079322][T11494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.153861][T11497] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1374'. [ 294.324088][T11500] /dev/rnullb0: Can't open blockdev [ 294.773857][T11532] fuse: Bad value for 'fd' [ 295.011063][T11543] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1383'. [ 295.329727][T11560] /dev/rnullb0: Can't open blockdev [ 295.357253][T11560] /dev/rnullb0: Can't open blockdev [ 295.595535][T11578] /dev/rnullb0: Can't open blockdev [ 295.991761][T11596] /dev/rnullb0: Can't open blockdev [ 296.009655][T11597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1391'. [ 296.020821][T11597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 296.071040][T11597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.097862][T11597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.158469][T11597] /dev/rnullb0: Can't open blockdev [ 296.284093][T11607] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1393'. [ 296.410374][T11611] /dev/rnullb0: Can't open blockdev [ 297.155122][ T7089] usb 2-1: new low-speed USB device number 94 using dummy_hcd [ 297.305329][ T7089] usb 2-1: device descriptor read/64, error -71 [ 297.440303][T11655] /dev/rnullb0: Can't open blockdev [ 297.545228][ T7089] usb 2-1: new low-speed USB device number 95 using dummy_hcd [ 297.584708][T11659] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1403'. [ 297.655479][T11661] /dev/rnullb0: Can't open blockdev [ 297.675396][ T7089] usb 2-1: device descriptor read/64, error -71 [ 297.805485][ T7089] usb usb2-port1: attempt power cycle [ 297.813244][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1407'. [ 297.918595][T11673] /dev/rnullb0: Can't lookup blockdev [ 297.954545][T11675] tmpfs: Unknown parameter '        ' [ 298.165140][ T7089] usb 2-1: new low-speed USB device number 96 using dummy_hcd [ 298.175279][ T5851] Bluetooth: hci5: command 0x1003 tx timeout [ 298.175311][ T5169] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 298.194716][ T7089] usb 2-1: device descriptor read/8, error -71 [ 298.435094][ T7089] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 298.457651][ T7089] usb 2-1: device descriptor read/8, error -71 [ 298.565476][ T7089] usb usb2-port1: unable to enumerate USB device [ 298.789232][T11692] /dev/rnullb0: Can't open blockdev [ 298.943094][T11690] /dev/rnullb0: Can't open blockdev [ 299.147791][T11705] syz.7.1420: attempt to access beyond end of device [ 299.147791][T11705] loop7: rw=0, sector=2, nr_sectors = 2 limit=0 [ 299.207832][T11711] netlink: 'syz.6.1421': attribute type 1 has an invalid length. [ 299.219530][T11711] netlink: 'syz.6.1421': attribute type 2 has an invalid length. [ 299.225331][T11705] vxfs: unable to read disk superblock at 1 [ 299.235222][T11705] syz.7.1420: attempt to access beyond end of device [ 299.235222][T11705] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 299.285960][T11705] vxfs: unable to read disk superblock at 8 [ 299.291888][T11705] vxfs: can't find superblock. [ 299.437992][T11722] __nla_validate_parse: 2 callbacks suppressed [ 299.438009][T11722] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1423'. [ 299.677033][T11734] /dev/rnullb0: Can't open blockdev [ 299.834465][T11738] netlink: 'syz.3.1428': attribute type 2 has an invalid length. [ 299.986872][T11748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.025048][T11751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.050377][T11748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.064380][T11751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.117842][T11755] /dev/rnullb0: Can't open blockdev [ 300.490448][T11778] /dev/rnullb0: Can't open blockdev [ 300.505479][T11775] netlink: 'syz.1.1438': attribute type 12 has an invalid length. [ 300.826083][T11788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.848003][T11788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.907214][T11788] /dev/rnullb0: Can't open blockdev [ 300.924545][T11788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.948719][T11788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.154758][T11810] /dev/rnullb0: Can't open blockdev [ 301.171573][T11812] ocfs2_dlmfs: Unknown parameter 'usrquota' [ 301.859551][T11849] /dev/rnullb0: Can't open blockdev [ 301.866703][T11849] netlink: 'syz.6.1458': attribute type 12 has an invalid length. [ 301.877661][T11849] overlay: ./file0 is not a directory [ 301.969449][T11851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.979035][T11851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.254468][T11864] /dev/rnullb0: Can't open blockdev [ 302.627238][T11878] /dev/rnullb0: Can't open blockdev [ 302.720602][T11880] RDS: rds_bind could not find a transport for ::ffff:172.30.0.7, load rds_tcp or rds_rdma? [ 302.902687][T11886] /dev/rnullb0: Can't open blockdev [ 302.936732][T11891] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 303.415594][ T1213] usb 2-1: new low-speed USB device number 98 using dummy_hcd [ 303.580099][ T1213] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 303.605145][ T1213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.647855][ T1213] usb 2-1: config 0 descriptor?? [ 303.921803][T11934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.937611][T11934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.949453][T11934] /dev/rnullb0: Can't open blockdev [ 304.084458][T11901] binder: BINDER_SET_CONTEXT_MGR already set [ 304.092203][T11901] binder: 11900:11901 ioctl 4018620d 200000000040 returned -16 [ 304.106374][T11901] binder: 11900:11901 ioctl c0306201 200000000300 returned -11 [ 304.121077][T11901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.133896][T11901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.227026][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 304.227045][ T30] audit: type=1804 audit(1752589215.897:61): pid=11937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1486" name="rnullb0" dev="tmpfs" ino=1574 res=1 errno=0 [ 304.411196][T11948] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1489'. [ 304.489877][T11950] /dev/rnullb0: Can't lookup blockdev [ 304.547895][T11901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.563625][T11901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.578264][T11954] /dev/rnullb0: Can't open blockdev [ 304.581727][T11901] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1477'. [ 304.599666][T11901] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.621510][T11901] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 304.627761][T11901] syzkaller0: ignored: set checksum disabled [ 304.690838][T11958] /dev/rnullb0: Can't open blockdev [ 304.704434][T11959] /dev/rnullb0: Can't open blockdev [ 304.741050][ T1213] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 304.752878][ T1213] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 304.773530][T11961] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1495'. [ 304.786802][T11961] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1495'. [ 304.800767][T11961] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1495'. [ 304.810326][ T1213] asix 2-1:0.0: probe with driver asix failed with error -71 [ 304.832681][ T1213] usb 2-1: USB disconnect, device number 98 [ 304.851494][T11961] MTD: Couldn't look up '/dev/rnullb0': -15 [ 304.957090][T11966] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1497'. [ 305.183757][T11978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.199902][T11978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.213742][T11978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.225661][T11978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.356595][T11981] /dev/rnullb0: Can't open blockdev [ 305.375563][T11981] /dev/rnullb0: Can't open blockdev [ 305.695308][ T7089] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 305.841803][T11988] /dev/rnullb0: Can't open blockdev [ 305.870369][ T7089] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.888508][ T7089] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 305.951005][ T7089] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 305.981014][ T7089] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.994292][ T7089] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.018071][ T7089] usb 2-1: Product: syz [ 306.022710][ T7089] usb 2-1: Manufacturer: syz [ 306.063306][ T7089] usb 2-1: SerialNumber: syz [ 306.153589][T11992] /dev/rnullb0: Can't open blockdev [ 306.292575][T11994] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1509'. [ 306.510037][T11998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.522577][T11998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.708415][T12000] /dev/rnullb0: Can't open blockdev [ 306.957096][T12008] option changes via remount are deprecated (pid=12007 comm=syz.7.1515) [ 307.037408][T12009] syzkaller1: entered promiscuous mode [ 307.044099][T12009] syzkaller1: entered allmulticast mode [ 307.052917][T12009] netlink: 92 bytes leftover after parsing attributes in process `syz.7.1515'. [ 307.131970][ T1213] hid_parser_main: 10 callbacks suppressed [ 307.131991][ T1213] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 307.150624][ T1213] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 307.363423][T12022] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1518'. [ 307.380541][T11986] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1505'. [ 307.664416][ T7089] cdc_ncm 2-1:1.0: bind() failure [ 307.692797][ T7089] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 307.721943][ T7089] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 307.737877][ T7089] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 307.768679][ T7089] usb 2-1: USB disconnect, device number 99 [ 307.980647][T12035] /dev/rnullb0: Can't open blockdev [ 308.262057][T12045] /dev/rnullb0: Can't open blockdev [ 308.339313][T12047] /dev/rnullb0: Can't open blockdev [ 308.440478][T12049] /dev/rnullb0: Can't open blockdev [ 308.592908][T12055] /dev/rnullb0: Can't open blockdev [ 308.894901][ T30] audit: type=1804 audit(1752589220.557:62): pid=12066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1534" name="rnullb0" dev="tmpfs" ino=1574 res=1 errno=0 [ 309.184110][T12073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.208334][T12073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.230991][T12074] /dev/rnullb0: Can't open blockdev [ 309.617016][T12084] /dev/rnullb0: Can't open blockdev [ 309.955087][ T5912] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 310.122503][ T5912] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 310.140421][ T5912] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 310.171973][ T5912] usb 2-1: config 0 interface 0 altsetting 191 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 310.214504][ T5912] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x86 has invalid maxpacket 49191, setting to 64 [ 310.244425][ T5912] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 310.281536][ T5912] usb 2-1: config 0 interface 0 has no altsetting 0 [ 310.298038][ T5912] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 310.312719][ T5912] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 310.332397][ T5912] usb 2-1: Product: syz [ 310.345026][ T5912] usb 2-1: Manufacturer: syz [ 310.365017][ T5912] usb 2-1: SerialNumber: syz [ 310.404070][ T5912] usb 2-1: config 0 descriptor?? [ 310.410599][T12087] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 310.431418][ T5912] ldusb 2-1:0.0: Interrupt in endpoint not found [ 310.453414][T12118] /dev/rnullb0: Can't open blockdev [ 310.486605][ T30] audit: type=1800 audit(1752589222.157:63): pid=12122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1553" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 310.648576][ T7089] usb 2-1: USB disconnect, device number 100 [ 310.711198][T12128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.734313][T12128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.065940][T12130] binder: 12129:12130 ioctl c018620b 200000000000 returned -14 [ 311.160528][T12132] /dev/rnullb0: Can't open blockdev [ 311.490433][T12140] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 311.553539][T12142] syz.6.1562: attempt to access beyond end of device [ 311.553539][T12142] loop6: rw=0, sector=2, nr_sectors = 1 limit=0 [ 311.575166][T12142] hfs: can't find a HFS filesystem on dev loop6 [ 311.697234][T12144] netlink: 'syz.7.1563': attribute type 1 has an invalid length. [ 311.759030][T12150] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1563'. [ 311.785436][T12144] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1563'. [ 311.923940][T12156] /dev/rnullb0: Can't open blockdev [ 312.003291][T12161] /dev/rnullb0: Can't open blockdev [ 312.124517][T12168] /dev/rnullb0: Can't open blockdev [ 312.203084][T12170] /dev/sg0: Can't lookup blockdev [ 312.357253][T12174] /dev/rnullb0: Can't open blockdev [ 312.720442][T12188] /dev/rnullb0: Can't open blockdev [ 313.039313][T12203] /dev/rnullb0: Can't open blockdev [ 313.098979][T12205] /dev/rnullb0: Can't open blockdev [ 313.105474][ T5912] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 313.158823][T12207] netlink: 'syz.7.1585': attribute type 1 has an invalid length. [ 313.268847][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 313.312354][ T5912] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 313.339183][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.351289][ T5912] usb 2-1: Product: syz [ 313.358329][ T5912] usb 2-1: Manufacturer: syz [ 313.363255][ T5912] usb 2-1: SerialNumber: syz [ 313.373790][T12217] /dev/rnullb0: Can't open blockdev [ 313.382478][ T5912] usb 2-1: config 0 descriptor?? [ 313.462677][T12222] /dev/rnullb0: Can't open blockdev [ 313.487266][T12224] /dev/rnullb0: Can't lookup blockdev [ 313.614022][ T5912] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 313.619498][T12229] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1592'. [ 313.713073][T12235] /dev/rnullb0: Can't lookup blockdev [ 313.786384][T12240] /dev/rnullb0: Can't lookup blockdev [ 313.902746][T12244] /dev/rnullb0: Can't open blockdev [ 314.023921][ T5912] usb write operation failed. (-71) [ 314.032817][ T5912] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 314.033132][ T5912] dvbdev: DVB: registering new adapter (Terratec H7) [ 314.033235][ T5912] usb 2-1: media controller created [ 314.033704][ T5912] usb read operation failed. (-71) [ 314.034854][ T5912] usb write operation failed. (-71) [ 314.061037][ T5912] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 314.062751][ T5912] usb 2-1: USB disconnect, device number 101 [ 314.157648][T12250] /dev/rnullb0: Can't open blockdev [ 314.326640][T12258] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1602'. [ 314.777367][T12272] /dev/rnullb0: Can't open blockdev [ 314.846092][T12278] /dev/rnullb0: Can't lookup blockdev [ 314.884043][T12282] MTD: Couldn't look up '/dev/rnullb0': -15 [ 314.890227][T12282] /dev/rnullb0: Can't lookup blockdev [ 314.930031][T12284] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1611'. [ 315.045071][ T5999] usb 2-1: new low-speed USB device number 102 using dummy_hcd [ 315.175043][ T5999] usb 2-1: device descriptor read/64, error -71 [ 315.415265][ T5999] usb 2-1: new low-speed USB device number 103 using dummy_hcd [ 315.532485][T12290] /dev/rnullb0: Can't lookup blockdev [ 315.547982][ T5999] usb 2-1: device descriptor read/64, error -71 [ 315.655315][ T5999] usb usb2-port1: attempt power cycle [ 315.996845][ T5999] usb 2-1: new low-speed USB device number 104 using dummy_hcd [ 316.015805][ T5999] usb 2-1: device descriptor read/8, error -71 [ 316.265301][ T5999] usb 2-1: new low-speed USB device number 105 using dummy_hcd [ 316.271595][ T30] audit: type=1804 audit(1752589227.937:64): pid=12303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1617" name="rnullb0" dev="tmpfs" ino=1574 res=1 errno=0 [ 316.301800][ T5999] usb 2-1: device descriptor read/8, error -71 [ 316.343064][ T30] audit: type=1800 audit(1752589227.997:65): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1618" name="bus" dev="overlay" ino=482 res=0 errno=0 [ 316.383296][ T30] audit: type=1800 audit(1752589228.007:66): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1618" name="bus" dev="overlay" ino=482 res=0 errno=0 [ 316.404454][ T30] audit: type=1800 audit(1752589228.007:67): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1618" name="bus" dev="overlay" ino=482 res=0 errno=0 [ 316.429033][ T30] audit: type=1800 audit(1752589228.007:68): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1618" name="bus" dev="overlay" ino=482 res=0 errno=0 [ 316.435802][ T5999] usb usb2-port1: unable to enumerate USB device [ 316.455034][ T30] audit: type=1800 audit(1752589228.007:69): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1618" name="bus" dev="overlay" ino=482 res=0 errno=0 [ 316.478226][ T30] audit: type=1800 audit(1752589228.007:70): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1618" name="bus" dev="overlay" ino=482 res=0 errno=0 [ 316.500918][ T30] audit: type=1800 audit(1752589228.007:71): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1618" name="bus" dev="overlay" ino=482 res=0 errno=0 [ 316.521873][ T30] audit: type=1800 audit(1752589228.007:72): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1618" name="bus" dev="overlay" ino=482 res=0 errno=0 [ 316.542839][ T30] audit: type=1800 audit(1752589228.007:73): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1618" name="bus" dev="overlay" ino=482 res=0 errno=0 [ 316.571646][T12312] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1620'. [ 316.676448][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1622'. [ 316.701091][T12316] netlink: 168 bytes leftover after parsing attributes in process `syz.7.1622'. [ 316.881310][T12323] netlink: 'syz.3.1625': attribute type 33 has an invalid length. [ 316.889341][T12323] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1625'. [ 317.230928][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.241504][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.251068][ T59] sl0: compressed packet ignored [ 317.888498][T12333] /dev/rnullb0: Can't open blockdev [ 317.920889][T12336] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1629'. [ 318.134852][T12346] overlayfs: failed to clone upperpath [ 318.178299][T12338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.192961][T12338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.405844][T12360] /dev/rnullb0: Can't open blockdev [ 318.557841][T12363] sctp: [Deprecated]: syz.1.1637 (pid 12363) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.557841][T12363] Use struct sctp_sack_info instead [ 318.617706][ T5999] libceph: connect (1)[c::]:6789 error -101 [ 318.635372][ T5999] libceph: mon0 (1)[c::]:6789 connect error [ 318.645481][T12365] ceph: No mds server is up or the cluster is laggy [ 318.803619][T12374] /dev/rnullb0: Can't open blockdev [ 318.854132][T12374] /dev/rnullb0: Can't open blockdev [ 318.875496][T12376] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1640'. [ 318.990682][T12379] syz.1.1641: attempt to access beyond end of device [ 318.990682][T12379] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 319.049387][T12379] syz.1.1641: attempt to access beyond end of device [ 319.049387][T12379] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 319.090325][T12379] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 319.115482][T12379] syz.1.1641: attempt to access beyond end of device [ 319.115482][T12379] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 319.155010][T12379] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 319.190571][T12379] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 319.202612][T12379] UDF-fs: Scanning with blocksize 512 failed [ 319.228104][T12379] syz.1.1641: attempt to access beyond end of device [ 319.228104][T12379] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 319.247019][T12379] syz.1.1641: attempt to access beyond end of device [ 319.247019][T12379] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 319.262938][T12379] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 319.263532][T12388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1644'. [ 319.273654][T12379] syz.1.1641: attempt to access beyond end of device [ 319.273654][T12379] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 319.286192][T12388] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1644'. [ 319.302620][T12379] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 319.309404][T12388] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1644'. [ 319.323918][T12388] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1644'. [ 319.332979][T12379] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 319.332999][T12379] UDF-fs: Scanning with blocksize 1024 failed [ 319.333669][T12379] syz.1.1641: attempt to access beyond end of device [ 319.333669][T12379] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 319.341961][T12391] /dev/rnullb0: Can't lookup blockdev [ 319.352398][T12379] syz.1.1641: attempt to access beyond end of device [ 319.352398][T12379] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 319.362474][T12388] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1644'. [ 319.366896][T12392] /dev/rnullb0: Can't open blockdev [ 319.383814][T12379] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 319.407177][T12379] syz.1.1641: attempt to access beyond end of device [ 319.407177][T12379] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 319.443700][T12379] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 319.454158][T12379] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 319.463411][T12379] UDF-fs: Scanning with blocksize 2048 failed [ 319.472758][T12379] syz.1.1641: attempt to access beyond end of device [ 319.472758][T12379] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 319.488030][T12379] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 319.499176][T12379] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 319.506237][T12396] /dev/rnullb0: Can't open blockdev [ 319.510957][T12379] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 319.523527][T12379] UDF-fs: Scanning with blocksize 4096 failed [ 319.532432][T12379] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 319.546175][T12394] /dev/rnullb0: Can't lookup blockdev [ 319.586157][T12400] /dev/rnullb0: Can't open blockdev [ 319.646147][T12402] /dev/rnullb0: Can't lookup blockdev [ 319.665195][T12404] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1650'. [ 319.764856][T12409] Malformed UNC in devname [ 319.764856][T12409] [ 319.767952][T12410] /dev/rnullb0: Can't open blockdev [ 319.771979][T12409] CIFS: VFS: Malformed UNC in devname [ 319.813089][T12406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.835136][T12406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.878999][T12406] ./file0: Can't lookup blockdev [ 319.993215][T12420] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1657'. [ 320.153939][T12428] overlayfs: conflicting lowerdir path [ 320.156400][T12429] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 320.232858][T12431] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 320.301895][T12433] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 320.505650][T12440] netlink: 'syz.6.1664': attribute type 33 has an invalid length. [ 320.758179][T12459] netlink: zone id is out of range [ 320.764178][T12459] netlink: zone id is out of range [ 320.770210][T12459] netlink: zone id is out of range [ 320.777455][T12459] netlink: zone id is out of range [ 320.782674][T12459] netlink: zone id is out of range [ 320.788310][T12459] netlink: zone id is out of range [ 320.804249][T12459] netlink: zone id is out of range [ 320.809670][T12459] netlink: zone id is out of range [ 320.815314][T12459] netlink: zone id is out of range [ 320.820612][T12459] netlink: zone id is out of range [ 320.827132][T12461] /dev/rnullb0: Can't lookup blockdev [ 320.972760][T12468] /dev/rnullb0: Can't open blockdev [ 321.556313][ T1213] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 321.580605][T12504] /dev/rnullb0: Can't lookup blockdev [ 321.600117][T12506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.609671][T12506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.622690][T12507] /dev/rnullb0: Can't open blockdev [ 321.648008][T12509] /dev/rnullb0: Can't lookup blockdev [ 321.697044][ T1213] usb 2-1: device descriptor read/64, error -71 [ 321.727751][T12513] MTD: Couldn't look up '/dev/rnullb0': -15 [ 321.936154][ T1213] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 322.058068][T12518] /dev/rnullb0: Can't lookup blockdev [ 322.070964][ T1213] usb 2-1: device descriptor read/64, error -71 [ 322.113008][T12521] netlink: 'syz.7.1688': attribute type 33 has an invalid length. [ 322.117875][T12522] /dev/rnullb0: Can't lookup blockdev [ 322.120952][T12521] __nla_validate_parse: 2 callbacks suppressed [ 322.120965][T12521] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1688'. [ 322.207387][ T1213] usb usb2-port1: attempt power cycle [ 322.293797][T12531] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 322.304127][T12530] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 322.398914][T12535] /dev/rnullb0: Can't open blockdev [ 322.437895][T12538] /dev/rnullb0: Can't open blockdev [ 322.545192][ T1213] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 322.565773][ T1213] usb 2-1: device descriptor read/8, error -71 [ 322.695644][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 322.695662][ T30] audit: type=1804 audit(1752589234.357:95): pid=12546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1699" name="rnullb0" dev="tmpfs" ino=1574 res=1 errno=0 [ 322.791066][T12550] MTD: Couldn't look up '/dev/rnullb0': -15 [ 322.797594][T12550] /dev/rnullb0: Can't lookup blockdev [ 322.807272][ T1213] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 322.835702][ T1213] usb 2-1: device descriptor read/8, error -71 [ 322.842936][T12552] tipc: Started in network mode [ 322.848157][T12552] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 322.857308][T12552] tipc: Enabled bearer , priority 10 [ 322.950862][ T1213] usb usb2-port1: unable to enumerate USB device [ 323.079409][T12556] /dev/rnullb0: Can't open blockdev [ 323.170376][T12562] /dev/rnullb0: Can't open blockdev [ 323.257935][T12566] /dev/rnullb0: Can't lookup blockdev [ 323.365960][T12568] /dev/rnullb0: Can't open blockdev [ 323.460914][T12570] netlink: 'syz.6.1709': attribute type 3 has an invalid length. [ 323.469585][T12570] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1709'. [ 323.480664][T12570] overlay: Unknown parameter 'obj_user' [ 323.487378][T12570] /dev/rnullb0: Can't open blockdev [ 323.571267][ T5169] Bluetooth: hci4: SCO packet for unknown connection handle 3984 [ 323.651136][T12577] /dev/rnullb0: Can't open blockdev [ 323.697508][T12579] /dev/rnullb0: Can't open blockdev [ 323.975257][ T7089] tipc: Node number set to 10136234 [ 324.390817][T12587] netlink: 'syz.1.1713': attribute type 33 has an invalid length. [ 324.399843][T12587] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1713'. [ 324.473274][T12582] sg_write: data in/out 3317/14 bytes for SCSI command 0x0-- guessing data in; [ 324.473274][T12582] program syz.6.1714 not setting count and/or reply_len properly [ 324.494590][T12582] program syz.6.1714 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.731824][T12595] /dev/rnullb0: Can't open blockdev [ 324.740881][T12595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.750345][T12595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.331391][T12600] /dev/rnullb0: Can't open blockdev [ 325.448938][T12607] binder: 12603:12607 ioctl 4018620d 0 returned -22 [ 325.480594][T12610] netlink: 'syz.1.1723': attribute type 2 has an invalid length. [ 325.510501][T12615] /dev/rnullb0: Can't lookup blockdev [ 325.576862][T12621] netlink: 'syz.3.1728': attribute type 33 has an invalid length. [ 325.584803][T12621] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1728'. [ 325.747819][T12631] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1730'. [ 325.898555][T12641] /dev/rnullb0: Can't open blockdev [ 325.915146][ T30] audit: type=1326 audit(1752589237.577:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12634 comm="syz.1.1731" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff13d98e929 code=0x0 [ 325.988932][T12646] /dev/rnullb0: Can't open blockdev [ 326.590542][T12677] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1739'. [ 326.665168][ T7085] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 326.678478][T12681] /dev/rnullb0: Can't lookup blockdev [ 326.820412][ T7085] usb 2-1: not running at top speed; connect to a high speed hub [ 326.829591][ T7085] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.839721][ T7085] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 326.855055][ T7085] usb 2-1: New USB device found, idVendor=045e, idProduct=003b, bcdDevice= 0.40 [ 326.864202][ T7085] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.872421][ T7085] usb 2-1: Product: syz [ 326.876682][ T7085] usb 2-1: Manufacturer: syz [ 326.881293][ T7085] usb 2-1: SerialNumber: syz [ 327.304467][T12669] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 327.322295][T12669] /dev/rnullb0: Can't open blockdev [ 327.348242][ T7085] usbhid 2-1:1.0: can't add hid device: -71 [ 327.365403][ T7085] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 327.385522][ T7085] usb 2-1: USB disconnect, device number 110 [ 327.882322][T12703] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1749'. [ 327.951206][T12706] /dev/rnullb0: Can't open blockdev [ 328.186698][ T7089] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 328.335220][ T7089] usb 2-1: device descriptor read/64, error -71 [ 328.392984][T12730] netlink: 'syz.6.1756': attribute type 1 has an invalid length. [ 328.401194][T12730] netlink: 16098 bytes leftover after parsing attributes in process `syz.6.1756'. [ 328.411766][T12730] /dev/rnullb0: Can't open blockdev [ 328.580145][ T7089] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 328.715087][ T7089] usb 2-1: device descriptor read/64, error -71 [ 328.827407][ T7089] usb usb2-port1: attempt power cycle [ 329.001019][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1759'. [ 329.011261][T12741] /dev/rnullb0: Can't lookup blockdev [ 329.050405][T12743] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1760'. [ 329.093982][T12745] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1761'. [ 329.162705][T12746] MTD: Couldn't look up '/dev/rnullb0': -15 [ 329.168774][ T7089] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 329.176742][T12746] /dev/rnullb0: Can't lookup blockdev [ 329.206425][ T7089] usb 2-1: device descriptor read/8, error -71 [ 329.257022][T12750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.268805][T12750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.280280][T12750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.289156][T12750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.457756][ T7089] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 329.498020][ T7089] usb 2-1: device descriptor read/8, error -71 [ 329.605320][ T7089] usb usb2-port1: unable to enumerate USB device [ 329.834704][T12752] /dev/rnullb0: Can't open blockdev [ 329.874846][ T5169] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 330.123608][T12770] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1769'. [ 330.151417][T12771] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1769'. [ 330.163995][T12770] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1769'. [ 330.187311][T12774] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1770'. [ 330.298099][T12776] /dev/rnullb0: Can't lookup blockdev [ 330.488533][T12780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.503573][T12780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.537018][T12780] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1568557508 (100387680512 ns) > initial count (91621988416 ns). Using initial count to start timer. [ 330.578497][T12788] /dev/rnullb0: Can't lookup blockdev [ 330.772710][T12796] /dev/rnullb0: Can't lookup blockdev [ 330.962577][ T30] audit: type=1804 audit(1752589242.627:97): pid=12800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1778" name="rnullb0" dev="tmpfs" ino=1574 res=1 errno=0 [ 331.086224][T12804] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1780'. [ 331.166059][T12809] overlayfs: failed to resolve './file1': -2 [ 331.455336][ T7089] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 331.615069][ T7089] usb 2-1: Using ep0 maxpacket: 16 [ 331.632011][ T7089] usb 2-1: config 1 interface 0 has no altsetting 0 [ 331.644159][ T7089] usb 2-1: New USB device found, idVendor=056a, idProduct=0090, bcdDevice= 0.40 [ 331.654163][ T7089] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.665465][ T7089] usb 2-1: Product: syz [ 331.669653][ T7089] usb 2-1: Manufacturer: syz [ 331.674254][ T7089] usb 2-1: SerialNumber: syz [ 331.741298][T12816] /dev/rnullb0: Can't open blockdev [ 331.902242][T12825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.909806][T12830] trusted_key: syz.3.1790 sent an empty control message without MSG_MORE. [ 331.921141][T12825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.113286][ T7089] usbhid 2-1:1.0: can't add hid device: -71 [ 332.119620][ T7089] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 332.131930][ T7089] usb 2-1: USB disconnect, device number 115 [ 332.511406][T12834] /dev/rnullb0: Can't lookup blockdev [ 332.571518][T12838] MTD: Couldn't look up '/dev/rnullb0': -15 [ 332.695486][T12849] /dev/rnullb0: Can't open blockdev [ 332.809688][T12845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.819489][T12845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.991582][T12855] af_packet: tpacket_rcv: packet too big, clamped from 4 to 4294967272. macoff=96 [ 333.007798][T12855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.065120][ T5999] usb 2-1: new low-speed USB device number 116 using dummy_hcd [ 333.219175][ T5999] usb 2-1: No LPM exit latency info found, disabling LPM. [ 333.229517][ T5999] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 333.242253][ T5999] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x82 is Bulk; changing to Interrupt [ 333.252360][ T5999] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x3 is Bulk; changing to Interrupt [ 333.262956][ T5999] usb 2-1: config 1 interface 0 has no altsetting 0 [ 333.705469][T12872] /dev/rnullb0: Can't lookup blockdev [ 333.722091][T12872] overlay: ./cgroup is not a directory [ 333.793464][T12875] /dev/rnullb0: Can't open blockdev [ 334.114022][T12887] /dev/rnullb0: Can't lookup blockdev [ 334.665024][ T5169] Bluetooth: hci4: command 0x0406 tx timeout [ 334.684639][T12890] /dev/rnullb0: Can't open blockdev [ 334.695557][T12891] /dev/rnullb0: Can't open blockdev [ 335.709361][ T5999] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.730728][ T5999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.765016][ T5999] usb 2-1: Product: раФ [ 335.777114][ T5999] usb 2-1: can't set config #1, error -71 [ 335.805922][ T5999] usb 2-1: USB disconnect, device number 116 [ 335.908258][T12907] /dev/rnullb0: Can't lookup blockdev [ 335.967565][T12911] /dev/rnullb0: Can't lookup blockdev [ 336.132187][T12918] /dev/rnullb0: Can't lookup blockdev [ 336.235206][ T5999] usb 2-1: new low-speed USB device number 117 using dummy_hcd [ 336.385388][ T5999] usb 2-1: device descriptor read/64, error -71 [ 336.625038][ T5999] usb 2-1: new low-speed USB device number 118 using dummy_hcd [ 336.765229][ T5999] usb 2-1: device descriptor read/64, error -71 [ 336.884409][T12931] /dev/rnullb0: Can't open blockdev [ 336.951948][T12933] /dev/rnullb0: Can't lookup blockdev [ 336.969998][ T5999] usb usb2-port1: attempt power cycle [ 336.983628][T12939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.995670][T12939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.017115][T12940] /dev/rnullb0: Can't open blockdev [ 337.051098][T12943] netlink: 'syz.3.1826': attribute type 11 has an invalid length. [ 337.121002][T12950] /dev/rnullb0: Can't lookup blockdev [ 337.166942][T12953] /dev/rnullb0: Can't lookup blockdev [ 337.315077][ T5999] usb 2-1: new low-speed USB device number 119 using dummy_hcd [ 337.335740][ T5999] usb 2-1: device descriptor read/8, error -71 [ 337.587423][ T5999] usb 2-1: new low-speed USB device number 120 using dummy_hcd [ 337.616600][ T5999] usb 2-1: device descriptor read/8, error -71 [ 337.724876][T12964] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 337.730870][ T5999] usb usb2-port1: unable to enumerate USB device [ 337.755234][T12966] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 338.332107][T12979] /dev/rnullb0: Can't lookup blockdev [ 338.334968][ C1] sl0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 21090 ms [ 338.345531][ C1] sl0: transmit timed out, driver error? [ 339.034509][T12987] /dev/rnullb0: Can't open blockdev [ 339.064117][T12990] __nla_validate_parse: 1 callbacks suppressed [ 339.064134][T12990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1842'. [ 339.121731][T12990] fuse: Bad value for 'fd' [ 339.155051][ T7089] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 339.313753][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 339.315083][ T7089] usb 2-1: Using ep0 maxpacket: 16 [ 339.332714][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 339.337302][ T7089] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.351813][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 339.358878][ T7089] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 339.358911][ T7089] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 339.361253][ T7089] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 339.395992][ T7089] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.396176][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 339.404844][ T7089] usb 2-1: Product: syz [ 339.416604][ T7089] usb 2-1: Manufacturer: syz [ 339.416894][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.421379][ T7089] usb 2-1: SerialNumber: syz [ 339.482889][ T7089] usb 2-1: config 0 descriptor?? [ 339.513653][ T7089] peak_usb 2-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -8 [ 339.531944][ T7089] peak_usb 2-1:0.0: unable to read PCAN-USB serial number (err -8) [ 339.543289][T13002] lo speed is unknown, defaulting to 1000 [ 339.646746][ T7089] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -8 [ 339.696960][T12982] /dev/rnullb0: Can't open blockdev [ 339.714734][ T5999] usb 2-1: USB disconnect, device number 121 [ 339.785927][T13005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.802298][T13005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.941715][T13011] netlink: 'syz.3.1848': attribute type 10 has an invalid length. [ 339.965072][T13012] netlink: 'syz.3.1848': attribute type 10 has an invalid length. [ 340.166323][T13018] net_ratelimit: 163 callbacks suppressed [ 340.166340][T13018] netlink: zone id is out of range [ 340.190079][T13018] netlink: zone id is out of range [ 340.205142][T13018] netlink: zone id is out of range [ 340.302470][T13018] netlink: zone id is out of range [ 340.326085][T13018] netlink: zone id is out of range [ 340.331264][T13018] netlink: zone id is out of range [ 340.341801][T13022] netlink: 'syz.1.1850': attribute type 2 has an invalid length. [ 340.348546][T13002] chnl_net:caif_netlink_parms(): no params data found [ 340.350261][T13022] netlink: 'syz.1.1850': attribute type 2 has an invalid length. [ 340.360452][T13018] netlink: zone id is out of range [ 340.406471][T13018] netlink: zone id is out of range [ 340.411709][T13018] netlink: zone id is out of range [ 340.451457][T13018] netlink: zone id is out of range [ 340.512323][T13022] netlink: 'syz.1.1850': attribute type 2 has an invalid length. [ 340.846613][T13002] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.857041][T13002] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.864288][T13002] bridge_slave_0: entered allmulticast mode [ 340.872652][T13002] bridge_slave_0: entered promiscuous mode [ 340.881501][T13002] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.889029][T13002] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.899888][T13002] bridge_slave_1: entered allmulticast mode [ 340.907976][T13002] bridge_slave_1: entered promiscuous mode [ 341.017178][T13002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.034776][T13002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.273226][T13002] team0: Port device team_slave_0 added [ 341.296352][T13002] team0: Port device team_slave_1 added [ 341.481236][T13002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.527016][T13002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.554087][ T5169] Bluetooth: hci5: command tx timeout [ 341.561518][ T31] INFO: task kworker/1:8:7088 blocked for more than 143 seconds. [ 341.569774][ T31] Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 341.577483][T13002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.588298][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 341.597040][ T31] task:kworker/1:8 state:D stack:20632 pid:7088 tgid:7088 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 341.611294][T13002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.618493][T13002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.644773][ T31] Workqueue: usb_hub_wq hub_event [ 341.650016][ T31] Call Trace: [ 341.654557][ T31] [ 341.657617][ T31] __schedule+0x16f5/0x4d00 [ 341.674995][ T31] ? schedule+0x165/0x360 [ 341.679365][ T31] ? __lock_acquire+0xab9/0xd20 [ 341.702826][T13002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.713589][ T31] ? __pfx___schedule+0x10/0x10 [ 341.723911][ T31] ? schedule+0x91/0x360 [ 341.733999][ T31] schedule+0x165/0x360 [ 341.744131][ T31] schedule_timeout+0x9a/0x270 [ 341.765017][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 341.770444][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 341.796286][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.801529][ T31] ? wait_for_completion+0x267/0x5d0 [ 341.808180][ T31] wait_for_completion+0x2bf/0x5d0 [ 341.813332][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 341.819434][ T31] i2c_del_adapter+0x581/0x6e0 [ 341.824231][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 341.830131][ T31] ? em28xx_release_resources+0xde/0x240 [ 341.837817][ T31] ? kfree+0x18e/0x440 [ 341.841917][ T31] em28xx_i2c_unregister+0x4b/0x60 [ 341.847448][ T31] em28xx_release_resources+0x14c/0x240 [ 341.853022][ T31] em28xx_usb_disconnect+0x19f/0x2f0 [ 341.865010][ T31] usb_unbind_interface+0x26e/0x910 [ 341.870256][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 341.885754][ T31] device_release_driver_internal+0x4d9/0x800 [ 341.891880][ T31] bus_remove_device+0x34d/0x410 [ 341.925052][ T31] device_del+0x511/0x8e0 [ 341.929440][ T31] ? kfree+0x18e/0x440 [ 341.933529][ T31] ? __pfx_device_del+0x10/0x10 [ 341.938739][ T31] ? kobject_put+0x446/0x480 [ 341.943353][ T31] usb_disable_device+0x3e9/0x8a0 [ 341.975058][ T31] usb_disconnect+0x330/0x950 [ 341.979795][ T31] hub_event+0x1cdb/0x4a00 [ 341.984260][ T31] ? do_raw_spin_lock+0x121/0x290 [ 341.996159][ T31] ? register_lock_class+0x51/0x320 [ 342.001415][ T31] ? __pfx_hub_event+0x10/0x10 [ 342.006673][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 342.012427][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.028099][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 342.033858][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 342.039997][ T31] process_scheduled_works+0xae1/0x17b0 [ 342.045814][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 342.051796][ T31] worker_thread+0x8a0/0xda0 [ 342.056803][ T31] ? __kthread_parkme+0x7b/0x200 [ 342.062614][ T31] kthread+0x70e/0x8a0 [ 342.075074][ T31] ? __pfx_worker_thread+0x10/0x10 [ 342.085230][ T31] ? __pfx_kthread+0x10/0x10 [ 342.089824][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.105008][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.110216][ T31] ? __pfx_kthread+0x10/0x10 [ 342.114787][ T31] ret_from_fork+0x3f9/0x770 [ 342.119475][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 342.124605][ T31] ? __switch_to_asm+0x39/0x70 [ 342.129410][ T31] ? __switch_to_asm+0x33/0x70 [ 342.134170][ T31] ? __pfx_kthread+0x10/0x10 [ 342.138833][ T31] ret_from_fork_asm+0x1a/0x30 [ 342.143630][ T31] [ 342.146775][ T31] [ 342.146775][ T31] Showing all locks held in the system: [ 342.154581][ T31] 1 lock held by khungtaskd/31: [ 342.195020][ T31] #0: ffffffff8e53eca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 342.255218][ T31] 2 locks held by getty/5614: [ 342.259927][ T31] #0: ffff8880342e00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 342.295005][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 342.332204][ T31] 4 locks held by syz.3.88/6228: [ 342.338303][ T31] #0: ffff88802a65e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_release+0x5c/0x200 [ 342.385020][ T31] #1: ffff88802d37e0a0 (&tty->ldisc_sem/1){+.+.}-{0:0}, at: tty_ldisc_release+0x80/0x200 [ 342.404998][ T31] #2: ffffffff8f938648 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 342.414453][ T31] #3: ffffffff8e5447f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 342.472063][ T31] 6 locks held by kworker/1:8/7088: [ 342.481235][ T31] #0: ffff888022299948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 342.493680][ T31] #1: ffffc90003607bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 342.506291][ T31] #2: ffff888144b6e198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 342.515541][ T31] #3: ffff888021ecf198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 342.524714][ T31] #4: ffff88807d45c160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 342.539938][ T31] #5: ffff88805b9d9ba8 (&dev->lock#4){+.+.}-{4:4}, at: em28xx_release_resources+0x75/0x240 [ 342.553127][ T31] 3 locks held by kworker/1:9/7089: [ 342.562824][ T31] 1 lock held by syz.3.792/9124: [ 342.570070][ T31] #0: ffffffff8f938648 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 342.584743][ T31] 4 locks held by syz.3.1144/10584: [ 342.592126][ T31] #0: ffff88807dac4dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 342.606697][ T31] #1: ffff88807dac40b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 342.619413][ T31] #2: ffffffff8faa0768 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 342.631929][ T31] #3: ffff888031460b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 342.643751][ T31] 2 locks held by dhcpcd/13049: [ 342.651045][ T31] #0: ffff88802ad0e258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 342.668333][ T31] #1: ffffffff8e5447f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 342.756897][ T31] [ 342.759302][ T31] ============================================= [ 342.759302][ T31] [ 342.820197][ T31] NMI backtrace for cpu 1 [ 342.820218][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 342.820238][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.820248][ T31] Call Trace: [ 342.820255][ T31] [ 342.820262][ T31] dump_stack_lvl+0x189/0x250 [ 342.820287][ T31] ? __wake_up_klogd+0xd9/0x110 [ 342.820305][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.820327][ T31] ? __pfx__printk+0x10/0x10 [ 342.820360][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 342.820386][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 342.820406][ T31] ? _printk+0xcf/0x120 [ 342.820430][ T31] ? __pfx__printk+0x10/0x10 [ 342.820454][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 342.820475][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 342.820499][ T31] watchdog+0xfee/0x1030 [ 342.820519][ T31] ? watchdog+0x1de/0x1030 [ 342.820549][ T31] kthread+0x70e/0x8a0 [ 342.820567][ T31] ? __pfx_watchdog+0x10/0x10 [ 342.820583][ T31] ? __pfx_kthread+0x10/0x10 [ 342.820600][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.820615][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.820631][ T31] ? __pfx_kthread+0x10/0x10 [ 342.820646][ T31] ret_from_fork+0x3f9/0x770 [ 342.820677][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 342.820702][ T31] ? __switch_to_asm+0x39/0x70 [ 342.820716][ T31] ? __switch_to_asm+0x33/0x70 [ 342.820729][ T31] ? __pfx_kthread+0x10/0x10 [ 342.820744][ T31] ret_from_fork_asm+0x1a/0x30 [ 342.820773][ T31] [ 342.820779][ T31] Sending NMI from CPU 1 to CPUs 0: [ 342.980504][ C0] NMI backtrace for cpu 0 [ 342.980521][ C0] CPU: 0 UID: 0 PID: 13052 Comm: dhcpcd-run-hook Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 342.980541][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.980551][ C0] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 342.980577][ C0] Code: e8 9b a5 d7 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd c0 fc e8 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 fc d4 7d 00 48 c7 c3 58 ef e7 92 49 03 1e 48 89 [ 342.980592][ C0] RSP: 0018:ffffc9000be676e0 EFLAGS: 00000246 [ 342.980606][ C0] RAX: 1ffffffff1bd1f98 RBX: 0000000000000000 RCX: 4ce422bfbaf53000 [ 342.980623][ C0] RDX: ffffffff82086830 RSI: ffffffff8c04dfa0 RDI: ffffffff8c04df60 [ 342.980635][ C0] RBP: dffffc0000000000 R08: ffff888076f6c497 R09: 0000000000000000 [ 342.980646][ C0] R10: ffff888076f6c480 R11: ffffed100eded893 R12: ffff88805ecd2a48 [ 342.980658][ C0] R13: ffffffff8211e552 R14: ffffffff8de8fcc0 R15: dffffc0000000000 [ 342.980671][ C0] FS: 00007f2d3e7bcc80(0000) GS:ffff8881257b4000(0000) knlGS:0000000000000000 [ 342.980685][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 342.980697][ C0] CR2: 00007f2d3ea207e8 CR3: 000000007dc9e000 CR4: 00000000003526f0 [ 342.980710][ C0] Call Trace: [ 342.980716][ C0] [ 342.980723][ C0] lock_release+0x4b/0x3e0 [ 342.980746][ C0] up_write+0x2d/0x420 [ 342.980767][ C0] ? __pfx___anon_vma_interval_tree_augment_rotate+0x10/0x10 [ 342.980790][ C0] anon_vma_fork+0x4a2/0x500 [ 342.980809][ C0] dup_mmap+0x9eb/0x1ac0 [ 342.980832][ C0] ? __pfx_dup_mmap+0x10/0x10 [ 342.980851][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 342.980872][ C0] ? mm_init+0xce1/0xf10 [ 342.980895][ C0] copy_mm+0x13c/0x4b0 [ 342.980915][ C0] ? copy_process+0x978/0x3b80 [ 342.980934][ C0] copy_process+0x16d3/0x3b80 [ 342.980958][ C0] ? copy_process+0x978/0x3b80 [ 342.980985][ C0] ? __pfx_copy_process+0x10/0x10 [ 342.981006][ C0] ? __lock_acquire+0xab9/0xd20 [ 342.981028][ C0] kernel_clone+0x21e/0x870 [ 342.981049][ C0] ? __lock_acquire+0xab9/0xd20 [ 342.981067][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 342.981093][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 342.981119][ C0] __x64_sys_clone+0x18b/0x1e0 [ 342.981143][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 342.981172][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 342.981198][ C0] ? do_syscall_64+0xbe/0x3b0 [ 342.981218][ C0] do_syscall_64+0xfa/0x3b0 [ 342.981233][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.981249][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.981264][ C0] ? clear_bhb_loop+0x60/0xb0 [ 342.981281][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.981296][ C0] RIP: 0033:0x7f2d3e956636 [ 342.981309][ C0] Code: 89 df e8 6d e8 f6 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 52 89 c5 85 c0 75 31 64 48 8b 04 25 10 00 00 [ 342.981322][ C0] RSP: 002b:00007fff42d9e5b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 342.981337][ C0] RAX: ffffffffffffffda RBX: 00007fff42d9e5b8 RCX: 00007f2d3e956636 [ 342.981349][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 342.981359][ C0] RBP: 0000556652e2ce60 R08: 0000000000000000 R09: 0000000000000000 [ 342.981368][ C0] R10: 00007f2d3e7bcf50 R11: 0000000000000246 R12: 0000556652e2ef70 [ 342.981379][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 342.981396][ C0] [ 343.028747][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 343.028769][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 343.028789][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 343.028801][ T31] Call Trace: [ 343.028809][ T31] [ 343.028817][ T31] dump_stack_lvl+0x99/0x250 [ 343.028844][ T31] ? __asan_memcpy+0x40/0x70 [ 343.028866][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 343.028887][ T31] ? __pfx__printk+0x10/0x10 [ 343.028922][ T31] vpanic+0x281/0x750 [ 343.028944][ T31] ? __pfx_vpanic+0x10/0x10 [ 343.028961][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 343.028985][ T31] ? preempt_schedule+0xae/0xc0 [ 343.029004][ T31] ? preempt_schedule_common+0x83/0xd0 [ 343.029027][ T31] panic+0xb9/0xc0 [ 343.029045][ T31] ? __pfx_panic+0x10/0x10 [ 343.029066][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 343.029091][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 343.029117][ T31] watchdog+0x102d/0x1030 [ 343.029136][ T31] ? watchdog+0x1de/0x1030 [ 343.029161][ T31] kthread+0x70e/0x8a0 [ 343.029180][ T31] ? __pfx_watchdog+0x10/0x10 [ 343.029208][ T31] ? __pfx_kthread+0x10/0x10 [ 343.029225][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 343.029241][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 343.029257][ T31] ? __pfx_kthread+0x10/0x10 [ 343.029273][ T31] ret_from_fork+0x3f9/0x770 [ 343.029297][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 343.029322][ T31] ? __switch_to_asm+0x39/0x70 [ 343.029336][ T31] ? __switch_to_asm+0x33/0x70 [ 343.029350][ T31] ? __pfx_kthread+0x10/0x10 [ 343.029366][ T31] ret_from_fork_asm+0x1a/0x30 [ 343.029395][ T31] [ 343.484875][ T31] Kernel Offset: disabled [ 343.489186][ T31] Rebooting in 86400 seconds..