last executing test programs: 1m54.628520542s ago: executing program 1 (id=284): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x252440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="67400f07c40249af4b8bb9800000c00f3235010200000f300f20a366450f769e00000100440f20c03588001d00445b66baf80cb88cf4b684ef66bafc0ced460f01c9c4827d24c366ba4cf0ff07ef87f345a57a43e16806a4", 0x58}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m54.442319432s ago: executing program 1 (id=286): syz_usb_connect(0x5, 0x4f, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x13, 0xc8, 0x2f, 0x20, 0x6cd, 0x104, 0xc86a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x91, 0xec, 0x1, 0x68, 0x83, 0xb6, 0x9, [], [{{0x9, 0x5, 0x2, 0x10, 0x40, 0x3, 0x5, 0x5}}]}}, {{0x9, 0x4, 0x2b, 0xfa, 0x2, 0x93, 0x5c, 0x95, 0x1, [], [{{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x8, 0x40, 0x9}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x9, 0x1a, 0x6, [@generic={0x7, 0x5, "ce37064ab4"}]}}]}}]}}]}}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9f76f4661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28) syz_usb_connect(0x5, 0x4f, &(0x7f0000001840)={{0x12, 0x1, 0x0, 0x13, 0xc8, 0x2f, 0x20, 0x6cd, 0x104, 0xc86a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x91, 0xec, 0x1, 0x68, 0x83, 0xb6, 0x9, [], [{{0x9, 0x5, 0x2, 0x10, 0x40, 0x3, 0x5, 0x5}}]}}, {{0x9, 0x4, 0x2b, 0xfa, 0x2, 0x93, 0x5c, 0x95, 0x1, [], [{{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x8, 0x40, 0x9}}, {{0x9, 0x5, 0x2, 0x0, 0x8, 0x9, 0x1a, 0x6, [@generic={0x7, 0x5, "ce37064ab4"}]}}]}}]}}]}}, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) (async) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000) (async) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000a80)=@gcm_128={{0x303}, "9f76f4661480294c", "5fa3c0bf46782bbee21b09b7446edc75", "5bee93e1", "f11bb8cba3046ce3"}, 0x28) (async) 1m53.286360838s ago: executing program 1 (id=289): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$isdn(0x22, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r1, 0x2203, &(0x7f0000000040)) landlock_restrict_self(r1, 0x1) sendto$isdn(r0, &(0x7f0000000000)={0x8, 0x9, "62ad3a5b29571653ce7b06f9d5ff58815ac9c16b3726b172e891cb"}, 0x23, 0x200000c0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000180)={[{}, {@subsystem='cpuacct'}]}) 1m53.142154323s ago: executing program 1 (id=291): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x20200, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r1, 0x5015, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r2 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x6c, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x8, 0x5, 0x0, 0x1, [@generic="0bad07e0"]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x804) setpgid(r2, 0x0) setpgid(0x0, r2) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xfeff, 0x0) semget$private(0x0, 0x1, 0x180) 1m53.039934799s ago: executing program 1 (id=293): setreuid(0xffffffffffffffff, 0xee00) ioprio_set$pid(0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fc5bdf255400000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x20004801}, 0x20040080) 1m52.399095532s ago: executing program 1 (id=297): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) fstat(0xffffffffffffffff, 0x0) (async) r1 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x14) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f00000028c0)={{0x12, 0x1, 0x110, 0x67, 0x8, 0xf6, 0x8, 0x9e1, 0x5121, 0xd572, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x4b, 0x30, 0x8, [{{0x9, 0x4, 0x3c, 0x4, 0x0, 0xd6, 0xb1, 0xef, 0xd4}}]}}]}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088a84803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000900)={'sit0\x00', &(0x7f00000007c0)={'syztnl2\x00', r4, 0x8, 0x10, 0x1, 0x5, {{0x5, 0x4, 0x1, 0x1a, 0x14, 0x66, 0x0, 0x5, 0x2f, 0x0, @private=0xa010101, @local}}}}) 1m52.185616213s ago: executing program 32 (id=297): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) fstat(0xffffffffffffffff, 0x0) (async) r1 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x14) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f00000028c0)={{0x12, 0x1, 0x110, 0x67, 0x8, 0xf6, 0x8, 0x9e1, 0x5121, 0xd572, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x4b, 0x30, 0x8, [{{0x9, 0x4, 0x3c, 0x4, 0x0, 0xd6, 0xb1, 0xef, 0xd4}}]}}]}}, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080088a84803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000900)={'sit0\x00', &(0x7f00000007c0)={'syztnl2\x00', r4, 0x8, 0x10, 0x1, 0x5, {{0x5, 0x4, 0x1, 0x1a, 0x14, 0x66, 0x0, 0x5, 0x2f, 0x0, @private=0xa010101, @local}}}}) 51.114543617s ago: executing program 4 (id=786): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73f72cc9f0ba1f802000000005e140602000000000e00350010000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$unix(r3, &(0x7f0000011800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000000bd40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}], 0x20, 0x20040010}}], 0x1, 0x20004810) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x22, &(0x7f0000005980)={0x0, 0x989680}) 51.1073662s ago: executing program 4 (id=787): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x6) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000800)=ANY=[@ANYBLOB="010000000001000096000040"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2a040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"]) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xfffffffd, 0x34424752, 0x0, 0x0, 0x0, 0x0, 0x7}}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4dfd2f5a66be9c296d8de7ba97f1b7706cdcca0cebd84d4d8bb050c07859b4f6d6ebe5eb8b4e0896dbb881cc8b5fea7f64d71c446a9e03eb699fa5fbb9cca35ff12a8bff06e4e5ede34417898c8a0e4cdaca8fe3ffd4fbe4ebe609231c51a1b0d2e5f9da1cfe96628d6d165006", @ANYRES16=r4, @ANYBLOB="0100ffffffff0000000001000000050007000000000008000900000000101400200000000000000000000000ffff0000000008000a000000000014001f000000000000000000000000000000000006000200000000000500220001000000"], 0x64}, 0x1, 0x620b}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TCFLSH(r8, 0x540b, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000227bd2f81675e0aa7ab3600000800040003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x20004881}, 0x60cf868f411e32ce) 51.033268653s ago: executing program 4 (id=788): mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x22528a9, &(0x7f0000000080)=ANY=[@ANYBLOB='fsm_gic=0x0000000000003789,\x00']) 50.954544867s ago: executing program 4 (id=789): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpgrp(0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2, r1}) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2, r1}) syz_open_procfs(r1, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x68a80705dee50ef7, 0x54) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) getpgrp(0x0) (async) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x2, r1}) (async) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2, r1}) (async) syz_open_procfs(r1, &(0x7f0000001140)='net\x00') (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', 0x68a80705dee50ef7, 0x54) (async) 50.853025984s ago: executing program 4 (id=792): r0 = gettid() ioctl$sock_inet_SIOCSIFBRDADDR(0xffffffffffffffff, 0x891a, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socket$caif_seqpacket(0x25, 0x5, 0x4020003) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000003280)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff}, 0xffffffa4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000240)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, &(0x7f0000000280)={&(0x7f0000000780)={{@local}, {@host, 0x800000}, 0x400, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b83172d07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7dafb87c5918deb59ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162e6abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c9"}, 0x418}) ioctl$int_in(r2, 0x5421, &(0x7f0000000340)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = socket$kcm(0x2, 0x8, 0x106) setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f0000000000), 0x4) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000000)=0x2, &(0x7f0000000180)=0x2) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000b40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r7 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200040c0, &(0x7f0000000300)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001d00210000000000000000000700000005000000000000000a000200"], 0x30}}, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x35, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r0) tkill(r0, 0x13) 47.778840678s ago: executing program 4 (id=829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, 0x0, &(0x7f0000000080)) r8 = fcntl$dupfd(r6, 0x0, r6) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000001140)=0x10000000) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRESDEC=r11], 0x1c}}, 0x0) r13 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt(r13, 0xc, 0x7, 0x0, 0x0) sendmsg$nfc_llcp(r8, &(0x7f0000000500)={&(0x7f0000000380)={0x27, r12, 0xffffffffffffffff, 0x3, 0x0, 0x7, "868b689f6ee485528cf2b4be47d372f1dd4bb6501494e891d412e88190f2a96f99810c2ce67135d841ef6a2756c699006c52a23f9b18c7559a04615a11ecd1", 0xc}, 0x60, &(0x7f0000000480)=[{&(0x7f0000000400)="ff0ce81f05d2211c4280a8ffd2646c8f4bd6945cf5951bc4cdda4482274bc9c3b0b7f4b72748711dede916ab9531b3b206d7e6820549386092ea36e011df34c3fb38249df8dd4d2e2079f00ddeccb438d4186bc733614bc7", 0x58}], 0x1, &(0x7f00000004c0)={0x30, 0x29, 0x5, "cf43ca4a9f0d95f5993462a4c01c7af8308eecbcafb02c28d24ae924f3b4"}, 0x30, 0x42}, 0x2000040) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mount$cgroup(0x0, 0x0, &(0x7f00000005c0), 0x2010080, 0x0) r14 = timerfd_create(0x8, 0x0) timerfd_settime(r14, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_settime(r14, 0x2, &(0x7f0000000200)={{0x0, 0x989680}}, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0a0010000000400bb80060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) 45.386288166s ago: executing program 2 (id=845): flock(0xffffffffffffffff, 0x96574aeee61c533a) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000052a000/0x2000)=nil) mlockall(0x7) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149e82, 0x244) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain) write$cgroup_int(r2, &(0x7f0000000040)=0x10001, 0x12) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) flock(0xffffffffffffffff, 0x96574aeee61c533a) (async) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f000052a000/0x2000)=nil) (async) mlockall(0x7) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) (async) setuid(r1) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149e82, 0x244) (async) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain) (async) write$cgroup_int(r2, &(0x7f0000000040)=0x10001, 0x12) (async) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) (async) 45.170577054s ago: executing program 2 (id=849): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000cef8bd08410e424176bc010203030902120001000000000904"], 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000cef8bd08410e424176bc010203030902120001000000000904"], 0x0) 43.893840992s ago: executing program 2 (id=858): clock_adjtime(0x0, &(0x7f0000000000)={0x8000, 0xe, 0x0, 0x7, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0xba, 0x3, 0x6, 0x3, 0x0, 0x0, 0x3, 0x400000000000000, 0x0, 0x0, 0xf, 0xfffffffffffffffd, 0x6, 0x5, 0x100, 0x2f439}) (async) clock_adjtime(0x0, &(0x7f0000000000)={0x8000, 0xe, 0x0, 0x7, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x77, 0x0, 0x0, 0xba, 0x3, 0x6, 0x3, 0x0, 0x0, 0x3, 0x400000000000000, 0x0, 0x0, 0xf, 0xfffffffffffffffd, 0x6, 0x5, 0x100, 0x2f439}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) clock_adjtime(0x6, &(0x7f0000000480)={0xffffffff, 0x8, 0x2, 0xfff, 0x100, 0x2, 0x7, 0x1, 0x4, 0x8001, 0x9, 0x200, 0x6, 0x9, 0x9, 0x0, 0x3, 0x7fff, 0x7, 0x6, 0x0, 0x3, 0x100000000, 0x1180000, 0x2, 0xfaa}) (async) clock_adjtime(0x6, &(0x7f0000000480)={0xffffffff, 0x8, 0x2, 0xfff, 0x100, 0x2, 0x7, 0x1, 0x4, 0x8001, 0x9, 0x200, 0x6, 0x9, 0x9, 0x0, 0x3, 0x7fff, 0x7, 0x6, 0x0, 0x3, 0x100000000, 0x1180000, 0x2, 0xfaa}) r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000402609333300000000000109022d00010000000009040000050300020009210000330122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="deeaaaec6e7f37400e3b0000003b1060d47c725dca3efe191eb0054d371a115e4a6b08697cdbb816a4f923936b455bd612c103dd040379d2ea130943c7006c4274954a0c063c8d4fc851204a6ea2bd449644e944852670690ac4ef3a58d0c2ddd0c2e9236b92eed31bd5bc99d2dd4a3d27cf9f2852d6ff516dc517ec3f42c4ef93612cf1c145490965870828591816fc613429525a55c2412285992d"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)=@ocfs2={0xc, 0x1, {0x3, 0x6, 0x5}}, &(0x7f0000000140), 0x1400) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) (async) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) 42.222272735s ago: executing program 2 (id=873): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x13, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000440)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000280), &(0x7f0000000300)=[r4], &(0x7f0000000340)}) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000200), 0x3, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r6], &(0x7f00000001c0)=[0xfe1], &(0x7f0000000280)=[r7], &(0x7f00000000c0)=[0xffffffffffffffff], 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000840)={0x400, 0x9, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x6, 0x0, 0x9, 0xffffffff, 0x2, 0x7f], &(0x7f00000007c0)=[r4, r7], &(0x7f0000000800)=[0x8080000000000, 0x2, 0x7, 0x10000, 0x1ab7], 0x0, 0x3fb}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000740)={'team0\x00', 0x0}) (async, rerun: 32) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 32) r12 = socket$packet(0x11, 0x2, 0x300) (async) r13 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r13, &(0x7f00000000c0)={0x1d, r14}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f0000000140)={r15, 0x1, 0x6, @local}, 0x10) (async, rerun: 64) setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f00000002c0)={r15, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) (rerun: 64) setsockopt$packet_add_memb(r12, 0x107, 0x1, &(0x7f0000000200)={r15, 0x1, 0x6, @local}, 0x10) (async, rerun: 32) setsockopt$packet_drop_memb(r12, 0x107, 0x2, &(0x7f0000000580)={r15, 0x1, 0x6, @local}, 0x10) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000380)={'syztnl1\x00', r15, 0x20, 0x8000, 0x9, 0x5, {{0x14, 0x4, 0x2, 0x15, 0x50, 0x68, 0x0, 0x7, 0x2f, 0x0, @private=0xa010102, @empty, {[@timestamp_addr={0x44, 0x3c, 0xae, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x417}, {@local, 0x6}, {@loopback, 0x6}, {@empty, 0x3}, {@private=0xa010100, 0x1}, {@rand_addr=0x64010100, 0x200}, {@multicast2, 0x998}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl2\x00', r10, 0x1, 0x700, 0x1000, 0xe9d, {{0xa, 0x4, 0x1, 0x9, 0x28, 0x68, 0x0, 0x14, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101, {[@ra={0x94, 0x4}, @rr={0x7, 0xf, 0xda, [@multicast1, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="84040002", @ANYRES16=r11, @ANYRES32=0x0, @ANYRES32=r10, @ANYRES16=0x0, @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a72696e5f696e74657276616c00000000000000000000000500030003000000080004000200000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000001000008000600", @ANYRES32=r16, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000700000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000008000100", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="081d0104", @ANYRES32=r9, @ANYBLOB="f0010280380001002465706f7274000000000000000000000000000000000000000000000500030003000000080004000000000000000000", @ANYRES32=r15, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400b2eaff0008000600", @ANYRES32=r15, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000500000031000600", @ANYRES32=r15, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080604000100000008000600", @ANYRES32=r9, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000f003f06e607000005000801490000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYRESDEC=r10], 0x484}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000) 42.193358537s ago: executing program 2 (id=874): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000d0a0108000000000000000002000042"], 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x1}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) syz_usb_connect(0x5, 0x1e0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e235e3209a060100c551010203010902ce01014c0000000904"], 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x400}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a40)="eee4", 0x2}], 0x1}}], 0x1, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg$unix(r3, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000017c0)=""/4090, 0xffa}], 0x1}}], 0x1, 0x18ca02a0, 0x0) ptrace(0x10, r0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000240)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000080)={r5, 0x2}, 0x8) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) setgroups(0x1, &(0x7f0000000040)=[0x0]) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 41.494392057s ago: executing program 0 (id=878): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000440)={0x8, {"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", 0x1000}}, 0x1006) socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000005c0)="43735ec930d2be89360d0f25af1ee4a5d0fa2d07c8", 0x15}], 0x1, 0x0, 0x0, 0x881}], 0x1, 0x20041000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={r2, 0x5}, 0x8) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 40.893543638s ago: executing program 0 (id=881): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040057}, 0x240008c4) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000000040)={0x5, 0x1, 0x40}, 0xc) syz_io_uring_setup(0x182, &(0x7f0000000080)={0x0, 0x200000, 0x13100, 0x0, 0x15}, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000400)) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002280)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r4, @ANYBLOB="0a00060008021100000100000c0043"], 0x34}}, 0x0) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004055}, 0x48000) 40.794462472s ago: executing program 0 (id=884): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010000000120000000000900020073797a30000000000800410072786500140041"], 0x38}, 0x1, 0x0, 0x0, 0x808}, 0x4004000) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c7eb26f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x5, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x0, {0x40, 0x3, 0x6, 0xffff, 0x1000, 0xfffffffffffffffc, 0x0, 0x0, 0x120, 0x2000, 0x0, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000440)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) write$tun(r4, 0x0, 0x0) mount$binder(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xe2ca6, 0x0) 40.749449511s ago: executing program 0 (id=885): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x8000, 0x2) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x3, 0x0, &(0x7f00000000c0)=""/121, &(0x7f0000000140)=""/91, &(0x7f00000001c0)=""/255}) r1 = dup(r0) syz_init_net_socket$rose(0xb, 0x5, 0x0) read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgrp(r2) pread64(r0, &(0x7f0000002340)=""/211, 0xd3, 0x77a9) pwritev(r0, &(0x7f0000002840)=[{&(0x7f0000002440)="7e3724f7eebdd210f2acdae536a689b355ab04c2f1492a489be93b4d21a4ee8430834ddc6ca9f4a6afb30f67f46f96e1841a1db08e61701dcd8321952427240d0dda5259a853a7a7a40f824c75cf56f2bdb856c6efc1e06d9e61df7f0091cd7d7575e8583f209ada60fc24c92ae5ac7e9037a18cbf7a9122cf69b825bce2f9d09ce88c22509defdaa3ed635391399d6f85e5ec3ed722d052b05c17180a2ec357f2048096504f44", 0xa7}, {&(0x7f0000002500)="6efcde8f6394a648dd3dd6077a446f83748ff14f7312799098a40d79cab2d15672aec0285b6a58d6f0c5fc15e892c36f1074aa2dbfef65b95c38694f8a6021052e303500e0a24102d950920b9e4ba69ca1960e52c6df9f5289ebc59cb26afc47cd5f7ee77a0c6f358bfa2c81edaf222ec7222d23ebef3cb49f60e5edb3fab442ee97ea29fe4ec4cd3d2181b7bb04092b9ce00c8b0c4376dbd33670cfd02ffcbe1ccb412d750c2266630d175273fc6c1edd1579a307915c5d7a9460b3", 0xbc}, {&(0x7f00000025c0)="771548da7d86e880443eec643a65b1b54ef2ba99bcd5b689d2497de6ccc827e845139e56096105779ce41e2f09d69962ec2968354dac3a89272cc4e690773b921fee2577511442381c62fe05f9c82774fca21af6936e80da57c0e7dd7e1b19", 0x5f}, {&(0x7f0000002640)="3a3ea7a20456f7917bb77f8775f46bc9d6b1971ea4b663cd55ea16de451ce89f937935d076e7e642204da5cd9972e9c7380513d2d5857f317d65fb7eca53eb06e2833c0dd6e36ecf5fc93adb35e4823a290800e7218c1571df897a59a529d0b2c770860572465fc2a212d429a9ac0cc7f3cefebf6d18394fef6ce47f68d7172305ffe11e0870dea647a34ca619d4f44039937ad5f344465d51cbe96365a8470413bb02575d3c61206bdd8afcd0069bc436ecc901b76bcd21ab9559e11465c4b5e729309e5ad1a683d8de57e995ab0ada37c57b166fe0c9", 0xd7}, {&(0x7f0000002740)="d6b17aa9e5389f378c4069f2e0ee1c85c7fe159d729feeb745ce89b82174a11ea0d3292399c5cd00a311feb77ce480626fa1eb831c3d931c37773fede319e118a65a2b6258bf5b104f07a48aa3a1a478bb698ea13400a9c13d8cc27b677c936f92e9a355e0e6a5c869a8781e63bc0785e0", 0x71}, {&(0x7f00000027c0)="c87af831f74f87677c13dcd994edad8b5630fa51636b3ff77cda6df4710c1c143a455cf530766b2ca2972bf29d344bafdb3dfdf3afa0006ff28ae1fb0b30250478ae3157c6c0bd5af9c96ce356b6", 0x4e}], 0x6, 0x856, 0x3) ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f00000028c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, &(0x7f0000002900)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002940)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000002980)="fbb2433f1d9cc76c744ed0bbe45e8db2ba7a6c3e2d4fcef70dd9dc8452897715535f89d6599bd101f9ca4c2b96893097ba949c7d3defdcd10149ebef40bc178cc0f4a9bc8990cbb6688835f0f7fcae905a78fbd57fc5dede65818c38b95ea0f8fbdd3836e983d0de4b9a86a1faa4052503b99fd4fca57ef8f7ca5b6009e119552de1926f0821a3", 0x87) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000002a40), 0x80, 0x0) sendmsg$AUDIT_TTY_SET(r5, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)={0x18, 0x3f9, 0x21, 0x70bd2c, 0x25dfdbfd, {}, ["", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = open$dir(&(0x7f0000002b80)='./file0\x00', 0x40100, 0x74) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f0000002bc0)=@v2={0x2, @adiantum, 0x8, '\x00', @d}) fsetxattr$trusted_overlay_origin(r6, &(0x7f0000002c00), &(0x7f0000002c40), 0x2, 0x1) connect$inet6(r4, &(0x7f0000002c80)={0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x662c}, 0x1c) mkdirat(r1, &(0x7f0000002cc0)='./file0\x00', 0xd4) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x7fff) epoll_create(0x6) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002d00), 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r8, 0x4008af04, &(0x7f0000002d80)=&(0x7f0000002d40)) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000002e00), r5) sendmsg$DEVLINK_CMD_TRAP_SET(r8, &(0x7f0000003140)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003100)={&(0x7f0000002e40)={0x2a0, r9, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x2a0}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000037c0)={0x14, &(0x7f00000036c0)={0x0, 0x31, 0xb3, {0xb3, 0xc, "e65edc38ae7de5ccfdee8b68e93d63f4f8ffec7c1d356c939bed823cce8cbbb2d12ca9c4eb772674d80b73bab6c78e2f65351ea977474183abc755252a93e7cf859d55fc34f9ab6ccbb8bd966fc2d1d005c98b807ea1a1774635066d45756cb67eca65b3e445fb99a192acb6c3e97cce868a31be4f73b25a8bef28c8e6cb75a345be41f082f44b67d9ad51fb37f09e065e66bdaa4c9550c203ddbbb3467362173f6acfb2ebd29ab289080b1c89ca51470f"}}, &(0x7f0000003780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c0a}}}, &(0x7f0000003ac0)={0x44, &(0x7f0000003800)={0x40, 0x12, 0xfa, "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"}, &(0x7f0000003900)={0x0, 0xa, 0x1, 0xac}, &(0x7f0000003940)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000003980)={0x20, 0x81, 0x3, "40e9b7"}, &(0x7f00000039c0)={0x20, 0x82, 0x1, "a3"}, &(0x7f0000003a00)={0x20, 0x83, 0x2, "23e4"}, &(0x7f0000003a40)={0x20, 0x84, 0x4, "1077dd31"}, &(0x7f0000003a80)={0x20, 0x85, 0x3, "ecfd59"}}) 40.138330223s ago: executing program 0 (id=886): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xb8) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3800008, 0x12, r2, 0x0) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f00000000c0)=0xffffffff, 0x4) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f00000002c0)={0x7, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = dup(r0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x41c14, &(0x7f0000000140)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d51aea0d09c5f385b617231ed29657c0ac65ae80f07000000798c675988b96828e162537543b0c2bb0000000000000000000000000000005fd4bf3132101addb7839995d3b9c3c5d8cfbf1b92962a55cbbf756bb25d65f0b873ca4dc898d5e95197ff03000000000000d3374a98e8bf984fa8563bf00890a754b01a0bbeb8e8313aebd6ce6ac8b38efbf0fab629bf700353b8b953f91109e70f24cca399c7a8f3ac5d9c33234758ad439546026ad043928decec8084a41ef1f3ff10c8bde9b7396a92b321e53c91031c1820df8b532d26b800cd0e0662b845ab70699a", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',version=9p2000.L,access=client,k']) 40.122690884s ago: executing program 0 (id=887): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000002040)=0x8, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000050007000000000008000900000000101400200000000000000000000000ffff0000000008000a0000000014001f00000000000000000000000000000000000600020000000000050022000100000000"], 0x64}, 0x1, 0x620b}, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f00000001c0), &(0x7f0000000280)=0x4) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) write$nci(r5, &(0x7f0000000780)=ANY=[@ANYBLOB="61030208e801a60201ad02"], 0xb) fcntl$dupfd(r3, 0x406, r4) vmsplice(r4, &(0x7f0000000500)=[{&(0x7f0000000040)='R', 0x1}], 0x1, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffb, @mcast2, 0x5}, 0x31) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x4000, &(0x7f0000000140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', &(0x7f0000000380), 0x11, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="81cee23e9cac80db89", 0x9}], 0x1}}], 0x1, 0x4001c00) 39.147206183s ago: executing program 2 (id=888): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, &(0x7f0000000080)={@any, 0x7fffffff}) (async) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, &(0x7f0000000080)={@any, 0x7fffffff}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, &(0x7f0000001700)={@my=0x1, 0x2}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept4(r4, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000140)=0x80, 0x0) (async) accept4(r4, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000140)=0x80, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000640)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0x1200000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@appraise}, {@dont_hash}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0x1200000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@appraise}, {@dont_hash}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) (async) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0x4008af12, &(0x7f0000000080)={0x1, 0x8}) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000000)={0xa, 0x4, 0xfa00, {r6}}, 0xc) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000000)={0xa, 0x4, 0xfa00, {r6}}, 0xc) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0xfffffd97) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x1) 32.762958002s ago: executing program 33 (id=829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a01, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000000) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x11, 0x0, &(0x7f0000000080)) r8 = fcntl$dupfd(r6, 0x0, r6) ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000001140)=0x10000000) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRESDEC=r11], 0x1c}}, 0x0) r13 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt(r13, 0xc, 0x7, 0x0, 0x0) sendmsg$nfc_llcp(r8, &(0x7f0000000500)={&(0x7f0000000380)={0x27, r12, 0xffffffffffffffff, 0x3, 0x0, 0x7, "868b689f6ee485528cf2b4be47d372f1dd4bb6501494e891d412e88190f2a96f99810c2ce67135d841ef6a2756c699006c52a23f9b18c7559a04615a11ecd1", 0xc}, 0x60, &(0x7f0000000480)=[{&(0x7f0000000400)="ff0ce81f05d2211c4280a8ffd2646c8f4bd6945cf5951bc4cdda4482274bc9c3b0b7f4b72748711dede916ab9531b3b206d7e6820549386092ea36e011df34c3fb38249df8dd4d2e2079f00ddeccb438d4186bc733614bc7", 0x58}], 0x1, &(0x7f00000004c0)={0x30, 0x29, 0x5, "cf43ca4a9f0d95f5993462a4c01c7af8308eecbcafb02c28d24ae924f3b4"}, 0x30, 0x42}, 0x2000040) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mount$cgroup(0x0, 0x0, &(0x7f00000005c0), 0x2010080, 0x0) r14 = timerfd_create(0x8, 0x0) timerfd_settime(r14, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_settime(r14, 0x2, &(0x7f0000000200)={{0x0, 0x989680}}, 0x0) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0a0010000000400bb80060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000188"], 0xffe) 24.656836245s ago: executing program 34 (id=887): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000002040)=0x8, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100ffffffff0000000001000000050007000000000008000900000000101400200000000000000000000000ffff0000000008000a0000000014001f00000000000000000000000000000000000600020000000000050022000100000000"], 0x64}, 0x1, 0x620b}, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f00000001c0), &(0x7f0000000280)=0x4) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) write$nci(r5, &(0x7f0000000780)=ANY=[@ANYBLOB="61030208e801a60201ad02"], 0xb) fcntl$dupfd(r3, 0x406, r4) vmsplice(r4, &(0x7f0000000500)=[{&(0x7f0000000040)='R', 0x1}], 0x1, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffb, @mcast2, 0x5}, 0x31) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x4000, &(0x7f0000000140)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x1000}}) mount$fuseblk(&(0x7f0000000240), &(0x7f0000000100)='./file0\x00', &(0x7f0000000380), 0x11, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000440)="81cee23e9cac80db89", 0x9}], 0x1}}], 0x1, 0x4001c00) 23.704305093s ago: executing program 35 (id=888): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000000)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, &(0x7f0000000080)={@any, 0x7fffffff}) (async) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, &(0x7f0000000080)={@any, 0x7fffffff}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r3, 0x7b0, &(0x7f0000001700)={@my=0x1, 0x2}) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept4(r4, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000140)=0x80, 0x0) (async) accept4(r4, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000140)=0x80, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000640)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0x1200000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@appraise}, {@dont_hash}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0), 0x1200000, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}}], [{@context={'context', 0x3d, 'sysadm_u'}}, {@appraise}, {@dont_hash}]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) (async) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0x4008af12, &(0x7f0000000080)={0x1, 0x8}) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000000)={0xa, 0x4, 0xfa00, {r6}}, 0xc) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000000)={0xa, 0x4, 0xfa00, {r6}}, 0xc) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0xfffffd97) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x1) 4.59719798s ago: executing program 3 (id=996): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x400000000000f01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '\x86\xd7\xb5r\x03z\xf5\xe42\xad\xed\x122\x9db}\xd1\xff\xff\xff\x812\xd4\xef\xcd.\x8b\xf4\xa71iQA\x8d5\x8d\xaf\xe1\xd8\xae-\n\x95\x98\x96\xe8\x0e^\x80S\x9a\xca\xbf\x0e4C\'~_\xd0X\xb9\x94[\xf5,\xe0\xcd\x89\x1c\t\xd0\xf2\xfb\xf8\xfbe\xb2\r\xeeI\x86\xca\xd0k\xb0\x1b\xe96\xedpm\xcc\xdc\x91\xb9\xbft\xfb\x98\xe2\x02!\xfeq\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x009\xf7\x81\xf4\xa9j\xc9\xbb\xf8\xf2K\"\x86\xf5h\xf5;\xd2\xaf\x9b\xea\xef-\xd7\xd6\xfa\x97-*\\\x98bE\r\xdc\x89\xd8&\x91\x1c+\x15\x89\xd7\xa7ceT\xea`5\xf9\x88\n \xdcA\xa6\x10\x93\"\xa4Y\x84\xee\xb2\xf9\xa9\x80uf\xab\xb3\xd1\x10i\x94x\x0f\xee\x94j2\xf9\x9ah\xf3b\x19P4\\\xad\xbaX]\xbc\xbbTA\x17d\a\x8fa\xe0\xc3K\x959'}], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea96f57d49c226f35df5a073e47a165b0074fbf80de701b0728381f07c35183b8242af6ed8d42a819bf58c54c07408000c6cfa4ae3c32d5bf33639adc46109626b2ed71cd479ebddcbfda19e0e6ca9eb13d38b47"}, 0x160) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {}, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x2, 0x1, 0x4}}, 0xe8) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r1, 0x40045109, &(0x7f0000000000)=0x1f4) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000240)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r4, 0x40046210, &(0x7f0000004c00)) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 4.526344807s ago: executing program 3 (id=997): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100002eab5a40400700000000000000010902121801000000000904d3468be35ae3de7d5895c9a292351a164123760e6a9621f5160e53df8a8a77badee515d323e15f6bf84bb494d6efc562da8998f2cde4e5c2c4e10880aa542c142926f2f279fe9cb6b87ee60febcfca35716b22343854cc2feb24eaf61d384188385d773644f077269e1a11d1a721350b57561ca9272a832e7fa2daf72252dab41afed4c3f0f2dc5f922dc9850b64c8e7b6ea5b33a6bbc4ac9e6e102638b144b3b0bbac7086f8c60f42011ff1a55bf6effcfb3fbdc6e425f322942cb0b07f5d103bea8f7bffc8926b531adda90a7da7a070d37b7bf2ec10ae23f8fb3255fccf1d5e34b827d542baabb8f9ac936be7cbefa6b59516397456c7219261e5a717c1acd98cd58789b4e59ee531c4eafa11"], 0x0) syz_usb_connect$cdc_ecm(0x5, 0x5f, &(0x7f0000000600)={{0x12, 0x1, 0x140, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0xf, 0x8, 0x8, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0xc0, {{0x9, 0x24, 0x6, 0x0, 0x0, "5096ddbd"}, {0x5, 0x24, 0x0, 0x7f}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x1, 0x0, 0x8}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0xff, 0x9, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x80, 0x35, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x7e0e887dec529bf6, 0x80, 0x4, 0xff}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000680)={0xa, 0x6, 0x310, 0x4, 0x9, 0x64, 0x40, 0x1c}, 0x2a, &(0x7f00000006c0)={0x5, 0xf, 0x2a, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x3, 0x6, 0x6}, @ssp_cap={0x14, 0x10, 0xa, 0x7f, 0x2, 0xfff, 0xf, 0xfffe, [0x3f00, 0x3ff0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0x4, 0x1}]}, 0x3, [{0x51, &(0x7f0000000700)=@string={0x51, 0x3, "353b85f4d2e48af09b5c13df5fd85c0e95f60b53b70984a430e9b047123adcbaeeb6a16bc7e6b644997ea4433ab014b0a3f68b271a9c5d66a7f8f1644248186ac63e516ed68c8bd9fd42ccc2ccb953"}}, {0x19, &(0x7f0000000780)=@string={0x19, 0x3, "90d50bb9bb8fc28777cca7ea20a13b7ea7a07a9c1f46b4"}}, {0x13, &(0x7f00000007c0)=@string={0x13, 0x3, "a84805083f2534ac181c29b899f482eb32"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) open_by_handle_at(r1, &(0x7f00000009c0)=@OVL_FILEID_V1={0x18, 0xf8, {'\x00', {0x0, 0xfb, 0x15, 0x5, 0x0, "fcd2e12eb2408b527494ebbf97840b20"}}}, 0x12000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000240)={0x34, &(0x7f00000000c0)={0x20, 0x17, 0x4, "830b99fc"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000005700)={{0x3, 0x0, 0x80, {0xd000, 0x80a0000}}, "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", "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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) fadvise64(r3, 0xe90, 0x4996, 0x1) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x0, 0x15, 0xa8, {0xa8, 0xe, "99d15cfadf37eb9b41583c96d037d8cb08fa6d7465e2196e9e1838b0e1134d783f68db12048e28f48411825d1c6f7aa5bc9ee4ac86a0e856ff7d06517a6510f194f064635afc153ffa1f203b0fa1c96c27312839358c8ffda0dc1a2feee6b858f6fbb3a62825670999def4c7f7198dc20e7d0941a76890be07c32dea9d44da5665b44ae236fc87714fba0793668e1bc2638dee4a55ea0176d12e527cb800d4f6f785d9fc322b"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x446}}, &(0x7f0000000140)={0x0, 0x22, 0x6, {[@local=@item_012={0x2, 0x2, 0x1, "cf66"}, @main=@item_012={0x2, 0x0, 0xa, "b561"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0xaf, 0x1, {0x22, 0x726}}}}, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0)={0x20, 0x8, 0xc3, "6e2e5fb2841cd55a98372d1410e1c9eeccb010a565924d9ee1f5d0faa1587e79d7d2f0f560680c2175f82b1d8b06fddf5d3f54c21668f3d722df290652ee0c2c717bdffb040f85ad6b183b6b8b0857247eae36e5ee94eccfc517370b35dd804636d77a6b86ab1ae18687fbcf92241bbae257dc5998cbf779053027df6cfede93545c718958bfe8c4c7114d272740915373e9ea189d8da8b3f0c56f184e991a6499b368d2ecbf3e6c0ac5aca8f0a5d4955724da594e622669b8dc575680f821f5bbb7d0"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x1, 0x37, "e9e0bd72830b541627b59224beb39be0febe63521fe0c3c616673bf4e1110a77dc6542b22ab7a62a45cf64ea5d12d77d4ae3b37694c150"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x10}}) pwrite64(r7, 0x0, 0x0, 0x100500) syz_usb_connect(0x1, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x5, 0x84, 0x7e, 0x8, 0xc45, 0x6240, 0x9259, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0xd0, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0xb, 0x64, 0xfa}}]}}]}}, 0x0) 4.040667781s ago: executing program 3 (id=998): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYRESOCT=0x0], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r1, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x18f) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r2, &(0x7f0000001440)=""/126, 0x7e, 0x41) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.0018515s ago: executing program 3 (id=999): r0 = socket$alg(0x26, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x19e}, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xe}], 0x18, 0x4000041}, 0x4044080) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x24, r4, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x200}]}, 0x24}}, 0x0) 814.395417ms ago: executing program 3 (id=1000): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000100)={@hyper}) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic'], 0x86) r5 = socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r7, 0xc048aeca, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r6, 0x4068aea3, &(0x7f0000000300)) fcntl$setstatus(r5, 0x4, 0x40800) setsockopt$inet_mtu(r5, 0x0, 0xa, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) getsockopt$IP_SET_OP_VERSION(r6, 0x1, 0x53, &(0x7f00000001c0), &(0x7f0000000240)=0x8) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f00000000c0)=0x3, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r8, 0x2000009) sendfile(r5, r8, 0x0, 0x7ffff004) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000140)="f00fbabdfb5b00bad104edd8e866f3670f30baf80c66b8d020068866efbafc0c66b80058000066ef0f01cf0f01c4baf80c66b81ba93f8466efbafc0cec26f30f511d650f4c0c", 0x46}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3 (id=1001): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000680)={0x13, 0x10, 0x10f, {0x0, r1, 0x2}}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x436001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'tunl0\x00'}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) syncfs(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000024c0)=ANY=[@ANYBLOB="0800080007000100000014000000450a0fc0006400000b8890780a0100feac14141a3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f45936b49912be542ddab2277a90cba12d6ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b75a9ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c9eaacb5793498be490de32baba49172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19411e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a946970cd9412ccdc84598600cb857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12601379ad4364efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb97800763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300003285dfd289d22c00062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014d74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd8c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e870b52f3af8d40183405f6181730b082eec648c0b32043b81aa26a904ec33ffc39cbf41f8a7c1e2ee7297e3be091c634bb91a4dc804c19001b934ff682ca12bf0e7368367b37dc9d90c55766efd6f6675e585e229f5ecd605d97a705f0537de5b670b92143383eb8b37169dfeffd01821002fefe8accbad94c1f60568d00dfbaedb51f834b1a836dd79949a76a2bbef5bd4968ec79196fe23d5aeaf31dc116f316a0271d74f16c7ab917fb4cefb642375ca88064dcb34f608db4624c04ed6c44edc1279b4d0b9deb7f58"], 0xfce) kernel console output (not intermixed with test programs): 20: Found Unit with invalid ID 0 [ 113.026560][ T30] audit: type=1326 audit(1758871002.191:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6711 comm="syz.3.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f048732af79 code=0x7ffc0000 [ 113.136198][ T6009] microsoft 0003:045E:07DA.0005: ignoring exceeding usage max [ 113.149380][ T6009] microsoft 0003:045E:07DA.0005: unsupported Resolution Multiplier 0 [ 113.166738][ T6009] microsoft 0003:045E:07DA.0005: implement() called with n (152) > 32! (kworker/1:6) [ 113.187992][ T5932] uvcvideo 1-1:0.20: Found UVC 0.00 device syz (045e:0723) [ 113.194144][ T5957] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 113.197359][ T5932] uvcvideo 1-1:0.20: No valid video chain found. [ 113.214269][ T6009] microsoft 0003:045E:07DA.0005: unsupported Resolution Multiplier 0 [ 113.239665][ T6009] microsoft 0003:045E:07DA.0005: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 113.262079][ T6009] microsoft 0003:045E:07DA.0005: no inputs found [ 113.268881][ T6009] microsoft 0003:045E:07DA.0005: could not initialize ff, continuing anyway [ 113.345984][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 113.357201][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.367049][ T5957] usb 3-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 113.377011][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.387468][ T5957] usb 3-1: config 0 descriptor?? [ 113.406529][ T5932] usb 1-1: USB disconnect, device number 33 [ 113.415185][ T6708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.425239][ T6708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.500949][ T24] usb 2-1: USB disconnect, device number 24 [ 113.524245][ T6009] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 113.704087][ T6009] usb 4-1: Using ep0 maxpacket: 8 [ 113.710654][ T6009] usb 4-1: config index 0 descriptor too short (expected 5924, got 36) [ 113.719666][ T6009] usb 4-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 113.732569][ T6009] usb 4-1: config 250 has no interfaces? [ 113.740132][ T6009] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 113.749267][ T6009] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 113.757679][ T6009] usb 4-1: Product: syz [ 113.761846][ T6009] usb 4-1: SerialNumber: syz [ 113.797202][ T5957] cherry 0003:046A:0023.0006: item fetching failed at offset 5/7 [ 113.805558][ T5957] cherry 0003:046A:0023.0006: probe with driver cherry failed with error -22 [ 113.844383][ T24] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 113.977780][ T6719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.225'. [ 113.997605][ T24] usb 2-1: config 0 has an invalid interface number: 83 but max is 0 [ 114.009558][ T6714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.224'. [ 114.015070][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.029154][ T6714] IPVS: length: 43 != 24 [ 114.042566][ T5957] usb 3-1: USB disconnect, device number 24 [ 114.048663][ T24] usb 2-1: config 0 has no interface number 0 [ 114.064546][ T24] usb 2-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 114.078889][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.100518][ T24] usb 2-1: config 0 descriptor?? [ 114.129515][ T24] ttusbir 2-1:0.83: cannot find expected altsetting [ 114.268317][ T24] usb 4-1: USB disconnect, device number 21 [ 114.364116][ T5906] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 114.385971][ T6723] netlink: 393 bytes leftover after parsing attributes in process `syz.1.226'. [ 114.400169][ T5957] usb 2-1: USB disconnect, device number 25 [ 114.516384][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.526320][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 114.539247][ T5906] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 114.548516][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.569028][ T5906] usb 1-1: config 0 descriptor?? [ 114.795604][ T5906] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 114.802879][ T5906] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 114.811888][ T5906] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 114.819272][ T5906] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 114.826469][ T5906] kovaplus 0003:1E7D:2D50.0007: unknown main item tag 0x0 [ 114.837476][ T5906] kovaplus 0003:1E7D:2D50.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 114.894094][ T5957] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 114.994352][ T5906] kovaplus 0003:1E7D:2D50.0007: couldn't init struct kovaplus_device [ 115.009540][ T5906] kovaplus 0003:1E7D:2D50.0007: couldn't install mouse [ 115.036469][ T5906] kovaplus 0003:1E7D:2D50.0007: probe with driver kovaplus failed with error -32 [ 115.056607][ T5957] usb 3-1: Using ep0 maxpacket: 8 [ 115.066273][ T5957] usb 3-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 115.083354][ T5957] usb 3-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 115.099331][ T5957] usb 3-1: config 0 interface 0 has no altsetting 0 [ 115.106232][ T5957] usb 3-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 115.117039][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.127668][ T5957] usb 3-1: config 0 descriptor?? [ 115.244229][ T10] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 115.415781][ T10] usb 4-1: config 4 has an invalid interface number: 156 but max is 0 [ 115.424990][ T10] usb 4-1: config 4 has no interface number 0 [ 115.433599][ T10] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db71, bcdDevice=53.3e [ 115.442834][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.450894][ T10] usb 4-1: Product: syz [ 115.455609][ T10] usb 4-1: Manufacturer: syz [ 115.460277][ T10] usb 4-1: SerialNumber: syz [ 115.472658][ T10] dvb-usb: found a 'DViCO FusionHDTV DVB-T NANO2 w/o firmware' in warm state. [ 115.481684][ T10] usb 4-1: setting power ON [ 115.484413][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 115.486751][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 115.502697][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 115.515593][ T10] dvb-usb: DViCO FusionHDTV DVB-T NANO2 w/o firmware error while loading driver (-19) [ 115.526152][ T10] dvb_usb_cxusb 4-1:4.156: probe with driver dvb_usb_cxusb failed with error -22 [ 115.543201][ T5957] gembird 0003:11FF:3331.0008: collection stack underflow [ 115.550429][ T5957] gembird 0003:11FF:3331.0008: item 0 4 0 12 parsing failed [ 115.558494][ T5957] gembird 0003:11FF:3331.0008: probe with driver gembird failed with error -22 [ 115.644209][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 115.653404][ T24] usb 2-1: config 4 has an invalid interface number: 135 but max is 0 [ 115.661744][ T24] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 115.672098][ T24] usb 2-1: config 4 has no interface number 0 [ 115.675781][ T5957] usb 4-1: USB disconnect, device number 22 [ 115.678277][ T24] usb 2-1: config 4 interface 135 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 115.701187][ T24] usb 2-1: config 4 interface 135 has no altsetting 0 [ 115.709913][ T24] usb 2-1: New USB device found, idVendor=0789, idProduct=0164, bcdDevice=2a.40 [ 115.719105][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.728486][ T24] usb 2-1: Product:   [ 115.732692][ T24] usb 2-1: Manufacturer: 䃷寏滗 [ 115.740129][ T24] usb 2-1: SerialNumber: syz [ 115.745283][ T6009] usb 3-1: USB disconnect, device number 25 [ 115.976361][ T24] usb 2-1: USB disconnect, device number 26 [ 116.218577][ T6760] affs: No valid root block on device nullb0 [ 116.654086][ T24] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 116.805684][ T24] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 116.814816][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.829839][ T24] usb 3-1: config 0 descriptor?? [ 116.847115][ T24] pwc: Samsung MPC-C10 USB webcam detected. [ 116.882524][ T6788] TCP: TCP_TX_DELAY enabled [ 117.051999][ T24] pwc: send_video_command error -71 [ 117.059591][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 117.067990][ T24] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 117.086788][ T24] usb 3-1: USB disconnect, device number 26 [ 117.099954][ T5957] usb 1-1: USB disconnect, device number 34 [ 117.744118][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 117.895773][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.906138][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 117.915266][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.926904][ T24] usb 2-1: config 0 descriptor?? [ 117.945416][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 118.107747][ T6818] [U]  [ 118.110642][ T6818] [U] K{ [ 118.113660][ T6818] [U] t 1ŠFfˊ`GJgo/mC [ 118.121304][ T6818] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 118.137226][ T6818] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 118.147863][ T6818] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 118.183899][ T6818] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 118.208363][ T6818] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 118.219534][ T6818] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 118.231266][ T6818] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/< 1 [ 124.426869][ T5877] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.438015][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 124.448279][ T5877] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.461490][ T5877] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.472105][ T5877] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.484687][ T24] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 124.511930][ T24] usb 1-1: USB disconnect, device number 37 [ 124.524257][ T5957] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 124.532616][ T6965] netlink: 192 bytes leftover after parsing attributes in process `syz.0.303'. [ 124.587013][ T5957] usb 3-1: device descriptor read/8, error -71 [ 124.834074][ T5957] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 124.864946][ T5957] usb 3-1: device descriptor read/8, error -71 [ 124.967270][ T3467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.980203][ T3467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.989285][ T5957] usb usb3-port1: unable to enumerate USB device [ 124.997720][ T3467] bond0 (unregistering): Released all slaves [ 125.037202][ T24] wg0 speed is unknown, defaulting to 1000 [ 125.047188][ T24] syz2: Port: 1 Link DOWN [ 125.074138][ T6962] wg0 speed is unknown, defaulting to 1000 [ 125.275824][ T6989] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 125.343654][ T6989] input: syz0 as /devices/virtual/input/input10 [ 125.458290][ T3467] hsr_slave_0: left promiscuous mode [ 125.464854][ T3467] hsr_slave_1: left promiscuous mode [ 125.471085][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.481305][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.490211][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.498138][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.523843][ T3467] veth1_macvtap: left promiscuous mode [ 125.530311][ T3467] veth0_macvtap: left promiscuous mode [ 125.537086][ T3467] veth1_vlan: left promiscuous mode [ 125.542570][ T3467] veth0_vlan: left promiscuous mode [ 126.031223][ T3467] team0 (unregistering): Port device team_slave_1 removed [ 126.062848][ T3467] team0 (unregistering): Port device team_slave_0 removed [ 126.230174][ T5957] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 126.414490][ T5957] usb 1-1: Using ep0 maxpacket: 32 [ 126.421629][ T5957] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 126.431521][ T5957] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.445311][ T5957] usb 1-1: config 0 descriptor?? [ 126.463647][ T5957] as10x_usb: device has been detected [ 126.470672][ T5957] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 126.519985][ T5957] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 126.546627][ T5957] as10x_usb: error during firmware upload part1 [ 126.553939][ T5957] Registered device nBox DVB-T Dongle [ 126.564903][ T5877] Bluetooth: hci1: command tx timeout [ 126.633686][ T6962] chnl_net:caif_netlink_parms(): no params data found [ 126.671782][ T5957] usb 1-1: USB disconnect, device number 38 [ 126.744507][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 126.761121][ T5957] Unregistered device nBox DVB-T Dongle [ 126.765923][ T5957] as10x_usb: device has been disconnected [ 126.872587][ T6962] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.883427][ T6962] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.892054][ T6962] bridge_slave_0: entered allmulticast mode [ 126.900956][ T6962] bridge_slave_0: entered promiscuous mode [ 126.909442][ T6962] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.916865][ T6962] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.924561][ T6962] bridge_slave_1: entered allmulticast mode [ 126.932482][ T6962] bridge_slave_1: entered promiscuous mode [ 126.947961][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 126.963899][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.972814][ T10] usb 3-1: Product: syz [ 126.977847][ T10] usb 3-1: Manufacturer: syz [ 126.982455][ T10] usb 3-1: SerialNumber: syz [ 127.008154][ T10] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 127.032175][ T5957] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 127.032269][ T6962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.099285][ T6962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.113970][ T7032] netlink: 20 bytes leftover after parsing attributes in process `syz.3.314'. [ 127.174690][ T6962] team0: Port device team_slave_0 added [ 127.184963][ T6962] team0: Port device team_slave_1 added [ 127.241418][ T6962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.248617][ T6962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.288702][ T6962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.303060][ T6962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.310822][ T6962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.339380][ T6962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.414062][ T6962] hsr_slave_0: entered promiscuous mode [ 127.421326][ T6962] hsr_slave_1: entered promiscuous mode [ 127.428325][ T6962] debugfs: 'hsr0' already exists in 'hsr' [ 127.434819][ T6962] Cannot create hsr debugfs directory [ 127.524101][ T10] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 127.664562][ T43] usb 3-1: USB disconnect, device number 34 [ 127.694099][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 127.715701][ T10] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 127.727044][ T6962] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 127.744351][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.773336][ T10] usb 1-1: config 0 descriptor?? [ 127.776267][ T6962] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 127.813085][ T10] as10x_usb: device has been detected [ 127.828819][ T6962] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 127.829637][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 127.869822][ T6962] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 127.893686][ T10] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 127.928089][ T10] as10x_usb: error during firmware upload part1 [ 127.942380][ T10] Registered device nBox DVB-T Dongle [ 128.005193][ T10] usb 1-1: USB disconnect, device number 39 [ 128.052910][ T10] Unregistered device nBox DVB-T Dongle [ 128.060056][ T10] as10x_usb: device has been disconnected [ 128.086614][ T7064] tmpfs: Unknown parameter 'no' [ 128.124752][ T6962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.157298][ T6962] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.172820][ T3467] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.180019][ T3467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.206500][ T3467] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.213697][ T3467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.246975][ T5957] usb 3-1: Service connection timeout for: 256 [ 128.253340][ T5957] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 128.278116][ T5957] ath9k_htc: Failed to initialize the device [ 128.297778][ T43] usb 3-1: ath9k_htc: USB layer deinitialized [ 128.433307][ T7075] netlink: 84 bytes leftover after parsing attributes in process `syz.2.319'. [ 128.485307][ T6962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.646250][ T5877] Bluetooth: hci1: command tx timeout [ 128.794108][ T43] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 128.908489][ T6962] veth0_vlan: entered promiscuous mode [ 128.922456][ T6962] veth1_vlan: entered promiscuous mode [ 128.923166][ T7094] netlink: 'syz.3.323': attribute type 4 has an invalid length. [ 128.941973][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.323'. [ 128.955489][ T7094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.323'. [ 128.971374][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 128.978662][ T43] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 128.979652][ T6962] veth0_macvtap: entered promiscuous mode [ 129.004342][ T43] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 129.026412][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 129.033056][ T6962] veth1_macvtap: entered promiscuous mode [ 129.050279][ T43] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 129.062067][ T6962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.077398][ T43] usb 3-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 129.085473][ T6962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.093097][ T43] usb 3-1: Product: syz [ 129.108643][ T43] usb 3-1: Manufacturer: syz [ 129.119815][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.128992][ T43] usb 3-1: SerialNumber: syz [ 129.136886][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.152394][ T43] usb 3-1: config 0 descriptor?? [ 129.177841][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.190196][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.318148][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.335531][ T7109] devtmpfs: Cannot enable quota on remount [ 129.340110][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.414838][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.422672][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.568735][ T43] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 129.648589][ T7128] FAULT_INJECTION: forcing a failure. [ 129.648589][ T7128] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.663068][ T7128] CPU: 1 UID: 0 PID: 7128 Comm: syz.0.333 Not tainted syzkaller #0 PREEMPT(full) [ 129.663091][ T7128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 129.663114][ T7128] Call Trace: [ 129.663121][ T7128] [ 129.663128][ T7128] dump_stack_lvl+0x189/0x250 [ 129.663156][ T7128] ? __pfx____ratelimit+0x10/0x10 [ 129.663182][ T7128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.663203][ T7128] ? __pfx__printk+0x10/0x10 [ 129.663224][ T7128] ? __might_fault+0xb0/0x130 [ 129.663256][ T7128] should_fail_ex+0x414/0x560 [ 129.663283][ T7128] _copy_from_user+0x2d/0xb0 [ 129.663303][ T7128] ___sys_sendmsg+0x158/0x2a0 [ 129.663325][ T7128] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.663387][ T7128] ? __fget_files+0x2a/0x420 [ 129.663404][ T7128] ? __fget_files+0x3a0/0x420 [ 129.663433][ T7128] __x64_sys_sendmsg+0x19b/0x260 [ 129.663453][ T7128] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 129.663480][ T7128] ? __pfx_ksys_write+0x10/0x10 [ 129.663500][ T7128] ? do_syscall_64+0xbe/0xfa0 [ 129.663521][ T7128] do_syscall_64+0xfa/0xfa0 [ 129.663536][ T7128] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.663552][ T7128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.663569][ T7128] ? clear_bhb_loop+0x60/0xb0 [ 129.663588][ T7128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.663603][ T7128] RIP: 0033:0x7f29fc38eec9 [ 129.663617][ T7128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.663630][ T7128] RSP: 002b:00007f29fd24d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.663648][ T7128] RAX: ffffffffffffffda RBX: 00007f29fc5e5fa0 RCX: 00007f29fc38eec9 [ 129.663660][ T7128] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 129.663670][ T7128] RBP: 00007f29fd24d090 R08: 0000000000000000 R09: 0000000000000000 [ 129.663681][ T7128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.663691][ T7128] R13: 00007f29fc5e6038 R14: 00007f29fc5e5fa0 R15: 00007ffe66c2d2b8 [ 129.663719][ T7128] [ 130.112999][ T43] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 130.144293][ T5932] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 130.294176][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 130.300996][ T5932] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 130.313911][ T5932] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 130.325212][ T5932] usb 5-1: config 1 interface 0 has no altsetting 0 [ 130.335925][ T5932] usb 5-1: New USB device found, idVendor=05c6, idProduct=920d, bcdDevice=e5.23 [ 130.348936][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.359077][ T5932] usb 5-1: Product: syz [ 130.363262][ T5932] usb 5-1: Manufacturer: syz [ 130.368486][ T5932] usb 5-1: SerialNumber: syz [ 130.385118][ T5957] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 130.388225][ T7135] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 130.400541][ T7135] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 130.548017][ T10] usb 3-1: USB disconnect, device number 35 [ 130.561654][ T5957] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 130.573280][ T5957] usb 1-1: config 0 has no interface number 0 [ 130.580397][ T5957] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 130.606625][ T5957] usb 1-1: config 0 interface 46 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 130.617806][ T5957] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 130.630769][ T7135] binder: BINDER_SET_CONTEXT_MGR already set [ 130.637304][ T7135] binder: 7134:7135 ioctl 4018620d 200000000040 returned -16 [ 130.660568][ T5932] usb 5-1: USB disconnect, device number 2 [ 130.666861][ T5957] usb 1-1: New USB device found, idVendor=3731, idProduct=0100, bcdDevice=eb.60 [ 130.689888][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.719546][ T5957] usb 1-1: Product: syz [ 130.725509][ T5877] Bluetooth: hci1: command tx timeout [ 130.732279][ T5957] usb 1-1: Manufacturer: syz [ 130.737225][ T5957] usb 1-1: SerialNumber: syz [ 130.759592][ T5957] usb 1-1: config 0 descriptor?? [ 130.776508][ T5957] option 1-1:0.46: GSM modem (1-port) converter detected [ 131.329775][ T5913] IPVS: starting estimator thread 0... [ 131.394219][ T5932] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 131.447405][ T7186] IPVS: using max 38 ests per chain, 91200 per kthread [ 131.510149][ T5913] usb 1-1: USB disconnect, device number 40 [ 131.519342][ T5913] option 1-1:0.46: device disconnected [ 131.566393][ T5932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 131.584182][ T5932] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 131.595999][ T5932] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 131.612726][ T5932] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 131.622077][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.630533][ T5932] usb 3-1: Product: syz [ 131.637559][ T5932] usb 3-1: Manufacturer: syz [ 131.642200][ T5932] usb 3-1: SerialNumber: syz [ 131.655059][ T5932] usb 3-1: config 0 descriptor?? [ 131.661485][ T7178] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.669031][ T7178] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 131.678865][ T5932] usb 3-1: ucan: probing device on interface #0 [ 131.769238][ T7210] netlink: 20 bytes leftover after parsing attributes in process `syz.3.350'. [ 131.879840][ T7178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.898173][ T7178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.335146][ T5932] ucan 3-1:0.0 can0: registered device [ 132.530242][ T5932] ucan 3-1:0.0 can0: firmware string: unknown [ 132.544675][ T6009] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 132.560180][ T5932] usb 3-1: USB disconnect, device number 36 [ 132.694364][ T6009] usb 5-1: device descriptor read/64, error -71 [ 132.729073][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.736756][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.804366][ T5877] Bluetooth: hci1: command tx timeout [ 132.934143][ T6009] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 132.944118][ T5913] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 133.016052][ T7231] trusted_key: encrypted_key: master key parameter 'user:' is invalid [ 133.028867][ T7231] netlink: 20 bytes leftover after parsing attributes in process `syz.3.357'. [ 133.064834][ T6009] usb 5-1: device descriptor read/64, error -71 [ 133.131306][ T5913] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.146976][ T5913] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 133.159108][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.174972][ T6009] usb usb5-port1: attempt power cycle [ 133.182588][ T7241] netlink: 'syz.3.360': attribute type 10 has an invalid length. [ 133.198668][ T5913] usb 1-1: config 0 descriptor?? [ 133.400063][ T7255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.365'. [ 133.482643][ T7258] nvme_fabrics: unknown parameter or missing value 'syz1' in ctrl creation request [ 133.524825][ T6009] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 133.546045][ T6009] usb 5-1: device descriptor read/8, error -71 [ 133.609553][ T7229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.636740][ T7229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.743549][ T7273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.369'. [ 133.789676][ T5913] video4linux radio48: keene_cmd_main failed (-71) [ 133.796576][ T6009] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 133.813675][ T5913] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 133.831141][ T5913] usb 1-1: USB disconnect, device number 41 [ 133.839904][ T6009] usb 5-1: device descriptor read/8, error -71 [ 133.965362][ T6009] usb usb5-port1: unable to enumerate USB device [ 134.012125][ T7285] tmpfs: Bad value for 'mpol' [ 134.172014][ T7296] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 134.394098][ T5913] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 134.524197][ T5913] usb 1-1: device descriptor read/64, error -71 [ 134.764113][ T5913] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 134.809989][ T7305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.379'. [ 134.894282][ T5913] usb 1-1: device descriptor read/64, error -71 [ 134.910444][ T7311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.923371][ T7311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.024339][ T5913] usb usb1-port1: attempt power cycle [ 135.364226][ T5913] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 135.385458][ T5913] usb 1-1: device descriptor read/8, error -71 [ 135.404468][ T5906] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 135.571388][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 135.579120][ T5906] usb 3-1: config 5 has an invalid interface number: 151 but max is 0 [ 135.608161][ T5906] usb 3-1: config 5 has no interface number 0 [ 135.624469][ T5913] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 135.632624][ T5906] usb 3-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=1e.b5 [ 135.647849][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.654970][ T5913] usb 1-1: device descriptor read/8, error -71 [ 135.668743][ T5906] usb 3-1: Product: syz [ 135.678179][ T5906] usb 3-1: Manufacturer: syz [ 135.683853][ T5906] usb 3-1: SerialNumber: syz [ 135.766547][ T5913] usb usb1-port1: unable to enumerate USB device [ 135.834096][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 135.951417][ T7322] netlink: 20 bytes leftover after parsing attributes in process `syz.2.384'. [ 135.966659][ T24] usb 5-1: device descriptor read/64, error -71 [ 135.969943][ T7322] tipc: Enabled bearer , priority 10 [ 135.983561][ T5957] usb 3-1: USB disconnect, device number 37 [ 136.224594][ T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 136.364216][ T24] usb 5-1: device descriptor read/64, error -71 [ 136.474395][ T24] usb usb5-port1: attempt power cycle [ 136.593296][ T7364] netlink: 'syz.2.388': attribute type 10 has an invalid length. [ 136.608070][ T7364] team0: Port device macvlan1 added [ 136.814109][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 136.834747][ T24] usb 5-1: device descriptor read/8, error -71 [ 136.914280][ T5957] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 136.958564][ T7368] netlink: 'syz.3.390': attribute type 1 has an invalid length. [ 136.964334][ T7369] netlink: 'syz.3.390': attribute type 10 has an invalid length. [ 136.984711][ T7369] team0: Cannot enslave team device to itself [ 137.075040][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 137.084191][ T5957] usb 3-1: Using ep0 maxpacket: 16 [ 137.091752][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.094793][ T24] usb 5-1: device descriptor read/8, error -71 [ 137.123116][ T5957] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 137.138888][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.159881][ T5957] usb 3-1: config 0 descriptor?? [ 137.224394][ T24] usb usb5-port1: unable to enumerate USB device [ 137.584111][ T5906] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 137.744072][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 137.751479][ T5906] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.762860][ T5906] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.776372][ T5906] usb 1-1: config 0 interface 0 has no altsetting 0 [ 137.783230][ T5906] usb 1-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 137.792483][ T5957] usbhid 3-1:0.0: can't add hid device: -71 [ 137.798420][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.806678][ T5957] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 137.816530][ T5906] usb 1-1: config 0 descriptor?? [ 137.824388][ T5957] usb 3-1: USB disconnect, device number 38 [ 138.232190][ T5906] hid_parser_main: 176 callbacks suppressed [ 138.232212][ T5906] waltop 0003:172F:0034.000A: unknown main item tag 0x0 [ 138.245663][ T5906] waltop 0003:172F:0034.000A: unknown main item tag 0x0 [ 138.252620][ T5906] waltop 0003:172F:0034.000A: unknown main item tag 0x0 [ 138.260382][ T5906] waltop 0003:172F:0034.000A: unknown main item tag 0x0 [ 138.267394][ T5906] waltop 0003:172F:0034.000A: unknown main item tag 0x0 [ 138.276154][ T5906] waltop 0003:172F:0034.000A: hidraw0: USB HID v0.05 Device [HID 172f:0034] on usb-dummy_hcd.0-1/input0 [ 138.398789][ T7398] kvm: kvm [7397]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 138.408786][ T7398] kvm: kvm [7397]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 138.429719][ T7379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.443710][ T7379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.453795][ T5913] usb 1-1: USB disconnect, device number 46 [ 138.754114][ T5957] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 138.954992][ T5957] usb 3-1: Using ep0 maxpacket: 16 [ 138.970912][ T5957] usb 3-1: unable to get BOS descriptor or descriptor too short [ 138.992552][ T5957] usb 3-1: config 15 has an invalid interface number: 53 but max is 0 [ 139.024347][ T5957] usb 3-1: config 15 has no interface number 0 [ 139.030559][ T5957] usb 3-1: config 15 interface 53 altsetting 99 has an endpoint descriptor with address 0x2C, changing to 0xC [ 139.062609][ T5957] usb 3-1: config 15 interface 53 altsetting 99 endpoint 0xC has an invalid bInterval 144, changing to 11 [ 139.086658][ T5957] usb 3-1: config 15 interface 53 altsetting 99 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 139.108306][ T5957] usb 3-1: config 15 interface 53 has no altsetting 0 [ 139.131552][ T5957] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=91.ce [ 139.151681][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.170155][ T5957] usb 3-1: Product: syz [ 139.175533][ T5957] usb 3-1: Manufacturer: syz [ 139.180867][ T5957] usb 3-1: SerialNumber: syz [ 139.196925][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 139.331991][ T7442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'. [ 139.383760][ T24] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 139.393054][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.401422][ T24] usb 5-1: Product: syz [ 139.415574][ T24] usb 5-1: Manufacturer: syz [ 139.420298][ T24] usb 5-1: SerialNumber: syz [ 139.431058][ T24] usb 5-1: config 0 descriptor?? [ 139.470544][ T7401] netlink: 19 bytes leftover after parsing attributes in process `syz.2.402'. [ 139.491699][ T5957] option 3-1:15.53: GSM modem (1-port) converter detected [ 139.519184][ T5957] usb 3-1: USB disconnect, device number 39 [ 139.544261][ T5957] option 3-1:15.53: device disconnected [ 139.864824][ T5906] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 140.042542][ T5906] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 140.069795][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.090117][ T5906] usb 1-1: config 0 has no interface number 0 [ 140.104056][ T5906] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 140.127637][ T5906] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 140.149774][ T5906] usb 1-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 140.164090][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.179191][ T5906] usb 1-1: Product: syz [ 140.224442][ T5906] usb 1-1: Manufacturer: syz [ 140.234260][ T5906] usb 1-1: SerialNumber: syz [ 140.258454][ T5906] usb 1-1: config 0 descriptor?? [ 140.265033][ T7456] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 140.299546][ T5906] vmk80xx 1-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 140.320776][ T7488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.331979][ T5906] vmk80xx 1-1:0.6: probe with driver vmk80xx failed with error -22 [ 140.340537][ T7488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.499636][ T7456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.526404][ T7456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.556713][ T7456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.576954][ T7456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.610015][ T5906] usb 1-1: USB disconnect, device number 47 [ 140.694154][ T43] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 140.721607][ T7511] netlink: 168 bytes leftover after parsing attributes in process `syz.0.425'. [ 140.864300][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 140.882733][ T43] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.912028][ T43] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.933939][ T7520] nilfs2: Unknown parameter 'barrier000000000000' [ 140.940901][ T43] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 140.956019][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 140.962811][ T43] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 140.972921][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.982952][ T7523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.995433][ T7523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.007638][ T43] usb 3-1: config 0 descriptor?? [ 141.443854][ T43] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 141.459278][ T43] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 141.470178][ T43] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 141.477301][ T43] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 141.484703][ T43] kye 0003:0458:0087.000B: unknown main item tag 0x0 [ 141.498535][ T43] kye 0003:0458:0087.000B: hidraw0: USB HID v0.05 Device [HID 0458:0087] on usb-dummy_hcd.2-1/input0 [ 141.589977][ T7545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.600781][ T7545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.641161][ T43] usb 3-1: USB disconnect, device number 40 [ 142.496866][ T5957] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 142.665866][ T5957] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.673891][ T5957] usb 3-1: config 0 has no interface number 0 [ 142.684276][ T5957] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.701488][ T5957] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.731427][ T5957] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 142.747514][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.759352][ T5957] usb 3-1: config 0 descriptor?? [ 143.024606][ T10] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 143.200184][ T10] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 143.209389][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.234037][ T10] usb 1-1: Product: syz [ 143.238253][ T10] usb 1-1: Manufacturer: syz [ 143.243293][ T10] usb 1-1: SerialNumber: syz [ 143.266849][ T10] usb 1-1: config 0 descriptor?? [ 143.285417][ T10] usb 1-1: selecting invalid altsetting 3 [ 143.291204][ T10] comedi comedi5: could not set alternate setting 3 in high speed [ 143.315562][ T10] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 143.347076][ T5957] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.000C/input/input11 [ 143.365157][ T10] usbdux 1-1:0.0: probe with driver usbdux failed with error -22 [ 143.466357][ T5957] holtek_kbd 0003:04D9:A055.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 143.512784][ T5957] usb 1-1: USB disconnect, device number 48 [ 144.612023][ T10] usb 3-1: reset high-speed USB device number 41 using dummy_hcd [ 144.663477][ T7606] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 144.689786][ T7606] CIFS mount error: No usable UNC path provided in device string! [ 144.689786][ T7606] [ 144.701692][ T7606] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 144.876534][ T43] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 144.979664][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.990363][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.002242][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.011449][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.044362][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 145.051679][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 145.060832][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.071064][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 145.088908][ T43] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 145.098061][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.106145][ T43] usb 1-1: Product: syz [ 145.110342][ T43] usb 1-1: Manufacturer: syz [ 145.115009][ T43] usb 1-1: SerialNumber: syz [ 145.123056][ T43] usb 1-1: config 0 descriptor?? [ 145.132983][ T43] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 145.181807][ T43] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 145.208222][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -110 [ 145.224570][ T24] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffff92 [ 145.240298][ T24] asix 5-1:0.0: probe with driver asix failed with error -110 [ 145.243060][ T5977] udevd[5977]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.340918][ T7604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.349755][ T7604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.589354][ T7627] netlink: 'syz.3.451': attribute type 13 has an invalid length. [ 145.659260][ T7635] pim6reg1: entered promiscuous mode [ 145.664831][ T7635] pim6reg1: entered allmulticast mode [ 145.934773][ T7641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.948190][ T7641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.079562][ T5957] usb 3-1: USB disconnect, device number 41 [ 146.532386][ T7650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.542358][ T7650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.558357][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.459'. [ 146.575463][ T7650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.586545][ T7650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.739491][ T5957] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 146.752855][ T7653] qnx6: unable to read the first superblock [ 146.876606][ T5957] usb 3-1: device descriptor read/64, error -71 [ 146.921060][ T7657] netlink: 'syz.4.462': attribute type 30 has an invalid length. [ 147.126143][ T5957] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 147.185979][ T7669] netlink: 'syz.0.466': attribute type 21 has an invalid length. [ 147.195119][ T7669] delete_channel: no stack [ 147.199733][ T7669] delete_channel: no stack [ 147.270231][ T7672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.285275][ T5957] usb 3-1: device descriptor read/64, error -71 [ 147.303190][ T7672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.342616][ T7672] syz.4.467 (7672) used obsolete PPPIOCDETACH ioctl [ 147.395354][ T5957] usb usb3-port1: attempt power cycle [ 147.456205][ T7681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.469954][ T7681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.507607][ T7686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.517879][ T7686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.640794][ T7688] overlayfs: failed to clone lowerpath [ 147.734239][ T5957] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 147.755103][ T5957] usb 3-1: device descriptor read/8, error -71 [ 147.994124][ T5957] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 148.042935][ T5957] usb 3-1: device descriptor read/8, error -71 [ 148.076387][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.476'. [ 148.158513][ T5957] usb usb3-port1: unable to enumerate USB device [ 148.217789][ T7707] netlink: 176 bytes leftover after parsing attributes in process `syz.0.478'. [ 148.312600][ T7713] tipc: Enabling of bearer rejected, failed to enable media [ 148.319490][ T7714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.332277][ T7714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.401831][ T7716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.410981][ T7716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.343304][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.353597][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.363091][ T7742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.372172][ T7742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.864101][ T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 150.014101][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 150.027850][ T24] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 150.036845][ T24] usb 3-1: config 0 has no interface number 0 [ 150.042957][ T24] usb 3-1: config 0 interface 184 has no altsetting 0 [ 150.048599][ T5877] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 150.066427][ T24] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 150.076060][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.099375][ T24] usb 3-1: Product: syz [ 150.103681][ T24] usb 3-1: Manufacturer: syz [ 150.108813][ T24] usb 3-1: SerialNumber: syz [ 150.117584][ T24] usb 3-1: config 0 descriptor?? [ 150.125738][ T24] smsc75xx v1.0.0 [ 150.366236][ T7766] openvswitch: netlink: Multiple metadata blocks provided [ 150.636120][ T30] audit: type=1326 audit(1758871040.291:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048738eec9 code=0x50000 [ 150.659488][ T30] audit: type=1326 audit(1758871040.291:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048738eec9 code=0x50000 [ 150.681386][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.688896][ T30] audit: type=1326 audit(1758871040.291:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048738eec9 code=0x50000 [ 150.711641][ T30] audit: type=1326 audit(1758871040.291:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048738eec9 code=0x50000 [ 150.735168][ T30] audit: type=1326 audit(1758871040.291:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048738eec9 code=0x50000 [ 150.757614][ T30] audit: type=1326 audit(1758871040.291:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048738eec9 code=0x50000 [ 150.757677][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 150.779527][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.782891][ T30] audit: type=1326 audit(1758871040.291:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048738eec9 code=0x50000 [ 150.790889][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 150.791718][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 150.800829][ T30] audit: type=1326 audit(1758871040.291:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048738eec9 code=0x50000 [ 150.826468][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 150.831066][ T30] audit: type=1326 audit(1758871040.291:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048738eec9 code=0x50000 [ 150.840349][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 150.861795][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.875946][ T30] audit: type=1326 audit(1758871040.291:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7774 comm="syz.3.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048738eec9 code=0x50000 [ 150.894526][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.894819][ T24] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 150.951644][ T24] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 151.218235][ T5877] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 151.227607][ T5877] Bluetooth: hci0: Injecting HCI hardware error event [ 151.236540][ T5877] Bluetooth: hci0: hardware error 0x00 [ 151.253050][ T7780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.292379][ T7780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.322164][ T7782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.331528][ T7782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.341446][ T7782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.351069][ T7782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.361455][ T7782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.376665][ T7782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.528816][ T7793] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.507'. [ 151.540525][ T7793] netlink: 4268 bytes leftover after parsing attributes in process `syz.3.507'. [ 151.703053][ T7806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.712055][ T7806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.745330][ T7809] netlink: 'syz.4.511': attribute type 28 has an invalid length. [ 151.789309][ T7814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.512'. [ 151.815212][ T7816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.823872][ T7816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.999504][ T7818] netlink: 132 bytes leftover after parsing attributes in process `syz.0.514'. [ 152.039076][ T7820] netlink: 'syz.0.515': attribute type 10 has an invalid length. [ 152.057866][ T7820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.069666][ T7820] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 152.133186][ T7824] random: crng reseeded on system resumption [ 152.210023][ T7827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.223880][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.232160][ T7827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.235727][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.396480][ T7837] sp0: Synchronizing with TNC [ 152.410133][ T7836] [U] [ 152.515817][ T7843] netlink: 187320 bytes leftover after parsing attributes in process `syz.4.523'. [ 152.525185][ T7843] netlink: zone id is out of range [ 152.530756][ T7843] netlink: zone id is out of range [ 152.536916][ T7843] netlink: zone id is out of range [ 152.542149][ T7843] netlink: zone id is out of range [ 152.561059][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 152.576274][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.525'. [ 152.651892][ T7852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.661029][ T7852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.822964][ T7858] netlink: 14 bytes leftover after parsing attributes in process `syz.4.528'. [ 152.832157][ T7858] hsr_slave_0: left promiscuous mode [ 152.840849][ T7858] hsr_slave_1: left promiscuous mode [ 152.876478][ T7859] hpfs: hpfs_map_sector(): read error [ 152.984145][ T5913] usb 3-1: USB disconnect, device number 46 [ 153.261939][ T7875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.271538][ T7875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.444099][ T5877] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 153.494181][ T5913] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 153.556729][ T7885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.567900][ T7885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.655734][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.666846][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.676658][ T5913] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 153.685904][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.696273][ T5913] usb 3-1: config 0 descriptor?? [ 153.907158][ T7871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.916386][ T7871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.934701][ T5913] usbhid 3-1:0.0: can't add hid device: -71 [ 153.940753][ T5913] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 153.951233][ T5913] usb 3-1: USB disconnect, device number 47 [ 153.995804][ T7892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.004665][ T7892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.213424][ T7896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.223180][ T7896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.354770][ T7899] overlayfs: failed to clone upperpath [ 154.794864][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.803604][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.656614][ T7949] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 155.667446][ T7949] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 155.675677][ T7949] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 155.682295][ T7949] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 155.684145][ T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 155.846238][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 155.859351][ T24] usb 3-1: config 36 has an invalid interface number: 228 but max is 0 [ 155.863620][ T7964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.877656][ T24] usb 3-1: config 36 has no interface number 0 [ 155.880116][ T7964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.886313][ T24] usb 3-1: config 36 interface 228 altsetting 68 endpoint 0x7 has invalid wMaxPacketSize 0 [ 155.892969][ T7963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.906071][ T24] usb 3-1: config 36 interface 228 altsetting 68 bulk endpoint 0x7 has invalid maxpacket 0 [ 155.913180][ T7963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.922507][ T24] usb 3-1: config 36 interface 228 has no altsetting 0 [ 155.937675][ T24] usb 3-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 155.957159][ T24] usb 3-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3 [ 155.966186][ T24] usb 3-1: Product: syz [ 155.981320][ T24] usb 3-1: Manufacturer: syz [ 155.996589][ T24] usb 3-1: SerialNumber: syz [ 156.001820][ T7968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.014720][ T7968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.231779][ T7946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.240805][ T7946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.290169][ T24] usb 3-1: USB disconnect, device number 48 [ 156.292408][ T5873] udevd[5873]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.228/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.413348][ T7974] fuse: Unknown parameter 'allow0x0000000000000200' [ 156.481074][ T7978] netlink: 16 bytes leftover after parsing attributes in process `syz.3.565'. [ 156.491203][ T7978] netlink: 16 bytes leftover after parsing attributes in process `syz.3.565'. [ 156.912914][ T7991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.921731][ T7991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.034159][ T5957] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 157.070420][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.571'. [ 157.197562][ T5957] usb 3-1: config 0 has an invalid interface number: 125 but max is 0 [ 157.206539][ T5957] usb 3-1: config 0 has no interface number 0 [ 157.212794][ T5957] usb 3-1: New USB device found, idVendor=00a7, idProduct=07bc, bcdDevice=de.99 [ 157.221914][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.233136][ T5957] usb 3-1: config 0 descriptor?? [ 157.242246][ T5957] usb-storage 3-1:0.125: USB Mass Storage device detected [ 157.447372][ T5957] usb 3-1: USB disconnect, device number 49 [ 157.552726][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.572'. [ 157.561649][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'. [ 157.571856][ T7998] netlink: 2 bytes leftover after parsing attributes in process `syz.0.572'. [ 157.581875][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'. [ 157.590874][ T7998] netlink: 2 bytes leftover after parsing attributes in process `syz.0.572'. [ 157.874328][ T8025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.883110][ T8025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.892983][ T8025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.901706][ T8025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.244249][ T24] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 158.395376][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.405632][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.426568][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 158.436955][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 158.445151][ T24] usb 3-1: SerialNumber: syz [ 158.463471][ T8033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.466644][ T24] usb 3-1: 0:2 : does not exist [ 158.474473][ T8033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.724279][ T5867] Bluetooth: hci4: command 0x1003 tx timeout [ 158.730768][ T5877] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 158.832646][ T8041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.851806][ T8041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.008732][ T8030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.017480][ T8045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.019433][ T8030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.026345][ T8045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.110299][ T8049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.119206][ T8049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.159305][ T8049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.168123][ T8049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.177936][ T8049] netlink: 'syz.0.587': attribute type 2 has an invalid length. [ 159.186121][ T8049] netlink: 'syz.0.587': attribute type 8 has an invalid length. [ 159.195039][ T8049] netlink: 32 bytes leftover after parsing attributes in process `syz.0.587'. [ 159.209835][ T8049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.218986][ T8049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.907478][ T8071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.937447][ T8071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.939467][ T5877] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 159.957091][ T5877] CPU: 1 UID: 0 PID: 5877 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) [ 159.957115][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 159.957127][ T5877] Workqueue: hci1 hci_rx_work [ 159.957155][ T5877] Call Trace: [ 159.957163][ T5877] [ 159.957171][ T5877] dump_stack_lvl+0x189/0x250 [ 159.957201][ T5877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.957223][ T5877] ? __pfx__printk+0x10/0x10 [ 159.957249][ T5877] ? kernfs_path_from_node+0x250/0x290 [ 159.957271][ T5877] ? kernfs_path_from_node+0x2f/0x290 [ 159.957297][ T5877] sysfs_create_dir_ns+0x259/0x280 [ 159.957321][ T5877] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 159.957344][ T5877] ? do_raw_spin_unlock+0x122/0x240 [ 159.957371][ T5877] kobject_add_internal+0x59f/0xb40 [ 159.957409][ T5877] kobject_add+0x155/0x220 [ 159.957434][ T5877] ? __pfx_kobject_add+0x10/0x10 [ 159.957454][ T5877] ? _raw_spin_unlock+0x28/0x50 [ 159.957480][ T5877] ? get_device_parent+0x366/0x3a0 [ 159.957508][ T5877] device_add+0x408/0xb50 [ 159.957538][ T5877] hci_conn_add_sysfs+0xd5/0x1e0 [ 159.957562][ T5877] le_conn_complete_evt+0xf39/0x1500 [ 159.957595][ T5877] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 159.957613][ T5877] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 159.957629][ T5877] ? __asan_memcpy+0x40/0x70 [ 159.957656][ T5877] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 159.957672][ T5877] ? skb_pull_data+0xfb/0x200 [ 159.957697][ T5877] hci_le_conn_complete_evt+0x187/0x450 [ 159.957725][ T5877] hci_event_packet+0x78f/0x1200 [ 159.957760][ T5877] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 159.957782][ T5877] ? __pfx_hci_event_packet+0x10/0x10 [ 159.957808][ T5877] ? kcov_remote_start+0x4d3/0x7f0 [ 159.957827][ T5877] ? local_clock_noinstr+0xe0/0xe0 [ 159.957847][ T5877] ? hci_send_to_monitor+0xe2/0x570 [ 159.957870][ T5877] hci_rx_work+0x46a/0xe80 [ 159.957899][ T5877] ? process_scheduled_works+0x9ef/0x17b0 [ 159.957922][ T5877] process_scheduled_works+0xae1/0x17b0 [ 159.957974][ T5877] ? __pfx_process_scheduled_works+0x10/0x10 [ 159.958010][ T5877] worker_thread+0x8a0/0xda0 [ 159.958059][ T5877] kthread+0x711/0x8a0 [ 159.958084][ T5877] ? __pfx_worker_thread+0x10/0x10 [ 159.958104][ T5877] ? __pfx_kthread+0x10/0x10 [ 159.958130][ T5877] ? _raw_spin_unlock_irq+0x23/0x50 [ 159.958149][ T5877] ? lockdep_hardirqs_on+0x9c/0x150 [ 159.958162][ T5877] ? __pfx_kthread+0x10/0x10 [ 159.958187][ T5877] ret_from_fork+0x4bc/0x870 [ 159.958209][ T5877] ? __pfx_ret_from_fork+0x10/0x10 [ 159.958235][ T5877] ? __switch_to_asm+0x39/0x70 [ 159.958251][ T5877] ? __switch_to_asm+0x33/0x70 [ 159.958267][ T5877] ? __pfx_kthread+0x10/0x10 [ 159.958290][ T5877] ret_from_fork_asm+0x1a/0x30 [ 159.958324][ T5877] [ 159.958354][ T5877] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 160.117429][ T8078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.121752][ T5877] Bluetooth: hci1: failed to register connection device [ 160.162450][ T8078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.262642][ C0] vkms_vblank_simulate: vblank timer overrun [ 160.698750][ T8094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.708811][ T8094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.917870][ T8097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.926888][ T8097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.995263][ T5957] usb 3-1: USB disconnect, device number 50 [ 161.258133][ T8102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.267886][ T8102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.364293][ T5957] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 161.514093][ T5957] usb 3-1: Using ep0 maxpacket: 16 [ 161.521453][ T5957] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.539039][ T5957] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 161.548544][ T5957] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.560863][ T5957] usb 3-1: config 0 descriptor?? [ 161.667665][ T8114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.679062][ T8114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.835459][ T8118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.845043][ T8118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.859018][ T8120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.873740][ T8120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.906597][ T8122] overlayfs: failed to clone upperpath [ 161.917197][ T8122] overlayfs: failed to clone upperpath [ 161.982355][ T8100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.991343][ T8100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.996199][ T5957] mcp2221 0003:04D8:00DD.000D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 162.001826][ T8100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.019857][ T8100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.202513][ T5957] usb 3-1: USB disconnect, device number 51 [ 162.491859][ T8132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.500630][ T8132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.655930][ T8137] netlink: 'syz.3.613': attribute type 10 has an invalid length. [ 162.663706][ T8137] team0: Device dummy0 is up. Set it down before adding it as a team port [ 163.024167][ T43] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 163.224459][ T43] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 163.242975][ T43] usb 3-1: config 0 has no interface number 0 [ 163.255960][ T43] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 163.281816][ T43] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9 [ 163.301255][ T43] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024 [ 163.313123][ T43] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 163.323556][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.347585][ T43] usb 3-1: config 0 descriptor?? [ 163.374580][ T43] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input12 [ 163.466861][ C0] usbtouchscreen 3-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 163.488471][ T8153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.498100][ T8153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.697510][ T43] usb 3-1: USB disconnect, device number 52 [ 164.043364][ T8157] netlink: 'syz.3.620': attribute type 4 has an invalid length. [ 164.051214][ T8157] netlink: 17 bytes leftover after parsing attributes in process `syz.3.620'. [ 164.261994][ T8163] nftables ruleset with unbound chain [ 164.272483][ T8162] netlink: 'syz.4.622': attribute type 2 has an invalid length. [ 164.350565][ T8165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.363621][ T8165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.583001][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'. [ 164.598538][ T8173] bond0: Error: Cannot enslave bond to itself. [ 164.844114][ T5906] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 164.995233][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 165.002847][ T5906] usb 3-1: config 0 has an invalid interface number: 144 but max is 0 [ 165.016595][ T5906] usb 3-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 165.027725][ T5906] usb 3-1: config 0 has no interface number 0 [ 165.034325][ T5906] usb 3-1: config 0 interface 144 has no altsetting 0 [ 165.043772][ T5906] usb 3-1: New USB device found, idVendor=1286, idProduct=204e, bcdDevice=e5.af [ 165.060919][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.069181][ T5906] usb 3-1: Product: syz [ 165.073577][ T5906] usb 3-1: Manufacturer: syz [ 165.080045][ T5906] usb 3-1: SerialNumber: syz [ 165.096601][ T5906] usb 3-1: config 0 descriptor?? [ 165.498464][ T5906] usb 3-1: USB disconnect, device number 53 [ 166.309683][ T8220] netlink: 'syz.0.639': attribute type 4 has an invalid length. [ 166.331448][ T8221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.348130][ T8221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.377143][ T8218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.397193][ T8218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.425967][ T8222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.443828][ T8222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.492741][ T8214] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 166.499506][ T8214] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 166.510587][ T8214] vhci_hcd vhci_hcd.0: Device attached [ 166.521949][ T8223] vhci_hcd: connection closed [ 166.525153][ T50] vhci_hcd: stop threads [ 166.539184][ T50] vhci_hcd: release socket [ 166.543669][ T50] vhci_hcd: disconnect device [ 167.142521][ T8237] netlink: 536 bytes leftover after parsing attributes in process `syz.0.641'. [ 167.147246][ T8238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.161501][ T8238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.180865][ T8237] netlink: 32 bytes leftover after parsing attributes in process `syz.0.641'. [ 167.616595][ T8248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.627535][ T8248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.652104][ T8248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.662541][ T8248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.897768][ T8257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.908297][ T8257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.977814][ T8262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.986349][ T5906] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 167.997319][ T8262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.052604][ T8267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.062473][ T8267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.146165][ T5906] usb 3-1: config 0 interface 0 altsetting 127 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.156417][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0 [ 168.163059][ T5906] usb 3-1: New USB device found, idVendor=0b05, idProduct=1a30, bcdDevice= 0.00 [ 168.172216][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.182249][ T5906] usb 3-1: config 0 descriptor?? [ 168.604469][ T5906] hid (null): unknown global tag 0xd [ 168.613295][ T5906] hid (null): unknown global tag 0xe [ 168.619141][ T5906] hid (null): invalid report_size 163564681 [ 168.633882][ T5906] hid (null): invalid report_size 25705 [ 168.649521][ T5906] asus 0003:0B05:1A30.000E: unknown main item tag 0x0 [ 168.661126][ T5906] asus 0003:0B05:1A30.000E: unknown main item tag 0x0 [ 168.672735][ T5906] asus 0003:0B05:1A30.000E: unknown main item tag 0x0 [ 168.683393][ T5906] asus 0003:0B05:1A30.000E: unknown main item tag 0x0 [ 168.697289][ T5906] asus 0003:0B05:1A30.000E: unknown main item tag 0x0 [ 168.706218][ T5906] asus 0003:0B05:1A30.000E: unknown main item tag 0x0 [ 168.713174][ T5906] asus 0003:0B05:1A30.000E: unknown main item tag 0x0 [ 168.715368][ T8273] fuse: Unknown parameter '/ed00000000000000000006' [ 168.720154][ T5906] asus 0003:0B05:1A30.000E: unknown main item tag 0x0 [ 168.734076][ T5906] asus 0003:0B05:1A30.000E: unknown main item tag 0x0 [ 168.740887][ T5906] asus 0003:0B05:1A30.000E: unknown main item tag 0x0 [ 168.763643][ T5906] asus 0003:0B05:1A30.000E: unknown global tag 0xd [ 168.770783][ T5906] asus 0003:0B05:1A30.000E: item 0 0 1 13 parsing failed [ 168.784742][ T5906] asus 0003:0B05:1A30.000E: Asus hid parse failed: -22 [ 168.806648][ T5906] asus 0003:0B05:1A30.000E: probe with driver asus failed with error -22 [ 168.821022][ T5906] usb 3-1: USB disconnect, device number 54 [ 168.965319][ T8280] IPv6: 8: Disabled Multicast RS [ 169.239518][ T8287] fuse: Bad value for 'fd' [ 170.028022][ T8298] sit0: entered promiscuous mode [ 170.039429][ T8298] netlink: 'syz.4.663': attribute type 1 has an invalid length. [ 170.049742][ T8298] netlink: 1 bytes leftover after parsing attributes in process `syz.4.663'. [ 170.137020][ T8301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.147315][ T8301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.164464][ T5877] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 170.174504][ T5877] Bluetooth: hci2: Injecting HCI hardware error event [ 170.182859][ T5867] Bluetooth: hci2: hardware error 0x00 [ 170.259010][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 170.259026][ T30] audit: type=1326 audit(1758871059.911:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8305 comm="syz.4.665" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc51c58eec9 code=0x0 [ 170.286967][ C0] vkms_vblank_simulate: vblank timer overrun [ 170.320378][ T8307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.329575][ T8307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.664163][ T43] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 170.798978][ T8324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.811951][ T8324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.826184][ T43] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 170.835285][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.848424][ T43] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 170.858393][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.866938][ T43] usb 3-1: Product: syz [ 170.871172][ T43] usb 3-1: Manufacturer: syz [ 170.876209][ T43] usb 3-1: SerialNumber: syz [ 170.884531][ T43] usb 3-1: config 0 descriptor?? [ 170.892998][ T43] ims_pcu 3-1:0.0: Missing CDC union descriptor [ 170.899757][ T43] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 170.921170][ T8329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.931416][ T8329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.026549][ T8334] netlink: 100 bytes leftover after parsing attributes in process `syz.3.675'. [ 171.064530][ T8333] process 'memfd:ndRi5ም[@8 9I=\'LҎ)JtTDqρ1 >\LϑM^{' started with executable stack [ 171.078588][ T8329] netlink: 'syz.0.673': attribute type 32 has an invalid length. [ 171.086394][ T8329] netlink: 36 bytes leftover after parsing attributes in process `syz.0.673'. [ 171.447736][ T8339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.456662][ T8339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.707373][ T8344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.716278][ T8344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.727096][ T8344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.736577][ T8344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.176428][ T30] audit: type=1800 audit(1758871061.831:401): pid=8346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.679" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 172.298653][ T8355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.310008][ T8355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.325950][ T8355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.330016][ T5867] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 172.335417][ T8355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.911874][ T8362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.923298][ T8362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.936767][ T8362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.945885][ T8362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.327388][ T8369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.336121][ T8369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.427281][ T24] usb 3-1: USB disconnect, device number 55 [ 173.832759][ T30] audit: type=1804 audit(1758871063.481:402): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.692" name="/newroot/142/cgroup.controllers" dev="tmpfs" ino=770 res=1 errno=0 [ 173.864291][ T30] audit: type=1800 audit(1758871063.481:403): pid=8388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.692" name="cgroup.controllers" dev="tmpfs" ino=770 res=0 errno=0 [ 173.993744][ T8390] netlink: 'syz.2.693': attribute type 10 has an invalid length. [ 174.010589][ T5867] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 174.010618][ T5867] Bluetooth: hci1: Malformed LE Event: 0x0d [ 174.371495][ T8405] netlink: 324 bytes leftover after parsing attributes in process `syz.0.698'. [ 174.456410][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 174.614114][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 174.629186][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.635352][ T8418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.643302][ T10] usb 3-1: config 0 has no interfaces? [ 174.649301][ T8418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.660033][ T10] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 174.670181][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.697227][ T10] usb 3-1: config 0 descriptor?? [ 174.905516][ T8402] netlink: 'syz.2.697': attribute type 3 has an invalid length. [ 174.913281][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.697'. [ 174.914708][ T8403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.932973][ T8403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.946183][ T24] usb 3-1: USB disconnect, device number 56 [ 175.261684][ T8429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.271008][ T8429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.281776][ T8429] netlink: 328 bytes leftover after parsing attributes in process `syz.0.704'. [ 175.724135][ T43] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 175.875644][ T43] usb 3-1: config 0 has an invalid descriptor of length 71, skipping remainder of the config [ 175.886005][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 37377, setting to 1024 [ 175.897369][ T43] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 175.907483][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.922307][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 175.931398][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.939636][ T43] usb 3-1: Product: syz [ 175.943819][ T43] usb 3-1: Manufacturer: syz [ 175.948466][ T43] usb 3-1: SerialNumber: syz [ 175.958333][ T43] usb 3-1: config 0 descriptor?? [ 175.963888][ T8431] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 176.148076][ T8436] netlink: 4228 bytes leftover after parsing attributes in process `syz.3.707'. [ 176.177664][ T8431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.188456][ T8431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.235260][ T43] usb 3-1: USB disconnect, device number 57 [ 176.359382][ T8443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.368221][ T8443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.380032][ T8443] ubi: mtd0 is already attached to ubi31 [ 176.988553][ T8459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.998444][ T8459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.046954][ T8462] netlink: 'syz.3.717': attribute type 21 has an invalid length. [ 177.055280][ T8462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.717'. [ 177.204271][ T5906] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 177.364108][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 177.370699][ T5906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.383287][ T5906] usb 3-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 177.392405][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.400472][ T5906] usb 3-1: Product: syz [ 177.404751][ T5906] usb 3-1: Manufacturer: syz [ 177.409347][ T5906] usb 3-1: SerialNumber: syz [ 177.415986][ T5906] usb 3-1: config 0 descriptor?? [ 177.424840][ T5906] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 177.431077][ T5906] gspca_stv06xx: st6422 sensor detected [ 177.906505][ T5906] STV06xx 3-1:0.0: probe with driver STV06xx failed with error -71 [ 177.916582][ T5906] usb 3-1: USB disconnect, device number 58 [ 178.064766][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.078002][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.111421][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.122923][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.368208][ T8482] netlink: 20 bytes leftover after parsing attributes in process `syz.0.724'. [ 178.425469][ T8484] netlink: 20 bytes leftover after parsing attributes in process `syz.0.724'. [ 178.486614][ T8496] overlayfs: failed to clone upperpath [ 178.702325][ T8503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.715460][ T8503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.087689][ T8513] netlink: 184 bytes leftover after parsing attributes in process `syz.4.735'. [ 179.442306][ T8527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.451837][ T8527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.604446][ T8529] sctp: [Deprecated]: syz.2.738 (pid 8529) Use of int in max_burst socket option. [ 179.604446][ T8529] Use struct sctp_assoc_value instead [ 179.930518][ T43] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 180.050564][ T8549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.075759][ T8549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.077730][ T43] usb 3-1: device descriptor read/64, error -71 [ 180.146081][ T8557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.157381][ T8557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.329823][ T8563] netlink: 'syz.4.748': attribute type 15 has an invalid length. [ 180.337920][ T43] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 180.477030][ T43] usb 3-1: device descriptor read/64, error -71 [ 180.584507][ T43] usb usb3-port1: attempt power cycle [ 180.640835][ T8573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.650657][ T8573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.728298][ T8576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.737511][ T8576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.924112][ T43] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 180.944819][ T43] usb 3-1: device descriptor read/8, error -71 [ 181.184117][ T43] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 181.214697][ T43] usb 3-1: device descriptor read/8, error -71 [ 181.324518][ T43] usb usb3-port1: unable to enumerate USB device [ 182.037925][ T8601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.046776][ T8601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.627741][ T8608] 9pnet_fd: Insufficient options for proto=fd [ 182.639854][ T8609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.651306][ T8609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.676982][ T8610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.696186][ T8609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.718327][ T8610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.730855][ T8609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.803635][ T30] audit: type=1326 audit(1758871072.451:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8616 comm="syz.2.767" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f092758eec9 code=0x0 [ 182.832498][ T30] audit: type=1326 audit(1758871072.451:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048738eec9 code=0x7ffc0000 [ 182.858779][ T30] audit: type=1326 audit(1758871072.451:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f048738eec9 code=0x7ffc0000 [ 182.881893][ T30] audit: type=1326 audit(1758871072.451:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048738eec9 code=0x7ffc0000 [ 182.924371][ T30] audit: type=1326 audit(1758871072.451:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f048738eec9 code=0x7ffc0000 [ 182.961133][ T8622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.978148][ T30] audit: type=1326 audit(1758871072.451:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048738eec9 code=0x7ffc0000 [ 183.001121][ T8622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.016676][ T8622] netlink: 'syz.0.768': attribute type 10 has an invalid length. [ 183.037638][ T30] audit: type=1326 audit(1758871072.451:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f048738eec9 code=0x7ffc0000 [ 183.063065][ T30] audit: type=1326 audit(1758871072.451:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048738eec9 code=0x7ffc0000 [ 183.086324][ T30] audit: type=1326 audit(1758871072.451:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f048738eec9 code=0x7ffc0000 [ 183.109013][ T30] audit: type=1326 audit(1758871072.451:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8611 comm="syz.3.765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048738eec9 code=0x7ffc0000 [ 183.302852][ T8629] netlink: 60 bytes leftover after parsing attributes in process `syz.2.770'. [ 183.312862][ T8628] netlink: 60 bytes leftover after parsing attributes in process `syz.2.770'. [ 183.452950][ T8633] overlayfs: failed to clone upperpath [ 183.594133][ T5913] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 183.631241][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 183.640425][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 183.709989][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 183.745699][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 183.747607][ T5913] usb 3-1: config 0 has too many interfaces: 204, using maximum allowed: 32 [ 183.774986][ T5913] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 204 [ 183.788682][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.805745][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.819283][ T5913] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 183.836468][ T5913] usb 3-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 183.846382][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.848649][ T8646] serio: Serial port ptm0 [ 183.876222][ T5913] usb 3-1: config 0 descriptor?? [ 183.897728][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 183.910740][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.774'. [ 183.930816][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'. [ 183.943509][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.776'. [ 184.107883][ T8662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.126259][ T8662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.302740][ T5913] input: HID 28bd:0909 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:28BD:0909.000F/input/input14 [ 184.349210][ T8675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.361718][ T8675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.412560][ T5913] uclogic 0003:28BD:0909.000F: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.2-1/input0 [ 184.513331][ T24] usb 3-1: USB disconnect, device number 63 [ 184.756042][ T8685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.764913][ T8685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.909693][ T8687] vivid-004: disconnect [ 184.917709][ T8687] vivid-004: reconnect [ 185.477375][ T8718] loop6: detected capacity change from 0 to 7 [ 185.504450][ T8718] Dev loop6: unable to read RDB block 7 [ 185.511192][ T8718] loop6: unable to read partition table [ 185.517799][ T8718] loop6: partition table beyond EOD, truncated [ 185.524683][ T8718] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 185.541191][ T8718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.553076][ T8718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.568571][ T8718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.588564][ T8718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.151306][ T8746] netlink: 'syz.0.804': attribute type 1 has an invalid length. [ 186.235940][ T8747] netlink: 'syz.0.804': attribute type 1 has an invalid length. [ 186.295215][ T8749] netlink: 'syz.2.805': attribute type 46 has an invalid length. [ 186.307373][ T8749] tipc: Enabling of bearer rejected, failed to enable media [ 186.359900][ T8751] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 186.429020][ T8761] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 186.938484][ T8786] C: renamed from team_slave_0 (while UP) [ 186.973888][ T8786] netlink: 'syz.2.818': attribute type 4 has an invalid length. [ 186.983126][ T8792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.994249][ T8786] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 187.010371][ T8792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.142846][ T8797] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 187.145694][ T5906] IPVS: starting estimator thread 0... [ 187.231123][ T8803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.263421][ T8803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.274383][ T8800] IPVS: using max 35 ests per chain, 84000 per kthread [ 187.674123][ T6009] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 187.825639][ T6009] usb 3-1: config 0 has an invalid interface number: 56 but max is 0 [ 187.833764][ T6009] usb 3-1: config 0 has no interface number 0 [ 187.843046][ T6009] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 187.852269][ T6009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.861120][ T6009] usb 3-1: Product: syz [ 187.865348][ T6009] usb 3-1: Manufacturer: syz [ 187.869945][ T6009] usb 3-1: SerialNumber: syz [ 187.877228][ T6009] usb 3-1: config 0 descriptor?? [ 188.110770][ T8809] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 188.128189][ T6009] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 188.137853][ T6009] pctv452e: pctv452e_power_ctrl: 1 [ 188.137853][ T6009] [ 188.145296][ T6009] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 188.145296][ T6009] [ 188.156780][ T6009] dvb-usb: bulk message failed: -22 (5/0) [ 188.175940][ T6009] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 188.191754][ T6009] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 188.329116][ T5906] usb 3-1: USB disconnect, device number 64 [ 188.401863][ T8827] netlink: 'syz.0.830': attribute type 21 has an invalid length. [ 188.528273][ T8836] input: syz0 as /devices/virtual/input/input15 [ 189.055229][ T8860] (syz.2.836,8860,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 189.444667][ T6009] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 189.621916][ T6009] usb 3-1: config 0 has an invalid interface number: 23 but max is 0 [ 189.645129][ T6009] usb 3-1: config 0 has no interface number 0 [ 189.651274][ T6009] usb 3-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 189.670213][ T6009] usb 3-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 189.686414][ T6009] usb 3-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 189.704225][ T6009] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.722449][ T6009] usb 3-1: Product: syz [ 189.727134][ T6009] usb 3-1: Manufacturer: syz [ 189.731788][ T6009] usb 3-1: SerialNumber: syz [ 189.759185][ T6009] usb 3-1: config 0 descriptor?? [ 189.774958][ T8870] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 189.782247][ T8870] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 189.816036][ T6009] ums-usbat 3-1:0.23: USB Mass Storage device detected [ 189.821351][ T8898] __nla_validate_parse: 10 callbacks suppressed [ 189.821366][ T8898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.842'. [ 190.073703][ T6009] ums-usbat 3-1:0.23: probe with driver ums-usbat failed with error -5 [ 190.092959][ T6009] usb 3-1: USB disconnect, device number 65 [ 190.164396][ T8919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.173858][ T8919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.195951][ T8919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.210032][ T8919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.673748][ T8941] syz.2.845(8941): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 190.676056][ T8942] netlink: 'syz.3.846': attribute type 12 has an invalid length. [ 190.720369][ T8942] netlink: 172 bytes leftover after parsing attributes in process `syz.3.846'. [ 190.724456][ T5867] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.735970][ T43] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 190.742344][ T43] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 190.861203][ T8953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.882499][ T8953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.898214][ T8958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.918882][ T8958] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.920749][ T8959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.940939][ T8959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.144180][ T5906] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 191.324380][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 191.334916][ T5906] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 191.343961][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.352170][ T5906] usb 3-1: Product: syz [ 191.356384][ T5906] usb 3-1: Manufacturer: syz [ 191.360959][ T5906] usb 3-1: SerialNumber: syz [ 191.369521][ T5906] usb 3-1: config 0 descriptor?? [ 191.412141][ T8971] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 191.421497][ T8971] bond0: (slave wlan1): Opening slave failed [ 191.480181][ T8975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.493683][ T8975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.579122][ T5906] usb 3-1: USB disconnect, device number 66 [ 192.359082][ T9009] batadv_slave_1: entered promiscuous mode [ 192.370709][ T9009] cgroup: noprefix used incorrectly [ 192.377688][ T9008] batadv_slave_1: left promiscuous mode [ 192.394269][ T10] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 192.545602][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.555986][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.567055][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.576830][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 192.589817][ T10] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 192.598890][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.609702][ T10] usb 3-1: config 0 descriptor?? [ 192.959078][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.867'. [ 192.968052][ T9021] openvswitch: netlink: Message has 3 unknown bytes. [ 193.120870][ T9025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.866'. [ 193.219214][ T8992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.228691][ T8994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.229919][ T8992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.237565][ T8994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.259651][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 193.266494][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 193.277310][ T10] usb 3-1: USB disconnect, device number 67 [ 193.284937][ T5867] Bluetooth: hci1: command 0x0c1a tx timeout [ 193.285208][ T43] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 193.297207][ T43] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 193.750891][ T9041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.761544][ T9041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.134282][ T5932] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 194.171113][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.177564][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.284149][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 194.290981][ T5932] usb 3-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 194.303565][ T5932] usb 3-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 194.313122][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.324069][ T5932] usb 3-1: Product: syz [ 194.328482][ T5932] usb 3-1: Manufacturer: syz [ 194.333549][ T5932] usb 3-1: SerialNumber: syz [ 194.350909][ T5932] pwc: Askey VC010 type 1 USB webcam detected. [ 194.453754][ T9053] netlink: 80 bytes leftover after parsing attributes in process `syz.0.876'. [ 194.592840][ T9063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.612364][ T9063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.944841][ T9089] netlink: 36 bytes leftover after parsing attributes in process `syz.0.887'. [ 196.896722][ T5932] pwc: send_video_command error -71 [ 196.901962][ T5932] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 196.922296][ T5932] Philips webcam 3-1:76.0: probe with driver Philips webcam failed with error -71 [ 196.942076][ T5932] usb 3-1: USB disconnect, device number 68 [ 199.025204][ T9114] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 199.918518][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 199.918533][ T30] audit: type=1326 audit(1758871089.571:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9124 comm="syz.3.897" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f048738eec9 code=0x0 [ 200.040247][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.897'. [ 201.973329][ T9139] netlink: 'syz.3.901': attribute type 6 has an invalid length. [ 201.982127][ T9139] netlink: 'syz.3.901': attribute type 6 has an invalid length. [ 202.607547][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'. [ 202.616981][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 202.625981][ T9145] netlink: 2 bytes leftover after parsing attributes in process `syz.3.904'. [ 202.635308][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.3.904'. [ 202.644203][ T9145] netlink: 2 bytes leftover after parsing attributes in process `syz.3.904'. [ 203.342499][ T5906] usb 5-1: USB disconnect, device number 11 [ 204.722208][ T9163] overlayfs: failed to clone upperpath [ 207.063381][ T9180] trusted_key: encrypted_key: key user:syz not found [ 207.668418][ T9182] netlink: 'syz.3.917': attribute type 6 has an invalid length. [ 207.831873][ T9186] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 207.831873][ T9186] The task syz.3.918 (9186) triggered the difference, watch for misbehavior. [ 208.637883][ T9191] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 208.670940][ T9196] netlink: 'syz.3.921': attribute type 2 has an invalid length. [ 208.679804][ T9196] netlink: 132 bytes leftover after parsing attributes in process `syz.3.921'. [ 210.241817][ T9210] fuse: Unknown parameter 'P9b_i[SV?#3xd4Wafs$~x' [ 211.419983][ T5932] usb 1-1: USB disconnect, device number 49 [ 211.454630][ T9219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.927'. [ 212.477630][ T9232] pimreg: entered allmulticast mode [ 212.485797][ T9232] batadv_slave_1: entered promiscuous mode [ 212.501093][ T9232] pimreg: left allmulticast mode [ 212.595342][ T9232] batadv_slave_1: left promiscuous mode [ 216.614381][ T9300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.951'. [ 216.623253][ T9300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.951'. [ 217.293014][ T9309] netlink: 'syz.3.955': attribute type 3 has an invalid length. [ 217.377931][ T9312] cgroup: No subsys list or none specified [ 220.100727][ T9344] cgroup2: Unknown parameter 'fadocK3l.rdynmods#yWQ0>_[߸p_ڈt p.UR@Rn?aEJXR ZY:1`3 [ 220.100727][ T9344] uVe߹' [ 221.956292][ T9357] (syz.3.971,9357,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 221.965960][ T9357] libceph: resolve '4' (ret=-3): failed [ 222.498804][ T9359] netlink: 'syz.3.972': attribute type 10 has an invalid length. [ 222.508212][ T9359] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.516580][ T9359] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.534203][ T9359] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.541525][ T9359] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.549126][ T9359] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.550562][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.972'. [ 222.556357][ T9359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.577096][ T9359] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 222.586533][ T9360] bridge_slave_1: left allmulticast mode [ 222.592164][ T9360] bridge_slave_1: left promiscuous mode [ 222.598100][ T9360] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.609055][ T9360] bridge_slave_0: left promiscuous mode [ 222.615636][ T9360] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.636106][ T9360] bond0: (slave bridge0): Releasing backup interface [ 223.887187][ T9372] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 223.927042][ T9373] delete_channel: no stack [ 223.931989][ T9373] delete_channel: no stack [ 224.491613][ T9382] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.980'. [ 224.500857][ T9382] openvswitch: netlink: Message has 8 unknown bytes. [ 224.510545][ T9382] netlink: 28 bytes leftover after parsing attributes in process `syz.3.980'. [ 225.049070][ T9384] netlink: 'syz.3.981': attribute type 2 has an invalid length. [ 225.057999][ T9384] netlink: 'syz.3.981': attribute type 1 has an invalid length. [ 225.067074][ T9384] netlink: 'syz.3.981': attribute type 1 has an invalid length. [ 227.142698][ T9399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.986'. [ 229.900707][ T30] audit: type=1326 audit(1758871119.551:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9408 comm="syz.3.988" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f048738eec9 code=0xffff0000 [ 255.617902][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.624310][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.057892][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.064389][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 350.964162][ T31] INFO: task kworker/1:1:43 blocked for more than 143 seconds. [ 350.971737][ T31] Not tainted syzkaller #0 [ 350.976787][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 350.985599][ T31] task:kworker/1:1 state:D stack:21176 pid:43 tgid:43 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 350.997654][ T31] Workqueue: events rfkill_op_handler [ 351.003061][ T31] Call Trace: [ 351.006387][ T31] [ 351.009323][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 351.013847][ T31] ? __lock_acquire+0xab9/0xd20 [ 351.018999][ T31] ? __lock_acquire+0xab9/0xd20 [ 351.023867][ T31] ? __pfx___schedule+0x10/0x10 [ 351.044098][ T31] ? schedule+0x91/0x360 [ 351.048377][ T31] schedule+0x165/0x360 [ 351.052543][ T31] schedule_preempt_disabled+0x13/0x30 [ 351.094075][ T31] __mutex_lock+0x7e6/0x1350 [ 351.098767][ T31] ? __mutex_lock+0x5bb/0x1350 [ 351.103541][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 351.123412][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 351.128593][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.133809][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 351.139811][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 351.164079][ T31] ? kobject_uevent_env+0x36b/0x8c0 [ 351.169402][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 351.184920][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 351.190286][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 351.204143][ T31] rfkill_set_block+0x1d2/0x440 [ 351.209033][ T31] rfkill_epo+0x7e/0x180 [ 351.213290][ T31] rfkill_op_handler+0x84/0x240 [ 351.234055][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 351.239815][ T31] process_scheduled_works+0xae1/0x17b0 [ 351.246452][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 351.253170][ T31] worker_thread+0x8a0/0xda0 [ 351.257875][ T31] kthread+0x711/0x8a0 [ 351.261960][ T31] ? __pfx_worker_thread+0x10/0x10 [ 351.267333][ T31] ? __pfx_kthread+0x10/0x10 [ 351.271941][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.277204][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.282399][ T31] ? __pfx_kthread+0x10/0x10 [ 351.287019][ T31] ret_from_fork+0x4bc/0x870 [ 351.291707][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 351.296901][ T31] ? __switch_to_asm+0x39/0x70 [ 351.301670][ T31] ? __switch_to_asm+0x33/0x70 [ 351.306440][ T31] ? __pfx_kthread+0x10/0x10 [ 351.311032][ T31] ret_from_fork_asm+0x1a/0x30 [ 351.315924][ T31] [ 351.319118][ T31] INFO: task kworker/1:3:5913 blocked for more than 143 seconds. [ 351.327034][ T31] Not tainted syzkaller #0 [ 351.331971][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.341022][ T31] task:kworker/1:3 state:D stack:20344 pid:5913 tgid:5913 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 351.353113][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 351.360041][ T31] Call Trace: [ 351.363501][ T31] [ 351.366517][ T31] __schedule+0x1798/0x4cc0 [ 351.371042][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 351.377430][ T31] ? __pfx___schedule+0x10/0x10 [ 351.382305][ T31] ? schedule+0x91/0x360 [ 351.386598][ T31] schedule+0x165/0x360 [ 351.390769][ T31] schedule_preempt_disabled+0x13/0x30 [ 351.396274][ T31] __mutex_lock+0x7e6/0x1350 [ 351.400876][ T31] ? __mutex_lock+0x5bb/0x1350 [ 351.406668][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 351.412927][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 351.418172][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 351.423905][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 351.429831][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 351.436075][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 351.441899][ T31] process_scheduled_works+0xae1/0x17b0 [ 351.451492][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 351.457711][ T31] worker_thread+0x8a0/0xda0 [ 351.462868][ T31] kthread+0x711/0x8a0 [ 351.467347][ T31] ? __pfx_worker_thread+0x10/0x10 [ 351.472471][ T31] ? __pfx_kthread+0x10/0x10 [ 351.477311][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 351.482524][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 351.487942][ T31] ? __pfx_kthread+0x10/0x10 [ 351.492546][ T31] ret_from_fork+0x4bc/0x870 [ 351.497373][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 351.502498][ T31] ? __switch_to_asm+0x39/0x70 [ 351.507468][ T31] ? __switch_to_asm+0x33/0x70 [ 351.512233][ T31] ? __pfx_kthread+0x10/0x10 [ 351.517084][ T31] ret_from_fork_asm+0x1a/0x30 [ 351.521900][ T31] [ 351.525200][ T31] INFO: task syz.4.829:8818 blocked for more than 143 seconds. [ 351.532747][ T31] Not tainted syzkaller #0 [ 351.543166][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.552446][ T31] task:syz.4.829 state:D stack:25608 pid:8818 tgid:8818 ppid:6962 task_flags:0x400040 flags:0x00080003 [ 351.565321][ T31] Call Trace: [ 351.568613][ T31] [ 351.571529][ T31] __schedule+0x1798/0x4cc0 [ 351.576412][ T31] ? __lock_acquire+0xab9/0xd20 [ 351.581261][ T31] ? __lock_acquire+0xab9/0xd20 [ 351.586123][ T31] ? __pfx___schedule+0x10/0x10 [ 351.590990][ T31] ? schedule+0x91/0x360 [ 351.595254][ T31] schedule+0x165/0x360 [ 351.599416][ T31] schedule_preempt_disabled+0x13/0x30 [ 351.605284][ T31] __mutex_lock+0x7e6/0x1350 [ 351.609886][ T31] ? __mutex_lock+0x5bb/0x1350 [ 351.614671][ T31] ? rfkill_unregister+0xc8/0x220 [ 351.619692][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 351.624760][ T31] ? __pfx_device_del+0x10/0x10 [ 351.629633][ T31] rfkill_unregister+0xc8/0x220 [ 351.634513][ T31] nfc_unregister_device+0x96/0x2a0 [ 351.639711][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 351.645448][ T31] virtual_ncidev_close+0x56/0x90 [ 351.650472][ T31] __fput+0x44c/0xa70 [ 351.654498][ T31] task_work_run+0x1d4/0x260 [ 351.659101][ T31] ? __pfx_task_work_run+0x10/0x10 [ 351.664249][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 351.669715][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 351.675077][ T31] do_syscall_64+0x2bd/0xfa0 [ 351.679667][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.685965][ T31] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 351.691599][ T31] ? clear_bhb_loop+0x60/0xb0 [ 351.696299][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.702191][ T31] RIP: 0033:0x7fc51c58eec9 [ 351.706643][ T31] RSP: 002b:00007ffca90908e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 351.715072][ T31] RAX: 0000000000000000 RBX: 000000000002df62 RCX: 00007fc51c58eec9 [ 351.723023][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 351.731009][ T31] RBP: 00007fc51c7e7da0 R08: 0000000000000001 R09: 0000001ca9090bdf [ 351.739002][ T31] R10: 0000001b2e120000 R11: 0000000000000246 R12: 00007fc51c7e5fac [ 351.747004][ T31] R13: 00007fc51c7e5fa0 R14: ffffffffffffffff R15: 00007ffca9090a00 [ 351.755016][ T31] [ 351.758031][ T31] INFO: task syz.0.887:9089 blocked for more than 144 seconds. [ 351.775996][ T31] Not tainted syzkaller #0 [ 351.781187][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 351.791087][ T31] task:syz.0.887 state:D stack:26056 pid:9089 tgid:9088 ppid:5863 task_flags:0x400140 flags:0x00080002 [ 351.804159][ T31] Call Trace: [ 351.807463][ T31] [ 351.810382][ T31] __schedule+0x1798/0x4cc0 [ 351.815005][ T31] ? __lock_acquire+0xab9/0xd20 [ 351.819865][ T31] ? __lock_acquire+0xab9/0xd20 [ 351.824867][ T31] ? __pfx___schedule+0x10/0x10 [ 351.829738][ T31] ? schedule+0x91/0x360 [ 351.833964][ T31] schedule+0x165/0x360 [ 351.838202][ T31] schedule_preempt_disabled+0x13/0x30 [ 351.843663][ T31] __mutex_lock+0x7e6/0x1350 [ 351.848523][ T31] ? __mutex_lock+0x5bb/0x1350 [ 351.853299][ T31] ? rfkill_register+0x37/0x8e0 [ 351.859673][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 351.864798][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 351.870181][ T31] ? device_initialize+0x24b/0x440 [ 351.875308][ T31] rfkill_register+0x37/0x8e0 [ 351.879983][ T31] nfc_register_device+0x14a/0x320 [ 351.885113][ T31] nci_register_device+0x87f/0x9d0 [ 351.890232][ T31] ? __pfx_nci_register_device+0x10/0x10 [ 351.895892][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 351.901182][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 351.906760][ T31] virtual_ncidev_open+0x129/0x1a0 [ 351.911898][ T31] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 351.917572][ T31] misc_open+0x2d5/0x350 [ 351.921828][ T31] chrdev_open+0x4cc/0x5e0 [ 351.926354][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 351.931302][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 351.937666][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 351.942610][ T31] do_dentry_open+0x953/0x13f0 [ 351.947406][ T31] vfs_open+0x3b/0x340 [ 351.951473][ T31] ? path_openat+0x2ecd/0x3830 [ 351.956264][ T31] path_openat+0x2ee5/0x3830 [ 351.960876][ T31] ? __pfx_path_openat+0x10/0x10 [ 351.965859][ T31] do_filp_open+0x1fa/0x410 [ 351.970365][ T31] ? __lock_acquire+0xab9/0xd20 [ 351.975253][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 351.980288][ T31] ? _raw_spin_unlock+0x28/0x50 [ 351.985157][ T31] ? alloc_fd+0x64c/0x6c0 [ 351.989490][ T31] do_sys_openat2+0x121/0x1c0 [ 351.994196][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 351.999401][ T31] ? __fget_files+0x3a0/0x420 [ 352.004129][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 352.009329][ T31] __x64_sys_openat+0x138/0x170 [ 352.014383][ T31] do_syscall_64+0xfa/0xfa0 [ 352.018881][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.024970][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 352.031133][ T31] ? clear_bhb_loop+0x60/0xb0 [ 352.035835][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.041727][ T31] RIP: 0033:0x7f29fc38eec9 [ 352.046212][ T31] RSP: 002b:00007f29fd24d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 352.054654][ T31] RAX: ffffffffffffffda RBX: 00007f29fc5e5fa0 RCX: 00007f29fc38eec9 [ 352.062627][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 352.070625][ T31] RBP: 00007f29fc411f91 R08: 0000000000000000 R09: 0000000000000000 [ 352.078621][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.086606][ T31] R13: 00007f29fc5e6038 R14: 00007f29fc5e5fa0 R15: 00007ffe66c2d2b8 [ 352.094610][ T31] [ 352.097623][ T31] INFO: task syz.0.887:9093 blocked for more than 144 seconds. [ 352.105202][ T31] Not tainted syzkaller #0 [ 352.110133][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.118815][ T31] task:syz.0.887 state:D stack:27848 pid:9093 tgid:9088 ppid:5863 task_flags:0x400140 flags:0x00080002 [ 352.130862][ T31] Call Trace: [ 352.134165][ T31] [ 352.137097][ T31] __schedule+0x1798/0x4cc0 [ 352.141592][ T31] ? __lock_acquire+0xab9/0xd20 [ 352.146468][ T31] ? __lock_acquire+0xab9/0xd20 [ 352.151348][ T31] ? __pfx___schedule+0x10/0x10 [ 352.156229][ T31] ? schedule+0x91/0x360 [ 352.160477][ T31] schedule+0x165/0x360 [ 352.164999][ T31] schedule_preempt_disabled+0x13/0x30 [ 352.170478][ T31] __mutex_lock+0x7e6/0x1350 [ 352.175111][ T31] ? __mutex_lock+0x5bb/0x1350 [ 352.179883][ T31] ? misc_open+0x51/0x350 [ 352.184241][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 352.189306][ T31] misc_open+0x51/0x350 [ 352.193462][ T31] chrdev_open+0x4cc/0x5e0 [ 352.197900][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 352.202837][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 352.209181][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 352.214138][ T31] do_dentry_open+0x953/0x13f0 [ 352.218918][ T31] vfs_open+0x3b/0x340 [ 352.222968][ T31] ? path_openat+0x2ecd/0x3830 [ 352.227771][ T31] path_openat+0x2ee5/0x3830 [ 352.232405][ T31] ? __pfx_path_openat+0x10/0x10 [ 352.237566][ T31] do_filp_open+0x1fa/0x410 [ 352.242167][ T31] ? __lock_acquire+0xab9/0xd20 [ 352.247189][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 352.252237][ T31] ? _raw_spin_unlock+0x28/0x50 [ 352.257112][ T31] ? alloc_fd+0x64c/0x6c0 [ 352.261446][ T31] do_sys_openat2+0x121/0x1c0 [ 352.266143][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 352.271345][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 352.276575][ T31] __x64_sys_openat+0x138/0x170 [ 352.281433][ T31] do_syscall_64+0xfa/0xfa0 [ 352.285966][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.291170][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.297257][ T31] ? clear_bhb_loop+0x60/0xb0 [ 352.301942][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.307899][ T31] RIP: 0033:0x7f29fc38eec9 [ 352.312310][ T31] RSP: 002b:00007f29fd22c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 352.320755][ T31] RAX: ffffffffffffffda RBX: 00007f29fc5e6090 RCX: 00007f29fc38eec9 [ 352.328744][ T31] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 352.336742][ T31] RBP: 00007f29fc411f91 R08: 0000000000000000 R09: 0000000000000000 [ 352.344845][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.352799][ T31] R13: 00007f29fc5e6128 R14: 00007f29fc5e6090 R15: 00007ffe66c2d2b8 [ 352.360803][ T31] [ 352.363968][ T31] INFO: task syz.2.888:9096 blocked for more than 144 seconds. [ 352.371536][ T31] Not tainted syzkaller #0 [ 352.376749][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.385553][ T31] task:syz.2.888 state:D stack:24584 pid:9096 tgid:9095 ppid:5868 task_flags:0x400040 flags:0x00080002 [ 352.397497][ T31] Call Trace: [ 352.400765][ T31] [ 352.403701][ T31] __schedule+0x1798/0x4cc0 [ 352.408260][ T31] ? security_file_open+0xb1/0x270 [ 352.413385][ T31] ? __lock_acquire+0xab9/0xd20 [ 352.418275][ T31] ? __lock_acquire+0xab9/0xd20 [ 352.423132][ T31] ? __pfx___schedule+0x10/0x10 [ 352.428031][ T31] ? schedule+0x91/0x360 [ 352.432282][ T31] schedule+0x165/0x360 [ 352.436459][ T31] schedule_preempt_disabled+0x13/0x30 [ 352.441929][ T31] __mutex_lock+0x7e6/0x1350 [ 352.446555][ T31] ? __mutex_lock+0x5bb/0x1350 [ 352.451325][ T31] ? misc_open+0x51/0x350 [ 352.455853][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 352.460889][ T31] misc_open+0x51/0x350 [ 352.465101][ T31] chrdev_open+0x4cc/0x5e0 [ 352.469521][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 352.474479][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 352.480813][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 352.485975][ T31] do_dentry_open+0x953/0x13f0 [ 352.490754][ T31] vfs_open+0x3b/0x340 [ 352.494842][ T31] ? path_openat+0x2ecd/0x3830 [ 352.499613][ T31] path_openat+0x2ee5/0x3830 [ 352.504287][ T31] ? __pfx_path_openat+0x10/0x10 [ 352.509245][ T31] do_filp_open+0x1fa/0x410 [ 352.513732][ T31] ? __lock_acquire+0xab9/0xd20 [ 352.518598][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 352.523648][ T31] ? _raw_spin_unlock+0x28/0x50 [ 352.528549][ T31] ? alloc_fd+0x64c/0x6c0 [ 352.532895][ T31] do_sys_openat2+0x121/0x1c0 [ 352.537602][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 352.542816][ T31] ? rcu_is_watching+0x15/0xb0 [ 352.547628][ T31] __x64_sys_openat+0x138/0x170 [ 352.552527][ T31] do_syscall_64+0xfa/0xfa0 [ 352.557054][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.562251][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.568623][ T31] ? clear_bhb_loop+0x60/0xb0 [ 352.573312][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.579436][ T31] RIP: 0033:0x7f092758eec9 [ 352.583858][ T31] RSP: 002b:00007f0928469038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 352.592292][ T31] RAX: ffffffffffffffda RBX: 00007f09277e5fa0 RCX: 00007f092758eec9 [ 352.600297][ T31] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 352.608288][ T31] RBP: 00007f0927611f91 R08: 0000000000000000 R09: 0000000000000000 [ 352.616295][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.624277][ T31] R13: 00007f09277e6038 R14: 00007f09277e5fa0 R15: 00007ffe02c4e9c8 [ 352.632279][ T31] [ 352.635340][ T31] INFO: task syz-executor:9157 blocked for more than 145 seconds. [ 352.643140][ T31] Not tainted syzkaller #0 [ 352.648633][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 352.657328][ T31] task:syz-executor state:D stack:27112 pid:9157 tgid:9157 ppid:1 task_flags:0x400040 flags:0x00080000 [ 352.669275][ T31] Call Trace: [ 352.672536][ T31] [ 352.675671][ T31] __schedule+0x1798/0x4cc0 [ 352.680187][ T31] ? security_file_open+0xb1/0x270 [ 352.685366][ T31] ? __lock_acquire+0xab9/0xd20 [ 352.690220][ T31] ? __lock_acquire+0xab9/0xd20 [ 352.695092][ T31] ? __pfx___schedule+0x10/0x10 [ 352.699956][ T31] ? schedule+0x91/0x360 [ 352.704218][ T31] schedule+0x165/0x360 [ 352.708382][ T31] schedule_preempt_disabled+0x13/0x30 [ 352.713821][ T31] __mutex_lock+0x7e6/0x1350 [ 352.718432][ T31] ? __mutex_lock+0x5bb/0x1350 [ 352.723196][ T31] ? misc_open+0x51/0x350 [ 352.727573][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 352.732610][ T31] misc_open+0x51/0x350 [ 352.736790][ T31] chrdev_open+0x4cc/0x5e0 [ 352.741231][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 352.746205][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 352.752558][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 352.757573][ T31] do_dentry_open+0x953/0x13f0 [ 352.762359][ T31] vfs_open+0x3b/0x340 [ 352.766454][ T31] ? path_openat+0x2ecd/0x3830 [ 352.771233][ T31] path_openat+0x2ee5/0x3830 [ 352.775892][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 352.781360][ T31] ? count_memcg_event_mm+0x21/0x260 [ 352.786863][ T31] ? __pfx_path_openat+0x10/0x10 [ 352.791795][ T31] ? __pfx___up_read+0x10/0x10 [ 352.796578][ T31] ? do_user_addr_fault+0xbbc/0x1380 [ 352.801872][ T31] do_filp_open+0x1fa/0x410 [ 352.806698][ T31] ? __lock_acquire+0xab9/0xd20 [ 352.811557][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 352.816623][ T31] ? _raw_spin_unlock+0x28/0x50 [ 352.821474][ T31] ? alloc_fd+0x64c/0x6c0 [ 352.825845][ T31] do_sys_openat2+0x121/0x1c0 [ 352.830526][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 352.835749][ T31] ? fd_install+0x97/0x540 [ 352.840193][ T31] ? fd_install+0x30d/0x540 [ 352.844713][ T31] __x64_sys_openat+0x138/0x170 [ 352.849568][ T31] do_syscall_64+0xfa/0xfa0 [ 352.854090][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 352.859285][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.865384][ T31] ? clear_bhb_loop+0x60/0xb0 [ 352.870062][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.875986][ T31] RIP: 0033:0x7fa7a938d691 [ 352.880421][ T31] RSP: 002b:00007ffd224e68c0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 352.890447][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fa7a938d691 [ 352.898658][ T31] RDX: 0000000000000002 RSI: 00007fa7a941299a RDI: 00000000ffffff9c [ 352.906658][ T31] RBP: 00007fa7a941299a R08: 0000000000000000 R09: 00007fa7aa11d6c0 [ 352.914643][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 352.922619][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 352.930617][ T31] [ 352.933657][ T31] [ 352.933657][ T31] Showing all locks held in the system: [ 352.941408][ T31] 1 lock held by khungtaskd/31: [ 352.946277][ T31] #0: ffffffff8e53d360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 352.956147][ T31] 4 locks held by kworker/1:1/43: [ 352.961163][ T31] #0: ffff88801b019948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 352.972246][ T31] #1: ffffc90000b37ba0 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 352.983294][ T31] #2: ffffffff8fc22648 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 352.992820][ T31] #3: ffff888025074100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 353.002551][ T31] 2 locks held by getty/5630: [ 353.007414][ T31] #0: ffff888030de70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 353.017217][ T31] #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 353.027355][ T31] 3 locks held by kworker/1:3/5913: [ 353.032542][ T31] #0: ffff88801b019948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 353.043521][ T31] #1: ffffc90004f47ba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 353.057046][ T31] #2: ffffffff8fc22648 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 353.068375][ T31] 1 lock held by syz.3.510/7805: [ 353.073301][ T31] #0: ffffffff8fc22648 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 353.083417][ T31] 2 locks held by syz.4.829/8818: [ 353.088477][ T31] #0: ffff888025074100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 353.098227][ T31] #1: ffffffff8fc22648 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 353.108344][ T31] 3 locks held by syz.0.887/9089: [ 353.113342][ T31] #0: ffffffff8ede0928 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 353.121975][ T31] #1: ffff88805c237100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 353.131585][ T31] #2: ffffffff8fc22648 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 353.141536][ T31] 1 lock held by syz.0.887/9093: [ 353.146491][ T31] #0: ffffffff8ede0928 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 353.155024][ T31] 1 lock held by syz.2.888/9096: [ 353.159960][ T31] #0: ffffffff8ede0928 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 353.168464][ T31] 1 lock held by syz-executor/9157: [ 353.173661][ T31] #0: ffffffff8ede0928 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 353.182125][ T31] 1 lock held by syz-executor/9225: [ 353.187331][ T31] #0: ffffffff8ede0928 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 353.195796][ T31] 1 lock held by syz-executor/9234: [ 353.200989][ T31] #0: ffffffff8ede0928 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 353.209858][ T31] 1 lock held by syz.3.943/9271: [ 353.214838][ T31] #0: ffff88805bbe6f48 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 353.225183][ T31] 1 lock held by syz-executor/9460: [ 353.230368][ T31] #0: ffffffff8ede0928 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 353.238857][ T31] 1 lock held by syz-executor/9462: [ 353.244079][ T31] #0: ffffffff8ede0928 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 353.252531][ T31] 1 lock held by syz-executor/9464: [ 353.257753][ T31] #0: ffffffff8ede0928 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 353.266241][ T31] 1 lock held by syz-executor/9470: [ 353.271441][ T31] #0: ffffffff8ede0928 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 353.279920][ T31] 1 lock held by syz-executor/9472: [ 353.285135][ T31] #0: ffffffff8ede0928 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 353.293589][ T31] 1 lock held by syz-executor/9474: [ 353.298808][ T31] #0: ffffffff8ede0928 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 353.307299][ T31] [ 353.309619][ T31] ============================================= [ 353.309619][ T31] [ 353.318264][ T31] NMI backtrace for cpu 0 [ 353.318283][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 353.318300][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 353.318310][ T31] Call Trace: [ 353.318317][ T31] [ 353.318324][ T31] dump_stack_lvl+0x189/0x250 [ 353.318353][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.318376][ T31] ? __pfx__printk+0x10/0x10 [ 353.318408][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 353.318438][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 353.318462][ T31] ? __pfx__printk+0x10/0x10 [ 353.318487][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 353.318508][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 353.318532][ T31] watchdog+0xf60/0xfa0 [ 353.318554][ T31] ? watchdog+0x1e2/0xfa0 [ 353.318577][ T31] kthread+0x711/0x8a0 [ 353.318602][ T31] ? __pfx_watchdog+0x10/0x10 [ 353.318619][ T31] ? __pfx_kthread+0x10/0x10 [ 353.318643][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.318664][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.318678][ T31] ? __pfx_kthread+0x10/0x10 [ 353.318700][ T31] ret_from_fork+0x4bc/0x870 [ 353.318722][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 353.318746][ T31] ? __switch_to_asm+0x39/0x70 [ 353.318761][ T31] ? __switch_to_asm+0x33/0x70 [ 353.318776][ T31] ? __pfx_kthread+0x10/0x10 [ 353.318799][ T31] ret_from_fork_asm+0x1a/0x30 [ 353.318830][ T31] [ 353.318837][ T31] Sending NMI from CPU 0 to CPUs 1: [ 353.463203][ C1] NMI backtrace for cpu 1 [ 353.463218][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 353.463234][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 353.463242][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 353.463262][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 21 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 353.463273][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 353.463287][ C1] RAX: acd262e7bbb6a400 RBX: ffffffff81976767 RCX: acd262e7bbb6a400 [ 353.463298][ C1] RDX: 0000000000000001 RSI: ffffffff8dc85ddb RDI: ffffffff8c056860 [ 353.463308][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 353.463319][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8fe48770 [ 353.463329][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003adab58 [ 353.463339][ C1] FS: 0000000000000000(0000) GS:ffff8881258be000(0000) knlGS:0000000000000000 [ 353.463351][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 353.463361][ C1] CR2: 0000561a5999d3d0 CR3: 000000000e338000 CR4: 00000000003526f0 [ 353.463374][ C1] Call Trace: [ 353.463380][ C1] [ 353.463385][ C1] default_idle+0x13/0x20 [ 353.463400][ C1] default_idle_call+0x73/0xb0 [ 353.463416][ C1] do_idle+0x1e7/0x510 [ 353.463432][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 353.463449][ C1] ? __pfx_do_idle+0x10/0x10 [ 353.463469][ C1] ? do_idle+0x4e7/0x510 [ 353.463486][ C1] cpu_startup_entry+0x44/0x60 [ 353.463501][ C1] start_secondary+0x101/0x110 [ 353.463515][ C1] common_startup_64+0x13e/0x147 [ 353.463541][ C1] [ 353.464345][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 353.464360][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 353.464386][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 353.464397][ T31] Call Trace: [ 353.464405][ T31] [ 353.464412][ T31] dump_stack_lvl+0x99/0x250 [ 353.464438][ T31] ? __asan_memcpy+0x40/0x70 [ 353.464460][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.464483][ T31] ? __pfx__printk+0x10/0x10 [ 353.464515][ T31] vpanic+0x237/0x6d0 [ 353.464534][ T31] ? __pfx_vpanic+0x10/0x10 [ 353.464552][ T31] ? preempt_schedule_common+0x83/0xd0 [ 353.464581][ T31] panic+0xb9/0xc0 [ 353.464598][ T31] ? __pfx_panic+0x10/0x10 [ 353.464617][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 353.464642][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 353.464665][ T31] watchdog+0xf9f/0xfa0 [ 353.464688][ T31] ? watchdog+0x1e2/0xfa0 [ 353.464711][ T31] kthread+0x711/0x8a0 [ 353.464737][ T31] ? __pfx_watchdog+0x10/0x10 [ 353.464754][ T31] ? __pfx_kthread+0x10/0x10 [ 353.464778][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 353.464800][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 353.464815][ T31] ? __pfx_kthread+0x10/0x10 [ 353.464838][ T31] ret_from_fork+0x4bc/0x870 [ 353.464859][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 353.464884][ T31] ? __switch_to_asm+0x39/0x70 [ 353.464900][ T31] ? __switch_to_asm+0x33/0x70 [ 353.464916][ T31] ? __pfx_kthread+0x10/0x10 [ 353.464939][ T31] ret_from_fork_asm+0x1a/0x30 [ 353.464970][ T31] [ 353.785481][ T31] Kernel Offset: disabled [ 353.789789][ T31] Rebooting in 86400 seconds..