last executing test programs: 2m34.322303581s ago: executing program 0 (id=1945): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x1010081, 0x0) (async, rerun: 32) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) (rerun: 32) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000000), 0x4) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1129028, 0x0) write(r0, &(0x7f0000000000)="2a000200010078", 0x7) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[], 0x0) (async) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x6, &(0x7f0000000000)=0xff, 0x4) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x3f, 0xae, 0x9c, 0x40, 0x93b, 0xa102, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x36, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x36, 0x0, 0x0, 0x50, 0xcd, 0xb7, 0x92}}]}}]}}, 0x0) 2m34.278374408s ago: executing program 0 (id=1946): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000010c0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '\x81.\xb2V\xbc2\x15\x89\x06\x19\x80\x8d\xde=\"\xfbT\x8d 9\xf9D\x96L|\x9brh\xd6\xa0\xa0\xdb\x03E\xf0IZ\xd1\xa2\xe8\xde\x16\xc7\xe0\xac\xca\xd5\xd3T\x11\xa2\xd2\xafa\x1b)'}, {0x20, '>F_\x83\xf8\x7f\x8f\frY\xb7\x9f\a\xc78\xb0\xadd\x04\'sS\xa5\xf0\x946\xf1\x857Y\xa7\xf5z\x87\xb3y'}, {0x20, '/proc/timer_list\x00'}, {0x20, 'ramfs\x00'}, {0x20, '\xd9\xc79\x11\xc5\x99\xec\xa4\x01\xbb2\xd5\x19j\xa5\xda\xe1b\"\xb7\x80\xc3$\xb6\x98l\xda\xe2\xfc\x86\x83,\t\xfd\x98\x19iK\xf3\\\xbe\xc1\xa5H\xe8\xce\xfc\"\x16\x81s8\xcc\x83\xa1\x00\x97\x13\xda\x11ew86\x01n\xc4`\xe2\xec\xb0K\xd5\xd0g \xe0\xc2?J\xe3\x9a5J\xe2\xfd\xe6\xc1]C\xb3g\xe1\x85\x8e\x01\x80\x00\x00\x94}+ikz(\xfc\xd1L\xd5\xfbl;~J\x84\xcb\xaf\x99\x93\xda\x7fG;\x14\x96\xba)\xc7\xd1=\xc1\xb3\x18\xad\x8b&/\xa3\x1d_hK\xb3vw\xad+\x1c\xf0\x14\xbf\xf0\x05u\xf5\xe0A/\x19\x93@\xb6B\x8a\xe8\xe4\x04|\x97\xe8%\r\xfa\xb5 \xed\xcb\x8d\x12\xf8M\xc6H-\x86\x17\x17\xc9w\x054\x1f\xa9b\xb3\xdf\x9b\\\x8a\xbaS\xfa\xf8\xb3n\x8fr\x18\x1b!:R\xc9\xd2\"p\x86\x95\xf98o(\x85\xc2\x06\xd34\xfd\xfap\x957g\xa9\xd6\x87\xa9S\x11\xa9}\bsm\xd0X0x0, 0xffffffffffffffff, 0x8000000000000001, 0x1}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) close(r7) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000cc0)={r6, 0x40, 0x5}) fsmount(r7, 0x1, 0x88) fchdir(0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000008, 0x10, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r8, 0x0, 0x0) sendto$inet(r8, &(0x7f0000000280)="14143e2790334df27ee1ac9a00b31ea0e7dd06209c016f88f3e5d227ea5558a207ede8acaea18c6a09bc3d34a654dc38390b3cb7215aedf8ee4486aefe9cb4842ab1dc5f871f15876fe75edfe20a44bb5dc486c8a597e2f5f69d36291f3a0a706dd14bd72a55c7de03e73102ecb176a9748e04e3d69a", 0x76, 0x10, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r9, &(0x7f0000000000)={0x2, 0x0, @empty, 0x1}, 0x10) 2m34.090249872s ago: executing program 0 (id=1948): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close_range(r0, r0, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000070000000000000200090010000000e925000000000000030006000000000002000000000000000000000000000000020001000000000000fd000300000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x0) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x14000) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040ed7e54e20"], 0x7) move_mount(0xffffffffffffffff, 0x0, r0, 0x0, 0x46) 2m33.930800044s ago: executing program 0 (id=1951): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000440), 0xca55, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x35314142, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r2, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}}, 0x14}}, 0x0) userfaultfd(0x801) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r4, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) 2m32.942144317s ago: executing program 0 (id=1958): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000800a00eb935aa8257fd0b39e3ce0796c0668eabb1d23a0433880f577ee7912cc1541021cb2c790f52729e2d55de75291f3a64b06ab"], 0x0}, 0x0) 2m31.343080507s ago: executing program 0 (id=1967): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)="d76f", 0x2}], 0x1}}], 0x1, 0x24000054) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xb) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2cf1389d, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r4, 0x400) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r4, &(0x7f0000000100)="1824117a4cfb5e2bd479b99d87659ecdf9fb2bcfdb9b7958dd05791f2913756baa52c3054ec91f786cf689317f7c9cbce50000000000a15405c117ab68d8925ba79bc5aacab55010a0013b7115afcd7691df78709b47b916059375a7f46cc8ffffffca1b345b745355b2911a4e0921e0ecffb6", 0x73, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000000)={0x2, 0x0, 0x3}) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0xa, 0x0, 0x3007, 0x0, 0x0, 0x0, 0x0, 0x7}}) 2m16.261239602s ago: executing program 32 (id=1967): r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)="d76f", 0x2}], 0x1}}], 0x1, 0x24000054) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0xb) r3 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2cf1389d, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r4, 0x400) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r4, &(0x7f0000000100)="1824117a4cfb5e2bd479b99d87659ecdf9fb2bcfdb9b7958dd05791f2913756baa52c3054ec91f786cf689317f7c9cbce50000000000a15405c117ab68d8925ba79bc5aacab55010a0013b7115afcd7691df78709b47b916059375a7f46cc8ffffffca1b345b745355b2911a4e0921e0ecffb6", 0x73, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000000)={0x2, 0x0, 0x3}) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc0585605, &(0x7f0000000080)={0x1, 0x0, {0xa, 0x0, 0x3007, 0x0, 0x0, 0x0, 0x0, 0x7}}) 1m54.994206529s ago: executing program 1 (id=2186): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000) shmat(0x0, &(0x7f00006a2000/0x3000)=nil, 0x6000) (async) shmat(0x0, &(0x7f00006a2000/0x3000)=nil, 0x6000) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000900), 0x7, 0x0) (async) r1 = syz_open_dev$video4linux(&(0x7f0000000900), 0x7, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000b40)={0x0, @reserved}) bind$802154_dgram(r0, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x14) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0) (async) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[], 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SOUND_MIXER_INFO(r3, 0x805c4d65, &(0x7f0000000140)) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a027000000e4b3"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a027000000e4b3"], 0x0}, 0x0) 1m54.560773764s ago: executing program 1 (id=2190): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ad16b6c58a0fae9d6dcd3292ea54c7beb8b9c0e3fd3bb929833c2ce4ef915d564c90c200", 0x24) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8000}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x80) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) socket$igmp(0x2, 0x3, 0x2) 1m54.474245946s ago: executing program 1 (id=2191): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x1) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/softlockup_count', 0x0, 0x0) preadv(r1, &(0x7f0000001840)=[{&(0x7f0000001640)=""/16, 0x10}], 0x1, 0x2, 0x5) r2 = socket$netlink(0x10, 0x3, 0x12) close(0x4) socket$kcm(0x29, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x6, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x98) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x5e23, @loopback}, 0x10) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="800000000001010400000000141a0000020000002400018014000180080001007f00000108000200640101000c000280050001a6895844fae400000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c001080080001400000000008000240000000000800034000000058"], 0x80}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$ppp(r8, &(0x7f0000000000)="8e51", 0x2) sendfile(r2, r3, 0x0, 0xf03a0005) 1m54.457156168s ago: executing program 1 (id=2192): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) set_mempolicy(0x1, &(0x7f0000000e80)=0x1ff, 0x7582) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x100, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000280)={0x1, @pix_mp={0x9, 0x0, 0x38414261, 0x8, 0x7, [{0x5, 0x614c}, {0x80, 0x3}, {0x80, 0xff}, {0x7, 0x8000}, {0x9, 0x2}, {0x6, 0xffffffc0}, {0x7fffffff}, {0xe5ac, 0x401}], 0x6, 0x3, 0x7, 0x2, 0x7}}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000180)={0x2, 0x4e27, @empty}, 0x10, 0x0}}], 0x1, 0x20004840) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$setregs(0xf, r7, 0x1005, 0xfffffffffffffffe) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) unshare(0x48020e80) 1m54.314763231s ago: executing program 1 (id=2193): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100002100000000000010000000300001801300030000000000000000000000ffffe0000801060002000000000006000100e7ff0200060004"], 0x44}}, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@local, 0x5d, r8}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="02000000", @ANYRES16=r5, @ANYBLOB="020028bd7000fedbdf250100000005000500020000000800040006000000040001801400018008000300e0000001060005004e2200001c000180080003006401010208000300ac1414aa0500020005000000380001800800060019000000060001000a00000014000400fc01000000000000000000000000000008000700", @ANYRES32=r8, @ANYBLOB="060001000a0000000800020008000000080003000700000034000680060005004e220000060005004e2300000800060000000000050002000900000005000200370000000600010002000000"], 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000300)={{0xeeef0000, 0xdddd1000, 0x0, 0x2, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xd000, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0x0, 0xff}, {0x3000, 0x0, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xff, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x0, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0xd801, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfe, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x0, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) r9 = dup(0xffffffffffffffff) write$UHID_INPUT(r9, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1020) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m54.158219599s ago: executing program 1 (id=2194): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x163400, 0x20) r2 = socket$inet(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9, @ANYBLOB="b3ad8c9e99a7bf12bd"], 0x1c}}, 0x0) write$nci(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="70060603048d0402040489c94c23e061a1db23cdd11a21807883e6e00d5afbce5cf93699d3d5a4c63940daa42214c45f382cd5"], 0xa) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0x2, 0x6, 0x8, 0x7}, 0x15, [0x401, 0x7ff, 0x401, 0x8, 0x10000, 0x45, 0x200, 0x401, 0x7, 0x290, 0xfc, 0x80000000, 0x8, 0x3, 0xfffffd05, 0x9, 0x50d6, 0x7ff, 0xa, 0x0, 0xd4, 0x4, 0x5, 0x1d231da2, 0x6, 0x5, 0x0, 0x9, 0x0, 0x3, 0x101, 0x0, 0x800, 0xfffffffa, 0x9, 0x7, 0x8, 0x7, 0xf94d, 0x7, 0x3, 0xffffff00, 0xbeb, 0x575c, 0x2, 0x57, 0x2, 0x0, 0x4, 0x5, 0x1, 0x2, 0x1, 0x3, 0x6, 0x670, 0x9, 0x8000, 0x2, 0x9e, 0x0, 0x2, 0x1, 0x80000002], [0x4, 0x8000, 0xa, 0xfffff2e1, 0x9ca4, 0x7b, 0x0, 0x7f, 0x72a8, 0x400, 0x86, 0x2, 0x4, 0x56e, 0x0, 0x4, 0x100, 0x9, 0x2, 0x8, 0xb2, 0x106c, 0xa2b8, 0xc60, 0x6740, 0xf2f1, 0x5, 0x1, 0x5, 0xfffffffd, 0x3, 0x0, 0x7fffffff, 0x1, 0x2000081, 0x6, 0x6, 0x0, 0x183, 0x401, 0x9, 0xf, 0xd349, 0x9, 0x6, 0x0, 0x9, 0x0, 0x7fff, 0x2, 0xffffffb1, 0x1, 0x1ff, 0x6, 0x9, 0x1, 0x2, 0x800, 0x4, 0x3, 0x4, 0x7fffffff, 0x9, 0x7], [0x4, 0x5, 0xc, 0x2, 0x5, 0x80, 0x7, 0x3, 0x8, 0xb5, 0xfffffffa, 0x100, 0x0, 0x1, 0x1, 0x7, 0x8a85, 0x4, 0x430fb4df, 0x3, 0x7, 0x8, 0x8, 0x2, 0x2, 0x9, 0x0, 0x54e934b9, 0x37, 0x10001, 0x5, 0x8000, 0x2e, 0x4, 0x6, 0x6, 0x5, 0xcf9, 0x6, 0x9, 0x2, 0xe, 0xffffff0e, 0xfffffffe, 0xffffffff, 0x0, 0xfffffffd, 0x5, 0x0, 0xa, 0x7fffffff, 0xffffffc0, 0x5, 0x6, 0xfff, 0x101, 0x7, 0xa, 0x2, 0x3, 0x5, 0x81, 0xfffffff8, 0xb6], [0x4, 0x2, 0x4, 0x1, 0x6, 0x7, 0x2, 0x8, 0x19, 0x0, 0x8000, 0x7fff, 0xd, 0x1, 0x5, 0x5, 0x4, 0x9, 0x5, 0x200, 0x7, 0xffffff7f, 0x4689, 0x3, 0x80000000, 0x5, 0xcd3, 0x80000000, 0x5, 0xfffff800, 0x11, 0x26419275, 0x80000005, 0x3, 0xfff, 0x8, 0xef7, 0x4ff, 0x1, 0xfffffff0, 0x7, 0x7b9, 0x52a, 0x5, 0x0, 0x6, 0x7fff, 0x7, 0x3ff, 0x0, 0x2, 0xb2a, 0x3, 0x189f, 0x9, 0x9, 0xffff, 0xd, 0xfb9, 0x77, 0x5, 0xfffffffa, 0x6e, 0x1]}, 0x45c) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d0200000000000000000000000038"], 0x51) close(r5) r10 = fanotify_init(0x20, 0x0) r11 = open$dir(&(0x7f0000001000)='.\x00', 0x20000, 0x50) fanotify_mark(r10, 0x641, 0x48001018, r11, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab14e39ba9bf6c4387ea1b", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) sync() ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r12, &(0x7f0000000340)=0x400, 0x12) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) sync() 1m38.838161459s ago: executing program 33 (id=2194): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r1 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x163400, 0x20) r2 = socket$inet(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r9, @ANYBLOB="b3ad8c9e99a7bf12bd"], 0x1c}}, 0x0) write$nci(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="70060603048d0402040489c94c23e061a1db23cdd11a21807883e6e00d5afbce5cf93699d3d5a4c63940daa42214c45f382cd5"], 0xa) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0x2, 0x6, 0x8, 0x7}, 0x15, [0x401, 0x7ff, 0x401, 0x8, 0x10000, 0x45, 0x200, 0x401, 0x7, 0x290, 0xfc, 0x80000000, 0x8, 0x3, 0xfffffd05, 0x9, 0x50d6, 0x7ff, 0xa, 0x0, 0xd4, 0x4, 0x5, 0x1d231da2, 0x6, 0x5, 0x0, 0x9, 0x0, 0x3, 0x101, 0x0, 0x800, 0xfffffffa, 0x9, 0x7, 0x8, 0x7, 0xf94d, 0x7, 0x3, 0xffffff00, 0xbeb, 0x575c, 0x2, 0x57, 0x2, 0x0, 0x4, 0x5, 0x1, 0x2, 0x1, 0x3, 0x6, 0x670, 0x9, 0x8000, 0x2, 0x9e, 0x0, 0x2, 0x1, 0x80000002], [0x4, 0x8000, 0xa, 0xfffff2e1, 0x9ca4, 0x7b, 0x0, 0x7f, 0x72a8, 0x400, 0x86, 0x2, 0x4, 0x56e, 0x0, 0x4, 0x100, 0x9, 0x2, 0x8, 0xb2, 0x106c, 0xa2b8, 0xc60, 0x6740, 0xf2f1, 0x5, 0x1, 0x5, 0xfffffffd, 0x3, 0x0, 0x7fffffff, 0x1, 0x2000081, 0x6, 0x6, 0x0, 0x183, 0x401, 0x9, 0xf, 0xd349, 0x9, 0x6, 0x0, 0x9, 0x0, 0x7fff, 0x2, 0xffffffb1, 0x1, 0x1ff, 0x6, 0x9, 0x1, 0x2, 0x800, 0x4, 0x3, 0x4, 0x7fffffff, 0x9, 0x7], [0x4, 0x5, 0xc, 0x2, 0x5, 0x80, 0x7, 0x3, 0x8, 0xb5, 0xfffffffa, 0x100, 0x0, 0x1, 0x1, 0x7, 0x8a85, 0x4, 0x430fb4df, 0x3, 0x7, 0x8, 0x8, 0x2, 0x2, 0x9, 0x0, 0x54e934b9, 0x37, 0x10001, 0x5, 0x8000, 0x2e, 0x4, 0x6, 0x6, 0x5, 0xcf9, 0x6, 0x9, 0x2, 0xe, 0xffffff0e, 0xfffffffe, 0xffffffff, 0x0, 0xfffffffd, 0x5, 0x0, 0xa, 0x7fffffff, 0xffffffc0, 0x5, 0x6, 0xfff, 0x101, 0x7, 0xa, 0x2, 0x3, 0x5, 0x81, 0xfffffff8, 0xb6], [0x4, 0x2, 0x4, 0x1, 0x6, 0x7, 0x2, 0x8, 0x19, 0x0, 0x8000, 0x7fff, 0xd, 0x1, 0x5, 0x5, 0x4, 0x9, 0x5, 0x200, 0x7, 0xffffff7f, 0x4689, 0x3, 0x80000000, 0x5, 0xcd3, 0x80000000, 0x5, 0xfffff800, 0x11, 0x26419275, 0x80000005, 0x3, 0xfff, 0x8, 0xef7, 0x4ff, 0x1, 0xfffffff0, 0x7, 0x7b9, 0x52a, 0x5, 0x0, 0x6, 0x7fff, 0x7, 0x3ff, 0x0, 0x2, 0xb2a, 0x3, 0x189f, 0x9, 0x9, 0xffff, 0xd, 0xfb9, 0x77, 0x5, 0xfffffffa, 0x6e, 0x1]}, 0x45c) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d0200000000000000000000000038"], 0x51) close(r5) r10 = fanotify_init(0x20, 0x0) r11 = open$dir(&(0x7f0000001000)='.\x00', 0x20000, 0x50) fanotify_mark(r10, 0x641, 0x48001018, r11, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab14e39ba9bf6c4387ea1b", 0x4c}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) sync() ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r12, &(0x7f0000000340)=0x400, 0x12) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) sync() 59.102346044s ago: executing program 3 (id=2480): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84080) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x4000, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @loopback, 0x1}, 0x1c) r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x0}) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000000)={0x2, 0x413, 0x0, 0x0, 0x10}) 56.800527442s ago: executing program 3 (id=2485): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000100)={0x20, 0x0, 0x0, 0xdeadbeef, 0x8, 0x0, 0x2}) (async) r1 = socket(0x2, 0x80805, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0x7fffffffffe00003, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000240)={0xe, 0xa, 0x3}) sendmmsg$inet(r1, &(0x7f00000045c0)=[{{&(0x7f0000000040)={0x2, 0x5e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r4, 0x1}, 0x8) (async) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="e00000001500000000000000000000006a6974746572656e74726f70795f726e67000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00"/220], 0xe0}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x0) (async) sendmsg$nl_crypto(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000080)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, &(0x7f0000000040)="7cd1d6056396624ce7a965ac2cca60dce6328c6df9a77f6d0d82231bc9fd295dd6554905dd6053c4dcb12e3e4d501e"}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f00000000c0)={0x30, r6, 0x0, 0x0, 0x9, 0x1, 0x2, &(0x7f0000000300)=""/242}) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000480)=[@in={0x2, 0x4e23, @multicast2}, @in={0x2, 0x4e24, @local}, @in={0x2, 0x4e21, @rand_addr=0x64010102}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @loopback}, @in6={0xa, 0x4e21, 0xebd3, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x7}, @in6={0xa, 0x4e22, 0x56, @local, 0x10}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, @in6={0xa, 0x4e21, 0xc285, @private1, 0x5}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0xc4) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x80086601, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}}) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000140)={0xd, 0x0, [{0x732, 0x0, 0xb5}, {0x1, 0x0, 0xff}, {0xc0b, 0x0, 0xfffffffffffffff7}, {0x0, 0x0, 0xfffffffffffffc01}, {0x1, 0x0, 0x9}, {0x670, 0x0, 0x6f}, {0x1, 0x0, 0x9}, {0xf, 0x0, 0x4}, {0x2f7, 0x0, 0x2}, {0x5, 0x0, 0x40008000}, {0x200, 0x0, 0x80000001}, {0xda, 0x0, 0xfffffffffffffff6}, {0xc, 0x0, 0x9a7700000}, {0x0, 0x0, 0x1}, {0x6, 0x0, 0xa}, {0x80000000, 0x0, 0x8}]}) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}}, 0x10) 56.618095152s ago: executing program 3 (id=2486): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1, @ANYRES64=r1], 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x138}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f00000000c0)={0x14, 0x5, 0xd}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008e02"]) write$FUSE_INIT(r0, &(0x7f0000001200)={0x50, 0x0, r2, {0x7, 0x2b, 0x3, 0x200c0400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x42, 0x88, 0xc6, 0x8, 0xabf, 0x3370, 0x6004, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x5, 0x20, 0x4, [{{0x9, 0x4, 0xe3, 0x65, 0x0, 0x55, 0xb0, 0xed, 0xf}}]}}]}}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000004340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0xffffffffffffffda, r6}, 0x10) 55.046229232s ago: executing program 3 (id=2492): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x408100, 0x341, 0x1}, 0x18) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f0000002540)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r2, @ANYBLOB="07000000ff"], 0x58) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x22, 0x0, &(0x7f00000000c0)) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260) 54.992422162s ago: executing program 3 (id=2493): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = syz_clone(0x20820000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000440)=0x5) ioctl$TCSETA(r2, 0x8925, 0x0) 54.530130095s ago: executing program 3 (id=2495): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mlockall(0x7) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080)=0x4, 0x4) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x1, 'batadv_slave_0\x00', {}, 0x7}) read$FUSE(r0, 0x0, 0x0) 54.22009137s ago: executing program 34 (id=2495): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mlockall(0x7) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) sendto$inet(r1, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080)=0x4, 0x4) r4 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000040)={0x1, 'batadv_slave_0\x00', {}, 0x7}) read$FUSE(r0, 0x0, 0x0) 53.894370515s ago: executing program 4 (id=2499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000780), 0x3ff, 0x2) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x18000201f}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r5, 0x2f126000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000540)="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", 0x252}], 0x1, 0x0, 0x0, 0x2c}, 0x4) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e00"], 0x1c}], 0x1}, 0x0) cachestat(r5, &(0x7f0000000180)={0xe6af}, &(0x7f0000002280), 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0xb6, 0x87, 0x86, 0x10, 0x856, 0xac29, 0x401f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0xe, 0x80, 0xe, [{{0x9, 0x4, 0x97, 0x6, 0x0, 0x8f, 0x12, 0x99, 0xad}}]}}]}}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x100, &(0x7f00000006c0)=@string={0x100, 0x3, "7e977dac3422d14fe1dbde2646374300129cc7dd17e20ffb4db2155c0e0d99f03d9a0d167d0c93d952f834566e8c95bdcea55b4c9e095b00f4be116ae07b960a0cb9e5474f2c3da436394c9c043e22867f071d2cd9516b1f11246066eddabe04d0d52cf385e22676330eea934385557d6cb97848b9d2e7d6b2476881145b8538658db6a08244dea922a30894f4203b11172a470e7ed89a9d56dab0c33364250faaa778ff8dc8185fbf81f3c48932d1159e46e2b1af7afd405be866d60beb2082d8aae71837e3af2836a04aab0981e629cef2eab802482c77c92044dda7212f7eeca14754553c78c19771353972360407fef748ddb77c2657bc7822df6703"}}]}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31030000000000000000090000000800", @ANYRES32=r0, @ANYBLOB="08000300", @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 51.494704983s ago: executing program 4 (id=2504): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x400, 0x0, @empty, 0x7}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) fchown(r1, 0xee01, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='batadv_slave_0\x00', 0x10) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x400, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) 51.362170129s ago: executing program 4 (id=2505): symlink(&(0x7f0000000540)='./file1\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/83, 0x53) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x2, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) read(r0, 0x0, 0x0) readlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)=""/59, 0x3b) 51.164570922s ago: executing program 4 (id=2507): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0x3422, r0, 'id1\x00'}) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000240)={0x2, 0x36f, 0xfd72}) sendmsg$AUDIT_TTY_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f8, 0x8, 0x70bd25, 0x25dfdbfb, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040800}, 0x10000804) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240014000280080001400000000008000340000000020900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/124], 0x7c}}, 0x0) 51.03409411s ago: executing program 4 (id=2509): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xa}, @hci_rp_le_read_buffer_size_v2={{0x6f}, {0xc0, 0x3f99, 0xd, 0x7, 0x2}}}}, 0xd) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000c40)="d8000000140081044e81f782db44b9042d0220080211000018000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c9201114000000000003600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c01000000000000e2cb090000001fb79101005ee4001b14620d9de656d6d9300500d9d322fe7c9fd68775730d16a4683f5aeb4edbb5c7e6f879215fdf3a0db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4009044) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) keyctl$get_security(0x11, r4, 0x0, 0xffffffffffffffa2) pipe2$9p(&(0x7f0000002180), 0x0) 49.758112408s ago: executing program 4 (id=2512): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) (rerun: 64) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)) (async) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[], 0xffffffffffffff8b) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a000c215000008009f000d000000080026000816"], 0x40}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', &(0x7f00000000c0), 0x2000040, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}]}}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x100000000) 33.34800864s ago: executing program 35 (id=2512): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) (rerun: 64) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000240)) (async) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[], 0xffffffffffffff8b) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a000c215000008009f000d000000080026000816"], 0x40}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', &(0x7f00000000c0), 0x2000040, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@noextend}]}}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x100000000) 10.714277305s ago: executing program 7 (id=2648): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100000000001032151b01000000000001090224000100000000090400000103000d0009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) pipe2$9p(&(0x7f0000000040), 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x28, 0x24, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0x9, 0x0, 0x0, 0x1, [@generic="976b640868"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x28, 0x56a, 0xbc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x20, 0xe, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0xb1bc, 0x7, 0x1, {0x22, 0x90e}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x5}}}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0xf1, 0x1, 0x41, 0x20, 0xc}, 0x1c, &(0x7f00000001c0)={0x5, 0xf, 0x1c, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0xe, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x4, 0x8, 0x3ff}, @ptm_cap={0x3}]}, 0x1, [{0xab, &(0x7f0000000200)=@string={0xab, 0x3, "1e68cc473da3fddd2b3256b8c46c0a54d0966ea73162ea771721abd3b9271e848750eec9f14fa7efb918bc6480faf660838824810c004d1264afdd4e5e2d27e4a20ee9d3b63084abb42b1f38d64c43b3bc085c42ac9d686a35ea6352e6a797b93ac1cc6c01074ae0b288619958315570c77fcd5562aa9bd612a9695efecdcd9decce7dc9aecbcd10d4bea767c1a93eaaf50e848be1ade70317e369012260b55aff473f0547f86d8a1c"}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB="002205000000e4fa79f7"], 0x0}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)=0xc1dc, 0x4) 8.790887215s ago: executing program 7 (id=2659): syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) (async) r2 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r2, 0xd3fc6000) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x33, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x40, 0x9, 0xf, 0x10000, 0x6, 0x8, 0xfffffeff, 0x2174]}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc08c5334, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000040)={0x9, 0x4, 0xff, 0xfffffffd, 0x13, "e0a537e8db022a03055828986f14089ca2c61d"}) (async) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000040)={0x9, 0x4, 0xff, 0xfffffffd, 0x13, "e0a537e8db022a03055828986f14089ca2c61d"}) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r5, 0x0, 0xce, 0x0, &(0x7f0000000740)) (async) getsockopt$MRT(r5, 0x0, 0xce, 0x0, &(0x7f0000000740)) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4048000}, 0x8010) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000e1"]) dup(r0) (async) r9 = dup(r0) r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406b1402090000000000010902240001000000000904000001030000000921010000012205000905810300000400ff"], 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io(r10, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="000c19000000190e00000000000000900100000000000000fe6652da8648bc"], 0x0, 0x0, 0x0, 0x0}, 0x0) write$UHID_INPUT(r9, &(0x7f0000000580)={0x2, {"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", 0x1000}}, 0x1006) 6.9000236s ago: executing program 7 (id=2665): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x7}, @sack_perm, @sack_perm, @mss, @window, @window], 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='htcp\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x700, 0x0, 0x0) r1 = syz_clone(0xa04000, &(0x7f0000001280), 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) ioctl$int_out(r2, 0x5460, 0x0) r3 = creat(&(0x7f0000001380)='./file0\x00', 0x4) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000100)) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x4, 0x0, 0x0, 0xfd, &(0x7f00000001c0)="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", 0xcd96}) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000040)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) 6.178107113s ago: executing program 2 (id=2667): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) (async) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) (async) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x0, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002ffa9400819151300000102030109025200010000000009040000042513bf000a2401000000020102052404"], 0x0) (async) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000000)=0x1) (async) ioctl$USBDEVFS_CLAIM_PORT(r3, 0x80045518, &(0x7f0000000200)=0x1) (async) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x4000b) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000180)={0x3ff, 0x575, 0x1, 0x100, 0x7, 0x0, [{0xb5, 0x5, 0xffffffffffffff7f, '\x00', 0x901}, {0x7, 0x3, 0x7, '\x00', 0x2800}, {0x10000, 0xdae3, 0x79485250, '\x00', 0x4}, {0xb57c, 0x65, 0x806, '\x00', 0x80}, {0x4, 0xd6f4, 0xe000000, '\x00', 0x600}, {0x5, 0x1, 0x100000001, '\x00', 0x680}, {0x5, 0x1, 0xfffffffffffff411, '\x00', 0x84}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x44, 0x0, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0x44}}, 0x8000) (async) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0xe9) syz_open_procfs(0x0, &(0x7f0000000080)='net/rt6_stats\x00') 6.034754537s ago: executing program 2 (id=2668): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="c376ad288dbc9e91916e9f3f7588caed27d301d3055693caa682c51b52076ec25ab2cdcdad5b3582dc62e1562563fd021ebac69010cb71c9c69c82dca874aefd6eee95f9833d19342df58d9350fa57cfebab8da696248bdfb5fbd755614516f9e0b8a2a12b8e856085d85917cbc57b25e5ce7e42336864bb7e89f2b00d5702ab16260cf758fc770f20f59ed7d9265e8f98124cc8235d1a44699f4eeafef35f614d518fc18c685afa6256a2ce3cbfe457679b8fd88c05fb0d3e69106681bd9522339ab42534d3a80d4cbd8291e5898fe6e121db9422c1e40f14b68296a2234b7e0937f200addc83e23efa0244d7cab84b02548fda4d3d79ccec17650a7b8518e2ba4bf7dcc88b5ac3ae04fb11b2e3a8eb47401782f8dfba1c30c6ee0ad27d7fb7589f4b2b2705e75d7e0575ea1bfebb7998d5779ec091126d817bb343a42bc0be68cc71aeec83db92117bea12b87f27e93b49d10c5e1674c7eeb110a6eae15d8b0d4e0445ad7a1f6374fe3056cb34c3c687ed97e9e53033e152f7259811dd34d10adb246c0d4bd00ecc0307c7594e8aeaf44e1f5c4e50dafe1a5a62f6f9c4efc556613c1f6c641de58db2d80fdbe896d02235a4aa1dfe7049f0d053470b01fb64bdf9157e587e895ce8a702c84f3d60f538f4681607ace384c7fb8963bb86b7b9917e47f9408a2b01df18ee768727082dd310fa02bf143fe0661a5469968da62c2fcdb0abf0276be92d58cec2fad559da98bcc8e61b9a55467e37c001595f10ebce0e96643ea6566be37d569966a75ce467d072d9221209f381f02d434acdd5b439db067984e5d8e75557dab606b8f06d8d41cbeaea950c547c00e888718b1feb5fe9725fc8fca706368ef0852fb5ce855e0e210a9b4145c6e53919835e39f71d7855bb45451ab30f43344d4bfc0ee0538cd06c34387f1497aa4edfaf3b084cf9d98948a39a678408f4a8edb2f05094db70e308d244f844d2e164083a55f1e17688c5d6cf38a35ff5214ae81f0c8726e1333c3b48e7bc3907e5db57101f52e8771c45ebc1137fbc047966d3638a19164fcbde466a565bce95a02d03ed69e689557f63d2866b1a0fa13708e990297ae40dc8bfa63cb0eb34a9533ebf4f7f8ff78c754ce1fdbac3a7a10301c9a68ae846f10daaa3b92523b56b226613f8bcb226661c59d11fb5a5f447ed8434040d0219d808c8b554b7feb1c5febb62553b1e9aaab8841d93754558bb5978119a6c1976662b766b6b3e8319d7cd2498c303af6d2624aa3a490f839ec3cc5b24358119b290f3eff37bd65787348bf778f176bccc481ffe7f58b7141126129560982e63f28843aa96a6b90e2f73b9044fd8944edca1297528b64d645bb8d112bad46e18b7696420aebc006b84b2ec46e2f9fc415830bc58a94894b8cb060aeca2b15faa3dddc63ba13a11ed7dd65edc5ccd277adf6cb107feb3cf74415c47793dded600b7ab8b230ef085db6300728a4ff59224dfa106de3efebb3a471d5056060f8de0853081dd63e9a99d486e9d8d64852d42a1d76f54a4e4435124948311dc9a20c4dffa77165c9134f5865a6242edcb91b32f49a6b874a57b22e7de1dcd7d5c2b95f93367816b392dca8bd6f219796af97c054575c2dbaa1195effc5424beff6b5f93d4f796835c5c197620b3f99e6e0357ceec6bfa687760af3edd8c65ad7ea967295a8aebe869edc4698e26fb1ed2234d4e5271b6095fa360156501aa8a7e8d63d33bb04b7fc4f7922a41f2eb95180d653630be2065f3d6b37bc8e63a91df08dd94e501298de2c8a94f7655ea9bdebaaba316670fde3ba296f5727f4c8e4d1ebb554f50b9d942ab134622c050b392d0b777407062f34793e5d1844a5aaa5c7cb90512de422725bbf4412df8a86626627658a1756d9f766866a2c2d571f0ef9f43926cb5b6bffa3f12e6c5c187fe4581a91a5f5e499dc7ab4497bd634bd2174676c1f8084cf52491afcb3a1cdd1dfdec23216e80487e25fcd46b8fd7bcc00453406e13f0197b01cec7001163681c7ab191c6af2ec8b63901506064a5e8feac711c30d6b4214e1f7512743d98eebbe99d4412e2dea87e5dae467fc20637958aec9ab47ac8dd2248e2bd38e38a9a6e8d2efb8af8e5eb958f479656f79c16201732c0f52a1fb29b3c4b5ee806c05f2b089bd526b3e3818145f6d9cf610bb682ca41ad33e7c1fdb5984ad109af76ce24239cfb5d7fc5786f27a707cc18357b2421ab8821db601f1ef4b31897bdcb2d53a79dd5eac26a878bbbdd86fb4c199b5ac5d09f531fdd16a7b164e63c019e323e176a7eb04374b36a8e6e806f2e3eff66d4453955a5836c3923a30e440948b340653b2518c8d6474bb05ed9cd1c9023ecaade7153a34ce33228c24543091c3c41ed46f517de6894fdbf52f35b84233f023c3e918c3dc68b59eb2e87abc2a693b3905fa166d68f28c6ca415df0920b154be67e9677796349e1ac283a1d72dc80a28f07f2df293ca48834ddd1ba8d07489ad9edc2cf818f6947f1a8beb609f03b85236f00ad61248829fceb893b746c6eddd56fc52fb19ecbea6f096068f65d2989a51790ffa59dcb5c59f960360b59014db2866f360dcb453d66bad248be03cb943187e1b8e0fbc612f5a82ee17df85c0c5c8431baebebf76953642dfc5036b47a157074b6ba2ebc5249475a58bb4d2d805dd2bfce00fc4ef615a2b5a32f7ef291368cbc79c60876b3cd0874938e64f30fbd1e4137f60afd6d06a5a006c6c4f7494e203613c810eb599a8e6407197a0c2ce031d862cd95288f3cd239b81d0b218484e658f1ea876352042fc6450f0d79aafa0621996f22854d587a0d970d6f2812370aa005f7c2e26ede8194caf52f9c84f6cf7605d042b8a556fbdde31df524c24c6ab472fd4a46a2494208225bf2efe7f6409fd7618273a79f0e60c7d46327577b1a81a80d591d2999b689226f2ef2b3753fcb0ac883bf133f173144c0a6c78f7bad10681cf860d485fd10c9e5d524e2c7f27d0cd79297025e539034a1dd2465a831aae59e6c6d3c602d338f0807b87ebbc2a45b78b7e4549d1b5009cf8a72501c582f3f93796c759d1c6eced8aba3143cbeae98d9e5266b66e69f325ebcb89aac920804a27e95b84b8da1ec1f621ebc1aee7456f0dfb79cbe80cb65a64bb824965fe21cd681ffb7febd4168f71c71f6cabd3bfe7456c186f61374cf8ec24edee51f1ee96fb66d36ac31472928315cd3f1a95d4452dbf40a3123c59de632708acbece7546e653f78f8495761065cf86101def6f13888a331d1d1eecbc8eea67f4798a675678a493ee9fcfff2d2e9ae0dd61291fb0b573bc951d4d3fcfff0d181bb671ff5476c0bf3f010d1bf4c0941a17c3d7d91f78540517d43b41aba205b4851c89fde305fbc94eee88f05a00fbaf9d56e605b846957dd46c09529ec32905e964bc14af843143e4dfe525c63d0d725d68c8e3d0ad9b7d32f70652dd1a33fd59b1e768e94a0f81c1394c71d2abbc8141ede4df4f099e8e91c788af222d4dc332d8ea52e84ac3201e418d987b3d3cb16f7562de21924781559b46071e7e9aea78387360206ea098e8f6aa7023381d10cfd275615f46d2374dc4c370eee1f7babf428bc26543e348e98952ade17f35e51bba44eb4e996f57c4b3202746c28e17c485acfe1789cdba8619817fdd94199a08669311697edd8a1b8f7940d62fbfce518771789bdedc5194be69ec92b9b74c750316df037ff1162eecef4efb470cb8d0c31af7adb3d288a948666100ca9085288f0a00160a4075ca24faf6368c867361356166eb5a193f193d0e30557dee5069e625689cdb85753557f4212022b5f52d2e7f4aa366aae3dd03f394a03f58606c7182a4e212ca35670a4c968fa4e217045c9c3eb615dd64816500792f9db5398f6d2e91de66900cf1d3521a8112524e86e2695c15c859a1631c882391c8afdeb65312010e82d5670742e9c05bfeb1b7e9e062cf8938a266e017d3957700ddc959a687eac050cdbf30f63fbd12ad017f5b19dc02535e94df3398d9af991de1fac39835843373922d1bcd567a6bf28207fbfa553a1cc052385d30020bd3ebeceed8f76bb6964b1f8f73c108385fb9c2640b43785db5577780aac462ffb4cadd2cc6c0322e8037f6ffa5b82512effb22950ea2f66078ca9e2f159a241824d17d63d48a55121c5f06be5c666cde2f52860a16dbe579df5d9ab4764273e8e1c44ccdc905078ec3076bc2b818459f46a5e3ed7ce67f65baddec0913effa96a78b548f6dfa5254754b93a1c09ac79f3c48a3aeae3b71ce261faa74ecd6f918578e84afa74fc649f9a1359c98697f554dc5b5f9809dcc0b4b0e04969053b4bc7c187ff3a5cebfa1c927b7342e78c6f5c2c4c4109243f970358380ebf0be9eaaea4f6e60e4bde80d94aaefea6a89afe82e23f85a2346f865f2e41c8b13b63d89b2791341ea616ba470ff079ffd20b0e0fdcba6ac2154b9c0fa7983f908d67ee9b7859eee1e403ec6f714af4c33caeba9c232e291a263ce49a84df28d09273802b709853afb91c45fdf5654b9be9edafa37d4afdeeb55f2e0e0f8b09b6cb642ff97e6af0b1d2dbae8f9d073b9a165817f3ffe7d1d80d3fcb542a590151b2e795669d73b0c6c86e695700b53a63e0ee631232dfeb5c4df513dbe9e8abceedecb1d1d2aa90d94c3a40ea9ab84efdcd108294b0d83b1de268a79a0a48502908bfe1f94a636227b1342ae2e05337b90dcfa44615e3f845041fd65c7a68c48a92ee1f69377fe437db0e5d7d6c59082bf42d91fbd4c8de5535e1a0dc5ee4c4306f2ad41b0ce02bebd454806e8d85b13ce0d8699787430fd224d30e4ed2355f7b7c0b627e1cb850042b94f7a21c828b4ff48838196c904f9f7fa4282258bf3e2e51d6a84c7b42da629e7f7f1bd4a7b0e4a6fa194053911713540cbd120318ea1f9c0aabee624c378c6470c992c0078246c74fea2b95a4aaa4e958b604071511e8e0455363a0d1b43edb2f28ced499535cd304169419c6c49bf62e76f501e2a793052271b12a091d33019f16d9cb55cd7135bacfa6fa324cfd97a4d736c34500b2240c9e9ed87cb4cb6d5a54d811c774d1ae62b44c57883b308fa890d8c0a1e576b9b7391cfb5ed9d7ea2a672b16b585ce360ce2e4f37269c8eef8f1bf7813a7d59a86b20ae41fc3525299813bf0b8ae4ac7647fb0776c7834c89508304fd6eeb6782c9f2a1f877e6bbe1fefa1ca46774607ec678fca5dc27443c29750da2a429738df37dd0f539f9a7e007e73d05766e6c850598b8c00e50ed224deae5d9c59ec487e9541d187afbd290f54cc027d18bc2aaa1987a8cc0f4dd70180712bff980fadb5ea628484868fa7d5c8284efbd94d979be27791c9ecda7abfcaacadfd6ae6d0542f862c6c767db73c2c6b5a4d7e9081b5c6eefb27f7d29330ad2665d50c99d665b34d11ebe31ed84533743dffe0160a3c009d85aa55c10b38af7f31121827b944c851bf084f049ff8ff908dfa04c6641dca6cfbe6ba26ccfe055114c18372bae8deb48f834bb6022fe38b77c61175e61c1b63e21f3da5bbf9348b8441e2b70aa85ec914d9942a69f277e9848690fc851d72b50e17cc828b957b6a098ed00a3427559f0eaf949e83a13f03a9e25537c4cadb0ca5eda8d47b1edcdd589487d5119c6b666bb7ecb96252936c330ed939c5b1161d85e15ad490385d270161f895c88d293540f8d03ae1cfa49cf4b74f8d98e5ce57f3d4240534d0f821e88c292b243fe75dba6c2c8a5afadb9f535ee110e0e9948318437fcb8a744e3084", 0x1000}], 0x1) getsockopt$inet6_opts(r2, 0x29, 0x3b, 0x0, &(0x7f0000002980)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$pppl2tp(0x18, 0x1, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000300)=ANY=[@ANYBLOB="00fbdf0005fe7e9e357f6aa67a4f784508539b5400b35f0926ffabb40bd67bc4d0f2e3b638fe9f51614e055dc065aeb6e75c720f2047b54d8fdbd7b33a3edbe376649237aeba831a19579063343d6259b807e4fbd79449357f040000008e0ddf464405a45cf2724c3ff9116fc0e5f655edca1868aa11857dd4a94133e74937f94f57f7dd870a396d5721eac867c6c92ad3a441c0cb484938c1f0e9a370c0e7531a5c3b0c00006dfca43dc53b80669179ef7ff18360db68ffb7e9bca36016c0cd62e27810dcbaafcce02aa12e29aa9c251dab686a1ccf0337f3f085e5e25507"], 0xdf, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000000080)={0x18, 0x0, r5, {0x7}}, 0x18) mount$tmpfs(0x0, 0x0, 0x0, 0x200c04, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000180)=r0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) socket(0x2b, 0x6, 0x1) ioctl$HIDIOCGUCODE(r7, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x0, 0x7aa5, 0x590f, 0xfffffffe}) 5.949732723s ago: executing program 7 (id=2669): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000001140), 0x92e2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3013}) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001080)='/dev/comedi4\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000080)={0x1c, r4, 0xf21, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4048084) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) ioctl$COMEDI_INSNLIST(r2, 0x8010640b, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0xa000005, 0x0, 0x0, 0x4, 0xdac}]}) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) write$P9_RLERRORu(0xffffffffffffffff, 0x0, 0x53) r7 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000040)) r8 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r8, 0x40184150, &(0x7f0000000000)={0x0, &(0x7f0000000240)}) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ec0)=""/4060, 0xfdc}, {&(0x7f00000037c0)=""/4069, 0xfe5}, {&(0x7f0000000bc0)=""/262, 0x106}, {&(0x7f00000002c0)=""/208, 0xd0}, {&(0x7f0000000000)=""/38, 0x26}], 0x5}, 0x2000) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x3, 0x30, 0xb, 0x1}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={r9, 0x5}, &(0x7f00000001c0)=0xc) r10 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r10, 0x0, &(0x7f0000000400)={0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="851606"], 0x0, 0x0}) syz_usb_control_io$printer(r10, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, 0x0, 0x0) syz_usb_control_io$lan78xx(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) 5.30706088s ago: executing program 5 (id=2675): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, &(0x7f0000000200)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000280)=""/203, 0xcb}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000004c0)={'dummy0\x00', @link_local}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x1a, 0x0, 0x0) r6 = socket$inet(0x2, 0x800, 0x9) fcntl$dupfd(r6, 0x0, r5) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="daaa150eef505875b56c591cb64b5436b63aa2c66631942316181413c63558632f2bd0c968ad5a4cde0ddf40e6a9f1d5f03e16"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "a626ab8a"}]}}, 0x0}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_connect(0x2, 0xf4, &(0x7f0000000140)=ANY=[@ANYRESHEX=r6, @ANYRESDEC=r4, @ANYRESHEX=r3], 0x0) 5.109766093s ago: executing program 5 (id=2676): openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x19) ioprio_set$pid(0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002801800030003000000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002801800030003000000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fe00}], 0x1, 0x0, 0x0, 0x2b) 5.071156074s ago: executing program 5 (id=2677): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, &(0x7f00000001c0)={0x40, 0xf, 0xd8, {0xd8, 0xc, "004ac22cc68ef941903d2bee44bc4ab7c5f9d7d148785edf25e1d3dc8b9ed97e863a219ece912956f280982460b340f67da945e0035414d6190e943b61eabbaaf2cc5a7c0c5066251d01e954c2996fd3e0ef38ff265744d3296702854c78dd09e30ed5efdf085fa7a1038862e7c6db8deb69ace978f973e78bb93c153f1ae43d2ac521c382b88c3798951dfd60f134376bfea2a65f3ae4f951a75376eb992bc949789e3a09b6124163ce0f7efb87bad9ace9f98e573877403a6d0c640a0693d2ecc2b6725b2baebcf97726a9fabbf4203e8a23865e6e"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3032}}, &(0x7f0000000300)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x5, "60768707"}, @main=@item_012={0x1, 0x0, 0x9, "ad"}]}}, &(0x7f0000000340)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8000, 0x3, 0x1, {0x22, 0xed0}}}}, &(0x7f0000000540)={0x2c, &(0x7f00000003c0)={0x40, 0xe, 0x38, "0e3a134251831dd7694753858554cd7a30bc163778309ea487db7e8d3d449c8e9c5a17e76fa3b685d2e042cc149ba40f6ffb1262ff7970b5"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000480)={0x20, 0x1, 0x5e, "bfc0540e8e5d3f3c11110a223973ce2a0d49c54d771b8a2fcdbb5236e86729962f61a5d75f29bc58f62ef539c1937cabbddd7c0867b4a2a2e1d93bbc06a56b67b4fa670d4b7d7116b74f4d50439b2c45c6c436dd61851038bd86a46b08e4"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0x7}}) (async, rerun: 32) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x3, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x13, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x81, 0x6, 0x4}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x310, 0x5, 0x45, 0xe0, 0x10, 0x5}, 0x5a, &(0x7f00000000c0)={0x5, 0xf, 0x5a, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0xb, 0x6, 0xa, 0xf0f, 0x5b66, [0xa7e0c50de479e1a6, 0xff0000, 0x30, 0xff3f, 0xff3f00, 0x0]}, @ssp_cap={0x1c, 0x10, 0xa, 0x29, 0x4, 0x6, 0xf000, 0x7, [0xc000, 0xff0f, 0xc0c0, 0xff3f00]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x9, 0xfb, 0x3, 0x9, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0xa, 0xd, 0xfffa}]}, 0x1, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x807}}]}) (rerun: 32) 4.898064687s ago: executing program 6 (id=2679): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = epoll_create(0x60004b) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000000)={0x80000001}) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000300)={0x0, 0xd}, 0x8) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) (async) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000100)={0xa000000d}) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) close(r1) 4.816211191s ago: executing program 6 (id=2680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a300000000014000380080002400000000008000140000000002c000000180a05000000000000000000010000000900010073797a30000000000c000540000000000000000114000000020a01"], 0xc8}}, 0x4000450) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) r2 = eventfd2(0x8, 0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000040)={0x1, r2}) close(0x3) mknod$loop(&(0x7f0000000240)='./file0/file0\x00', 0x100, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$vbi(&(0x7f00000006c0), 0x3, 0x2) ioctl$VIDIOC_SUBDEV_S_FMT(r6, 0xc0585605, &(0x7f0000000840)={0x0, 0x0, {0x8, 0x7ff, 0x2019, 0x1, 0x3, 0x1, 0x4a530db381c0e808, 0x7}}) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x400c810) bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) connect$unix(r8, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r9, 0x0, 0x0, 0x404c0c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r9, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000b80), 0x2, 0x0) ioctl$RTC_IRQP_READ(r10, 0x40187013, &(0x7f0000000bc0)) r11 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x90800, 0x0) sendmsg$TIPC_NL_NET_GET(r11, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="64020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x264}, 0x1, 0x0, 0x0, 0x4004000}, 0x8885) listen(r3, 0x0) 4.734150586s ago: executing program 6 (id=2681): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r2, 0x8924, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1, 0x6, 0x10, 0xfffc, 0x0, 0xa0, 0x0, 0x0, 0xff, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4, [0x0, 0x400000]}}) r4 = eventfd(0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r4, 0xb}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:* rr'], 0x9) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8=r3], 0xe4}, 0x1, 0x0, 0x0, 0x40040c0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) (async) ioctl$TCSETA(r2, 0x8924, 0x0) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x1, 0x6, 0x10, 0xfffc, 0x0, 0xa0, 0x0, 0x0, 0xff, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4, [0x0, 0x400000]}}) (async) eventfd(0x1) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r4, 0xb}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) (async) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='b *:* rr'], 0x9) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRES8=r3], 0xe4}, 0x1, 0x0, 0x0, 0x40040c0}, 0x0) (async) 4.489957199s ago: executing program 2 (id=2682): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='v7\x00', 0x10001, &(0x7f00000002c0)='\x00') mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) mount$fuseblk(0x0, &(0x7f00000001c0)='./bus\x00', 0x0, 0x802808, 0x0) linkat(r1, &(0x7f0000000100)='./bus\x00', r2, &(0x7f0000000240)='./bus\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0x80000008, 0x8001, 0x1, 0xfffffffe, 0x800, 0x0, 0xffffffff}]}) r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) getpeername(r8, &(0x7f0000000440)=@llc, &(0x7f0000000380)=0x80) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x3, 0x0, &(0x7f0000000280)) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203e4e787321f90150182a650d3705ffcf9f2cde821279d9e47b82ddd597a388d205ffe0902"], 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x0, 0x33}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x184}}, 0x0) syz_usb_control_io(r9, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000000c0)={0x0, 0x8, 0x11, "0300fe96fcb7012e493d74c975b4032d99"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.452503284s ago: executing program 6 (id=2683): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0x4, 0x10, 0x25, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x8}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x6, 0x2, "a0"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x10, "c3"}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0x8f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x4, 0xd, 0x1, {0x7, 0x25, 0x1, 0x80, 0x3, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf, 0x1, 0x5, 0x3, "7dc855bd84f1d971c7"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x8, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7f, 0x0, 0x6, {0x7, 0x25, 0x1, 0x1, 0x1, 0x85e}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x70bd2f, 0xfffffffc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe0}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x54}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000008) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x40084) syz_open_dev$dri(&(0x7f0000000000), 0x14, 0x121400) 2.489645671s ago: executing program 7 (id=2684): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x2, &(0x7f0000001bc0)=0x2, 0x4) syz_usb_connect(0x2, 0x3d, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0x93, 0xf6, 0xfe, 0x10, 0x108c, 0x159, 0xdb57, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x81, 0x9, 0x30, 0x0, [{{0x9, 0x4, 0x1c, 0xfa, 0x2, 0xf2, 0x78, 0x38, 0x2, [], [{{0x9, 0x5, 0xc, 0x2, 0x10, 0x0, 0xfd, 0xda, [@generic={0x7, 0x5, "fda246483e"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x8, 0xf, 0xd9}}]}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x2, 0x3d, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0x93, 0xf6, 0xfe, 0x10, 0x108c, 0x159, 0xdb57, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x81, 0x9, 0x30, 0x0, [{{0x9, 0x4, 0x1c, 0xfa, 0x2, 0xf2, 0x78, 0x38, 0x2, [], [{{0x9, 0x5, 0xc, 0x2, 0x10, 0x0, 0xfd, 0xda, [@generic={0x7, 0x5, "fda246483e"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x8, 0xf, 0xd9}}]}}]}}]}}, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) 1.738389863s ago: executing program 5 (id=2685): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async, rerun: 32) recvmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/122, 0x7a}, {&(0x7f0000000680)=""/190, 0xbe}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000240)=""/36, 0x24}, {&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f00000002c0)=""/93, 0x5d}, {&(0x7f00000003c0)=""/257, 0x101}, {&(0x7f0000000280)=""/64, 0x40}, {&(0x7f0000000380)=""/19, 0x13}, {&(0x7f0000000500)=""/150, 0x96}, {&(0x7f0000003580)=""/4082, 0xff2}, {&(0x7f00000009c0)=""/244, 0xf4}], 0xc}, 0x2}], 0x3, 0x2120, 0x0) (async, rerun: 32) ioctl$SIOCNRDECOBS(r0, 0x89e2) 1.679409074s ago: executing program 5 (id=2686): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) migrate_pages(0x0, 0x4, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) 1.578222025s ago: executing program 5 (id=2687): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000010b205240200000000000109022400010800a000090400000103000201092100000001220700090581031000700000"], 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='ac']) 1.173983583s ago: executing program 2 (id=2688): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) r2 = socket(0x22, 0x6, 0x3) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x10010, r3, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000000)=@arm64={0x1, 0x4, 0x0, '\x00', 0x40}) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mq_open(&(0x7f00000004c0)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x35, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0xfffffffffffffe25, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="841907caf8b649af860a9e09202cef2d4e50299a4f8c14c7a43665f244", @ANYRES16=0x0, @ANYRESDEC=r4, @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x20004014}, 0x4d) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan1\x00', {}, 0x108}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x48}, 0x4800) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x20002) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x1000000002, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x2, 0x4002004c4, 0xffe, 0x0, 0x0, 0x0, 0x900f, 0x0, 0xd57b, 0x3, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000141200006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 1.155950071s ago: executing program 6 (id=2689): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt(r0, 0x75b6, 0x9c5c, 0x0, 0x0) r1 = semget$private(0x0, 0x4, 0x6f2) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x7ffffffffffffffe) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000240)={0x3, 0x6, 0x773, 0x57, 0xb, "795068b80b533acc5424319a0dc3f40980d6f1"}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @loopback}}, 0x0, @in6=@private1}}, &(0x7f0000000100)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) r5 = getgid() semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000001c0)={{0x2, r3, 0xee01, r4, r5, 0x1}, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x49}) 1.060092685s ago: executing program 6 (id=2690): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="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", 0x1000}], 0x1) getsockopt$inet6_opts(r2, 0x29, 0x3b, 0x0, &(0x7f0000002980)) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = socket$pppl2tp(0x18, 0x1, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f0000000300)=ANY=[@ANYBLOB="00fbdf0005fe7e9e357f6aa67a4f784508539b5400b35f0926ffabb40bd67bc4d0f2e3b638fe9f51614e055dc065aeb6e75c720f2047b54d8fdbd7b33a3edbe376649237aeba831a19579063343d6259b807e4fbd79449357f040000008e0ddf464405a45cf2724c3ff9116fc0e5f655edca1868aa11857dd4a94133e74937f94f57f7dd870a396d5721eac867c6c92ad3a441c0cb484938c1f0e9a370c0e7531a5c3b0c00006dfca43dc53b80669179ef7ff18360db68ffb7e9bca36016c0cd62e27810dcbaafcce02aa12e29aa9c251dab686a1ccf0337f3f085e5e25507"], 0xdf, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r0, &(0x7f0000000080)={0x18, 0x0, r5, {0x7}}, 0x18) mount$tmpfs(0x0, 0x0, 0x0, 0x200c04, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000180)=r0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) socket(0x2b, 0x6, 0x1) ioctl$HIDIOCGUCODE(r7, 0xc018480d, &(0x7f00000011c0)={0x3, 0x100, 0x0, 0x7aa5, 0x590f, 0xfffffffe}) 905.606535ms ago: executing program 7 (id=2691): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) r2 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x250, 0x69, 0xd0, 0xae, 0x10, 0x5ac, 0x249, 0xdea6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x3, 0x60, 0x8, [{{0x9, 0x4, 0xd8, 0x80, 0x0, 0x3, 0xef, 0x2, 0x9c}}]}}]}}, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2, 0x1d, "fee8a2ab78fc979fd1e00d96072800001ea89de2b7fb0000e60080d2780000000000fffffffffffffff70000000000000700", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90bf8b1c000000001600000000effb00", [0x8, 0x2]}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x740, 0x8000, 0x7fffffff, 0x2, {{0x1b, 0x4, 0x3, 0x5, 0x6c, 0x67, 0x0, 0x3, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x1c, 0xd3, 0x1, 0x0, [{@rand_addr=0x64010102, 0x3ff}, {@rand_addr=0x64010102}, {@broadcast, 0x91ae}]}, @ssrr={0x89, 0xb, 0x66, [@rand_addr=0x64010100, @loopback]}, @timestamp={0x44, 0x1c, 0x6d, 0x0, 0x5, [0x1ff, 0x3, 0xffff0acf, 0xeda, 0x6, 0x2]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xf3, [@local, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x44}]}]}}}}}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000ec0)=@deltfilter={0x8d0, 0x2d, 0x400, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xe, 0x8}, {0xfff2, 0xb83ba02430850b5d}}, [@f_rsvp6={{0xa}, {0x18, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @remote}]}}, @f_rsvp6={{0xa}, {0x87c, 0x2, [@TCA_RSVP_DST={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xfff1, 0xffff}}, @TCA_RSVP_DST={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_RSVP_POLICE={0x848, 0x5, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x8, 0x0, 0x10, 0x1, 0x3, 0x4, 0x2, 0x1, 0xffff, 0x9, 0x9, 0x0, 0x3, 0xf, 0x700, 0x7, 0x1ff, 0x1, 0xd, 0x5, 0xd19, 0x1, 0x2, 0xa, 0xa68, 0xfffffffd, 0x0, 0x3b4fc203, 0x6, 0xf, 0x7c, 0xd39, 0x9, 0x8, 0x200, 0x9, 0x551, 0xffffffad, 0x2c386d0a, 0x1000, 0xffff, 0x7de, 0xe709, 0x9b7, 0x5, 0x5, 0x4, 0x6, 0xe4f7, 0x800, 0x3, 0x9, 0x5, 0x5, 0x5, 0x7f, 0x10000, 0x8001, 0x100, 0xab0, 0x81, 0x2, 0x6, 0x99, 0x4, 0x10, 0x0, 0xc, 0xaca, 0x4d1f, 0x4050, 0x6, 0x8, 0x3, 0x200, 0x80, 0x7cb8000, 0x8, 0x5, 0x1, 0x0, 0x80000001, 0x7, 0x6a, 0x100, 0x3, 0x2, 0x6, 0x2, 0x80, 0x0, 0x2, 0xa1, 0x101, 0x2, 0x9, 0x7fff, 0x9, 0x7, 0xe1, 0xe745, 0x5, 0x5, 0x94, 0x5, 0x8, 0x8000, 0xac, 0x30000, 0x8, 0x100, 0x8000, 0x10e679d8, 0x7c5e, 0xa, 0x2, 0x0, 0x2, 0xf6fc, 0x8, 0x10f04c69, 0x10000, 0x4, 0x6, 0x6, 0x8, 0x4, 0x8, 0x2, 0xffff, 0x3ca33e65, 0x98, 0x9, 0x3, 0x7, 0x5, 0xc68a, 0x3, 0x9, 0x3, 0x8, 0x2, 0x10, 0xfd4, 0xa, 0x9, 0x1, 0x5, 0x2, 0x0, 0x7, 0x1000, 0x2, 0xa48, 0x8, 0x8, 0xfffffff8, 0x40000000, 0x4, 0x2, 0x0, 0x100, 0x8, 0x0, 0x1, 0x4, 0x1, 0xffffffff, 0x0, 0x3, 0x7, 0x9, 0x6, 0x3, 0x7f, 0x3, 0xfffffffd, 0x401, 0x8, 0x81, 0x7, 0x683, 0x80000000, 0x3, 0x3, 0x8001, 0x4, 0x0, 0x40, 0x6, 0x101, 0x3, 0x6, 0x9, 0x6, 0x931, 0xcef, 0x5, 0xc2c, 0x41, 0x7fffffff, 0x1, 0x0, 0x7, 0x1eb, 0x8, 0x7, 0x9, 0x6, 0x3, 0x6a9, 0x1, 0x5, 0x8, 0x4, 0x7, 0x9, 0x6, 0x9, 0xfffffffc, 0x7, 0x401, 0x3, 0x9, 0x200, 0x9, 0xb, 0x81, 0x7, 0xc, 0xc8d, 0x81, 0x5c, 0xfffffffd, 0x0, 0x79ba, 0x7f, 0x6, 0x4, 0x8, 0x6, 0x0, 0x7, 0x2, 0x200, 0x5, 0x9, 0x0, 0x6, 0x4, 0x5, 0x32, 0x0, 0x9, 0x6]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x13}, @TCA_POLICE_RATE64={0xc, 0x8, 0x87}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x24, 0x44f, 0x124, 0x1, 0x9, 0xfffffffe, 0xff, 0x10, 0x80, 0x8, 0xffffffff, 0xa61, 0x0, 0x401, 0x0, 0x1000, 0x3, 0xff, 0x2, 0x3, 0x8000, 0xee81, 0x6a4, 0x6, 0x0, 0x364, 0x8, 0x5, 0xe4e, 0x7, 0x9, 0x0, 0x6cd, 0x80, 0x6, 0x3ff, 0x8, 0x2, 0xe, 0x3ff, 0x0, 0x3, 0x7, 0x1ff, 0x4, 0x6, 0x3, 0x5, 0x40, 0x3, 0x2, 0x8, 0xb9, 0x200, 0x8, 0x7f, 0x4, 0x7, 0x5, 0x3, 0x2026, 0x80000000, 0x1, 0x2, 0xd, 0xfffffffd, 0x5, 0x0, 0x0, 0x40, 0x5, 0x8, 0x9, 0xf, 0x80000001, 0x80, 0x9, 0x401, 0x40, 0x401, 0x4d, 0x8, 0x0, 0x2d87ff73, 0x7, 0x8, 0x7fffffff, 0x1, 0x6, 0x7, 0x7fffffff, 0x3, 0x0, 0x2d, 0x7, 0x81, 0x4, 0x81, 0x3, 0x2, 0x0, 0x8, 0xd1b5, 0x9, 0x8001, 0x0, 0x94, 0x93, 0x1, 0x9, 0x6, 0x2, 0xa, 0x1, 0x10, 0x0, 0x8, 0x5, 0xa3d, 0x9, 0x4, 0xe, 0xd0, 0xfffffffe, 0x6, 0x80000001, 0x4, 0x1ff, 0x5, 0x2, 0x6, 0xbc, 0x2, 0x2b, 0x5, 0x6a69, 0xb9a, 0x4, 0xffffff28, 0x1000, 0x6, 0x0, 0x7ff, 0x1, 0x6, 0x0, 0x56, 0x5, 0xe, 0xff, 0x7, 0x1, 0xc, 0x1, 0x7, 0x7fffffff, 0xd, 0xffff8001, 0x5, 0xdb38, 0x2, 0x0, 0x4, 0xfffffff9, 0x1ff, 0x5, 0x3, 0x8000, 0x80000001, 0x7, 0x1000, 0x1ff, 0x6, 0x2, 0x525d, 0x7, 0x80000000, 0x68, 0x98c, 0x10, 0x8000, 0xbf98, 0x7, 0xfff, 0x4, 0x101, 0xec, 0x401, 0xb10b, 0x2, 0x2, 0x3800, 0x10, 0x7, 0x1, 0x9, 0xa, 0x9, 0x40, 0xb9f, 0x401, 0x87, 0x3ff, 0xffffffff, 0x700000, 0xc, 0x8, 0x1, 0xb, 0x2, 0x3, 0x7f, 0x3e332d4, 0xb0, 0x7f, 0x8001, 0x1ff, 0x9, 0xfffffff9, 0xfeb, 0x9, 0x9, 0xfffff578, 0x9, 0x20000000, 0x6, 0x81, 0x586, 0x9, 0x5f, 0x9, 0x27a263cf, 0x7, 0xf8, 0xc7f0, 0x7, 0x9, 0x2, 0x4, 0x6, 0x800, 0x8, 0x8, 0x4, 0x0, 0x7, 0x2, 0x81, 0x7, 0x8a, 0x6, 0xd, 0x0, 0x3, 0xb7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}]}]}}]}, 0x8d0}, 0x1, 0x0, 0x0, 0x4004}, 0x40001) 905.24911ms ago: executing program 2 (id=2692): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) 0s ago: executing program 2 (id=2693): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='@)&&\xfb\x00', r0) (async) request_key(&(0x7f0000000000)='.dead\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='@)&&\xfb\x00', r0) add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="752c68c5f38b1d168658ad39560304334e62db8b2ae18f4ff178646251dedfd65f4e63433a6e7a56ffedc4d0a31f7c5d223b7cbca9f57656e297e18c39d2232155720be3bf8ea2072e52a1c0cc4bbdb71a6b9f1bf1335ab47645c60caa5abeedb15f4dc4f39524b5ebcfdafddb81fa0a33324d42bbe2648198d6d012a9a73ea3546f811b1288450fdc0a38a5f47840261ad05b666b851ce7514ab04041df96beac1e0158d4455eda513d3dd6ccd3dc70292a1c2bd0b7a3ec13a1815880744c854b142b25a83de6784055f504bc9e09fbe549c15b4c255afa7464df", 0xdb, 0xfffffffffffffffe) (async) add_key(&(0x7f0000000140)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="752c68c5f38b1d168658ad39560304334e62db8b2ae18f4ff178646251dedfd65f4e63433a6e7a56ffedc4d0a31f7c5d223b7cbca9f57656e297e18c39d2232155720be3bf8ea2072e52a1c0cc4bbdb71a6b9f1bf1335ab47645c60caa5abeedb15f4dc4f39524b5ebcfdafddb81fa0a33324d42bbe2648198d6d012a9a73ea3546f811b1288450fdc0a38a5f47840261ad05b666b851ce7514ab04041df96beac1e0158d4455eda513d3dd6ccd3dc70292a1c2bd0b7a3ec13a1815880744c854b142b25a83de6784055f504bc9e09fbe549c15b4c255afa7464df", 0xdb, 0xfffffffffffffffe) keyctl$instantiate(0xc, r0, 0x0, 0x0, r0) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r1 = syz_io_uring_complete(0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @dev}, &(0x7f0000000300)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @dev}, &(0x7f0000000300)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000340)={'ip_vti0\x00', r2, 0x20, 0x20, 0x80, 0x8, {{0x1c, 0x4, 0x1, 0x22, 0x70, 0x64, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x3c}, {[@generic={0x88, 0x8, "43ec4b3ecdeb"}, @timestamp_addr={0x44, 0x1c, 0x58, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x40}, 0x2}, {@rand_addr=0x64010102, 0x8}, {@multicast1, 0x7}]}, @cipso={0x86, 0x35, 0xffffffffffffffff, [{0xc8856e1f9954439b, 0xa, "d14da5cf91af1177"}, {0x1, 0xc, "cfa0c834ebcbce75f6fe"}, {0x0, 0xc, "d970c807d7eed40f026c"}, {0x1, 0xd, "4576f851dd9c4bab91811b"}]}]}}}}}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, 0x2, 0x6, 0x101, 0x0, 0x0, {0xe, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x20004844) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEV(r4, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x50, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x5555555555540604}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000700), r4) sendmsg(r3, &(0x7f0000000e00)={&(0x7f0000000740)=@rc={0x1f, @any, 0x6}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000007c0)="b9c14a56680826a428f255e0a0020a9a56388246ee6befaad0c9688c45f207a819e3075827be61b6c2f82d9bc9b8a5d226d5c3f2f297a75f8a7a01a7e48d1eb43c844d36130b03507e885e99223510267df7110a093cf532d2c21802a4c2b812ae98935277907f9d16162f7945ed262141c4409fd658bcb573caedf0aab6c4508f60c75c95e0d53542bfd18ad708d23df41ea55c2f8b09d1f3da3c73", 0x9c}, {&(0x7f0000000880)="d507b7f48f39bf5b566b2156d553f0e9bbfceeabccfb5930f1e3b30830f353311c108ff239fe257850b6851f05ff648b9268dc66b43a8c8e2fa58f294fcedd25a00d3e3d25ef5471b42967427e8308b53854cc536fff1b2dc843d2f01372434264fd12e3dfbd8eb2bff3ebfef8c762e7a7a6f6005027b6aef635d704cdfc41ad68a81fd551e7b6a0da759f3e5f8b200cc5f37278db32", 0x96}, {&(0x7f0000000940)="8db1cd3d9e3552f6a47882fe82370e9fb168164d53760e390a1bac2f42e8d8903ad90c795271db0867e44fbe4d950c66c519a930b8109dc54d33e3e18902364dfbfa3dfa0b7592a365be6a52fc21b7110fddc903ce09fd44e2286bd77a9b9d0248b7870c2699a72a", 0x68}, {&(0x7f00000009c0)="5c2fc3ffdb7e58e28a4dc84a8c5e81237c699edc1e7cbee5f38537651eaacbfd0e9f9e659f70c09a41bfc2e315c2d7a4285af7d2d44d4bb79e21059427ce538ff0c53b7f3bffbbbcf86caac7831085eaf0691b9c885a65ba4f95a3648358a1c2671745e2f9408d830ceaf5e4d6baf18d8864d6a4927df26c8b95583614887d7dfc0d136ef3e1b7ba70f88f281ed36042300e38de228a3403d80b74cc0181194d06b93f3b9eb2218106ce3978bd5820716edc66ec05b314cef8a8", 0xba}, {&(0x7f0000000a80)="fb54711537688c01838fb9ac7c5d0b3141e92a3d293c40dd302ea6ee23bfb8b7a8558b0ba0eab8f946299606b3b147b97828b15ceaa381428b1085ad91ecbe3ac82f5f7ee27eec1b8aa751a94236c024228d4fc49925f5d19e975b874c05daf925f2d39a0ce93cf235ab382ae0ac59a6e3eb6bd4665c53d86a5db044f7831373768a333909302d15931ed68ea7f442884573afbf7bce0d72153c2ff3c5037fcf3a041523afc57107aab13a0d3f7e5f6172046ebdc04737c6ac48bd77601c12f465ad2b8baedc275b", 0xc8}], 0x5, &(0x7f0000000c00)=[{0x58, 0xff, 0x101, "14830b07894e1d30355c1185328580ed078acdb387e1c1ad20cdd5884c21e6087e70a235f349109e76d03cff2ffc8f25e0f0b20d965b8f83b9befba499cbe65fc1d987"}, {0xe0, 0x113, 0x100, "17b67d6f8d310e2f85ac292030bda3275346aa1367343c06a7ec32fa273394f84232aaa25dd9249f26c956755ea167bb0e26f49621a41b1d3f2808714b9c5aa58cbbea47c81397eaca282d08d35d9d433638ec72a643a0734fbe654d3e67f51e6d62b633607e4ef5c8f59ce161aed5a63276cd1b2bfc284e1fbece00d0de827aaa8bcaf8c67cbc108fde505e807fc28be3eec690a4c044a59c0a2c70120e5b26e7a78646897c394431d4cc0ad6858381b075a7cf3a19718447b9f281def6f408d742cf3f03743316a140"}, {0x58, 0x6, 0x3, "1c482b454505c28f3c9f9204e0480bf3af1fe92de658675ec56306a121a3d25d3da2ee91a40b363cf8b2ad3ad9407994f755451548991493474a4bd2eda2ea804899a6da"}, {0x18, 0x119, 0x3, "672c19356eb4"}, {0x48, 0x13, 0x10, "ae75d99a83bde99036ebd250a1737db9147348563c7c61837959f5e82dc7e717aa280a7761f8733be1f16a0d309125fb60442c"}], 0x1f0}, 0x4000000) (async) sendmsg(r3, &(0x7f0000000e00)={&(0x7f0000000740)=@rc={0x1f, @any, 0x6}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000007c0)="b9c14a56680826a428f255e0a0020a9a56388246ee6befaad0c9688c45f207a819e3075827be61b6c2f82d9bc9b8a5d226d5c3f2f297a75f8a7a01a7e48d1eb43c844d36130b03507e885e99223510267df7110a093cf532d2c21802a4c2b812ae98935277907f9d16162f7945ed262141c4409fd658bcb573caedf0aab6c4508f60c75c95e0d53542bfd18ad708d23df41ea55c2f8b09d1f3da3c73", 0x9c}, {&(0x7f0000000880)="d507b7f48f39bf5b566b2156d553f0e9bbfceeabccfb5930f1e3b30830f353311c108ff239fe257850b6851f05ff648b9268dc66b43a8c8e2fa58f294fcedd25a00d3e3d25ef5471b42967427e8308b53854cc536fff1b2dc843d2f01372434264fd12e3dfbd8eb2bff3ebfef8c762e7a7a6f6005027b6aef635d704cdfc41ad68a81fd551e7b6a0da759f3e5f8b200cc5f37278db32", 0x96}, {&(0x7f0000000940)="8db1cd3d9e3552f6a47882fe82370e9fb168164d53760e390a1bac2f42e8d8903ad90c795271db0867e44fbe4d950c66c519a930b8109dc54d33e3e18902364dfbfa3dfa0b7592a365be6a52fc21b7110fddc903ce09fd44e2286bd77a9b9d0248b7870c2699a72a", 0x68}, {&(0x7f00000009c0)="5c2fc3ffdb7e58e28a4dc84a8c5e81237c699edc1e7cbee5f38537651eaacbfd0e9f9e659f70c09a41bfc2e315c2d7a4285af7d2d44d4bb79e21059427ce538ff0c53b7f3bffbbbcf86caac7831085eaf0691b9c885a65ba4f95a3648358a1c2671745e2f9408d830ceaf5e4d6baf18d8864d6a4927df26c8b95583614887d7dfc0d136ef3e1b7ba70f88f281ed36042300e38de228a3403d80b74cc0181194d06b93f3b9eb2218106ce3978bd5820716edc66ec05b314cef8a8", 0xba}, {&(0x7f0000000a80)="fb54711537688c01838fb9ac7c5d0b3141e92a3d293c40dd302ea6ee23bfb8b7a8558b0ba0eab8f946299606b3b147b97828b15ceaa381428b1085ad91ecbe3ac82f5f7ee27eec1b8aa751a94236c024228d4fc49925f5d19e975b874c05daf925f2d39a0ce93cf235ab382ae0ac59a6e3eb6bd4665c53d86a5db044f7831373768a333909302d15931ed68ea7f442884573afbf7bce0d72153c2ff3c5037fcf3a041523afc57107aab13a0d3f7e5f6172046ebdc04737c6ac48bd77601c12f465ad2b8baedc275b", 0xc8}], 0x5, &(0x7f0000000c00)=[{0x58, 0xff, 0x101, "14830b07894e1d30355c1185328580ed078acdb387e1c1ad20cdd5884c21e6087e70a235f349109e76d03cff2ffc8f25e0f0b20d965b8f83b9befba499cbe65fc1d987"}, {0xe0, 0x113, 0x100, "17b67d6f8d310e2f85ac292030bda3275346aa1367343c06a7ec32fa273394f84232aaa25dd9249f26c956755ea167bb0e26f49621a41b1d3f2808714b9c5aa58cbbea47c81397eaca282d08d35d9d433638ec72a643a0734fbe654d3e67f51e6d62b633607e4ef5c8f59ce161aed5a63276cd1b2bfc284e1fbece00d0de827aaa8bcaf8c67cbc108fde505e807fc28be3eec690a4c044a59c0a2c70120e5b26e7a78646897c394431d4cc0ad6858381b075a7cf3a19718447b9f281def6f408d742cf3f03743316a140"}, {0x58, 0x6, 0x3, "1c482b454505c28f3c9f9204e0480bf3af1fe92de658675ec56306a121a3d25d3da2ee91a40b363cf8b2ad3ad9407994f755451548991493474a4bd2eda2ea804899a6da"}, {0x18, 0x119, 0x3, "672c19356eb4"}, {0x48, 0x13, 0x10, "ae75d99a83bde99036ebd250a1737db9147348563c7c61837959f5e82dc7e717aa280a7761f8733be1f16a0d309125fb60442c"}], 0x1f0}, 0x4000000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) bind$alg(r5, &(0x7f0000000e80)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r1, 0x4068aea3, &(0x7f0000000f40)={0xa3, 0x0, &(0x7f0000000f00)}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000fc0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) recvfrom$rose(r1, &(0x7f0000001000)=""/255, 0xff, 0x0, &(0x7f0000001100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x40) (async) recvfrom$rose(r1, &(0x7f0000001000)=""/255, 0xff, 0x0, &(0x7f0000001100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x40) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x1) (async) ioctl$MON_IOCH_MFLUSH(r3, 0x9208, 0x1) getpeername$inet(r5, &(0x7f0000001140)={0x2, 0x0, @broadcast}, &(0x7f0000001180)=0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000001300)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001200)={0x98, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x24}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2f}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x36}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x8040}, 0x80) fcntl$setlease(r3, 0x400, 0x1) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000001340)=0x0) ptrace(0x4208, r6) (async) ptrace(0x4208, r6) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000001380)={0xff, "2f2c72db8dfd80c3d56f8d45e6457cefda08913539c54f2d3d98aef0439e6896", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f0000001440)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000013c0)=[{}]}) (async) ioctl$SYNC_IOC_FILE_INFO(r7, 0xc0383e04, &(0x7f0000001440)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f00000013c0)=[{}]}) sched_setscheduler(r6, 0x3, &(0x7f0000001480)=0x7) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r8, 0x8010af78, &(0x7f0000001500)) kernel console output (not intermixed with test programs): number 80 [ 428.132451][T13897] netlink: 'syz.4.2316': attribute type 16 has an invalid length. [ 428.141996][T13897] netlink: 'syz.4.2316': attribute type 3 has an invalid length. [ 428.152055][T13897] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.2316'. [ 428.657858][ T6013] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 428.704784][ T5919] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 428.822987][ T6013] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 428.834897][ T6013] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 428.846126][ T6013] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 428.856527][ T6013] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 428.869911][ T6013] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 428.888492][ T6013] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.924818][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 428.938910][ T5853] usb 6-1: USB disconnect, device number 2 [ 428.944932][ T5919] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 428.960917][ T5853] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 428.974771][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.005034][ T6013] usb 3-1: config 0 descriptor?? [ 429.011731][ T5919] usb 5-1: config 0 descriptor?? [ 429.034234][ T5919] cp210x 5-1:0.0: cp210x converter detected [ 429.062335][ T5853] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 429.092878][ T5853] quatech2 6-1:0.51: device disconnected [ 429.456132][ T5919] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 429.472431][ T6013] plantronics 0003:047F:FFFF.0015: ignoring exceeding usage max [ 429.483478][ T5919] usb 5-1: cp210x converter now attached to ttyUSB0 [ 429.506102][ T6013] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 429.525992][ T5853] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 429.621185][ T5866] Bluetooth: hci5: command tx timeout [ 429.690542][ T9] usb 5-1: USB disconnect, device number 22 [ 429.695239][ T5853] usb 6-1: Using ep0 maxpacket: 32 [ 429.712263][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 429.716568][ T5853] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 429.731163][ T9] cp210x 5-1:0.0: device disconnected [ 429.741568][ T5853] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.752094][ T5853] usb 6-1: Product: syz [ 429.756407][ T5853] usb 6-1: Manufacturer: syz [ 429.761536][ T5853] usb 6-1: SerialNumber: syz [ 429.828484][T13907] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 429.837898][T13907] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 429.986939][ T5853] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 430.007015][ T5853] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 430.034953][ T5853] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 430.313990][T13940] /dev/nullb0: Can't lookup blockdev [ 430.333679][T13940] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 430.445684][T13945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2330'. [ 430.459745][T13945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2330'. [ 430.522624][ T13] Bluetooth: (null): Invalid header checksum [ 430.535478][ T13] Bluetooth: (null): Invalid header checksum [ 430.637000][ T36] Bluetooth: (null): Invalid header checksum [ 430.754092][ T13] Bluetooth: (null): Invalid header checksum [ 430.882775][ T1165] Bluetooth: (null): Invalid header checksum [ 431.000433][ T1165] Bluetooth: (null): Invalid header checksum [ 431.059528][T13948] overlayfs: failed to clone upperpath [ 431.117722][ T1165] Bluetooth: (null): Invalid header checksum [ 431.656051][T13968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2337'. [ 431.713534][ T9] usb 3-1: USB disconnect, device number 81 [ 431.855225][ T5853] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 432.015925][ T5853] usb 5-1: Using ep0 maxpacket: 32 [ 432.027587][ T5853] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 432.042369][ T5853] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 432.053195][ T5853] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.061506][ T5853] usb 5-1: Product: syz [ 432.065688][ T5853] usb 5-1: Manufacturer: syz [ 432.070416][ T5853] usb 5-1: SerialNumber: syz [ 432.077290][ T5853] usb 5-1: config 0 descriptor?? [ 432.083271][T13965] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 432.097691][ T5853] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input35 [ 432.324413][T13965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.334101][T13973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.346858][T13965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.362824][T13973] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.425824][ T9] usb 6-1: USB disconnect, device number 3 [ 432.451296][ T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 432.510408][ T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 432.541452][ T9747] usb 5-1: USB disconnect, device number 23 [ 432.541459][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 432.558223][ T9] visor 6-1:1.0: device disconnected [ 432.755420][T13984] lo speed is unknown, defaulting to 1000 [ 432.799362][T13985] binder: 13983:13985 unknown command 0 [ 432.805159][T13985] binder: 13983:13985 ioctl c0306201 200000000080 returned -22 [ 432.892881][ T5853] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 433.052841][ T5853] usb 3-1: Using ep0 maxpacket: 16 [ 433.062807][ T5853] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 433.072422][ T5853] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.077770][ T9747] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 433.080992][ T5853] usb 3-1: Product: syz [ 433.092757][ T5853] usb 3-1: Manufacturer: syz [ 433.116322][ T5853] usb 3-1: SerialNumber: syz [ 433.132773][ T5853] usb 3-1: config 0 descriptor?? [ 433.157750][ T5853] as10x_usb: device has been detected [ 433.175628][ T5853] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 433.207305][ T5853] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 433.237139][ T5853] as10x_usb: error during firmware upload part1 [ 433.245819][ T5853] Registered device Sky IT Digital Key (green led) [ 433.266701][ T9747] usb 6-1: Using ep0 maxpacket: 8 [ 433.307149][ T9747] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.337767][ T9747] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 200 [ 433.348756][ T9747] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 433.369616][ T9747] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 433.370221][ T5853] usb 3-1: USB disconnect, device number 82 [ 433.386622][ T9747] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 433.427189][ T9747] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 433.445149][ T9747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.452997][ T5853] Unregistered device Sky IT Digital Key (green led) [ 433.457905][ T5853] as10x_usb: device has been disconnected [ 433.494616][ T9747] usb 6-1: config 0 descriptor?? [ 433.504519][T13984] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 433.744798][ T5853] usb 6-1: USB disconnect, device number 4 [ 433.833690][ T5919] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 434.001669][ T5919] usb 5-1: config 16 has an invalid interface number: 5 but max is 0 [ 434.032535][ T5919] usb 5-1: config 16 has no interface number 0 [ 434.044178][ T5919] usb 5-1: config 16 interface 5 altsetting 0 endpoint 0xF has invalid maxpacket 1479, setting to 64 [ 434.065649][ T5919] usb 5-1: New USB device found, idVendor=12d1, idProduct=7be7, bcdDevice=44.1b [ 434.079190][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.109151][ T5919] option 5-1:16.5: GSM modem (1-port) converter detected [ 434.529273][ T9747] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 434.695298][ T9747] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 434.707184][ T9747] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 434.724426][ T9747] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 434.737107][ T9747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 434.747226][ T9747] usb 3-1: SerialNumber: syz [ 434.828190][ T5919] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 434.988880][T14018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.997726][T14018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.019720][ T5919] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 435.050321][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 435.059243][T14030] netlink: 'syz.4.2358': attribute type 10 has an invalid length. [ 435.066999][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 435.081238][ T9747] usb 3-1: 0:2 : does not exist [ 435.083119][T14030] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2358'. [ 435.095210][ T9747] usb 3-1: unit 255 not found! [ 435.106254][ T5919] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 435.125102][ T5919] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 435.136074][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.168491][ T5919] usb 6-1: config 0 descriptor?? [ 435.193694][ T9747] usb 3-1: USB disconnect, device number 83 [ 435.226005][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.320888][T14030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.345049][T14030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.382794][T14030] bond0 (unregistering): Released all slaves [ 435.619031][ T5919] plantronics 0003:047F:FFFF.0016: ignoring exceeding usage max [ 435.662707][ T5919] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 435.701792][T14040] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2362'. [ 436.072245][ T9] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 436.109521][T14049] lo speed is unknown, defaulting to 1000 [ 436.136191][T14050] lo speed is unknown, defaulting to 1000 [ 436.252460][ T9] usb 3-1: too many configurations: 252, using maximum allowed: 8 [ 436.271480][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.283492][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.299166][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.310438][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.325514][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.340397][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.351775][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.364214][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.375866][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.394691][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.406999][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.419049][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.441360][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.452637][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.472986][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.484933][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.496895][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 436.505955][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.509649][ T9] usb 3-1: config 0 descriptor?? [ 436.938049][T14062] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.2368'. [ 436.989121][ T9] lenovo 0003:17EF:6047.0017: hidraw1: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 437.063252][ T5919] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 437.202072][ T5919] usb 6-1: device descriptor read/64, error -32 [ 437.213866][ T9] usb 3-1: USB disconnect, device number 84 [ 437.385591][T14069] overlayfs: failed to clone upperpath [ 437.459115][ T5919] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 437.608452][ T5919] usb 6-1: device descriptor read/64, error -32 [ 437.885030][T14081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.893791][ T5919] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 437.924874][T14083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.938998][T14081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.955803][ T5919] usb 6-1: device descriptor read/8, error -32 [ 437.966881][T14083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.155915][T14089] netlink: 'syz.3.2375': attribute type 1 has an invalid length. [ 438.163779][T14089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2375'. [ 438.166156][ T43] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 438.324879][ T43] usb 3-1: device descriptor read/64, error -71 [ 438.464033][ T5919] usb 6-1: reset high-speed USB device number 5 using dummy_hcd [ 438.486000][ T5919] usb 6-1: device reset changed ep0 maxpacket size! [ 438.493284][ T6013] usb 6-1: USB disconnect, device number 5 [ 438.582343][ T43] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 438.648176][ T6013] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 438.660141][T14097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.673651][T14097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.731829][ T43] usb 3-1: device descriptor read/64, error -71 [ 438.816993][ T6013] usb 6-1: Using ep0 maxpacket: 16 [ 438.824487][ T6013] usb 6-1: config 0 has an invalid interface number: 87 but max is 0 [ 438.832801][ T6013] usb 6-1: config 0 has no interface number 0 [ 438.841173][ T6013] usb 6-1: config 0 interface 87 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 438.851305][ T6013] usb 6-1: config 0 interface 87 has no altsetting 0 [ 438.858203][ T43] usb usb3-port1: attempt power cycle [ 438.869497][ T6013] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=f6.c9 [ 438.878750][ T6013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.887186][ T6013] usb 6-1: Product: syz [ 438.891376][ T6013] usb 6-1: Manufacturer: syz [ 438.896083][ T6013] usb 6-1: SerialNumber: syz [ 438.905180][ T6013] usb 6-1: config 0 descriptor?? [ 438.910856][T14087] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 439.223171][ T43] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 439.246263][ T43] usb 3-1: device descriptor read/8, error -71 [ 439.404223][T14121] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2384'. [ 439.420929][T14121] ALSA: mixer_oss: invalid index 100000 [ 439.502215][ T43] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 439.531524][ T43] usb 3-1: device descriptor read/8, error -71 [ 439.549531][ T94] block nbd0: Possible stuck request ffff8880253d7000: control (read@0,1024B). Runtime 150 seconds [ 439.560483][ T94] block nbd0: Possible stuck request ffff8880253d71c0: control (read@1024,1024B). Runtime 150 seconds [ 439.571817][ T94] block nbd0: Possible stuck request ffff8880253d7380: control (read@2048,1024B). Runtime 150 seconds [ 439.598829][ T94] block nbd0: Possible stuck request ffff8880253d7540: control (read@3072,1024B). Runtime 150 seconds [ 439.660584][T14127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2385'. [ 439.661773][ T43] usb usb3-port1: unable to enumerate USB device [ 440.053181][T14133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.065492][T14133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.763645][T14143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.774098][T14143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.228942][T14150] netlink: 'syz.3.2393': attribute type 10 has an invalid length. [ 441.348072][ T9] usb 6-1: USB disconnect, device number 6 [ 441.498236][T14165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.507381][T14165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.518852][T14165] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2396'. [ 441.530530][T14165] xt_socket: unknown flags 0xd0 [ 441.543874][ T6013] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 441.610657][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.617583][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.727838][ T6013] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.738286][ T6013] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 441.747258][ T6013] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 441.756392][ T6013] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.766776][ T6013] usb 3-1: config 0 descriptor?? [ 441.770469][ T9] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 441.776033][ T6013] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 441.795073][ T6013] dvb-usb: bulk message failed: -22 (3/0) [ 441.813280][ T6013] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 441.824418][ T6013] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 441.831522][ T6013] usb 3-1: media controller created [ 441.839100][ T6013] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.855926][ T6013] dvb-usb: bulk message failed: -22 (6/0) [ 441.863243][ T6013] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 441.876356][ T6013] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input36 [ 441.894549][ T6013] dvb-usb: schedule remote query interval to 150 msecs. [ 441.906023][ T6013] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 442.081281][ T6013] dvb-usb: bulk message failed: -22 (1/0) [ 442.104134][ T6013] dvb-usb: error while querying for an remote control event. [ 442.295671][ T6013] dvb-usb: bulk message failed: -22 (1/0) [ 442.320937][ T6013] dvb-usb: error while querying for an remote control event. [ 442.366380][T14177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.389731][T14177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.506176][ T6013] dvb-usb: bulk message failed: -22 (1/0) [ 442.633562][ T6013] dvb-usb: error while querying for an remote control event. [ 442.790580][T14184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.821329][T14184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.838025][ T6013] dvb-usb: bulk message failed: -22 (1/0) [ 442.847554][T14184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.867893][T14184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.875084][ T6013] dvb-usb: error while querying for an remote control event. [ 443.053949][ T6013] dvb-usb: bulk message failed: -22 (1/0) [ 443.059998][ T6013] dvb-usb: error while querying for an remote control event. [ 443.248714][ T6013] dvb-usb: bulk message failed: -22 (1/0) [ 443.254686][ T6013] dvb-usb: error while querying for an remote control event. [ 443.427073][ T6013] dvb-usb: bulk message failed: -22 (1/0) [ 443.432977][ T6013] dvb-usb: error while querying for an remote control event. [ 443.511250][T14195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.525093][T14195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.608200][ T6013] dvb-usb: bulk message failed: -22 (1/0) [ 443.614179][ T6013] dvb-usb: error while querying for an remote control event. [ 443.789540][ T6013] dvb-usb: bulk message failed: -22 (1/0) [ 443.802163][ T6013] dvb-usb: error while querying for an remote control event. [ 443.971379][ T6013] dvb-usb: bulk message failed: -22 (1/0) [ 443.980728][ T6013] dvb-usb: error while querying for an remote control event. [ 444.138241][T14204] netlink: 'syz.4.2409': attribute type 21 has an invalid length. [ 444.149354][T14204] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2409'. [ 444.159202][ T6013] dvb-usb: bulk message failed: -22 (1/0) [ 444.165365][ T6013] dvb-usb: error while querying for an remote control event. [ 444.337838][ T9756] dvb-usb: bulk message failed: -22 (1/0) [ 444.343709][ T9756] dvb-usb: error while querying for an remote control event. [ 444.468379][ T845] usb 3-1: USB disconnect, device number 89 [ 444.551585][ T845] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 444.947206][T14218] lo speed is unknown, defaulting to 1000 [ 444.977669][ T845] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 445.089002][T14219] lo speed is unknown, defaulting to 1000 [ 445.150580][ T845] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 445.163149][ T845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 445.179220][ T845] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 445.192689][ T845] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 445.211283][ T845] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 445.221219][ T845] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.232197][ T845] usb 3-1: config 0 descriptor?? [ 445.679873][ T845] plantronics 0003:047F:FFFF.0018: ignoring exceeding usage max [ 445.718334][ T845] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 445.863095][T14233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.872327][T14233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.995820][T14238] comedi comedi3: 8255: I/O port conflict (0x10003,4) [ 446.002726][T14238] comedi comedi3: 8255: I/O port conflict (0x10000,4) [ 446.009665][T14238] comedi comedi3: 8255: I/O port conflict (0x7f,4) [ 446.017177][T14238] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 446.026058][T14238] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 446.032595][T14238] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 446.131126][T14242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.143231][T14242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.770697][ T9756] IPVS: starting estimator thread 0... [ 446.799372][T14255] netlink: 'syz.4.2420': attribute type 11 has an invalid length. [ 446.829389][T14239] overlayfs: statfs failed on './file0' [ 446.886128][T14254] IPVS: using max 30 ests per chain, 72000 per kthread [ 446.919754][T14257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.933919][T14257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.967112][T14259] overlayfs: failed to clone upperpath [ 446.974012][T14257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.022633][T14257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.148025][ T10] usb 3-1: reset high-speed USB device number 90 using dummy_hcd [ 447.297321][ T10] usb 3-1: device descriptor read/64, error -32 [ 447.566683][ T10] usb 3-1: reset high-speed USB device number 90 using dummy_hcd [ 447.607078][ T43] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 447.652230][T14281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.661900][T14281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.715520][ T10] usb 3-1: device descriptor read/64, error -32 [ 447.791440][ T43] usb 6-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 447.802014][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.812281][ T43] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 447.822875][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 447.830900][ T43] usb 6-1: SerialNumber: syz [ 447.970787][ T10] usb 3-1: reset high-speed USB device number 90 using dummy_hcd [ 448.004847][ T10] usb 3-1: device descriptor read/8, error -32 [ 448.061808][ T43] usb 6-1: 0:2 : does not exist [ 448.066762][ T43] usb 6-1: unit 5: unexpected type 0x03 [ 448.082848][ T43] usb 6-1: USB disconnect, device number 8 [ 448.495787][T14297] netlink: 'syz.3.2434': attribute type 33 has an invalid length. [ 448.497576][T14298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.503660][T14297] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2434'. [ 448.504098][T14297] netlink: 'syz.3.2434': attribute type 33 has an invalid length. [ 448.516176][T14298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.529195][T14297] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2434'. [ 448.816170][ T10] usb 3-1: reset high-speed USB device number 90 using dummy_hcd [ 448.848477][ T10] usb 3-1: device reset changed ep0 maxpacket size! [ 448.855763][ T9] usb 3-1: USB disconnect, device number 90 [ 449.007977][ T9] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 449.029527][ T845] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 449.149614][T14309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.159954][T14309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.168660][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 449.175676][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 449.185521][ T9] usb 3-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= a.06 [ 449.194831][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.203156][ T9] usb 3-1: Product: syz [ 449.207609][ T9] usb 3-1: Manufacturer: syz [ 449.216797][ T9] usb 3-1: SerialNumber: syz [ 449.221567][ T845] usb 6-1: config 4 has an invalid interface number: 231 but max is 0 [ 449.233379][ T9] usb 3-1: config 0 descriptor?? [ 449.238610][ T845] usb 6-1: config 4 has no interface number 0 [ 449.248740][ T845] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 449.257968][ T845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.266142][ T845] usb 6-1: Product: syz [ 449.270336][ T845] usb 6-1: Manufacturer: syz [ 449.275044][ T845] usb 6-1: SerialNumber: syz [ 449.292691][ T845] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 449.476210][ T9] snd_usb_podhd 3-1:0.0: Line 6 POD HD500 found [ 449.483096][ T9] usb 3-1: selecting invalid altsetting 1 [ 449.488989][ T9] snd_usb_podhd 3-1:0.0: set_interface failed [ 449.495574][ T9] snd_usb_podhd 3-1:0.0: Line 6 POD HD500 now disconnected [ 449.503182][ T9] snd_usb_podhd 3-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 449.525499][ T9] usb 3-1: USB disconnect, device number 91 [ 449.597732][ T845] vp7045: USB control message 'out' went wrong. [ 449.604531][ T845] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 449.615756][ T845] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 449.627386][ T845] usb 6-1: USB disconnect, device number 9 [ 449.893889][T14318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.913275][T14318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.926152][T14318] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2441'. [ 450.011487][T14319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.021427][T14319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.129483][T14324] netlink: 'syz.2.2443': attribute type 21 has an invalid length. [ 450.137844][T14324] netlink: 'syz.2.2443': attribute type 6 has an invalid length. [ 450.150467][T14324] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2443'. [ 450.478791][T14341] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 450.485375][T14341] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 450.495746][T14341] vhci_hcd vhci_hcd.0: Device attached [ 450.508886][T14342] vhci_hcd: connection closed [ 450.509296][ T13] vhci_hcd: stop threads [ 450.518829][ T13] vhci_hcd: release socket [ 450.523282][ T13] vhci_hcd: disconnect device [ 451.876164][ T9756] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 452.035095][ T43] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 452.050128][ T9756] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 452.060942][ T9756] usb 3-1: config 0 has no interface number 0 [ 452.068296][ T9756] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.083018][ T9756] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.095942][ T9756] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 452.105586][ T9756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.118015][ T9756] usb 3-1: config 0 descriptor?? [ 452.194913][ T43] usb 6-1: device descriptor read/64, error -71 [ 452.462321][ T43] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 452.612061][ T43] usb 6-1: device descriptor read/64, error -71 [ 452.653590][ T9756] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.0019/input/input37 [ 452.742148][ T43] usb usb6-port1: attempt power cycle [ 452.759179][ T5862] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 452.772455][ T5862] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 452.780808][ T5862] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 452.792873][ T5862] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 452.803748][T14374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.816585][ T5862] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 452.826235][T14374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.861827][ T9756] holtek_kbd 0003:04D9:A055.0019: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 452.885730][T14389] lo speed is unknown, defaulting to 1000 [ 452.941521][ T9756] usb 3-1: USB disconnect, device number 92 [ 453.026759][T14391] fido_id[14391]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 453.126160][ T43] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 453.180486][ T43] usb 6-1: device descriptor read/8, error -71 [ 453.467566][ T43] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 453.500365][ T43] usb 6-1: device descriptor read/8, error -71 [ 453.558768][T14389] chnl_net:caif_netlink_parms(): no params data found [ 453.605149][T14401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.614196][T14401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.628056][ T43] usb usb6-port1: unable to enumerate USB device [ 453.784307][T14389] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.802593][T14389] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.810240][T14389] bridge_slave_0: entered allmulticast mode [ 453.838064][T14389] bridge_slave_0: entered promiscuous mode [ 453.875248][T14389] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.882466][T14389] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.891483][T14389] bridge_slave_1: entered allmulticast mode [ 453.902131][T14389] bridge_slave_1: entered promiscuous mode [ 453.951704][T14389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.991717][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.014736][T14389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.070842][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.081783][ T10] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 454.096891][T14389] team0: Port device team_slave_0 added [ 454.106112][T14389] team0: Port device team_slave_1 added [ 454.143037][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.177581][T14389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.188076][T14389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.214332][T14389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.227807][T14389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.234888][T14389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.264303][T14389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.265784][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 454.282787][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.293780][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.303681][ T10] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 454.313060][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.323748][ T10] usb 3-1: config 0 descriptor?? [ 454.340230][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.413353][T14389] hsr_slave_0: entered promiscuous mode [ 454.420563][T14389] hsr_slave_1: entered promiscuous mode [ 454.427013][T14389] debugfs: 'hsr0' already exists in 'hsr' [ 454.435517][T14389] Cannot create hsr debugfs directory [ 454.813110][ T10] hid (null): report_id 3974074195 is invalid [ 454.833951][ T10] hid-led 0003:0FC5:B080.001A: unknown main item tag 0x0 [ 454.849128][ T10] hid-led 0003:0FC5:B080.001A: unknown main item tag 0x0 [ 454.856234][ T10] hid-led 0003:0FC5:B080.001A: unknown main item tag 0x0 [ 454.868534][ T10] hid-led 0003:0FC5:B080.001A: unknown main item tag 0x0 [ 454.875644][ T10] hid-led 0003:0FC5:B080.001A: unknown main item tag 0x0 [ 454.884408][ T10] hid-led 0003:0FC5:B080.001A: unknown main item tag 0x0 [ 454.891841][ T10] hid-led 0003:0FC5:B080.001A: unknown main item tag 0x0 [ 454.899049][ T10] hid-led 0003:0FC5:B080.001A: unknown main item tag 0x0 [ 454.910292][ T10] hid-led 0003:0FC5:B080.001A: unknown main item tag 0x0 [ 454.920084][ T10] hid-led 0003:0FC5:B080.001A: unknown main item tag 0x0 [ 454.938673][ T10] hid-led 0003:0FC5:B080.001A: unexpected long global item [ 454.939122][ T13] dvmrp0 (unregistering): left allmulticast mode [ 454.952923][ T10] hid-led 0003:0FC5:B080.001A: probe with driver hid-led failed with error -22 [ 455.005250][ T13] team0: Port device geneve0 removed [ 455.026183][ T9756] usb 3-1: USB disconnect, device number 93 [ 455.034198][ T5866] Bluetooth: hci6: command tx timeout [ 455.600680][T14420] syzkaller1: entered promiscuous mode [ 455.615778][T14420] syzkaller1: entered allmulticast mode [ 455.730274][T14389] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 455.751529][T14389] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 455.772497][T14389] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 455.814784][T14389] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 455.937936][ T10] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 456.062016][T14389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.097543][T14389] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.114497][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.121745][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.147486][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 456.157781][ T5021] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.159219][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 456.165028][ T5021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.193794][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.210622][ T10] usb 3-1: Product: syz [ 456.221150][ T10] usb 3-1: Manufacturer: syz [ 456.225779][ T10] usb 3-1: SerialNumber: syz [ 456.249109][ T10] usb 3-1: config 0 descriptor?? [ 456.470900][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 456.610145][T14389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.676610][ T13] IPVS: stopping master sync thread 10738 ... [ 456.854503][T14389] veth0_vlan: entered promiscuous mode [ 456.990156][T14389] veth1_vlan: entered promiscuous mode [ 457.180228][ T13] hsr_slave_0: left promiscuous mode [ 457.197583][T14464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.225336][T14464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.235185][ T13] veth1_macvtap: left promiscuous mode [ 457.240784][ T13] veth0_macvtap: left promiscuous mode [ 457.248980][ T13] veth1_vlan: left promiscuous mode [ 457.253404][ T5866] Bluetooth: hci6: command tx timeout [ 457.265752][ T13] veth0_vlan: left promiscuous mode [ 457.413960][T14469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.444993][T14469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.899593][T14455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.914249][T14455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.923572][ T13] team0 (unregistering): Port device team_slave_1 removed [ 457.954592][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 457.973026][ T10] usb 3-1: USB disconnect, device number 94 [ 458.105031][ T13] team0 (unregistering): Port device team_slave_0 removed [ 458.198383][T14476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.247615][T14476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.421671][ T10] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 458.510842][T14477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.527486][T14477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.615592][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 458.637407][ T10] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 458.650742][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 458.660469][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 458.671225][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.686493][ T10] usb 3-1: config 0 descriptor?? [ 458.922905][T14389] veth0_macvtap: entered promiscuous mode [ 458.949259][T14389] veth1_macvtap: entered promiscuous mode [ 459.009503][T14389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.027524][T14389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.074305][T11876] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.136332][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.165948][ T10] logitech 0003:046D:C24F.001B: hidraw0: USB HID v4.06 Device [HID 046d:c24f] on usb-dummy_hcd.2-1/input0 [ 459.188268][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.208464][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.233432][ T10] logitech 0003:046D:C24F.001B: no inputs found [ 459.304952][ T13] IPVS: stop unused estimator thread 0... [ 459.360408][ T10] usb 3-1: USB disconnect, device number 95 [ 459.399907][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.438696][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.479770][ T5862] Bluetooth: hci6: command tx timeout [ 459.535598][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.572190][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.716232][T14495] binder: 14494:14495 ioctl c0306201 200000000480 returned -14 [ 459.905233][ T43] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 460.022615][ T9756] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 460.088890][ T43] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 460.100539][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 460.112251][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 460.128417][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 460.147383][ T43] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 460.158350][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.184492][ T43] usb 6-1: config 0 descriptor?? [ 460.208812][ T9756] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.220355][ T9756] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 460.232806][ T9756] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 460.253061][ T5862] Bluetooth: hci4: command 0x0406 tx timeout [ 460.285780][ T9756] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 460.295816][ T9756] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 460.314870][ T9756] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 460.324168][ T9756] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 460.332284][ T9756] usb 4-1: Product: syz [ 460.338288][ T9756] usb 4-1: Manufacturer: syz [ 460.343072][ T9756] usb 4-1: SerialNumber: syz [ 460.353591][ T9756] usb 4-1: config 0 descriptor?? [ 460.540277][ T10] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 460.575292][ T9756] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 460.582402][ T9756] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 460.653770][ T43] plantronics 0003:047F:FFFF.001C: ignoring exceeding usage max [ 460.675025][ T43] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 460.721370][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.741520][ T10] usb 3-1: New USB device found, idVendor=056e, idProduct=019b, bcdDevice= 0.00 [ 460.758637][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.791060][ T10] usb 3-1: config 0 descriptor?? [ 460.801951][ T9756] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 460.812256][ T9756] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 460.831914][ T9756] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 461.016516][ T9756] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 461.259992][ T10] elecom 0003:056E:019B.001D: item fetching failed at offset 5/7 [ 461.268857][ T10] elecom 0003:056E:019B.001D: probe with driver elecom failed with error -22 [ 461.471255][ T10] usb 3-1: USB disconnect, device number 96 [ 461.523586][ T9756] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 461.556710][ T9756] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 461.578028][ T9756] usb 4-1: USB disconnect, device number 92 [ 461.586136][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 461.586155][ T30] audit: type=1326 audit(1758056719.945:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14506 comm="syz.4.2483" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd94ab8eba9 code=0x0 [ 461.694964][T14508] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2483'. [ 461.704522][ T5866] Bluetooth: hci6: command tx timeout [ 462.126354][T14511] syzkaller1: entered promiscuous mode [ 462.135879][T14511] syzkaller1: entered allmulticast mode [ 462.148735][T14515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2485'. [ 462.426648][T14526] tipc: Enabling of bearer rejected, failed to enable media [ 462.513328][T14528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.522390][T14528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.601023][ T9756] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 462.775665][ T9756] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 462.786166][ T9756] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 462.804457][ T9756] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 462.813634][ T9756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 462.816125][ T10] usb 6-1: USB disconnect, device number 14 [ 462.824160][ T9756] usb 4-1: SerialNumber: syz [ 462.835812][ T6013] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 463.027787][ T6013] usb 3-1: Using ep0 maxpacket: 32 [ 463.038769][ T6013] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 463.048077][ T6013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.056208][ T6013] usb 3-1: Product: syz [ 463.060482][ T6013] usb 3-1: Manufacturer: syz [ 463.065117][ T6013] usb 3-1: SerialNumber: syz [ 463.082948][ T6013] usb 3-1: config 0 descriptor?? [ 463.097843][ T6013] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 463.108383][T14521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.120515][T14521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.215865][ T9756] usb 4-1: 0:2 : does not exist [ 463.254073][ T9756] usb 4-1: USB disconnect, device number 93 [ 463.287368][ T10] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 463.303542][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 463.455311][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 463.471248][ T10] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 463.483032][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.496942][ T10] usb 6-1: Product: syz [ 463.513763][ T10] usb 6-1: Manufacturer: syz [ 463.518512][ T10] usb 6-1: SerialNumber: syz [ 463.531455][ T10] usb 6-1: config 0 descriptor?? [ 463.862365][T14537] CUSE: DEVNAME unspecified [ 463.979641][ T10] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 463.987644][ T30] audit: type=1800 audit(1758056722.170:98): pid=14532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2490" name="bus" dev="tmpfs" ino=209 res=0 errno=0 [ 463.998651][ T10] peak_usb 6-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 464.043914][T14539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.054810][T14539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.117947][ T10] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -71 [ 464.124799][ T5919] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz1 [ 464.151051][ T10] usb 6-1: USB disconnect, device number 15 [ 464.277068][T14541] fido_id[14541]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 464.385285][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.425718][T14530] ieee802154 phy0 wpan0: encryption failed: -22 [ 464.519770][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.649129][ T6013] gspca_ov534_9: reg_r err -71 [ 464.675250][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.791099][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.920739][ T6013] gspca_ov534_9: Unknown sensor 0000 [ 464.920854][ T6013] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 464.967224][ T6013] usb 3-1: USB disconnect, device number 97 [ 465.156627][ T13] bridge_slave_1: left allmulticast mode [ 465.162345][ T13] bridge_slave_1: left promiscuous mode [ 465.199469][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 465.209322][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.315522][ T13] bridge_slave_0: left allmulticast mode [ 465.326653][ T13] bridge_slave_0: left promiscuous mode [ 465.332492][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.341654][T14550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.405015][T14550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.414669][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 465.429300][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 465.469450][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 465.471359][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 465.479385][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 465.479441][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 465.479467][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.482519][ T9] usb 6-1: config 0 descriptor?? [ 465.527117][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 465.547288][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 465.595728][ T5862] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 465.627118][ T5862] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 465.679608][ T6013] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 465.856487][ T6013] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 465.866330][ T6013] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.904271][ T6013] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 465.935220][ T6013] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 465.952135][ T6013] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.974000][ T6013] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 465.998742][ T6013] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 466.009093][ T6013] usb 3-1: Product: syz [ 466.030498][ T6013] usb 3-1: Manufacturer: syz [ 466.059468][ T6013] cdc_wdm 3-1:1.0: skipping garbage [ 466.068086][ T6013] cdc_wdm 3-1:1.0: skipping garbage [ 466.094423][ T6013] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 466.105355][ T6013] cdc_wdm 3-1:1.0: Unknown control protocol [ 466.133062][ T9] plantronics 0003:047F:FFFF.001F: ignoring exceeding usage max [ 466.204232][ T9] plantronics 0003:047F:FFFF.001F: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 466.261059][ T5919] usb 3-1: USB disconnect, device number 98 [ 466.487143][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.500869][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.511587][ T13] bond0 (unregistering): Released all slaves [ 466.577630][T14558] lo speed is unknown, defaulting to 1000 [ 467.247650][ T13] hsr_slave_0: left promiscuous mode [ 467.259728][ T13] hsr_slave_1: left promiscuous mode [ 467.279300][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.296934][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.317381][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.322807][T14592] trusted_key: encrypted_key: insufficient parameters specified [ 467.332831][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.340641][T14593] trusted_key: encrypted_key: insufficient parameters specified [ 467.383979][ T13] veth1_macvtap: left promiscuous mode [ 467.394498][ T13] veth0_macvtap: left promiscuous mode [ 467.401006][ T13] veth1_vlan: left promiscuous mode [ 467.424679][ T13] veth0_vlan: left promiscuous mode [ 467.625639][T14601] input: syz1 as /devices/virtual/input/input38 [ 467.866820][ T5866] Bluetooth: hci1: command tx timeout [ 468.110266][ T5919] usb 6-1: USB disconnect, device number 16 [ 468.414830][ T13] team0 (unregistering): Port device team_slave_1 removed [ 468.458541][ T13] team0 (unregistering): Port device team_slave_0 removed [ 468.634968][ T5919] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 468.860020][ T5919] usb 6-1: unable to get BOS descriptor or descriptor too short [ 468.869650][ T5919] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 468.887731][ T5919] usb 6-1: string descriptor 0 read error: -22 [ 468.895732][ T5919] usb 6-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 468.915880][ T5919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.018695][T14610] netlink: 'syz.4.2509': attribute type 2 has an invalid length. [ 469.135837][ T5919] usb 6-1: reset high-speed USB device number 17 using dummy_hcd [ 469.153810][T14558] chnl_net:caif_netlink_parms(): no params data found [ 469.505539][T14558] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.515941][T14558] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.526522][T14558] bridge_slave_0: entered allmulticast mode [ 469.537489][T14558] bridge_slave_0: entered promiscuous mode [ 469.549592][T14558] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.563303][T14558] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.574431][T14558] bridge_slave_1: entered allmulticast mode [ 469.587733][T14558] bridge_slave_1: entered promiscuous mode [ 469.652428][T14558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.672938][T14558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.742414][T14558] team0: Port device team_slave_0 added [ 469.755691][T14558] team0: Port device team_slave_1 added [ 469.824738][T14558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.835954][T14558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.867837][T14558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.873843][ T5919] usb 6-1: device descriptor read/64, error -71 [ 469.890705][T14558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.897913][T14558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.931248][T14558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.026708][T14558] hsr_slave_0: entered promiscuous mode [ 470.034080][T14558] hsr_slave_1: entered promiscuous mode [ 470.040356][T14558] debugfs: 'hsr0' already exists in 'hsr' [ 470.047686][T14558] Cannot create hsr debugfs directory [ 470.089564][ T5866] Bluetooth: hci1: command tx timeout [ 470.160621][ T5919] usb 6-1: reset high-speed USB device number 17 using dummy_hcd [ 470.348470][T14618] 9pnet_fd: p9_fd_create_tcp (14618): problem connecting socket to 127.0.0.1 [ 470.372615][ T5919] usb 6-1: unable to get BOS descriptor or descriptor too short [ 470.404588][ T5919] usb 6-1: device firmware changed [ 470.420689][T14558] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 470.437737][ T5919] usb 6-1: USB disconnect, device number 17 [ 470.455980][T14558] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 470.480019][T14558] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 470.498939][T14558] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 470.650663][T14558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.692296][T14558] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.725441][ T5021] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.732679][ T5021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.776284][ T5021] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.783554][ T5021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.256640][T14558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.263957][ T5919] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 471.464388][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.497452][ T5919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 471.507263][ T5919] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 471.542532][ T5919] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 471.570581][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.616128][ T5919] usb 6-1: config 0 descriptor?? [ 471.717015][ T94] block nbd0: Possible stuck request ffff8880253d7000: control (read@0,1024B). Runtime 180 seconds [ 471.728069][ T94] block nbd0: Possible stuck request ffff8880253d71c0: control (read@1024,1024B). Runtime 180 seconds [ 471.739357][ T94] block nbd0: Possible stuck request ffff8880253d7380: control (read@2048,1024B). Runtime 180 seconds [ 471.750437][ T94] block nbd0: Possible stuck request ffff8880253d7540: control (read@3072,1024B). Runtime 180 seconds [ 471.843300][T14670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.854861][T14670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.869942][T14670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.881849][T14670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.894315][T14670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.919714][T14670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.949678][T14558] veth0_vlan: entered promiscuous mode [ 471.963819][T14670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.983083][T14670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.989741][T14558] veth1_vlan: entered promiscuous mode [ 472.004218][T14670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.017264][T14670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.047170][T14558] veth0_macvtap: entered promiscuous mode [ 472.082818][T14558] veth1_macvtap: entered promiscuous mode [ 472.094108][ T5919] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 472.153505][T14558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.180652][T14558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.206766][ T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.234665][ T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.261228][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.270301][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.311326][ T5866] Bluetooth: hci1: command tx timeout [ 472.362645][ T5021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.371097][ T9] usb 6-1: USB disconnect, device number 18 [ 472.378373][ T5021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.444689][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.464499][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.592338][T14703] netlink: 'syz.6.2518': attribute type 3 has an invalid length. [ 472.615641][T14703] netlink: 'syz.6.2518': attribute type 27 has an invalid length. [ 472.636402][T14703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.657532][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2518'. [ 473.186972][ T6013] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 473.282937][ T5919] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 473.360123][ T6013] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 473.371879][ T6013] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 473.384093][ T6013] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 473.394211][ T6013] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 473.407239][ T6013] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 473.416359][ T6013] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.429785][ T6013] usb 3-1: config 0 descriptor?? [ 473.456633][ T5919] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 473.465951][ T5919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.477329][ T5919] usb 6-1: config 0 descriptor?? [ 473.489549][ T5919] cp210x 6-1:0.0: cp210x converter detected [ 473.887918][ T6013] plantronics 0003:047F:FFFF.0021: ignoring exceeding usage max [ 473.909574][ T6013] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 473.922846][ T5919] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 473.939445][ T5919] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 473.952556][ T5919] cp210x 6-1:0.0: GPIO initialisation failed: -121 [ 473.965507][ T5919] usb 6-1: cp210x converter now attached to ttyUSB1 [ 474.158503][ T5919] usb 6-1: USB disconnect, device number 19 [ 474.170210][ T5919] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 474.179698][ T5919] cp210x 6-1:0.0: device disconnected [ 474.536214][ T5866] Bluetooth: hci1: command tx timeout [ 474.745568][T14728] binder: Bad value for 'max' [ 474.746768][T14729] binder: Bad value for 'max' [ 475.068791][ T9756] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 475.229188][ T9756] usb 6-1: Using ep0 maxpacket: 8 [ 475.238850][ T9756] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 475.248094][ T9756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.256209][ T9756] usb 6-1: Product: syz [ 475.260385][ T9756] usb 6-1: Manufacturer: syz [ 475.266851][ T9756] usb 6-1: SerialNumber: syz [ 475.275557][ T9756] usb 6-1: config 0 descriptor?? [ 475.935920][ T9756] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 475.944405][ T9756] usb 6-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 475.954341][ T9756] usb 6-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 476.046614][ T5919] usb 3-1: USB disconnect, device number 99 [ 476.523177][ T5919] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 476.694375][ T5919] usb 3-1: Using ep0 maxpacket: 32 [ 476.701866][ T5919] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 476.710490][ T5919] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 476.719169][ T5919] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 476.731602][ T5919] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 476.740685][ T5919] usb 3-1: config 1 has no interface number 0 [ 476.746804][ T5919] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 476.755915][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.772205][ T5919] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 476.990487][ T5919] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 476.999605][ T5919] snd_usb_pod 3-1:1.1: invalid control EP [ 477.005775][ T5919] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 477.012647][ T5919] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 477.037099][ T5919] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 477.045125][T14745] netlink: 'syz.5.2531': attribute type 4 has an invalid length. [ 477.069770][T14745] netlink: 'syz.5.2531': attribute type 4 has an invalid length. [ 477.194107][T14749] kvm: kvm [14748]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 477.203864][T14749] kvm: kvm [14748]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 477.210197][ T5919] usb 3-1: USB disconnect, device number 100 [ 477.217222][T14749] kvm: kvm [14748]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 477.238517][T14749] kvm: kvm [14748]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 477.248226][T14749] kvm: kvm [14748]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 478.194801][ T9] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 478.366215][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 478.378500][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 478.391881][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 478.401760][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 478.414836][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 478.424035][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.439079][ T9] usb 3-1: config 0 descriptor?? [ 481.134365][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 481.141035][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 481.153881][ T9] usb 3-1: USB disconnect, device number 101 [ 481.210338][T14783] tmpfs: Bad value for 'uid' [ 481.223470][T14783] tmpfs: Bad value for 'uid' [ 481.551972][ T9] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 481.723563][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 481.733497][ T9] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 481.741679][ T9] usb 3-1: config 0 has no interface number 0 [ 481.748520][ T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x1 has an invalid bInterval 172, changing to 11 [ 481.759768][ T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x1 has invalid maxpacket 50254, setting to 1024 [ 481.774290][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 481.783418][ T9] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 481.792741][ T9] usb 3-1: Product: syz [ 481.797021][ T9] usb 3-1: SerialNumber: syz [ 481.803855][ T9] usb 3-1: config 0 descriptor?? [ 481.812895][T14783] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 481.824365][ T9] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 482.004184][ T30] audit: type=1326 audit(1758056739.030:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14778 comm="syz.5.2541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0289d8eba9 code=0x7fc00000 [ 482.036044][ T5866] Bluetooth: hci3: connection err: -111 [ 482.039531][ T9] usb 3-1: USB disconnect, device number 102 [ 483.292349][ T845] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 483.443925][ T845] usb 3-1: device descriptor read/64, error -71 [ 483.699013][ T845] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 483.837938][ T845] usb 3-1: device descriptor read/64, error -71 [ 483.955841][ T845] usb usb3-port1: attempt power cycle [ 484.319186][ T845] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 484.352890][ T845] usb 3-1: device descriptor read/8, error -71 [ 484.607680][ T845] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 484.634746][ T845] usb 3-1: device descriptor read/8, error -71 [ 484.757893][ T845] usb usb3-port1: unable to enumerate USB device [ 485.691078][ T845] usb 5-1: USB disconnect, device number 24 [ 485.707928][ T845] option 5-1:16.5: device disconnected [ 486.043819][T14876] loop6: detected capacity change from 0 to 2560 [ 486.047875][ T5862] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 486.053710][T14876] buffer_io_error: 16 callbacks suppressed [ 486.053731][T14876] Buffer I/O error on dev loop6, logical block 0, async page read [ 486.068760][ T5862] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 486.073906][T14876] Buffer I/O error on dev loop6, logical block 0, async page read [ 486.081770][ T5862] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 486.097016][T14876] Buffer I/O error on dev loop6, logical block 0, async page read [ 486.100101][ T5862] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 486.110064][T14876] Buffer I/O error on dev loop6, logical block 0, async page read [ 486.132139][ T5862] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 486.195643][T14876] Buffer I/O error on dev loop6, logical block 0, async page read [ 486.208694][T14876] Buffer I/O error on dev loop6, logical block 0, async page read [ 486.221455][T14876] Buffer I/O error on dev loop6, logical block 0, async page read [ 486.230009][T14876] Buffer I/O error on dev loop6, logical block 0, async page read [ 486.238269][T14876] ldm_validate_partition_table(): Disk read failed. [ 486.245059][T14876] Buffer I/O error on dev loop6, logical block 0, async page read [ 486.251139][T14877] lo speed is unknown, defaulting to 1000 [ 486.256346][T14876] Buffer I/O error on dev loop6, logical block 0, async page read [ 486.267877][T14876] Dev loop6: unable to read RDB block 0 [ 486.273944][T14876] loop6: unable to read partition table [ 486.296023][T14876] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 486.820654][T14877] chnl_net:caif_netlink_parms(): no params data found [ 486.861645][ T6013] hid (null): unknown global tag 0xc [ 486.874741][ T6013] hid (null): unknown global tag 0xd [ 486.893749][ T6013] hid_parser_main: 55 callbacks suppressed [ 486.893772][ T6013] hid-generic 0010:0003:0080.0022: unknown main item tag 0x2 [ 486.938581][T14901] 9pnet_fd: Insufficient options for proto=fd [ 486.944195][ T6013] hid-generic 0010:0003:0080.0022: unknown main item tag 0x3 [ 486.952887][ T6013] hid-generic 0010:0003:0080.0022: unknown main item tag 0x4 [ 486.961035][ T6013] hid-generic 0010:0003:0080.0022: unexpected long global item [ 486.969377][ T6013] hid-generic 0010:0003:0080.0022: probe with driver hid-generic failed with error -22 [ 487.104551][T14877] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.134605][T14877] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.147578][T14877] bridge_slave_0: entered allmulticast mode [ 487.156943][T14877] bridge_slave_0: entered promiscuous mode [ 487.166022][T14877] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.173276][T14877] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.182101][T14877] bridge_slave_1: entered allmulticast mode [ 487.190294][T14877] bridge_slave_1: entered promiscuous mode [ 487.268328][T14877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.281676][T14877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.313413][ T6013] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 487.340562][T14877] team0: Port device team_slave_0 added [ 487.359653][T14877] team0: Port device team_slave_1 added [ 487.416996][T14877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 487.424175][T14877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.455349][T14877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 487.474537][ T6013] usb 3-1: Using ep0 maxpacket: 8 [ 487.475670][T14877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 487.482293][ T6013] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 487.487024][T14877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 487.523767][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.524601][ T6013] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 487.540369][ T6013] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.555866][T14877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.571056][ T6013] usb 3-1: config 0 descriptor?? [ 487.728266][T14877] hsr_slave_0: entered promiscuous mode [ 487.735543][T14877] hsr_slave_1: entered promiscuous mode [ 487.743858][T14877] debugfs: 'hsr0' already exists in 'hsr' [ 487.749707][T14877] Cannot create hsr debugfs directory [ 487.861763][ T6013] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 488.099990][T14877] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 488.111775][T14877] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 488.125593][T14877] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 488.144122][T14877] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 488.251761][T14877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.275237][T14877] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.293287][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.300504][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.308422][ T5862] Bluetooth: hci6: command tx timeout [ 488.323048][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.330243][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.351337][ T9] usb 3-1: USB disconnect, device number 107 [ 488.410811][T14877] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 488.592695][T14877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.848002][T14877] veth0_vlan: entered promiscuous mode [ 488.860590][T14877] veth1_vlan: entered promiscuous mode [ 488.894221][T14877] veth0_macvtap: entered promiscuous mode [ 488.909686][T14877] veth1_macvtap: entered promiscuous mode [ 488.940145][T14877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.956852][T14877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.983993][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.001463][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.012346][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.022050][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.166692][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.178750][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.213582][T11876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.223024][T11876] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.345055][ T5919] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 489.513780][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.525232][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 489.535149][ T5919] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 489.546861][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.557786][ T5919] usb 3-1: config 0 descriptor?? [ 489.624725][ T5853] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 489.785321][ T5853] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 489.796968][ T5853] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 489.808258][ T5853] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 489.818330][ T5853] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 489.831769][ T5853] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 489.841194][ T5853] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.854338][ T5853] usb 8-1: config 0 descriptor?? [ 490.047378][T14951] /dev/sg0: Can't lookup blockdev [ 490.055618][T14951] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2571'. [ 490.207233][T14954] loop2: detected capacity change from 0 to 8 [ 490.214320][ T5980] Dev loop2: unable to read RDB block 8 [ 490.214369][ T5980] loop2: unable to read partition table [ 490.214631][ T5980] loop2: partition table beyond EOD, truncated [ 490.238922][T14954] Dev loop2: unable to read RDB block 8 [ 490.252536][T14954] loop2: unable to read partition table [ 490.252787][T14954] loop2: partition table beyond EOD, truncated [ 490.252822][T14954] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 490.487906][T14963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.498606][T14963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.534291][ T5862] Bluetooth: hci6: command tx timeout [ 490.574557][ T5919] uclogic 0003:256C:006D.0023: failed retrieving Huion firmware version: -71 [ 490.584890][T14966] delete_channel: no stack [ 490.597798][T14966] delete_channel: no stack [ 490.611954][ T5919] uclogic 0003:256C:006D.0023: failed probing parameters: -71 [ 490.640011][ T5919] uclogic 0003:256C:006D.0023: probe with driver uclogic failed with error -71 [ 490.668078][ T5919] usb 3-1: USB disconnect, device number 108 [ 490.937675][T14972] netlink: 14556 bytes leftover after parsing attributes in process `syz.5.2578'. [ 491.008181][ T5919] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 491.107767][T14977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.123728][T14977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.177722][ T5919] usb 3-1: config index 0 descriptor too short (expected 69, got 36) [ 491.188100][ T5919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.201452][ T5919] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 491.210728][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.220333][ T5919] usb 3-1: Product: syz [ 491.224943][ T5919] usb 3-1: Manufacturer: syz [ 491.230123][ T5919] usb 3-1: SerialNumber: syz [ 491.241024][ T5919] usb 3-1: config 0 descriptor?? [ 491.262598][ T5919] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 492.044090][ T5919] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 492.053893][ T5919] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 492.068812][ T5919] usb 3-1: USB disconnect, device number 109 [ 492.529335][ T5853] usbhid 8-1:0.0: can't add hid device: -71 [ 492.538122][ T5853] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 492.571018][ T5853] usb 8-1: USB disconnect, device number 2 [ 492.757484][ T5862] Bluetooth: hci6: command tx timeout [ 492.961664][ T5853] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 493.066639][ T9755] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 493.142081][ T5853] usb 8-1: Using ep0 maxpacket: 8 [ 493.149085][ T5853] usb 8-1: unable to get BOS descriptor or descriptor too short [ 493.160001][ T5853] usb 8-1: config 220 has an invalid interface number: 2 but max is 0 [ 493.168279][ T5853] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 493.178699][ T5853] usb 8-1: config 220 has no interface number 0 [ 493.187299][ T5853] usb 8-1: config 220 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 493.200529][ T5853] usb 8-1: config 220 interface 2 has no altsetting 0 [ 493.212440][ T5853] usb 8-1: New USB device found, idVendor=0582, idProduct=002b, bcdDevice=9b.39 [ 493.222672][ T5853] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.231237][ T5853] usb 8-1: Product: syz [ 493.235492][ T5853] usb 8-1: Manufacturer: syz [ 493.240517][ T5853] usb 8-1: SerialNumber: syz [ 493.245897][ T9755] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 493.255316][ T9755] usb 3-1: config 0 has no interface number 0 [ 493.268729][ T9755] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 493.284557][ T9755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.292757][ T9755] usb 3-1: Product: syz [ 493.296976][ T9755] usb 3-1: Manufacturer: syz [ 493.301651][ T9755] usb 3-1: SerialNumber: syz [ 493.309850][ T9755] usb 3-1: config 0 descriptor?? [ 493.488124][T14983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.497043][T14983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.548211][ T5853] usb 8-1: USB disconnect, device number 3 [ 493.578662][T14990] lo speed is unknown, defaulting to 1000 [ 493.581370][ T5980] udevd[5980]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:220.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 493.599646][T14992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.630875][T14992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.993509][ T9755] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 494.008882][ T9755] usb 3-1: No valid video chain found. [ 494.036759][ T9755] usb 3-1: USB disconnect, device number 110 [ 494.122816][T14998] syzkaller1: entered promiscuous mode [ 494.130093][T14998] syzkaller1: entered allmulticast mode [ 494.507134][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2588'. [ 494.517832][T15012] kAFS: No cell specified [ 494.526152][T15012] kAFS: No cell specified [ 494.531060][T15012] kAFS: No cell specified [ 494.536167][T15012] kAFS: No cell specified [ 494.541280][T15012] kAFS: No cell specified [ 494.558641][T15012] kAFS: No cell specified [ 494.563364][T15012] kAFS: No cell specified [ 494.589628][T15012] kAFS: No cell specified [ 494.594415][T15012] kAFS: No cell specified [ 494.604065][T15012] kAFS: No cell specified [ 494.613719][T15012] kAFS: No cell specified [ 494.621758][T15012] kAFS: No cell specified [ 494.626579][T15012] kAFS: No cell specified [ 494.637471][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2588'. [ 494.654066][T15012] kAFS: No cell specified [ 494.658873][T15012] kAFS: No cell specified [ 494.680409][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2588'. [ 494.692745][T15012] kAFS: No cell specified [ 494.703933][T15012] kAFS: No cell specified [ 494.710082][T15012] kAFS: No cell specified [ 494.728762][T15012] kAFS: No cell specified [ 494.745878][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2588'. [ 494.766867][T15012] kAFS: No cell specified [ 494.774395][T15012] kAFS: No cell specified [ 494.784303][T15012] kAFS: No cell specified [ 494.802508][T15012] kAFS: No cell specified [ 494.807201][T15012] kAFS: No cell specified [ 494.822848][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2588'. [ 494.831251][T15012] kAFS: No cell specified [ 494.836502][T15012] kAFS: No cell specified [ 494.841288][T15012] kAFS: No cell specified [ 494.846396][T15012] kAFS: No cell specified [ 494.846656][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2588'. [ 494.851149][T15012] kAFS: No cell specified [ 494.865193][T15012] kAFS: No cell specified [ 494.869936][T15012] kAFS: No cell specified [ 494.874666][T15012] kAFS: No cell specified [ 494.879441][T15012] kAFS: No cell specified [ 494.884084][T15012] kAFS: No cell specified [ 494.890295][T15012] kAFS: No cell specified [ 494.898434][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2588'. [ 494.901467][T15012] kAFS: No cell specified [ 494.916138][T15012] kAFS: No cell specified [ 494.923735][T15012] kAFS: No cell specified [ 494.932876][T15009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2588'. [ 494.950212][T15012] kAFS: No cell specified [ 494.954859][T15012] kAFS: No cell specified [ 494.982157][ T5862] Bluetooth: hci6: command tx timeout [ 494.989863][T15012] kAFS: No cell specified [ 494.996521][T15012] kAFS: No cell specified [ 495.002342][T15012] kAFS: No cell specified [ 495.008055][T15012] kAFS: No cell specified [ 495.014269][T15012] kAFS: No cell specified [ 495.019817][T15012] kAFS: No cell specified [ 495.024677][T15012] kAFS: No cell specified [ 495.031793][T15012] kAFS: No cell specified [ 495.037222][T15012] kAFS: No cell specified [ 495.043541][T15012] kAFS: No cell specified [ 495.049481][T15012] kAFS: No cell specified [ 495.054246][T15012] kAFS: No cell specified [ 495.059183][T15012] kAFS: No cell specified [ 495.063918][T15012] kAFS: No cell specified [ 495.069923][T15012] kAFS: No cell specified [ 495.077130][T15012] kAFS: No cell specified [ 495.081907][T15012] kAFS: No cell specified [ 495.086623][T15012] kAFS: No cell specified [ 495.091580][T15012] kAFS: No cell specified [ 495.096395][T15012] kAFS: No cell specified [ 495.101223][T15012] kAFS: No cell specified [ 495.105953][T15012] kAFS: No cell specified [ 495.110788][T15012] kAFS: No cell specified [ 495.115463][T15012] kAFS: No cell specified [ 495.120262][T15012] kAFS: No cell specified [ 495.226564][T15026] bridge0: entered allmulticast mode [ 495.266167][T15026] pim6reg: entered allmulticast mode [ 495.275312][T15026] bridge_slave_1: left allmulticast mode [ 495.282953][T15026] bridge_slave_1: left promiscuous mode [ 495.288903][T15026] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.327540][T15026] bridge_slave_0: left allmulticast mode [ 495.351862][T15026] bridge_slave_0: left promiscuous mode [ 495.359990][T15026] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.429376][T15026] bridge0 (unregistering): left allmulticast mode [ 496.025024][T15034] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 496.032382][T15034] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 496.045522][T15034] /dev/nullb0: Can't open blockdev [ 496.102785][T15036] 9pnet_fd: Insufficient options for proto=fd [ 496.499332][ T845] usb 3-1: new full-speed USB device number 111 using dummy_hcd [ 496.648953][ T5919] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 496.663328][ T845] usb 3-1: device descriptor read/64, error -71 [ 496.809517][ T5919] usb 8-1: device descriptor read/64, error -71 [ 496.916300][ T845] usb 3-1: new full-speed USB device number 112 using dummy_hcd [ 497.065975][ T5919] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 497.066190][ T845] usb 3-1: device descriptor read/64, error -71 [ 497.194749][ T845] usb usb3-port1: attempt power cycle [ 497.205194][ T5919] usb 8-1: device descriptor read/64, error -71 [ 497.326686][ T5919] usb usb8-port1: attempt power cycle [ 497.557933][ T845] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 497.580575][ T845] usb 3-1: device descriptor read/8, error -71 [ 497.687251][ T5919] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 497.708709][ T5919] usb 8-1: device descriptor read/8, error -71 [ 497.846641][ T845] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 497.872152][ T845] usb 3-1: device descriptor read/8, error -71 [ 497.964308][ T5919] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 497.986227][ T845] usb usb3-port1: unable to enumerate USB device [ 497.996444][ T5919] usb 8-1: device descriptor read/8, error -71 [ 498.121328][ T5919] usb usb8-port1: unable to enumerate USB device [ 500.006788][ T9] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 500.179622][ T9] usb 3-1: config 0 has an invalid interface number: 153 but max is 0 [ 500.193475][ T9] usb 3-1: config 0 has no interface number 0 [ 500.201550][ T9] usb 3-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 500.219065][ T9] usb 3-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 500.238564][ T9] usb 3-1: config 0 interface 153 has no altsetting 0 [ 500.252760][ T9] usb 3-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 500.262318][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.286066][ T9] usb 3-1: Product: syz [ 500.290298][ T9] usb 3-1: Manufacturer: syz [ 500.295269][ T9] usb 3-1: SerialNumber: syz [ 500.320031][ T9] usb 3-1: config 0 descriptor?? [ 500.340454][ T9] hub 3-1:0.153: bad descriptor, ignoring hub [ 500.347081][ T9] hub 3-1:0.153: probe with driver hub failed with error -5 [ 500.356559][ T9] sierra 3-1:0.153: Sierra USB modem converter detected [ 500.563479][ T9] usb 3-1: USB disconnect, device number 115 [ 500.570131][ T9] sierra 3-1:0.153: device disconnected [ 501.386282][ T5919] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 501.553229][ T5919] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xCB, changing to 0x8B [ 501.565343][ T5919] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 15653, setting to 64 [ 501.581632][ T5919] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 501.600220][ T5919] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 501.619720][ T5919] usb 3-1: Manufacturer: syz [ 501.621756][T15114] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.624982][ T5919] usb 3-1: SerialNumber: syz [ 501.645244][T15110] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 501.890686][ T5919] yealink 3-1:36.0: invalid payload size 64, expected 16 [ 501.931973][ T5919] input: Yealink usb-p1k as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:36.0/input/input41 [ 502.085399][T15120] [U]  [ 502.088927][T15120] [U] K{ [ 502.092211][T15120] [U] t 1ŠFfˊ`GJgo/mC [ 502.099184][T15120] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 502.114814][T15120] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 502.125249][T15120] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 502.160975][T15120] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 502.184695][T15120] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 502.195817][T15120] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 502.207394][T15120] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 502.313002][T15120] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 502.321607][T15120] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 502.335157][T15120] [U] 22Ʃx?0;3u [ 502.339334][T15120] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 502.364300][T15120] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 502.373600][T15120] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 502.382224][T15120] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 502.388397][T15120] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 502.400812][T15120] [U] ec [ 502.403935][T15120] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 502.443764][T15118] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 502.472913][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.480055][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.487388][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.494468][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.501600][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.508759][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.518571][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.526535][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.533769][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 502.540584][ C1] yealink 3-1:36.0: unexpected response 0 [ 502.546866][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.554100][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 502.560928][ C1] yealink 3-1:36.0: unexpected response 0 [ 502.567168][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.575156][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 502.581960][ C1] yealink 3-1:36.0: unexpected response 0 [ 502.588978][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.596163][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 502.603047][ C1] yealink 3-1:36.0: unexpected response 0 [ 502.615563][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.622657][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 502.629500][ C1] yealink 3-1:36.0: unexpected response 0 [ 502.637219][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.644283][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 502.651099][ C1] yealink 3-1:36.0: unexpected response 0 [ 502.657123][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.664261][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 502.671075][ C1] yealink 3-1:36.0: unexpected response 0 [ 502.677066][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.691850][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 502.698676][ C1] yealink 3-1:36.0: unexpected response 0 [ 502.705659][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.712754][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 502.719563][ C1] yealink 3-1:36.0: unexpected response 0 [ 502.725595][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.732639][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 502.739454][ C1] yealink 3-1:36.0: unexpected response 0 [ 502.745431][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.752465][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 502.759281][ C1] yealink 3-1:36.0: unexpected response 0 [ 502.765285][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.772363][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 502.779183][ C1] yealink 3-1:36.0: unexpected response 0 [ 502.785286][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.797260][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 502.804099][ C1] yealink 3-1:36.0: unexpected response 0 [ 502.811222][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.818269][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 502.825073][ C1] yealink 3-1:36.0: unexpected response 0 [ 502.831082][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.838107][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 502.844915][ C1] yealink 3-1:36.0: unexpected response 0 [ 502.850943][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.858304][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 502.865129][ C1] yealink 3-1:36.0: unexpected response 0 [ 502.871122][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.878177][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 502.884978][ C1] yealink 3-1:36.0: unexpected response 0 [ 502.890951][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.900354][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 502.907185][ C1] yealink 3-1:36.0: unexpected response 0 [ 502.914264][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.921283][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 502.928085][ C1] yealink 3-1:36.0: unexpected response 0 [ 502.934095][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.947487][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 502.954301][ C1] yealink 3-1:36.0: unexpected response 0 [ 502.960348][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.967411][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 502.974218][ C1] yealink 3-1:36.0: unexpected response 0 [ 502.980358][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 502.987408][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 502.994209][ C1] yealink 3-1:36.0: unexpected response 0 [ 503.000199][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 503.010784][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 503.017601][ C1] yealink 3-1:36.0: unexpected response 0 [ 503.024742][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 503.031998][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 503.038810][ C1] yealink 3-1:36.0: unexpected response 0 [ 503.044867][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 503.051870][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 503.058667][ C1] yealink 3-1:36.0: unexpected response 0 [ 503.064599][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 503.071629][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 503.078433][ C1] yealink 3-1:36.0: unexpected response 0 [ 503.084412][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 503.091411][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 503.098216][ C1] yealink 3-1:36.0: unexpected response 0 [ 503.104190][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 503.111254][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 503.118064][ C1] yealink 3-1:36.0: unexpected response 0 [ 503.125184][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 503.132901][T15125] __nla_validate_parse: 58 callbacks suppressed [ 503.132919][T15125] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2621'. [ 503.132964][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 503.155009][ C1] yealink 3-1:36.0: unexpected response 0 [ 503.160974][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.168192][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 503.175268][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 503.182085][ C1] yealink 3-1:36.0: unexpected response 0 [ 503.188100][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 503.197826][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 503.205382][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 503.212542][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 503.219525][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 503.226345][ C1] yealink 3-1:36.0: unexpected response 0 [ 503.233360][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 503.241182][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 503.248084][ C1] yealink 3-1:36.0: unexpected response 0 [ 503.254129][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 503.261383][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 503.268194][ C1] yealink 3-1:36.0: unexpected response 0 [ 503.274150][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 503.281145][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 503.287944][ C1] yealink 3-1:36.0: unexpected response 0 [ 503.295138][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 503.302272][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 503.309097][ C1] yealink 3-1:36.0: unexpected response 0 [ 503.315074][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 503.328344][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 503.335160][ C1] yealink 3-1:36.0: unexpected response 0 [ 503.342007][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 503.349819][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 503.356638][ C1] yealink 3-1:36.0: unexpected response 0 [ 503.362660][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 503.369841][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 503.376648][ C1] yealink 3-1:36.0: unexpected response 0 [ 503.384400][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 503.391797][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 503.398610][ C1] yealink 3-1:36.0: unexpected response 0 [ 503.405993][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 503.413067][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 503.419865][ C1] yealink 3-1:36.0: unexpected response 0 [ 503.425817][ C1] yealink 3-1:36.0: urb_ctl_callback - urb status -71 [ 503.432758][ T5919] usb 3-1: USB disconnect, device number 116 [ 503.432884][ C1] yealink 3-1:36.0: urb_irq_callback - urb status -71 [ 503.432907][ C1] yealink 3-1:36.0: unexpected response 0 [ 503.432925][ C1] yealink 3-1:36.0: urb_irq_callback - usb_submit_urb failed -19 [ 503.795470][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 503.837543][ T5919] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 503.884250][ T94] block nbd0: Possible stuck request ffff8880253d7000: control (read@0,1024B). Runtime 210 seconds [ 503.895260][ T94] block nbd0: Possible stuck request ffff8880253d71c0: control (read@1024,1024B). Runtime 210 seconds [ 503.906538][ T94] block nbd0: Possible stuck request ffff8880253d7380: control (read@2048,1024B). Runtime 210 seconds [ 503.917836][ T94] block nbd0: Possible stuck request ffff8880253d7540: control (read@3072,1024B). Runtime 210 seconds [ 503.984944][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 503.993977][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.004221][ T10] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 504.006232][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 504.013406][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.030598][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.033395][ T10] usb 8-1: config 0 descriptor?? [ 504.040855][ T5919] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 504.056116][ T5919] usb 3-1: New USB device found, idVendor=1345, idProduct=4408, bcdDevice= 0.00 [ 504.063487][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 504.065834][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.085008][ T5919] usb 3-1: config 0 descriptor?? [ 504.094838][ T5919] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 505.789189][T15132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.799322][T15132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.843796][ T43] usb 8-1: USB disconnect, device number 8 [ 506.019642][T15148] batadv_slave_0: entered promiscuous mode [ 506.029196][T15148] batadv_slave_0: left promiscuous mode [ 506.037485][T15148] binder: BINDER_SET_CONTEXT_MGR already set [ 506.045248][T15148] binder: 15147:15148 ioctl 4018620d 200000000040 returned -16 [ 506.063029][T15148] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 506.175725][T15152] netlink: 'syz.7.2631': attribute type 21 has an invalid length. [ 506.189304][T15152] netlink: 'syz.7.2631': attribute type 1 has an invalid length. [ 506.197071][T15152] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2631'. [ 506.267647][T15154] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2632'. [ 506.335666][T15156] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 506.343008][T15156] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 506.353183][T15156] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 506.360333][T15156] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 506.367674][T15156] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 506.374929][T15156] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 506.382060][T15156] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 506.388556][T15156] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 506.396715][T15156] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 506.405304][T15156] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 506.411918][T15156] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 506.418863][T15156] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 506.427052][T15156] comedi comedi3: 8255: I/O port conflict (0x10,4) [ 506.433980][T15156] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 506.441852][T15156] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 506.449978][T15156] comedi comedi3: 8255: I/O port conflict (0xb,4) [ 506.456566][T15156] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 506.464335][T15156] comedi comedi3: 8255: I/O port conflict (0xffffffffffffeadb,4) [ 506.472173][T15156] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 506.560608][ T9] usb 3-1: USB disconnect, device number 117 [ 506.728389][T15168] netlink: 'syz.7.2636': attribute type 10 has an invalid length. [ 506.746669][T15168] team0: Port device dummy0 added [ 506.762659][T15168] netlink: 'syz.7.2636': attribute type 10 has an invalid length. [ 506.794556][T15164] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 506.810995][T15168] team0: Port device dummy0 removed [ 506.822939][T15168] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 507.068203][T15175] unsupported nlmsg_type 40 [ 507.187049][ T5862] Bluetooth: hci5: connection err: -111 [ 507.309316][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.319183][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.677238][ T5866] Bluetooth: hci6: ISO packet for unknown connection handle 0 [ 508.232016][ T10] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 508.408201][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 508.429701][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 508.443770][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 508.471262][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 508.492227][ T845] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 508.500271][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 508.517927][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.550454][ T10] usb 3-1: config 0 descriptor?? [ 508.613233][T15240] vivid-000: disconnect [ 508.680672][ T845] usb 8-1: Using ep0 maxpacket: 16 [ 508.704416][ T845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.726894][ T845] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.752843][ T845] usb 8-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 508.776397][ T845] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.824835][ T845] usb 8-1: config 0 descriptor?? [ 508.934177][T15239] vivid-000: reconnect [ 509.017000][T15252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2650'. [ 509.026398][T15252] erspan0: default FDB implementation only supports local addresses [ 509.264143][T15230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.285878][T15230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.298120][ T845] hid (null): unknown global tag 0xe [ 509.323374][ T845] razer 0003:1532:011B.0024: unknown global tag 0xe [ 509.333083][ T845] razer 0003:1532:011B.0024: item 0 0 1 14 parsing failed [ 509.341304][ T845] razer 0003:1532:011B.0024: probe with driver razer failed with error -22 [ 509.381956][T15262] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2653'. [ 509.514363][ T9755] usb 8-1: USB disconnect, device number 9 [ 509.524302][ T5866] Bluetooth: hci3: command 0x0406 tx timeout [ 509.542000][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 509.580214][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 509.627460][ T10] usb 3-1: USB disconnect, device number 118 [ 510.436939][ T10] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 510.609577][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.619486][ T10] usb 8-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 510.628911][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.640049][ T10] usb 8-1: config 0 descriptor?? [ 510.868634][T15284] netlink: 'syz.2.2662': attribute type 4 has an invalid length. [ 510.890277][T15284] netlink: 'syz.2.2662': attribute type 4 has an invalid length. [ 511.081108][ T10] bigben 0003:146B:0902.0025: unexpected rdesc, please submit for review [ 511.091656][ T10] bigben 0003:146B:0902.0025: unknown main item tag 0x0 [ 511.098724][ T10] bigben 0003:146B:0902.0025: unknown main item tag 0x0 [ 511.105719][ T10] bigben 0003:146B:0902.0025: unknown main item tag 0x0 [ 511.116817][ T10] bigben 0003:146B:0902.0025: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.7-1/input0 [ 511.128257][ T10] bigben 0003:146B:0902.0025: missing HID_OUTPUT_REPORT 0 [ 511.135427][ T10] bigben 0003:146B:0902.0025: no output report found [ 511.299465][ T9747] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 511.374741][ T10] usb 8-1: USB disconnect, device number 10 [ 511.484469][ T9747] usb 3-1: not running at top speed; connect to a high speed hub [ 511.495063][ T9747] usb 3-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 511.508294][ T9747] usb 3-1: config 1 interface 0 has no altsetting 0 [ 511.519106][ T9747] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 511.528589][ T9747] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.537067][ T9747] usb 3-1: Product: ᤛ銕ꞡ쬍嚚騋坮鞀ꪀ澱濥㘓ｗ㝛틬䈣鸅ᗗ쏉仹꠫⏰袈椝暸㬰荒뾨绿ૡ덼ꗓ㶜 [ 511.551612][ T9747] usb 3-1: Manufacturer: 㱷湹뀘㨫✣耋䭉庹꓈웋샐自䞲ᦃꄷ訜슫된碄킚⟱떞㷐劬뉠孈蔚盧୨絨⭛읩뒄▕帉ᐮ䙐Ꞵ鉛潅瓻ﳊ࿚מּ莗沸ឹ頃싑煮랴髦 [ 511.572494][ T9747] usb 3-1: SerialNumber: Т [ 511.582951][T15288] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 512.045221][ T9747] usb 3-1: USB disconnect, device number 119 [ 513.276600][T15326] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2673'. [ 513.296523][T15326] syzkaller1: entered promiscuous mode [ 513.299290][ T9755] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 513.307509][T15326] syzkaller1: entered allmulticast mode [ 513.483318][ T9755] usb 8-1: Using ep0 maxpacket: 8 [ 513.487322][T15328] netlink: 'syz.5.2674': attribute type 10 has an invalid length. [ 513.496274][T15328] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2674'. [ 513.501072][ T9755] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 513.514942][ T9755] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.524809][ T9755] usb 8-1: Product: syz [ 513.529016][ T9755] usb 8-1: Manufacturer: syz [ 513.533648][ T9755] usb 8-1: SerialNumber: syz [ 513.537344][T15328] team0: Port device geneve0 added [ 513.542281][ T9755] usb 8-1: config 0 descriptor?? [ 513.767531][ T9755] usb 8-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 513.905368][ T30] audit: type=1804 audit(1758056768.861:100): pid=15341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2678" name="/newroot/32/cgroup.controllers" dev="tmpfs" ino=184 res=1 errno=0 [ 513.934481][ T30] audit: type=1800 audit(1758056768.861:101): pid=15341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2678" name="cgroup.controllers" dev="tmpfs" ino=184 res=0 errno=0 [ 514.211344][T15349] sp0: Synchronizing with TNC [ 514.326827][T15351] [U] [ 514.700047][ T9746] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 514.884001][ T9746] usb 3-1: too many configurations: 228, using maximum allowed: 8 [ 514.894352][ T9746] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 514.902055][ T9746] usb 3-1: can't read configurations, error -61 [ 514.999630][ T5866] Bluetooth: hci2: command 0x0406 tx timeout [ 515.044377][ T9746] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 515.236514][ T9746] usb 3-1: too many configurations: 228, using maximum allowed: 8 [ 515.247474][ T9746] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 515.255101][ T9746] usb 3-1: can't read configurations, error -61 [ 515.265456][ T9746] usb usb3-port1: attempt power cycle [ 515.646376][ T9746] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 515.674378][ T9746] usb 3-1: too many configurations: 228, using maximum allowed: 8 [ 515.685112][ T9746] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 515.692767][ T9746] usb 3-1: can't read configurations, error -61 [ 515.835275][ T9746] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 515.859166][ T9746] usb 3-1: too many configurations: 228, using maximum allowed: 8 [ 515.870070][ T9746] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 515.878908][ T9746] usb 3-1: can't read configurations, error -61 [ 515.885605][ T9746] usb usb3-port1: unable to enumerate USB device [ 516.388008][ T9755] usb write operation failed. (-71) [ 516.409745][ T9755] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 516.427645][ T9755] dvbdev: DVB: registering new adapter (Terratec H7) [ 516.434974][ T9755] usb 8-1: media controller created [ 516.441558][ T9755] usb read operation failed. (-71) [ 516.451239][ T9755] usb write operation failed. (-71) [ 516.463171][ T9755] dvb_usb_az6007 8-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 516.474739][T15361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.485431][T15361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.488818][ T9755] usb 8-1: USB disconnect, device number 11 [ 516.828258][ T9755] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 516.990180][ T9755] usb 8-1: unable to get BOS descriptor or descriptor too short [ 516.998471][ T9755] usb 8-1: not running at top speed; connect to a high speed hub [ 517.011148][ T9755] usb 8-1: config 129 has an invalid interface number: 28 but max is 0 [ 517.019471][ T9755] usb 8-1: config 129 has no interface number 0 [ 517.028113][ T9755] usb 8-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 517.040126][ T9755] usb 8-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 517.051635][ T9755] usb 8-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 517.065804][ T9755] usb 8-1: config 129 interface 28 has no altsetting 0 [ 517.075187][ T9755] usb 8-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 517.084275][ T9755] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.105255][ T9755] usb 8-1: Product: syz [ 517.109965][ T9755] usb 8-1: Manufacturer: syz [ 517.114595][ T9755] usb 8-1: SerialNumber: syz [ 517.144564][T15360] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 517.378644][ T9755] etas_es58x 8-1:129.28: Starting syz syz (Serial Number syz) [ 517.389977][ T9755] etas_es58x 8-1:129.28: could not retrieve the product info string [ 517.422241][ T9755] usb 8-1: USB disconnect, device number 12 [ 517.432183][ T9755] etas_es58x 8-1:129.28: Disconnecting syz syz [ 518.230732][ T845] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 518.261085][ T10] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 518.389496][ T845] usb 8-1: Using ep0 maxpacket: 16 [ 518.396796][ T845] usb 8-1: unable to get BOS descriptor or descriptor too short [ 518.406218][ T845] usb 8-1: config 3 has an invalid interface number: 216 but max is 0 [ 518.415643][ T845] usb 8-1: config 3 has no interface number 0 [ 518.422049][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 518.427297][ T845] usb 8-1: config 3 interface 216 has no altsetting 0 [ 518.437727][ T845] usb 8-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=de.a6 [ 518.448439][ T845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.456721][ T10] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 518.465897][ T845] usb 8-1: Product: syz [ 518.470077][ T845] usb 8-1: Manufacturer: syz [ 518.474697][ T845] usb 8-1: SerialNumber: syz [ 518.479464][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.487582][ T10] usb 3-1: Product: syz [ 518.491760][ T10] usb 3-1: Manufacturer: syz [ 518.499642][ T10] usb 3-1: SerialNumber: syz [ 518.511144][ T10] usb 3-1: config 0 descriptor?? [ 518.721985][T15378] loop6: detected capacity change from 0 to 7 [ 518.731803][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.741008][ C1] buffer_io_error: 11 callbacks suppressed [ 518.741029][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 518.741289][ T10] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 518.754141][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.770086][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 518.778618][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.787868][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 518.799146][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.808388][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 518.816629][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.824776][ T10] gspca_sunplus: reg_w_riv err -71 [ 518.825818][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 518.841657][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.845468][ T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 518.850858][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 518.855109][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.864965][ T10] usb 3-1: USB disconnect, device number 124 [ 518.866730][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 518.889831][T15378] ldm_validate_partition_table(): Disk read failed. [ 518.904572][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.913778][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 518.921937][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.931174][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 518.942076][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 518.951280][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 518.962780][T15378] Dev loop6: unable to read RDB block 0 [ 518.964982][ T31] INFO: task syz.0.1967:12628 blocked for more than 143 seconds. [ 518.976345][ T31] Not tainted syzkaller #0 [ 518.982362][T15378] loop6: unable to read partition table [ 518.988497][T15378] loop6: partition table beyond EOD, truncated [ 519.003335][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 519.021691][T15378] loop_reread_partitions: partition scan of loop6 (被x() failed (rc=-5) [ 519.041309][ T31] task:syz.0.1967 state:D stack:28296 pid:12628 tgid:12627 ppid:5859 task_flags:0x400040 flags:0x00004004 [ 519.059548][ T31] Call Trace: [ 519.063185][ T31] [ 519.067831][ T31] __schedule+0x1798/0x4cc0 [ 519.073065][ T31] ? vfs_open+0x3b/0x340 [ 519.083195][ T845] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:3.216/input/input42 [ 519.089650][ T31] ? __lock_acquire+0xab9/0xd20 [ 519.114176][ T845] usb 8-1: USB disconnect, device number 13 [ 519.117311][ T5216] bcm5974 8-1:3.216: could not read from device [ 519.128231][ T5216] bcm5974: mode switch failed [ 519.130398][ T31] ? __lock_acquire+0xab9/0xd20 [ 519.143894][ T31] ? __pfx___schedule+0x10/0x10 [ 519.150067][ T31] ? schedule+0x91/0x360 [ 519.154484][ T31] schedule+0x165/0x360 [ 519.158708][ T31] schedule_preempt_disabled+0x13/0x30 [ 519.164359][ T31] __mutex_lock+0x7e6/0x1350 [ 519.168996][ T31] ? __mutex_lock+0x5bb/0x1350 [ 519.173851][ T31] ? bdev_open+0xe0/0xd30 [ 519.178281][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 519.185857][ T31] ? wait_on_inode+0xc0/0x230 [ 519.190737][ T31] ? disk_block_events+0xab/0x120 [ 519.198009][ T31] ? bdev_open+0xaf/0xd30 [ 519.202753][ T31] bdev_open+0xe0/0xd30 [ 519.206963][ T31] blkdev_open+0x457/0x600 [ 519.211413][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 519.219258][ T31] do_dentry_open+0x953/0x13f0 [ 519.224143][ T31] vfs_open+0x3b/0x340 [ 519.228338][ T31] ? path_openat+0x2ecd/0x3830 [ 519.233130][ T31] path_openat+0x2ee5/0x3830 [ 519.237899][ T31] ? __pfx_path_openat+0x10/0x10 [ 519.242896][ T31] do_filp_open+0x1fa/0x410 [ 519.247648][ T31] ? __lock_acquire+0xab9/0xd20 [ 519.252536][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 519.258021][ T31] ? _raw_spin_unlock+0x28/0x50 [ 519.262908][ T31] ? alloc_fd+0x64c/0x6c0 [ 519.267596][ T31] do_sys_openat2+0x121/0x1c0 [ 519.272312][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 519.278071][ T31] ? exc_page_fault+0x82/0x100 [ 519.283004][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 519.288592][ T31] __x64_sys_openat+0x138/0x170 [ 519.293507][ T31] do_syscall_64+0xfa/0xfa0 [ 519.298046][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.303350][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.309544][ T31] ? clear_bhb_loop+0x60/0xb0 [ 519.314260][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.320546][ T31] RIP: 0033:0x7fc6e858d510 [ 519.328016][ T31] RSP: 002b:00007fc6e9502b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 519.338852][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc6e858d510 [ 519.347095][ T31] RDX: 0000000000000000 RSI: 00007fc6e9502c10 RDI: 00000000ffffff9c [ 519.359454][ T31] RBP: 00007fc6e9502c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 519.369573][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 519.379545][ T31] R13: 00007fc6e87d6038 R14: 00007fc6e87d5fa0 R15: 00007fff4288a588 [ 519.387794][ T31] [ 519.390982][ T31] [ 519.390982][ T31] Showing all locks held in the system: [ 519.399770][ T5216] bcm5974 8-1:3.216: could not read from device [ 519.410638][ T31] 1 lock held by khungtaskd/31: [ 519.415701][ T31] #0: ffffffff8e53c820 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 519.419481][ T5216] bcm5974: mode switch failed [ 519.431111][ T31] 6 locks held by kworker/0:2/845: [ 519.437377][ T31] #0: ffff888021a8f148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 519.450401][ T31] #1: ffffc90003337ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 519.462772][ T31] #2: ffff88802811c198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 519.477407][ T31] #3: ffff888041c65198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 519.487047][ T31] #4: ffff888021713160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 519.498077][ T31] #5: ffff88805d2962c0 (&dev->mutex#2){+.+.}-{4:4}, at: __input_unregister_device+0x31/0x640 [ 519.509692][ T31] 3 locks held by acpid/5216: [ 519.514506][ T31] #0: ffff888058d54160 (&mousedev->mutex#2){+.+.}-{4:4}, at: mousedev_open_device+0x27/0x150 [ 519.525322][ T31] #1: ffff88805d2962c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_open_device+0x53/0x390 [ 519.535240][ T31] #2: ffffffff8e5422b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 519.548530][ T31] 2 locks held by getty/5620: [ 519.553236][ T31] #0: ffff888033d9d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 519.563280][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 519.573555][ T31] 4 locks held by udevd/5872: [ 519.578300][ T31] #0: ffff888049f0d1c8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 519.587220][ T31] #1: ffff888042285488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 519.596685][ T31] #2: ffff88803f1fe3c8 (kn->active#24){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 519.606291][ T31] #3: ffff88804249c198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 519.615736][ T31] 1 lock held by udevd/5873: [ 519.622018][ T31] #0: ffff888143b7b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 519.634023][ T31] 4 locks held by udevd/5980: [ 519.638912][ T31] #0: ffff888030130668 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 519.654678][ T31] #1: ffff888079838088 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 519.668224][ T31] #2: ffff8880663193c8 (kn->active#29){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 519.678332][ T31] #3: ffff888041c65198 (&dev->mutex){....}-{4:4}, at: serial_show+0x26/0xa0 [ 519.688922][ T31] 6 locks held by kworker/1:12/9756: [ 519.694684][ T31] #0: ffff888021a8f148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 519.706548][ T31] #1: ffffc9000a9ffba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 519.718859][ T31] #2: ffff888145b10198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 519.728289][ T31] #3: ffff88804249c198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 519.737735][ T31] #4: ffff88802f6cc160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 519.747134][ T31] #5: ffffffff8e3e2a70 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 519.757716][ T31] 1 lock held by syz.0.1967/12628: [ 519.763881][ T31] #0: ffff888143b7b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 519.773343][ T31] 1 lock held by syz.1.2194/13466: [ 519.778476][ T31] #0: ffff888143b7b358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 519.788015][ T31] 1 lock held by syz.1.2194/13469: [ 519.793787][ T31] #0: ffff888143b7b358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 519.803404][ T31] 1 lock held by syz-executor/14558: [ 519.808709][ T31] #0: ffffffff8e5422b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 519.819943][ T31] [ 519.822401][ T31] ============================================= [ 519.822401][ T31] [ 519.830839][ T31] NMI backtrace for cpu 0 [ 519.830869][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 519.830894][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 519.830907][ T31] Call Trace: [ 519.830917][ T31] [ 519.830927][ T31] dump_stack_lvl+0x189/0x250 [ 519.830955][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.830977][ T31] ? __pfx__printk+0x10/0x10 [ 519.831022][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 519.831065][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 519.831102][ T31] ? __pfx__printk+0x10/0x10 [ 519.831139][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 519.831167][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 519.831216][ T31] watchdog+0xf60/0xfa0 [ 519.831245][ T31] ? watchdog+0x1e2/0xfa0 [ 519.831274][ T31] kthread+0x711/0x8a0 [ 519.831310][ T31] ? __pfx_watchdog+0x10/0x10 [ 519.831331][ T31] ? __pfx_kthread+0x10/0x10 [ 519.831365][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 519.831388][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.831412][ T31] ? __pfx_kthread+0x10/0x10 [ 519.831446][ T31] ret_from_fork+0x4bc/0x870 [ 519.831478][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 519.831511][ T31] ? __switch_to_asm+0x39/0x70 [ 519.831533][ T31] ? __switch_to_asm+0x33/0x70 [ 519.831554][ T31] ? __pfx_kthread+0x10/0x10 [ 519.831605][ T31] ret_from_fork_asm+0x1a/0x30 [ 519.831648][ T31] [ 519.831658][ T31] Sending NMI from CPU 0 to CPUs 1: [ 519.979156][ C1] NMI backtrace for cpu 1 [ 519.979175][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 519.979200][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 519.979213][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 519.979242][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 63 ab 1c 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 519.979260][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 519.979277][ C1] RAX: 2fab344a34d01c00 RBX: ffffffff8196d208 RCX: 2fab344a34d01c00 [ 519.979294][ C1] RDX: 0000000000000001 RSI: ffffffff8dca0cff RDI: ffffffff8c050400 [ 519.979309][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732f9b R09: 1ffff110170e65f3 [ 519.979324][ C1] R10: dffffc0000000000 R11: ffffed10170e65f4 R12: ffffffff8fe53a30 [ 519.979338][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003ad8b58 [ 519.979352][ C1] FS: 0000000000000000(0000) GS:ffff8881258a7000(0000) knlGS:0000000000000000 [ 519.979369][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 519.979382][ C1] CR2: 00007ffdaf54ad78 CR3: 000000001ea80000 CR4: 00000000003526f0 [ 519.979399][ C1] Call Trace: [ 519.979407][ C1] [ 519.979415][ C1] default_idle+0x13/0x20 [ 519.979443][ C1] default_idle_call+0x74/0xb0 [ 519.979472][ C1] do_idle+0x1e8/0x510 [ 519.979500][ C1] ? __pfx_do_idle+0x10/0x10 [ 519.979532][ C1] cpu_startup_entry+0x44/0x60 [ 519.979556][ C1] start_secondary+0x101/0x110 [ 519.979578][ C1] common_startup_64+0x13e/0x147 [ 519.979618][ C1] [ 519.981204][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 520.147238][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 520.156353][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 520.166416][ T31] Call Trace: [ 520.169701][ T31] [ 520.172637][ T31] dump_stack_lvl+0x99/0x250 [ 520.177235][ T31] ? __asan_memcpy+0x40/0x70 [ 520.181833][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.187034][ T31] ? __pfx__printk+0x10/0x10 [ 520.191650][ T31] vpanic+0x237/0x6d0 [ 520.195641][ T31] ? __pfx_vpanic+0x10/0x10 [ 520.200169][ T31] ? preempt_schedule_common+0x83/0xd0 [ 520.205645][ T31] panic+0xb9/0xc0 [ 520.209381][ T31] ? __pfx_panic+0x10/0x10 [ 520.213810][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 520.219199][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 520.225370][ T31] watchdog+0xf9f/0xfa0 [ 520.229539][ T31] ? watchdog+0x1e2/0xfa0 [ 520.233896][ T31] kthread+0x711/0x8a0 [ 520.237975][ T31] ? __pfx_watchdog+0x10/0x10 [ 520.242660][ T31] ? __pfx_kthread+0x10/0x10 [ 520.247272][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 520.252497][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.257705][ T31] ? __pfx_kthread+0x10/0x10 [ 520.262401][ T31] ret_from_fork+0x4bc/0x870 [ 520.267024][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 520.272152][ T31] ? __switch_to_asm+0x39/0x70 [ 520.276922][ T31] ? __switch_to_asm+0x33/0x70 [ 520.281719][ T31] ? __pfx_kthread+0x10/0x10 [ 520.286760][ T31] ret_from_fork_asm+0x1a/0x30 [ 520.291544][ T31] [ 520.295015][ T31] Kernel Offset: disabled [ 520.299342][ T31] Rebooting in 86400 seconds..