last executing test programs: 4.290933235s ago: executing program 2 (id=315): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) read(r3, &(0x7f0000000040)=""/252, 0xfc) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x4000000081, 0xfffffffffffffff9}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @value=0x3}) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5dfc7fbb", 0x5, 0xfffffffffffffffe) pread64(r0, &(0x7f0000000480)=""/253, 0xfd, 0x1) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r7, &(0x7f0000000140)={0x1f, 0x7, @any, 0x0, 0x1}, 0xe) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x0, 0x2, 0x3000, 0x2000, &(0x7f0000011000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r11, 0x4068aea3, &(0x7f0000000280)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000340)="ba2000b80068ef66b93f0b00000f320f35bad004ed64d93e0000640f890000f226652e80a5002045e00b640f236f660f3a6384b7002a", 0x36}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) r12 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r12, r0, 0x0, 0x7fffefff) sendfile(r0, r0, 0x0, 0x7ffff000) 3.197096571s ago: executing program 2 (id=319): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xc0, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r0, 0x93771000) 3.191342885s ago: executing program 2 (id=320): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000400)='ocfs2\x00', 0xe77c930b6a133dfd, 0x0) 3.147105992s ago: executing program 2 (id=321): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0xff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0xfc}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1}, 0x14) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="120100003a982a08cd0c0000a22301020301090212000100000000090400000057331900"], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000400)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="0000deffffff000000000000"], 0x0, 0x0}) syz_usb_control_io$hid(r3, &(0x7f00000003c0)={0x24, &(0x7f0000000280)={0x0, 0x8, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000001b80)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x7f) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000580)="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", 0x166}, {&(0x7f0000001940)="943b2428db318f3f77486f963fd8b7f7b50edf8ae5b144d486b045e1d8073f3b1d341b86143ef7f8e04aba1c302bf3b909eaa7115b16dcc7fd73801584898034725586503575a6961823e1990099b7507569e617ff578d2b03bd53964da36a1ac1f4636d11f63adbde4e809af84d0e8c5d4094c789d7300237062754b7cf04b1659044b6b6b3affc8d5f0ad9c98daeb203f69cd8ea951374a47efe76682ba59fa451ea3b4ec2f8f949", 0xa9}, {&(0x7f0000000700)="52f426119d1af1f34fa7a89cd79655e68de240f79235c1180aa1e89fa794f908ebcff81d2e368afd63a3417a075c0bbb714e5a92d1e4d6b11592016233ea991d273db6c2576b58f4b4bc0010312e4e6d561e279b9674935b4ac95a98b27044dc524359de618e34204ab532ca26d31517c6e634bfe6121bea56b578937041be55ca90e992d9144dabb629325a627442c5cde02d241b1edf86a970f8aa6f51d23a82afe8c3dcb51c272ca46796eb86a9045d4c381167e96785221a5550a5d19c5d55f730cb5c8202e34910bf2a6bdc18a5b236012e39abb23b2e22e4406a0f6b7338db1687503b79a06649f424d09084defeeb97c07ad01fb7", 0xf8}, {&(0x7f0000000800)="2ca23d8795fb26ca86bfb556859fb0493277b7de2299c5c2cd1ab399e91a1b36d8e8c9a85acea17539ab37bf7dc510e96cacb292f18e96df630c563a5f7874075d5a95920b7ea58b7cb6696c12655652bf7e73c123ffcd44b7a0c0fe857048687c59f851ee3e8565c4f2b8680f026c1410d34f67908dfcea357b54cd50503ed7309308d6c31273195e78f4c5a43edbca50ddfd6227d29fcbcebd76b2537c26dbdd6908e381bf030024d418271ab03e86b52713a07502ab", 0xb7}, {&(0x7f00000008c0)="7d6b9634ceef091cc3d646c987f37275598b0e1e2ca4e5ca27147c0105f83ddacc1af7f91d5ef57438caaf18ba21f41a074b388dc7352036dd95a7dce534432343f6c981acff05273ed5ad357652e771ae7dcf1e214d313ad38ec2732f36a91e883d72e05d0a3011418bb7a42d062071c9847a3a93fc6f1459ca7e49013ae2ae4177c0637e6acec83ee1d6be73dfebc6f0a6a016804f6ea643ca9d19c738079154e5490947cb608fcb6c141726dee1d292b44e2c19e53f13aededfd17e7df8f9b3d172b0ea0cbba5cd5853608519186b055130f391b9df8c9fc448116c06ea434ea5da37403dfe3a761b8a6589612339156a66107d360d0bb8763aa0e69e9798687372e30ad639256beff2b85b89655ad69eb54c669815dd32da9c2dfd47d9849144e2c397bf1427897dde0deb97d2522778d1202c77c169b6fd989045df3d13fa8df4a98572a57209171857c5a810f8406a226de842ea8bd04333f96d88b9d1d934a0ea7371f302d631e4b9a3fb932c216b87839f87750d29e63deea65c3fcb2404b29c1fd3667f7fcd025960898a1d28e2de0a58a33a5e4c1cdfc2563459bbe5a78f47ceacf2ab2dd9c6c4e44ef7bde8d985f9527a42186dee06d9d9f3f9946b7bce6963f1cd09bb09ac8046b72930b93196839a56b86d37bee6e93fe9266ea665c9a5fbef13741eaa42ed9ce9bd54af610b308900bc71fc9a1b57a94101e4389adaaf78f990055da7b4c006ab914f017776def81ba9888cfc7ceea39004b92726eef424972c1eb4f5ed10465cbfcd493682bd8ee79d128ab0507dd8ba5548047af4f8fc09e1ca4d38bd9b9069b3553a143e322f3b9ab8137e1ac35b904b8e64d79ef05df25eae62170cbaece0fe135ce853cc8e593c1a175333e9b2e1d55f471865a5e295fbaed7d9fef80f9a7647165c927ad23f0a431427a9e88ea3adcd13f1638a0a5dca7834f95156143da60739b5c5b094ffe7c53af04cf5fa8e6d80fb5abae204838b83a3259234dffa65c319e5b56165d20527d33953aeba28666aa77a9515ed681ff64f0e7d5ac82baf1615467b49f56a95573fbcc40a26a47a113af86a53fcea8f88de10b141368a13939886c7f395b80c3fe43c78333dfea54421732760eab3c077e1df5c0208bbfc0a0b581a7fad0323cbe3fc075916309f0e73246dc3fb8d22142e1416d9dffcf36ab36b8a712f0a15994088d8a43a27021bc9acf84808686005a70637754cc0ea212c1a23058973d09188ff440902c6658f573eabea8ca381c597f5601f808533fdd81838911ca3ffb2ab6f6944d74cae70d50a0618ed78b2145b2c7e6e919e9ced37365f4ccdf4e99bbc68f3bfdece0e7f3cd99f39228702bef71eaaf0f18dba8eeb82de5a697a90b56ae11338901fc589c8cb82d435cb5185f5d693b33744468f4c8584edb827c66c132fd0d38f21e695bda48e4af6e716c3300580a9581d6262ebbff2bdcd3e02fd76e4ea8b352f1f7e0f66ef2be562c2c84990bcbfeb662e5e76b7f7c1b7a221f735c8c99ceb2e2aa26fd4fe166ec178427525eaa342d4854f6f7e55f7c3b7ff1eae496bbf1ae0e02c058e1a036bbf0f7240f448df4fcb7703933f8bf064b2f1ed0224f5da06517a12481a0f479cb5918486750f8a65c194aec5dafb3ad12ab60b76e87339d9d5ce3877cd10359bfe6d4deb690bfaae8ba2e985133d35538730c59375f0d9ffdc2c00c4d627bd3e2ca24bb2c823e0a0dce16b678fa62e925ea219112a085cd2c6ed01a65128c0ef6528688f68da23d30767dbe65a4654143f0f66ac9fbf2256e4125a81b0108f4b83a0fb656485e4113529204b8355224addad51b37cfb7b37c59d5dbda5a2f64059c2a6220918ca859af33864c4c854fdeb8a95029c3f76e851d1d5d80bcde529d6997105b32291c79b443fe9eb1ef3800318b7ff392f1048bde6bf48d9d151e15240dd2f5f8aa1492e7479b2cd81afbc78fff4aeb92786ddf4109877baa075a42429d2cc5e27fe96025b866a639abc4bc08175808dcf26bb04cf07d3339df6c8f43ee41f8cc15235cd4081a4023e3f3fb197add5c40d4521b0a76c967d5c469eb38dd8cccaea3c9ae9fe591be8dcb0300ebd2b4af7d125a6056c39a9137933d213233a0f714989e206c3c61adfe34563ee17d3d7f8adb17082773ce6ec7233ccc6546a922a0e50c0f2d24a91e1fcdd84341f5c63592464b31fb565faebbc77aa4c9ba4705d6dec09f25489e09b000c70d10f2c883642a8ea4a24bb04e699fd204e707f6c964f76bb2fe11d5b5df8860df042aca0d686b2b3ae3102e4773515db96c749bd7fe3882eaa20d17f3a969f8fe450b6c11aeac0d169ac83e0a2f867127e4148846a7812ed0b5286506f7c5818c51c5f9a95fb132dc1a4ca5a697a087ec302f69a6a3112fa41533e86282a60aec713ec2e8b4bdc3316f9460fbe06aaff4f23d8a21ea35c1099b43aac216dc0f990a08ffcc1a5f08e15fc47732a307866c29344a15a8237e63ab43213a54e4b5d881e9a2283aa235fb03e3b932a147f43d13b033ce3f25b3c126bfc4f2422c5bbfd8ce7df83040d2cedf39720b89e3b092780d2258739c441948b1df5a01a4fd64c66adcf78ba3fb3f7f4fadb085cef7199399e95625916af51260a154a3bae3d2fb51d1f2bb8a65bcd8963cd6bec4409aeeca81026bb97e8dcce7d853a9a7ff288e87ac6b9fb1a4ecc07dd772131d7f9528a72c0dae4705ac4a11048a8f7f6529d1444e5c4e16164bee12b911e54a62eb1362212bd27c2af71018db5795cfa0c977a0130ca7b7acfe0009c1858790cb3eea4424cb92c950aa88fab14916ec222fe43d291caa4805020322cf54d9711e522626dee24bf3cf3ea9b66aa0de77b38e73713d171803d3cb6428765b19c16409c6d3e26e4d6e0f09f32e23ed1695330db7f11c74a28140ce37f017aab6ac17948d559b2cac09ef72b460e7ffc69cf4ac653cac9f6ace0c9adce34316fd4ec63fa87751e19019d4577bd0ed9be4dc0de896c11974213c998278d0df6887e0775919a48482d7c79982d171b44c9487078290a5002358a6eb79e42c96942b244cc8e2d58d833a6050da256e879772da2a8087e12a80383ceba7e80a5f6e2a61745c31d80da353a9c9046db3d898aa46297715dd7f8996fda71e174e505eb8e3891d4e038811353a924f0b280d6aef709f003a5665d3779fefeb72c6f4e0df881416447c83d0add928ca3a7839b71a5afd70282fd03e937ecfd97b4f6d02516653e3bded27e03837b7e90f5c8af90114bdd53899bc972c10af6e9e641a1447c69a353b3212f6aa639aec01e2b22e76c64511ad7d21a58bb4eb3f372ba38af75cf92dd0af4244b2e931a7de0e2da80ba32758294a9f8c93c604d84b35139ee3e91911a8ca9f4899d50dc0424dd32194e3905027979cb4c3aa9678bc438d3e3055297f8fb2fd73bf9cc0342bb376983928891323bfcd0937259fd029d31f0d5679f3be1a6137401193320e18995f03190e347fae13cac93db95691aa9a9a875ceae10831a6efdb43158b6405efa209f6b81c0794ea6f17d2ea1762ccd2aa20886f05b7b76664141a7d3c3a0c7741745034b1e55a82c8c1e6b41506ecf38a1f018d3610e2495ba2aace75efe256a6f2c1f23fcb83d0f9cfa7d535b7f2c0d21299dc53a8296d555f608cbb28595fbd210079f67e62645ebd4ebf759e0ec1379baf95286b388c5f6da94ae384e5a1dc71f2aadb7caf0dc66a4896a495c0545937797facee3c0bb8ecfa92c007f67f123a3426e6c112b54f31c9ea9345b059e899cdac781da5b2b448beb31d4ae9a44353cb34f18eac3c426831bc37ad177eda63e70f68218a85a15d230b8d1bb1077f03e964629a8f33d5688cbb25aadef7f1e6f390675e1422969280d74c38135ed73f1e647d71bd41ca48822e9f6f909c73dd2e43710eed227d997823c44cc1447a2cfaa2ef9da8d1f69c41062524345be57be5d480f3cd68361c6bbfb882cab58c34552af45bfe51d2e2a051dc8d3e42a56fe65b1f7ddf1be23efa3a2430eff03bc19338dc8dfe9f30dcef40683def4e308cb924803afae634fc966789b016388851e6ad05409b08bae2ec79246ed442a42de8469e9969c6fe0ea2007fb3f25b5d6a5c2754e577f8a2d4fd99f16e7c108369f0ce5c220325abe9a554c6a52872886f6002be259ad768300d99f254668d2f4aa0c452c23dfe710551736415ab3526d6170e67817c2a12352327d3c840c49652ecf2860b552e7c7f3d8a7b67f8b21986ca93f08ee5b0d76a4d1740087b908d178437e3fd24bab579d54252cb231734bcf5a75694beba2ba4cf17f3ee1fd051d096fe510a0ed022082f73044dbd936f0e8a1a442f07882163d5c251531d554ce92f363335f2ee3d16082bc5d26cd05cac180252b4683e23c51911ace1138a10b420a8e083f462a34b5a2b8a74a530c290b17b19eabdb3b82bb0ab6e66a3904789ef2ccdf799e6bb65b1526916c58b4566201812226a539695e3d7b87274c47df736afcf7e42dd480361b8b24abe294193e3e73cce8661e2eaa92af2d566600e27f4887df6a1ea35018af12ee7f6330f11e58c40f1d00468c99bf619346a047c9055c3fc939d25070cc7e33fda3762feca79c3c398b094604669d0d02bc1d14be72332a1a6319a09861d6a6229accef4584c85c690397712f7361cef7a49fd8b1bcc5dd8e12a60175ea05c23b4e59ee43b34f988e03dd448aec3551de335bf7a62aee1785851ae2ab23b120a74b1f4945b4d9ca7e077bd26bf44978b566ee0bd7aef89014fd6d5d7abf8ed6e6e358da71b5700369965eafee4518f4fbed09aaca865426ed742e3d023eb692e392c2fd4acb4e378bc496cd95bb78ddfa7697aeb3bc13f95f13e5c9290d00818a872a0860120133dce0d73ba2753c9e69188fea5fab8742237a4cb6e794222db091dfec1e4d509c9190f5cdd218aaf50032a9a60f7688415aac8de030aca1bba0b9fc76ec8c7aaa9748c3009f496b941bbeacadcff98d5f5d6be6c8e05ab3076089e4a40abf9e1583c7d99da07200fbec8b6cc09a52caf48048eaa8c646a9a228abf60d3922a23ef451b3c953a86741474798be1c13dbb04ee0eba5386393ebd16954f4634f69f605e19290867d97b1a86153f1c18932199dc9b3d370bf1a762ae6d93ada322462dcffa027aa6b3fccb8e4e876e4e19b81a356987f32e5755cd0d523f9926c2a971665f7457b5e63ccc4b8e6908f3d2e8197baa8682d1877d604c87b616f33e13f3fe2f5211aba27cf92c228354a6aa10a72220b0cf0442de4e9bd25b8f6765c25edfeb5cf71f24b0997ea96578a101930152ffbac28e73f3c6258e7000810f8aa6800e5f63f6e2829e2ec00dbea5688718fc51c4436bad58f40fd52c6eb0d6d5947c38a1573720ae05ec68ac72452467d80a26b2ab54f85ee7a50bb5edff216da12818f774186a83ce9c8f2c01296626c78c7a12495d1db65e5bd768566b94f153c5826f00cd57095a7ef7d12679779835a1e812bf25d23ba4c7450997589e69b1c353be246d18e111acabe8bf6a00fb37482001511af2d7a1b11d22c2934792a85819b236b673753902cccc9248083b01c3047a3682c7f0a17e3022c456908ac89128c135c77912d3df2d3531068c3f63dac4070e1a9910eb3eb9d9aebbb6e0aa0d0d2f951093929d1f267ef3f4b9c499a1c3cb70d28852e9b5ae7e022d848a5f5acfd9167a1c539b2f9079abc1c0a57bd4dc90e0440efb3b00df560edeb8965526600bfba73593fa8cfe8b2", 0x1000}], 0x5, 0x0, 0x0, 0x20048045}}], 0x1, 0x48855) r7 = syz_open_dev$vim2m(&(0x7f0000000440), 0xca55, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x35314142, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000100)) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000200)={0x88, 0x0, &(0x7f0000001a00)=[@request_death, @clear_death, @acquire_done={0x40106309, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x1, &(0x7f0000000240)=""/3, 0x3, 0x2, 0xf}, @flat=@weak_binder={0x77622a85, 0x1100, 0x2}, @fda={0x66646185, 0xa, 0x2}}, &(0x7f00000004c0)={0x0, 0x28, 0x40}}, 0x40}, @acquire], 0x0, 0x1000000, 0x0}) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000004f80)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001ac0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r12, @ANYBLOB="0a00060008021100000000002000330078bd0900589733b912f1ffffffffffff0802110000000250be010e80fa9073505c50740648d55207c7a35769f69e2eb9ad8ddb7bb745967b92958e9ace8fbbd998b11bef4ca13cf9b17756657113e50eb1b86cca9bccca011c64458202f76d7f548b35c5fd96c238ecadb3877621b7b3195e32"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f0000000280), 0x4) 2.174120717s ago: executing program 0 (id=333): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f00000000c0)=0xff33, 0x63) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) linkat(r1, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00', 0x1400) 2.085020106s ago: executing program 0 (id=334): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x111000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000000)={0x1, "b889b26495abe28e1817c485d3fb6dc8136284d6e02cc160c6b2966b18a5a5a5", 0x1, 0x1}) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x4048010) mmap(&(0x7f0000742000/0x4000)=nil, 0x4000, 0x3000002, 0x1012, r0, 0x93772000) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') pread64(r3, &(0x7f0000000180)=""/109, 0x6d, 0x100) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x7, 0x8, 0xffffffff, 0x4, 0x0, 0x5, 0x5, 0x0, 0x200, 0x0, 0x8, 0x9, 0x0, 0x5, 0x5], 0x8080000, 0x222080}) 2.083591595s ago: executing program 0 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r2, 0x5}}, 0x10) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f00000003c0), r2, 0x2}}, 0x18) sendfile(r0, r0, 0x0, 0x7ffff000) 1.427178057s ago: executing program 1 (id=340): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x11a1c0, 0x0) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r0, 0x93774000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x141800, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2400000) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) 1.324485726s ago: executing program 1 (id=341): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xd0002, 0x0) ioctl$BLKGETZONESZ(r0, 0x80041284, &(0x7f0000000040)=0xba) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x44302) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000000c0)={0x4, 0x5, 0x3, {0x100, 0x5}, 0x0, 0x5}) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x103900) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000180), 0xd91, 0x2200) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f00000001c0)=""/231) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f00000002c0)={0xd, 0x2, {0x3, 0x3, 0x7, 0x1, 0x5}, 0xac5}) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$CEC_ADAP_S_PHYS_ADDR(r3, 0x40026102, &(0x7f0000000380)=0x9) (async) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f00000003c0)=""/27) (async) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000440)={0x0, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x200, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000400)='pim6reg1\x00', 0x5, 0xfffffffffffffffa, 0x1}) r4 = socket$xdp(0x2c, 0x3, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$CEC_G_MODE(r3, 0x80046108, &(0x7f00000004c0)) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) (async) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000600)={0x1, @win={{0x1ff, 0x944, 0x6, 0x15}, 0x8, 0x0, &(0x7f0000000580)={{0x7f, 0x1ff, 0x0, 0x5}, &(0x7f0000000540)={{0xf, 0x4, 0x8, 0x7}, &(0x7f0000000500)={{0x5, 0x401, 0x9, 0xd}}}}, 0xd, &(0x7f00000005c0)="0f34f47924", 0x5}}) (async) flock(r1, 0x2) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r3, 0x80dc5521, &(0x7f0000000700)=""/226) (async) statx(r3, &(0x7f00000008c0)='./file0\x00', 0x2000, 0x2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x200001d, &(0x7f0000000a00)={'trans=unix,', {[{@fscache}, {@afid={'afid', 0x3d, 0x2}}, {@aname={'aname', 0x3d, '/dev/snd/seq\x00'}}, {@nodevmap}, {@dfltuid={'dfltuid', 0x3d, r5}}, {@noxattr}, {@nodevmap}, {@afid}], [{@fsuuid={'fsuuid', 0x3d, {[0x53, 0x3d, 0x33, 0x32, 0x39, 0x31, 0x62, 0x36], 0x2d, [0x35, 0x38, 0x34, 0x30], 0x2d, [0x39, 0x32, 0x37, 0x30], 0x2d, [0x62, 0x61, 0x37, 0x39], 0x2d, [0x35, 0x61, 0x66, 0x65, 0x38, 0x61, 0x62, 0x30]}}}, {@obj_role={'obj_role', 0x3d, '\xa2\\\x1c$:.'}}]}}) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KDGETKEYCODE(r7, 0x4b4c, &(0x7f0000000b40)={0x9a2, 0xb54c}) (async) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000b80)={0x0, @bcast, @netrom={'nr', 0x0}, 0x71, 'syz1\x00', @bcast, 0x6, 0x3, [@bcast, @null, @default, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) (async, rerun: 64) r8 = syz_open_dev$cec(&(0x7f0000000c00), 0x0, 0x9040) (rerun: 64) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r8, 0x80489439, &(0x7f0000000c40)) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000cc0)={0x9, r4, 'id0\x00'}) (async) ftruncate(r4, 0x9) (async, rerun: 64) read$FUSE(r1, &(0x7f0000000d40)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 64) write$FUSE_CREATE_OPEN(r3, &(0x7f0000002d80)={0xa0, 0x0, r9, {{0xd5, 0x1, 0x6, 0x6, 0x3, 0x2, {0x2, 0x9, 0x2, 0xd, 0xffffffffffffb0ab, 0x0, 0xe0, 0xe, 0x304, 0xc000, 0x9, r5, r6, 0x800, 0x6}}}}, 0xa0) 1.164700895s ago: executing program 1 (id=343): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x45401, 0x104) write$FUSE_ENTRY(r0, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x3fb, 0x20, 0x70bd2a, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc4}, 0x4000010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000300)={0x100, 0x80, 0x20}, 0x18) unlinkat(r2, &(0x7f0000000340)='./cgroup\x00', 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1.066138994s ago: executing program 0 (id=345): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0100001900010000000000fddbdf25e0000001000000000000000000000000ac1414bb0000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084000500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff34000000020000000000000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000fe8000000000000000000000000000000200000000000000000800000008000000000000"], 0x13c}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="200000006d0001"], 0x28}], 0x1}, 0x8000) (async, rerun: 32) socket$alg(0x26, 0x5, 0x0) (rerun: 32) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0xffff7ffc, 0x80000000, 0x0, 0xd202, 0xd, "1000004000"}) (async) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f0000000080)=0xa) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x30, r2, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0xc}, @void, @val={0xc, 0x99, {0x9, 0x58}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8000}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000240)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x3808}]}, 0x24}, 0x1, 0x0, 0x0, 0x805}, 0x40084) (async) fadvise64(r4, 0x93, 0x96e, 0x3) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async, rerun: 64) setuid(0x0) (async, rerun: 64) getsockopt$IP_VS_SO_GET_DAEMON(r7, 0x0, 0x487, 0x0, &(0x7f0000000140)) (async) sendfile(r0, r0, &(0x7f0000000000)=0x9, 0x100000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x100010, r0, 0x2000) (async) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'dt2801\x00', [0x4f27, 0x5, 0x7, 0x401, 0x4, 0xcc7, 0x8, 0x5c952397, 0x5, 0x400, 0x2, 0x300, 0x0, 0x1, 0x9, 0xe1cb, 0x0, 0x4, 0x3, 0x1ff, 0x80000089, 0xfffffffd, 0x0, 0x20001e56, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x8000000, 0xdffffffa]}) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000040)={'nr0\x00', 0x1}) r10 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r10, &(0x7f0000000240)={&(0x7f0000000080)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)=""/54, 0xffffffffffffff25}, {&(0x7f0000000140)=""/56, 0x38}, {&(0x7f0000000180)=""/118, 0x76}], 0x3}, 0x0) (async) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r11, &(0x7f0000000040)=0x1c8, 0x12) 1.009110831s ago: executing program 1 (id=346): mount(&(0x7f0000000040)=@md0, &(0x7f0000000080)='\x00', &(0x7f0000000000)='qnx6\x00', 0xb20000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x2) connect(r0, &(0x7f00000000c0)=@isdn={0x22, 0x81, 0x0, 0xef, 0xd}, 0x80) 971.028674ms ago: executing program 1 (id=348): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988ca004063cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648d", 0xf}], 0x2) (async) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) 954.212306ms ago: executing program 3 (id=349): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000000)=[@wrmsr={0x1e, 0x20, {0xa93, 0x1}}, @code={0xa, 0x6d, {"413316b9800000c00f3235000100000f30660fc7b300000080660f3a0984db040000005d660f3840788166ba4000b808000000efc744240077000000c7442402e8f0143fff2c246441f40f01ca66baf80cb890ad0e80ef66bafc0ced"}}, @wrmsr={0x1e, 0x20, {0xc001102a}}, @uexit={0x0, 0x18, 0x100000000}, @uexit={0x0, 0x18, 0xfffffffffffffffa}, @wr_crn={0x46, 0x20, {0x8, 0x8}}, @cpuid={0x14, 0x18, {0x9, 0xff}}], 0x115}) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000180)={0x6, 0x7f}) (async, rerun: 32) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x6, 0x135000) (rerun: 32) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000200)={0x103, 0x14, [{0x4, 0x1}, {0xc}, {0x5}, {0xf, 0x1}, {0xa}, {0xf}, {0xa}, {}, {0x6}, {0x8}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0xd, 0x1}, {0xf, 0x1}, {0x8}, {0x3, 0x1}]}) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000240)) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000280)) (async) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f00000002c0)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f00000006c0)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000700)=0x2c) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000740)={r4, 0xdd}, 0x8) (async) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000780)={0x1, 0x2, "fdc304bbc659d4c96b428891b452de2894a10cf0ba9381112132f3742ba5028716804f18cef6feb4756c44c4d947258a91d6b3df00e7a81ca7a4029f04c0cd4cde71d206c1f74eca425be4d51f2d61b781c07baee6e21bf4fe56d4de63e6af2698f7108ecb148bc9728285cfa0bc7bfc8318f81c2fbb90788daaf6ef6c1e9f567ad06dddb42dda405b7a386ab57fdee61cc33c57a794109415b72ee6cceb388a82fe22960ba6e466385f6c63175da1886aa9cdff8d20493e8481e420be68ea735337e20f2b61b943d28ce40d70b9329149da7f4f51809c8f076f53523765025d02e352fadffc63085027c6574596bf39d34ac86474f34659c122703a0d1257f0"}) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r5, 0x8002f515, &(0x7f00000008c0)) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000900)={[0x3ff, 0x7fffffff, 0x6, 0x6, 0x8, 0x8, 0x3, 0x5, 0xc, 0xd, 0xfffffffe, 0x1, 0x10, 0xf, 0xfffffffa, 0x40000000, 0x1, 0x80000000, 0xffff5b3a, 0x6, 0x3, 0x0, 0x6, 0x18, 0xa, 0x0, 0x9, 0x100, 0x3, 0x10000, 0x66, 0x4, 0x5, 0x200, 0x8, 0x0, 0x0, 0x4, 0x0, 0xfffff801, 0x10001, 0x4991f981, 0x1, 0x80000000, 0xf4e, 0x4, 0x7, 0x0, 0x7, 0x5, 0x3, 0x0, 0xfffffff0, 0x1000, 0x5, 0x10001, 0x3, 0x316057c7, 0xffff, 0x10000, 0x7, 0x81, 0x9, 0x0, 0x0, 0xb2, 0x7, 0x58, 0x2, 0x100, 0x400, 0x1000, 0x861a, 0x3, 0x3bb0, 0x800, 0x0, 0xce4, 0x7fffffff, 0x3, 0x3, 0x4, 0x8b, 0x9, 0x8, 0xfe, 0x2, 0xef71, 0x1ff, 0xbd99, 0x5, 0x0, 0x1, 0x13, 0x7, 0x2, 0x5, 0x1000, 0x7fffffff, 0x5, 0x5, 0x2, 0x7, 0x1, 0x2, 0x8, 0x8001, 0x3ff, 0x400, 0x2, 0x7fffffff, 0xffffffff, 0x800, 0xed, 0x1, 0x0, 0x5, 0x7677, 0x10000, 0x7fffffff, 0xfff, 0x1, 0x7fffffff, 0xffffffff, 0x913800, 0x7, 0x5, 0x8, 0x8, 0x2, 0x3, 0x1, 0xb, 0xffff, 0x7, 0x7, 0x3, 0x2, 0x6, 0x7, 0x1, 0x758ac63d, 0x10, 0x67a, 0x1, 0xca43, 0xe6ed, 0x9, 0x5, 0x6, 0xb, 0xfffffff9, 0x7, 0x6c9a, 0x4a, 0xd, 0x6, 0x2, 0x5, 0x3, 0xf, 0x10, 0x0, 0x92b6, 0x534, 0x6, 0x8, 0xffff5b95, 0xeb, 0x0, 0x9, 0x9, 0x9, 0xae6c, 0x9, 0x5, 0x3, 0x5, 0x2, 0x10, 0x0, 0x6, 0xfffffffe, 0x5f, 0x4, 0x1, 0x3, 0xb39, 0x401, 0x3, 0xc167, 0x7, 0x1, 0x8, 0x6, 0x7, 0x7, 0x8001, 0xb78, 0x1, 0x1ff, 0x5, 0xb56b5c4d, 0x6, 0x4, 0x800, 0xfffffff8, 0xc, 0x8, 0x8, 0x5, 0x48f5, 0x80000000, 0xa9, 0x7, 0x400, 0x4, 0xfffffff5, 0x10, 0x6, 0x800, 0x9, 0xbe6f, 0x4, 0xb1, 0xaf79, 0x8, 0x1, 0x7, 0x1ff, 0x6, 0x6, 0x6a9f, 0x91, 0x4, 0xeb, 0x2, 0x7, 0x5, 0x8, 0x81, 0xa6, 0x9, 0x1, 0x9, 0x7f0, 0x1, 0xed7, 0x5, 0x7, 0x1, 0xce2, 0x5, 0xe, 0x400, 0xcc6, 0x3, 0x91de, 0xf6d, 0x133, 0x0, 0x10001, 0x6, 0x4e, 0x4, 0xfffffffe, 0x8, 0xe, 0x0, 0x96, 0x800000, 0x6, 0xfffffff8, 0x50, 0x7, 0xfffffff9, 0x5, 0x200, 0x6, 0x3, 0x9, 0x6, 0x10001, 0x6, 0x0, 0x9, 0x213, 0x9, 0xa, 0x1, 0x7fffffff, 0xa, 0x800, 0x7ff, 0x5, 0x6, 0x7e99, 0x8, 0x1, 0x3ff, 0x6, 0x3ff, 0x7f, 0x8, 0xfff, 0x9, 0x38, 0x10656662, 0x101, 0x81, 0x4, 0x84ea, 0x6, 0xe, 0x6, 0x7ff, 0xc1, 0x1, 0x6, 0x2, 0x881, 0x4, 0x0, 0x2, 0x1, 0x400, 0x283a627c, 0x3, 0x7fffffff, 0x2, 0xe538, 0x3ff, 0x5, 0x3f, 0x4a6ec0f5, 0x7fffffff, 0x2, 0x0, 0x4, 0x2, 0x9, 0x6, 0x6, 0x1385, 0x91, 0x3, 0x8, 0x3, 0xfd, 0xdc63, 0x9000, 0x2, 0xfea6, 0x10001, 0xff44, 0x7, 0x2, 0x80000000, 0x7, 0x100, 0x40, 0x4, 0xfffff001, 0x7f, 0x1, 0x71, 0x8, 0x9, 0x1, 0xfffffffa, 0x1, 0x6b, 0x5, 0x7, 0x0, 0x21b5, 0xb42521f, 0x8000, 0x0, 0x8, 0x4, 0xe, 0xffff9965, 0x1, 0x4803, 0x1000, 0x9, 0x2, 0xa5e6, 0x8, 0x8, 0xfffffffb, 0xce, 0x68f, 0x6, 0xe, 0x5417, 0x2, 0x1, 0xfffffffc, 0x2, 0x9, 0xaaac, 0x8001, 0xfffffff8, 0x3ff, 0xffff, 0x8f2a2aa, 0x9, 0x0, 0x8, 0x9, 0x0, 0x5, 0x3, 0x3fd, 0xffffffff, 0x4, 0x40, 0xfffffffa, 0x94, 0x9, 0x8, 0x4, 0xb, 0x40, 0x9, 0x0, 0x2, 0x1, 0x7, 0xffff, 0x1, 0xd90d, 0x5, 0x401, 0xc38f, 0x5, 0x8001, 0x0, 0x5, 0x2, 0x9, 0x1000, 0x8, 0x3ff, 0xf0, 0x4, 0xff, 0x6, 0x1, 0x98e4, 0x80000000, 0xff, 0x9, 0x2, 0x8, 0xa1, 0x10000, 0x1, 0x8, 0x6, 0x200, 0x280, 0x9, 0x1, 0x0, 0x4, 0x5, 0x7, 0x3ff, 0x5, 0x1, 0xa0, 0xfffffffd, 0x4, 0x4, 0x0, 0x6, 0x5, 0x9, 0x5, 0x6, 0x1, 0x8a, 0x6f6eb352, 0x8001, 0x7ff, 0x0, 0xa, 0x8, 0x5, 0x1, 0x81, 0x80a0, 0x5, 0x9, 0x2, 0x42a, 0x4, 0xee, 0x80000001, 0x8, 0x8, 0x100, 0x400, 0x0, 0x1, 0xa59, 0xa9, 0x9, 0x38d7, 0x5aeb, 0x0, 0x5021, 0x10, 0x4, 0x4, 0xb, 0x8, 0x7f, 0x2, 0x8c0, 0x0, 0x6, 0x7, 0x1, 0x3, 0x69f, 0x4, 0x4, 0x4, 0x0, 0x4, 0x9, 0x100, 0xd, 0x3, 0x6c4, 0x6, 0x3, 0x3, 0x2, 0x3, 0x9, 0x4, 0x8000, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x794d, 0x6, 0x4, 0xd58, 0x9, 0x5, 0xedc, 0x97, 0xbee, 0x2, 0x4, 0xb0d, 0x3, 0x1, 0x0, 0x4, 0x1, 0x7fffffff, 0xfffffff8, 0x800, 0x9, 0x2, 0xffc00000, 0x0, 0x2, 0x8, 0x6, 0x8, 0x3, 0x0, 0x0, 0x80000001, 0xb, 0x4, 0x200, 0x0, 0xbc26, 0x0, 0x401, 0x0, 0x401, 0x7, 0x80000001, 0x8, 0x1, 0xaeb, 0x8, 0x3, 0x6, 0x7ff, 0x1ff, 0x800, 0x3b91, 0x5, 0x1ff, 0x8001, 0x80000000, 0x4, 0x3, 0x4, 0x7, 0x5, 0x4, 0x10001, 0x8, 0xb, 0x5, 0x8b65, 0x0, 0x0, 0x3, 0x101, 0x2, 0x8, 0x3, 0x43f, 0x6, 0x4, 0x0, 0x10001, 0x5, 0x8, 0xffffc371, 0x9, 0x7fffffff, 0x8001, 0x3, 0x7, 0x7fffffff, 0x8d, 0x3, 0x0, 0x1ff, 0xfff, 0x1000, 0x2, 0x2, 0x3, 0x8, 0x21, 0x6, 0x5, 0x5, 0xffffaaf9, 0x2, 0x6, 0x6, 0x7, 0x7fffffff, 0x80000000, 0x6, 0x8, 0x5, 0x1, 0x5, 0x5, 0x0, 0x8, 0x3, 0x3, 0x5, 0x101, 0x9, 0x4, 0x5, 0x6, 0x100, 0x7, 0x2, 0x3, 0xa, 0xbf, 0x9, 0x80, 0xba1, 0x1, 0x250, 0x0, 0x0, 0x9, 0x7fffffff, 0xffff6318, 0x6, 0x81, 0xf, 0x101, 0xa, 0x2, 0x0, 0x539, 0x2, 0xd, 0x4, 0x7, 0x401, 0x7ff, 0x1, 0x9, 0x3, 0x1, 0x2, 0x44, 0x3, 0x100, 0x7, 0xfffffffd, 0x1ea4, 0x80, 0x7, 0x4, 0x3, 0x7, 0x8, 0x6, 0xd65, 0x7f4, 0x8, 0xfc, 0x7, 0x1b3, 0xe0, 0x2, 0x8, 0x6, 0x2, 0xd7b, 0xfffffffa, 0xd581, 0x10, 0x4, 0x7, 0x101, 0x2, 0xebe5, 0x30, 0x5, 0x1, 0x2, 0xe50, 0x3, 0x7f, 0xda, 0x3, 0x269c, 0x3, 0x10000, 0xe, 0x5, 0x6, 0x2, 0x7, 0x0, 0x0, 0x2, 0x7, 0x4, 0x7, 0x6, 0x3ff, 0x3, 0xbb, 0x0, 0x4, 0x800, 0x8000, 0x3, 0x60b, 0x8, 0x3, 0x8, 0xd, 0x7, 0x9, 0x1, 0x2, 0x1ef, 0x6a3967c4, 0x7, 0x3ff, 0x8, 0x8, 0x0, 0x80000001, 0x6, 0xce, 0x5, 0xf988, 0x8001, 0x4, 0x0, 0x2, 0x3, 0x4, 0x6, 0x16a4, 0xb, 0x0, 0x943, 0x3, 0x4, 0x22d, 0x7fffffff, 0x1, 0x1, 0x401, 0x1, 0xfffffff8, 0x7fffffff, 0x4, 0x5, 0xfffffffd, 0x2, 0x7, 0x7ff, 0x2, 0x7ff, 0x1800, 0x6, 0x6, 0x2, 0xf, 0x81, 0x60, 0xd, 0x7ff, 0x3, 0x7, 0x6, 0x4, 0x6, 0xa, 0x3, 0x80000001, 0x40, 0x4, 0x4582, 0x4, 0x2, 0xb0e0274, 0x7, 0x5, 0x4, 0x7, 0xae11, 0xfffffffb, 0x9de, 0x3, 0x1, 0x286, 0x3, 0x1, 0x8000, 0x1, 0x200, 0x4, 0x1, 0xffffffff, 0x0, 0x0, 0xde, 0x3f, 0xf, 0x6, 0x2, 0xfff, 0x6, 0xedb, 0x4, 0x2, 0x9, 0xffffffff, 0x4, 0x8001, 0xffff0000, 0x0, 0x7, 0x9, 0x9, 0x5, 0xffff, 0x4, 0x282, 0x80000001, 0x53b2d6d0, 0x3, 0x2, 0x2, 0xdc8, 0xd202, 0x6, 0x800, 0x8, 0x10, 0x5, 0x6, 0x9, 0x0, 0x200, 0xdec2, 0x4de, 0x6, 0x4, 0x1, 0x4, 0xd, 0xffff, 0x9, 0x6, 0x100, 0x5, 0x8, 0x6, 0x3, 0x81, 0x2, 0x200, 0x7fffffff, 0x3c, 0x9, 0x8, 0x9, 0x6, 0x6, 0x7, 0x0, 0x4, 0x8da29f7, 0xd6, 0x2, 0xfffff441, 0x8, 0x6, 0x80000000, 0x9, 0x5, 0x1, 0x4, 0x5, 0x9, 0x3, 0x4, 0x4, 0x80, 0x2, 0x1, 0x144, 0x8000, 0x9, 0x582e, 0x9, 0x1, 0x5, 0x27, 0x8, 0x4, 0x6, 0x9, 0x8, 0x4, 0x5, 0x2, 0xfffffff1, 0x2, 0x1, 0x6, 0x5, 0x80000000, 0x8, 0x80000001, 0x8b4, 0x3, 0xffff, 0x800, 0x7, 0x2, 0x80000001, 0x8, 0x6, 0x5, 0x22a, 0x9, 0x3, 0x7, 0x1, 0x800, 0x5, 0x9f16, 0x4, 0x6, 0x3, 0x9, 0x2a1a, 0xfffffffd, 0x8, 0x1, 0x1, 0x8, 0x9, 0xf631, 0x7f, 0xa5, 0x5, 0x166, 0xfffffff9, 0x29a4e388, 0x80000000, 0x200, 0x7c, 0x7, 0x8f, 0x8e2]}) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001900)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001940)={r3, @in6={{0xa, 0x4e21, 0xfffffff9, @loopback, 0xf5d}}, 0x81, 0x7}, &(0x7f0000001a00)=0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000001a40)={r7, @in6={{0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x28c}}, 0xcdc4, 0x9}, 0x90) r8 = socket$can_raw(0x1d, 0x3, 0x1) poll(&(0x7f0000001b00)=[{r0, 0x20}, {r8, 0xc108}, {r6}, {r6}, {r1, 0x604}], 0x5, 0x5) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r6, 0x3ba0, &(0x7f0000001b40)={0x48, 0x9, 0x0, 0x0, 0x8}) fdatasync(r2) ioctl$KVM_CLEAR_DIRTY_LOG(r6, 0xc018aec0, &(0x7f0000001fc0)={0x1, 0x300, 0x1c0, &(0x7f0000001bc0)=[0x1, 0x1, 0x1000, 0xffffffff, 0x14b4, 0x7, 0xb, 0x80000001, 0x6, 0xc373, 0xe2f, 0x2, 0x72, 0x47, 0xbafa, 0x4, 0x804, 0x1bfc, 0x7, 0x6, 0x5, 0x8, 0x1, 0xb, 0x7f, 0x1, 0x3, 0x4, 0x0, 0x0, 0x0, 0x7f, 0xffffffffffffff0d, 0x10, 0x8000000000000001, 0x10, 0x4, 0x3, 0x100, 0x1, 0xfff, 0x5, 0x6, 0xff, 0x4, 0x8, 0x9, 0xe, 0x8, 0x4, 0x4, 0x8, 0x5d7, 0xffffffffffff02f2, 0x5, 0xffffffffffffff81, 0x1, 0xd23c, 0x2, 0x7fff, 0xffff, 0x9, 0x548, 0xfb3, 0xc3d9, 0x1, 0x5, 0xfc, 0xfca, 0x8001, 0x1, 0x2, 0xffffffff, 0x4, 0x5, 0x4, 0x1, 0x4, 0x0, 0xfffffffffffffffa, 0x6, 0x1000, 0x9, 0x8, 0x7, 0x8, 0xffffffffffffffff, 0x0, 0x2, 0x4, 0x100, 0x9, 0x7f, 0x7, 0xea7, 0x800, 0x9, 0x8, 0x7, 0x5, 0x2, 0x3, 0xffff, 0x40, 0x5, 0x7f, 0xf39, 0x3, 0x6, 0x3411b3a9, 0x7f, 0x1, 0x7, 0x9, 0x3, 0x0, 0x9, 0x5, 0x1, 0x8, 0x9, 0x8, 0x10001, 0xfffffffffffffffb, 0x7, 0x7, 0xd25, 0xc]}) r9 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r9, 0xc0286687, &(0x7f0000003040)={0x1, 0x2f, 0x1000, &(0x7f0000002040)=""/4096}) (async) setsockopt$bt_hci_HCI_FILTER(r9, 0x0, 0x2, &(0x7f0000003080)={0x7, [0x1ea8, 0x3], 0x7}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$KVM_GET_SREGS2(r9, 0x8140aecc, &(0x7f00000030c0)) (async) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000003200)) ioctl$KVM_GET_FPU(r9, 0x81a0ae8c, &(0x7f0000003240)) (async) ioctl$HIDIOCSREPORT(r6, 0x400c4808, &(0x7f0000003400)={0x1, 0x0, 0x40}) 877.061244ms ago: executing program 0 (id=350): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x24, 0x1a, 0x1, 0x0, 0x25dfdbff, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x8, 0x1c, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 861.911906ms ago: executing program 3 (id=351): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'nicvf0\x00', 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x0) connect$can_bcm(r2, &(0x7f00000005c0)={0x1d, r1}, 0x10) close_range(r0, r0, 0x0) recvmmsg(r0, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x10103, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES64=0x2710], 0x48}}, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 828.265605ms ago: executing program 1 (id=352): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000004380), 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0x5502, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 716.917286ms ago: executing program 0 (id=353): syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) pipe2$9p(&(0x7f0000000400), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2074) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000380)={0x3000, 0x11000, 0x8}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x60, 0xa, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x81}, @NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x1a}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305839, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x80000001}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b8000001000f01c20f300f211a2e0f013c", 0x38}], 0x1, 0xf, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000300)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x53, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) unshare(0x22020600) unshare(0x4020400) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b80", 0x6}], 0x1) 714.008743ms ago: executing program 3 (id=354): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000240)="43f448b8f1000000000000000f23c00f21f83503000f000f23f86767410f23006436f2812c0967390000c401b114520d410f01ca3e2ef0f690000000800feb0c63c48179e723f044f69e00000100", 0x4e}], 0x1, 0x11, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000002b) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, 0x0, &(0x7f0000000180)=0x55) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000140)}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000012479000000000000000a00000a200000000e0a05000000000000000000020000090900010073797a3000000000140000001100010000000000000000000100000a"], 0x48}, 0x1, 0x0, 0x0, 0x14000815}, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, &(0x7f0000000040)='nolazytime\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/hardlockup_count', 0x88000, 0x1) ioctl$KVM_GET_SREGS2(r3, 0x8140aecc, &(0x7f00000002c0)) 653.452545ms ago: executing program 3 (id=355): getgid() (async) getgid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000673000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ec7000/0x3000)=nil, &(0x7f0000152000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ec1000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000673000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ec7000/0x3000)=nil, &(0x7f0000152000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ec1000/0x3000)=nil, &(0x7f0000ff0000/0x3000)=nil, 0x0}, 0x68) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x101000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x8000000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000003, 0x0, 0xe}]}) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000003, 0x0, 0xe}]}) r3 = syz_open_dev$video4linux(&(0x7f00000003c0), 0x7, 0x200) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f0000000400)={0x4, 0x0, "a9bc9829f05d76b60d7acfc908c1ca9c187dcf893015be59", {0x3}, 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) sendfile(r5, r5, 0x0, 0x7ffff000) (async) sendfile(r5, r5, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r4, 0x2000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r4, 0x2000) 613.366557ms ago: executing program 3 (id=356): creat(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x14, 0x0, &(0x7f0000001380)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x8004) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24", @ANYBLOB], 0x0) syz_clone3(0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = dup(r6) syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0x2, 0x1f7}, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000c000000080005"], 0x24}}, 0x0) ustat(0xfffffffffffffff7, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000054d564b"]) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 33.05705ms ago: executing program 2 (id=357): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001cc0)={&(0x7f0000000600)=@in6={0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000000640)="ec1b76", 0x3}], 0x1, &(0x7f0000001c40)=[@sndrcv={0x30, 0x84, 0x1, {0x9, 0x1, 0xa, 0x0, 0xffff, 0x6, 0x1, 0x1}}], 0x30}, 0x10) r1 = socket(0x2, 0x3, 0x4) getsockopt(r1, 0xff, 0x100000000000001, 0x0, 0x0) getsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) pipe2(&(0x7f0000001440)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x4, 0xfffffffffffff000) creat(&(0x7f0000000080)='./file0\x00', 0xac) 32.784323ms ago: executing program 3 (id=358): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d", 0x1f}], 0x2, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000440)=""/247, 0xf7}], 0x2}, 0x7fff}], 0x1, 0x2101, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, 0x0) r3 = geteuid() quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, r3, &(0x7f0000000040)={0x8, 0x7ff, 0xffffffff, 0x81, 0x401, 0x9, 0x7f, 0xffffffffffffffff, 0x3}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r2, 0xf648d000) r4 = socket$pppl2tp(0x18, 0x1, 0x1) syz_open_dev$tty20(0xc, 0x4, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e) 0s ago: executing program 2 (id=359): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000002740)={'pcl726\x00', [0x4f27, 0x207, 0x2, 0x3, 0x5, 0xcc5, 0xc, 0x6, 0x3, 0xe8aa, 0x200, 0xc28, 0xffffc001, 0x1, 0x200, 0x2000000, 0x0, 0x1a449, 0x2804, 0xdf90, 0x3803, 0xcaa7, 0x0, 0x2, 0x7, 0xe6b, 0xffff, 0x0, 0x2, 0x1, 0xfce]}) (async) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000002740)={'pcl726\x00', [0x4f27, 0x207, 0x2, 0x3, 0x5, 0xcc5, 0xc, 0x6, 0x3, 0xe8aa, 0x200, 0xc28, 0xffffc001, 0x1, 0x200, 0x2000000, 0x0, 0x1a449, 0x2804, 0xdf90, 0x3803, 0xcaa7, 0x0, 0x2, 0x7, 0xe6b, 0xffff, 0x0, 0x2, 0x1, 0xfce]}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b40, 0x0) sendfile(r2, r1, 0x0, 0x7fffefff) sendfile(r1, r1, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts. [ 62.379972][ T5846] cgroup: Unknown subsys name 'net' [ 62.571293][ T5846] cgroup: Unknown subsys name 'cpuset' [ 62.578763][ T5846] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.866035][ T5846] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.827870][ T5862] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.856445][ T5866] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.863694][ T5862] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.870930][ T5866] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.878146][ T5866] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.885253][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.892451][ T5864] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.899629][ T5869] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.899980][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.907240][ T5869] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.920815][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.921452][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.935185][ T5873] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.935627][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.942572][ T5873] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.951803][ T5871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.957569][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.964844][ T5871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.970915][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.994960][ T5869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.224640][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 66.326320][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 66.336369][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 66.382998][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 66.429262][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.436381][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.443955][ T5859] bridge_slave_0: entered allmulticast mode [ 66.450635][ T5859] bridge_slave_0: entered promiscuous mode [ 66.478807][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.485880][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.493321][ T5859] bridge_slave_1: entered allmulticast mode [ 66.500514][ T5859] bridge_slave_1: entered promiscuous mode [ 66.531656][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.538896][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.546070][ T5863] bridge_slave_0: entered allmulticast mode [ 66.552999][ T5863] bridge_slave_0: entered promiscuous mode [ 66.579860][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.586993][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.594189][ T5863] bridge_slave_1: entered allmulticast mode [ 66.600946][ T5863] bridge_slave_1: entered promiscuous mode [ 66.615624][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.622771][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.630202][ T5867] bridge_slave_0: entered allmulticast mode [ 66.636815][ T5867] bridge_slave_0: entered promiscuous mode [ 66.645891][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.655160][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.662289][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.669476][ T5868] bridge_slave_0: entered allmulticast mode [ 66.676044][ T5868] bridge_slave_0: entered promiscuous mode [ 66.689773][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.696852][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.704145][ T5867] bridge_slave_1: entered allmulticast mode [ 66.710905][ T5867] bridge_slave_1: entered promiscuous mode [ 66.718962][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.728304][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.735379][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.742621][ T5868] bridge_slave_1: entered allmulticast mode [ 66.749231][ T5868] bridge_slave_1: entered promiscuous mode [ 66.782841][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.813784][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.824586][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.835454][ T5859] team0: Port device team_slave_0 added [ 66.843667][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.861432][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.871824][ T5859] team0: Port device team_slave_1 added [ 66.885831][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.923206][ T5863] team0: Port device team_slave_0 added [ 66.936710][ T5867] team0: Port device team_slave_0 added [ 66.952013][ T5863] team0: Port device team_slave_1 added [ 66.959497][ T5868] team0: Port device team_slave_0 added [ 66.965829][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.973405][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.999376][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.011230][ T5867] team0: Port device team_slave_1 added [ 67.017313][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.024553][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.050637][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.069008][ T5868] team0: Port device team_slave_1 added [ 67.100132][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.107103][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.133330][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.153126][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.160224][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.186255][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.204414][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.211446][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.237549][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.249425][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.256377][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.282626][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.293847][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.301082][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.327134][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.357681][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.364727][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.390720][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.417337][ T5859] hsr_slave_0: entered promiscuous mode [ 67.423643][ T5859] hsr_slave_1: entered promiscuous mode [ 67.480008][ T5863] hsr_slave_0: entered promiscuous mode [ 67.486128][ T5863] hsr_slave_1: entered promiscuous mode [ 67.492483][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 67.498281][ T5863] Cannot create hsr debugfs directory [ 67.516222][ T5867] hsr_slave_0: entered promiscuous mode [ 67.522817][ T5867] hsr_slave_1: entered promiscuous mode [ 67.529403][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 67.535149][ T5867] Cannot create hsr debugfs directory [ 67.559571][ T5868] hsr_slave_0: entered promiscuous mode [ 67.565662][ T5868] hsr_slave_1: entered promiscuous mode [ 67.571971][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 67.577713][ T5868] Cannot create hsr debugfs directory [ 67.808371][ T5859] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.824511][ T5859] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.833473][ T5859] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.845898][ T5859] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.873776][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.886588][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.896051][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.905127][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.939753][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.953128][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.962634][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.982978][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.007994][ T5866] Bluetooth: hci2: command tx timeout [ 68.008016][ T5862] Bluetooth: hci1: command tx timeout [ 68.013450][ T5869] Bluetooth: hci0: command tx timeout [ 68.045042][ T5868] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.055866][ T5868] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.065978][ T5868] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.077699][ T5868] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.087928][ T5869] Bluetooth: hci3: command tx timeout [ 68.149751][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.177287][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.197674][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.212484][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.224043][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.231164][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.249930][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.263997][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.271150][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.280909][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.288008][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.313203][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.320286][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.332172][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.360313][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.367401][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.389303][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.396378][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.451041][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.493961][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.513995][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.521154][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.540451][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.547554][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.753325][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.794369][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.826030][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.861716][ T5867] veth0_vlan: entered promiscuous mode [ 68.884972][ T5867] veth1_vlan: entered promiscuous mode [ 68.903888][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.932247][ T5868] veth0_vlan: entered promiscuous mode [ 68.944538][ T5859] veth0_vlan: entered promiscuous mode [ 68.955738][ T5867] veth0_macvtap: entered promiscuous mode [ 68.965025][ T5867] veth1_macvtap: entered promiscuous mode [ 68.973113][ T5868] veth1_vlan: entered promiscuous mode [ 68.980797][ T5859] veth1_vlan: entered promiscuous mode [ 69.015988][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.034394][ T5859] veth0_macvtap: entered promiscuous mode [ 69.044007][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.052466][ T5863] veth0_vlan: entered promiscuous mode [ 69.068931][ T5859] veth1_macvtap: entered promiscuous mode [ 69.082667][ T5863] veth1_vlan: entered promiscuous mode [ 69.095767][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.103442][ T1145] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.113133][ T1145] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.131586][ T5868] veth0_macvtap: entered promiscuous mode [ 69.140155][ T5868] veth1_macvtap: entered promiscuous mode [ 69.151191][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.161301][ T1145] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.170169][ T1145] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.188726][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.201953][ T5863] veth0_macvtap: entered promiscuous mode [ 69.213347][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.222195][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.237193][ T5863] veth1_macvtap: entered promiscuous mode [ 69.245296][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.253747][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.263619][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.291212][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.309366][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.329063][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.339480][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.347448][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.368814][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.379062][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.399276][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.416559][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.426174][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.428347][ T2965] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.465356][ T2965] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.477066][ T2965] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.496797][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.508078][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.509503][ T5867] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 69.521148][ T2965] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.567725][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.586448][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.603784][ T5944] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 69.611963][ T5944] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 69.613334][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.629724][ T5944] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 69.631353][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.637134][ T5944] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 69.723935][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.745116][ T5947] syz.1.5 uses obsolete (PF_INET,SOCK_PACKET) [ 69.749961][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.756144][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.799700][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.833911][ T5951] process 'syz.2.3' launched './file2' with NULL argv: empty string added [ 69.875515][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.888146][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.975259][ T5953] capability: warning: `syz.2.6' uses deprecated v2 capabilities in a way that may be insecure [ 69.978399][ T5956] syzkaller1: entered promiscuous mode [ 70.037756][ T5956] syzkaller1: entered allmulticast mode [ 70.082736][ T5962] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4'. [ 70.093598][ T5869] Bluetooth: hci1: command tx timeout [ 70.093606][ T5862] Bluetooth: hci0: command tx timeout [ 70.093634][ T5862] Bluetooth: hci2: command tx timeout [ 70.168969][ T5862] Bluetooth: hci3: command tx timeout [ 70.201957][ T5965] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.372696][ T5972] Mount JFS Failure: -22 [ 70.374733][ T5973] ======================================================= [ 70.374733][ T5973] WARNING: The mand mount option has been deprecated and [ 70.374733][ T5973] and is ignored by this kernel. Remove the mand [ 70.374733][ T5973] option from the mount to silence this warning. [ 70.374733][ T5973] ======================================================= [ 70.424485][ T5973] XFS (rnullb0): Invalid superblock magic number [ 70.438253][ T5980] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.612903][ T30] audit: type=1107 audit(1755431494.683:2): pid=5990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' #?v&ԹI~+#{U=TsamvDP])x}C | [ 70.612903][ T30] CA6cz06YX}Yq̌4Iޓp5BeVSo$<1v.b紛xq,HrNG5[$8L{+=i~{5#r4,;=GfVeuu;){ZK><XmG#zv0{ᑤQTOňFU~ ~z1s^|^eM5R;V?'Ss}_cV4q{ΞO1wXf.(\&vhq7"0B+':񢕎1k8)וv7F>7;ްqSݰ\vqށTFkYҵoZi*0 1->uJ.h`@A)2CEhFTڑC_9C?^LCnM`3@$KqH<Ō03ҢI\1A7$Lo)7_֫hQ, QAl [ 70.612903][ T30] cvm1kOk:tN=,R; wD_b'ɀA‰M"5qfg]<'ſU փ] c!{@6cG|rC(m T}Z{0.Cӭlt9aԘA$G+4BtU'GVj- .㢐TkD4V%(ƈ\pEUBd\Ldc}b(hom(m̈awO} [ 70.612903][ T30] ru)aoG7>9NeʇNf4+ePz'*apS(0m9.v!$HDt}1nuR [ 70.630078][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 70.762269][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 70.772724][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 70.790161][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 70.798151][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 70.822000][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 70.832393][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 70.844856][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 70.856610][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 70.864925][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 70.905448][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 70.915763][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 70.931481][ T10] usb 4-1: device descriptor read/64, error -71 [ 70.942568][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 70.953328][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 70.963355][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 70.971713][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 70.988890][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 70.997221][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 71.007039][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 71.015459][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 71.025723][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 71.033735][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 71.043671][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 71.052506][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 71.064503][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 71.073334][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 71.082998][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 71.093567][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 71.103304][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 71.112008][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 71.122701][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 71.132360][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 71.141791][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 71.150207][ T5997] erofs (device rnullb0): cannot find valid erofs superblock [ 71.178046][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 71.318005][ T10] usb 4-1: device descriptor read/64, error -71 [ 71.428772][ T10] usb usb4-port1: attempt power cycle [ 71.452491][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.462743][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.487974][ T5942] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.637941][ T5942] usb 3-1: device descriptor read/64, error -71 [ 71.668281][ T44] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 71.768160][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 71.788003][ T5904] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.789799][ T10] usb 4-1: device descriptor read/8, error -71 [ 71.831098][ T44] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.842292][ T44] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.852653][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 71.859537][ T44] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 71.868943][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.878342][ T44] usb 2-1: config 0 descriptor?? [ 71.878890][ T5942] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 71.949569][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.960660][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.970672][ T5904] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 71.979772][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.990340][ T5904] usb 1-1: config 0 descriptor?? [ 72.017857][ T5942] usb 3-1: device descriptor read/64, error -71 [ 72.050019][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 72.078270][ T10] usb 4-1: device descriptor read/8, error -71 [ 72.129182][ T5942] usb usb3-port1: attempt power cycle [ 72.167972][ T5862] Bluetooth: hci1: command tx timeout [ 72.168552][ T5869] Bluetooth: hci0: command tx timeout [ 72.173382][ T5862] Bluetooth: hci2: command tx timeout [ 72.188114][ T10] usb usb4-port1: unable to enumerate USB device [ 72.248021][ T5869] Bluetooth: hci3: command tx timeout [ 72.305537][ T44] usbhid 2-1:0.0: can't add hid device: -71 [ 72.314761][ T44] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 72.329437][ T44] usb 2-1: USB disconnect, device number 2 [ 72.400559][ T5904] usbhid 1-1:0.0: can't add hid device: -71 [ 72.406595][ T5904] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 72.418647][ T5904] usb 1-1: USB disconnect, device number 2 [ 72.478879][ T5942] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 72.498282][ T5942] usb 3-1: device descriptor read/8, error -71 [ 72.633117][ T6033] netlink: 'syz.1.26': attribute type 2 has an invalid length. [ 72.642286][ T6033] netlink: 'syz.1.26': attribute type 1 has an invalid length. [ 72.738214][ T5942] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 72.761241][ T5942] usb 3-1: device descriptor read/8, error -71 [ 72.763158][ T6035] vxfs: WRONG superblock magic 00000000 at 1 [ 72.773500][ T6035] vxfs: WRONG superblock magic 00000000 at 8 [ 72.779577][ T6035] vxfs: can't find superblock. [ 72.889887][ T5942] usb usb3-port1: unable to enumerate USB device [ 73.009995][ T6044] XFS (rnullb0): Invalid superblock magic number [ 74.082381][ T6074] vxfs: WRONG superblock magic 00000000 at 1 [ 74.094332][ T6074] vxfs: WRONG superblock magic 00000000 at 8 [ 74.101688][ T6074] vxfs: can't find superblock. [ 74.249186][ T5869] Bluetooth: hci2: command tx timeout [ 74.249474][ T5862] Bluetooth: hci1: command tx timeout [ 74.260480][ T5866] Bluetooth: hci0: command tx timeout [ 74.328147][ T5866] Bluetooth: hci3: command tx timeout [ 74.896261][ T6105] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 74.906807][ T6107] /dev/rnullb0: Can't open blockdev [ 74.947698][ T6105] /dev/rnullb0: Can't open blockdev [ 75.063664][ T6112] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.253343][ T6127] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 75.259957][ T6127] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 75.266448][ T6127] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 75.291440][ T6127] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 75.309128][ T6127] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 75.319081][ T6127] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 75.340684][ T6127] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 75.360103][ T6127] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 75.376366][ T6127] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 75.394409][ T6127] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 75.410423][ T6127] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 75.417001][ T6127] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 75.448619][ T5942] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 75.638186][ T5942] usb 2-1: Using ep0 maxpacket: 16 [ 75.645654][ T5942] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 75.656248][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 75.668520][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 75.678740][ T5942] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 75.691546][ T5942] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.706697][ T5942] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 75.716838][ T5942] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 75.725826][ T5942] usb 2-1: Manufacturer: syz [ 75.732082][ T5942] usb 2-1: config 0 descriptor?? [ 75.807835][ T5898] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 75.847897][ T5904] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 75.938150][ T5898] usb 3-1: device descriptor read/64, error -71 [ 76.009152][ T5904] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 76.025194][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.048477][ T5904] usb 1-1: config 0 descriptor?? [ 76.056031][ T5904] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 76.067938][ T5942] rc_core: IR keymap rc-hauppauge not found [ 76.079171][ T5942] Registered IR keymap rc-empty [ 76.084289][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 76.109366][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 76.143153][ T5942] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 76.161782][ T5942] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 76.183450][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 76.190740][ T5898] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 76.219253][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 76.237977][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 76.255315][ T5904] gp8psk: usb in 128 operation failed. [ 76.270753][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 76.298505][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 76.318530][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 76.328247][ T5898] usb 3-1: device descriptor read/64, error -71 [ 76.338574][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 76.357867][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 76.378620][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 76.399617][ T5942] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 76.422337][ T5942] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 76.430446][ T5942] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 76.438208][ T5898] usb usb3-port1: attempt power cycle [ 76.441992][ T5942] usb 2-1: USB disconnect, device number 3 [ 76.527922][ T1220] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 76.657846][ T1220] usb 4-1: device descriptor read/64, error -71 [ 76.704113][ T5904] gp8psk: usb in 146 operation failed. [ 76.710836][ T5904] gp8psk: failed to get FW version [ 76.716271][ T5904] gp8psk: usb in 149 operation failed. [ 76.723276][ T5904] gp8psk: failed to get FPGA version [ 76.732734][ T5904] gp8psk: usb in 138 operation failed. [ 76.738298][ T5904] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 76.748683][ T5904] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 76.758089][ T5942] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 76.759401][ T5904] usb 1-1: USB disconnect, device number 3 [ 76.777862][ T5898] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 76.798407][ T5898] usb 3-1: device descriptor read/8, error -71 [ 76.908887][ T1220] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 76.917942][ T5942] usb 2-1: Using ep0 maxpacket: 32 [ 76.925914][ T5942] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 76.935148][ T5942] usb 2-1: config 1 has no interface number 1 [ 76.941339][ T5942] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 76.954152][ T5942] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 76.966592][ T5942] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 76.976444][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.984762][ T5942] usb 2-1: Product: Ў [ 76.988901][ T5942] usb 2-1: Manufacturer: Ы [ 76.993441][ T5942] usb 2-1: SerialNumber: syz [ 77.000269][ T5942] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 77.009007][ T5942] usb 2-1: no configuration chosen from 1 choice [ 77.037860][ T1220] usb 4-1: device descriptor read/64, error -71 [ 77.037860][ T5898] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 77.059044][ T5898] usb 3-1: device descriptor read/8, error -71 [ 77.158011][ T1220] usb usb4-port1: attempt power cycle [ 77.168176][ T5898] usb usb3-port1: unable to enumerate USB device [ 77.363380][ T6164] Zero length message leads to an empty skb [ 77.499061][ T1220] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 77.518532][ T1220] usb 4-1: device descriptor read/8, error -71 [ 77.617947][ T5942] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 77.757958][ T5942] usb 1-1: device descriptor read/64, error -71 [ 77.764343][ T1220] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 77.789429][ T1220] usb 4-1: device descriptor read/8, error -71 [ 77.919277][ T1220] usb usb4-port1: unable to enumerate USB device [ 78.008058][ T5942] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 78.137965][ T5942] usb 1-1: device descriptor read/64, error -71 [ 78.248124][ T5942] usb usb1-port1: attempt power cycle [ 78.588093][ T5942] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 78.619441][ T5942] usb 1-1: device descriptor read/8, error -71 [ 78.857832][ T5942] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 78.880053][ T5942] usb 1-1: device descriptor read/8, error -71 [ 79.008900][ T5942] usb usb1-port1: unable to enumerate USB device [ 79.222337][ T1220] usb 2-1: USB disconnect, device number 4 [ 79.241293][ T6172] /dev/rnullb0: Can't open blockdev [ 79.367377][ T6177] fuse: Unknown parameter '' [ 79.710290][ T6186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 80.078206][ T6198] /dev/rnullb0: Can't open blockdev [ 80.317354][ T6214] /dev/rnullb0: Can't lookup blockdev [ 80.680962][ T6239] binder: Bad value for 'max' [ 80.705546][ T6239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.727416][ T6239] bond0: (slave rose0): Enslaving as an active interface with an up link [ 80.836013][ T6255] /dev/rnullb0: Can't lookup blockdev [ 80.917931][ T24] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 80.927863][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 81.059299][ T24] usb 1-1: device descriptor read/64, error -71 [ 81.093453][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.106771][ T10] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 81.134911][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.155860][ T10] usb 2-1: config 0 descriptor?? [ 81.307855][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 81.458067][ T24] usb 1-1: device descriptor read/64, error -71 [ 81.572984][ T24] usb usb1-port1: attempt power cycle [ 81.573446][ T6242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.591874][ T6242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.602282][ T6242] warning: `syz.1.87' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.628328][ T10] zydacron 0003:13EC:0006.0001: unknown global tag 0xe [ 81.636888][ T10] zydacron 0003:13EC:0006.0001: item 0 1 1 14 parsing failed [ 81.646179][ T10] zydacron 0003:13EC:0006.0001: parse failed [ 81.655167][ T10] zydacron 0003:13EC:0006.0001: probe with driver zydacron failed with error -22 [ 81.824228][ T5925] usb 2-1: USB disconnect, device number 5 [ 81.917867][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 81.938381][ T24] usb 1-1: device descriptor read/8, error -71 [ 82.187835][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 82.209917][ T24] usb 1-1: device descriptor read/8, error -71 [ 82.320121][ T24] usb usb1-port1: unable to enumerate USB device [ 82.463755][ T6338] 9pnet_fd: Insufficient options for proto=fd [ 82.471554][ T6338] netlink: 64 bytes leftover after parsing attributes in process `syz.3.106'. [ 82.688745][ T44] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 82.837853][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 82.845981][ T44] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 82.856065][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.865025][ T44] usb 2-1: Product: syz [ 82.869442][ T44] usb 2-1: Manufacturer: syz [ 82.874044][ T44] usb 2-1: SerialNumber: syz [ 82.881862][ T44] r8152-cfgselector 2-1: Unknown version 0x0000 [ 82.888596][ T44] r8152-cfgselector 2-1: config 0 descriptor?? [ 82.935046][ T6341] netlink: 'syz.2.107': attribute type 12 has an invalid length. [ 82.942943][ T6341] netlink: 172 bytes leftover after parsing attributes in process `syz.2.107'. [ 83.308280][ T5925] r8152-cfgselector 2-1: USB disconnect, device number 6 [ 84.141602][ T6376] Process accounting resumed [ 84.158056][ T5904] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 84.447408][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.124'. [ 85.047978][ T5862] Bluetooth: hci4: command 0x1003 tx timeout [ 85.058965][ T5866] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 85.168746][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 85.178564][ T5904] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 85.193177][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.202813][ T5904] usb 1-1: config 0 descriptor?? [ 85.214480][ T6394] /dev/rnullb0: Can't open blockdev [ 85.407922][ T5925] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 85.468666][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 85.557921][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 85.566539][ T5925] usb 2-1: config 0 has an invalid interface number: 81 but max is 0 [ 85.575294][ T5925] usb 2-1: config 0 has no interface number 0 [ 85.584568][ T5925] usb 2-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=3e.c5 [ 85.593721][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.601845][ T5925] usb 2-1: Product: syz [ 85.606039][ T5925] usb 2-1: Manufacturer: syz [ 85.610731][ T5925] usb 2-1: SerialNumber: syz [ 85.616783][ T5925] usb 2-1: config 0 descriptor?? [ 85.633437][ T24] usb 3-1: config 0 has an invalid interface number: 159 but max is 0 [ 85.641772][ T24] usb 3-1: config 0 has no interface number 0 [ 85.648343][ T24] usb 3-1: New USB device found, idVendor=17ef, idProduct=3899, bcdDevice=71.0d [ 85.657428][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.666880][ T24] usb 3-1: config 0 descriptor?? [ 85.673982][ T24] usb-storage 3-1:0.159: USB Mass Storage device detected [ 85.691162][ T24] usb-storage 3-1:0.159: Quirks match for vid 17ef pid 3899: 800000 [ 85.815609][ T5904] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 85.826199][ T5904] asix 1-1:0.0: probe with driver asix failed with error -61 [ 85.876359][ T5925] usb 3-1: USB disconnect, device number 10 [ 86.405699][ T6400] /dev/rnullb0: Can't open blockdev [ 86.679193][ T5904] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 86.837820][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 86.848655][ T5904] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.877849][ T5904] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 86.899092][ T5904] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 86.917823][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 86.926164][ T5904] usb 3-1: Product: syz [ 86.947820][ T5904] usb 3-1: Manufacturer: syz [ 86.952429][ T5904] usb 3-1: SerialNumber: syz [ 86.975211][ T5904] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input9 [ 87.052114][ T1220] usb 1-1: USB disconnect, device number 12 [ 87.279032][ T5925] usb 3-1: USB disconnect, device number 11 [ 87.285014][ C0] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 87.303166][ T5925] appletouch 3-1:1.0: input: appletouch disconnected [ 87.351824][ T6408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.130'. [ 87.491719][ T6414] fuse: Bad value for 'fd' [ 87.599360][ T44] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 87.771079][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 87.778735][ T44] usb 1-1: config 0 interface 0 has no altsetting 0 [ 87.786995][ T44] usb 1-1: New USB device found, idVendor=0e41, idProduct=414d, bcdDevice= a.06 [ 87.798431][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.806493][ T44] usb 1-1: Product: syz [ 87.811759][ T44] usb 1-1: Manufacturer: syz [ 87.816620][ T44] usb 1-1: SerialNumber: syz [ 87.825045][ T44] usb 1-1: config 0 descriptor?? [ 87.942039][ T6437] netlink: 'syz.2.137': attribute type 10 has an invalid length. [ 87.953351][ T6437] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.961490][ T6437] bond0: (slave team0): Enslaving as an active interface with an up link [ 87.974734][ T6437] netlink: 'syz.2.137': attribute type 10 has an invalid length. [ 87.987220][ T6437] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 88.002482][ T6437] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 88.013741][ T6437] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 88.040399][ T6408] syz.0.130: attempt to access beyond end of device [ 88.040399][ T6408] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 88.053419][ T6408] EXT4-fs (nbd0): unable to read superblock [ 88.054151][ T6437] /dev/rnullb0: Can't open blockdev [ 88.074794][ T44] snd_usb_podhd 1-1:0.0: Line 6 POD HD500 found [ 88.081376][ T44] usb 1-1: selecting invalid altsetting 1 [ 88.090674][ T44] snd_usb_podhd 1-1:0.0: set_interface failed [ 88.097008][ T44] snd_usb_podhd 1-1:0.0: Line 6 POD HD500 now disconnected [ 88.105536][ T44] snd_usb_podhd 1-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 88.118528][ T44] usb 1-1: USB disconnect, device number 13 [ 88.145524][ T6439] 9pnet_fd: Insufficient options for proto=fd [ 88.166687][ T5925] usb 2-1: USB disconnect, device number 7 [ 88.387895][ T5904] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 88.557496][ T5904] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.570056][ T5904] usb 3-1: config 0 interface 0 has no altsetting 0 [ 88.576711][ T5904] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 88.587450][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.608285][ T5904] usb 3-1: config 0 descriptor?? [ 88.663625][ T6452] /dev/rnullb0: Can't open blockdev [ 89.025935][ T5904] usbhid 3-1:0.0: can't add hid device: -71 [ 89.038686][ T5904] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 89.048130][ T5904] usb 3-1: USB disconnect, device number 12 [ 89.735162][ T6477] netlink: 32 bytes leftover after parsing attributes in process `syz.2.151'. [ 90.032916][ T6489] /dev/rnullb0: Can't open blockdev [ 90.121614][ T6493] netlink: 36 bytes leftover after parsing attributes in process `syz.1.158'. [ 90.547923][ T5925] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 90.718105][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 90.725290][ T5925] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.738530][ T5925] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.755305][ T5925] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 90.776378][ T5925] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 90.785956][ T5925] usb 2-1: Product: syz [ 90.790503][ T5925] usb 2-1: Manufacturer: syz [ 90.802396][ T5925] hub 2-1:4.0: USB hub found [ 91.002205][ T5925] hub 2-1:4.0: 2 ports detected [ 91.014466][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.065630][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.161130][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.282030][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.325690][ T6517] overlayfs: failed to clone upperpath [ 91.468986][ T6522] netlink: 'syz.3.168': attribute type 10 has an invalid length. [ 91.499212][ T36] bridge_slave_1: left allmulticast mode [ 91.504884][ T36] bridge_slave_1: left promiscuous mode [ 91.518793][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.527680][ T36] bridge_slave_0: left allmulticast mode [ 91.556371][ T36] bridge_slave_0: left promiscuous mode [ 91.562678][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.574768][ T6536] netlink: 'syz.3.168': attribute type 10 has an invalid length. [ 91.584746][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.592387][ T5862] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.600398][ T5862] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.608764][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.616315][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.639039][ T6537] siw: device registration error -23 [ 91.732587][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.744331][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.754018][ T36] bond0 (unregistering): Released all slaves [ 91.767015][ T6522] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.777215][ T6522] bond0: (slave team0): Enslaving as an active interface with an up link [ 91.796571][ T6536] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 91.865636][ T6542] IPVS: length: 68 != 24 [ 91.946332][ T9] cfg80211: failed to load regulatory.db [ 91.987242][ T6550] MTD: Couldn't look up '/dev/rnullb0': -15 [ 92.020879][ T5925] hub 2-1:4.0: hub_hub_status failed (err = -32) [ 92.044325][ T5925] hub 2-1:4.0: config failed, can't get hub status (err -32) [ 92.082636][ T36] hsr_slave_0: left promiscuous mode [ 92.106338][ T36] hsr_slave_1: left promiscuous mode [ 92.119814][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.127301][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.140346][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.148638][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.161632][ T36] veth1_macvtap: left promiscuous mode [ 92.167212][ T36] veth0_macvtap: left promiscuous mode [ 92.179945][ T36] veth1_vlan: left promiscuous mode [ 92.188574][ T36] veth0_vlan: left promiscuous mode [ 92.348976][ T36] team0 (unregistering): Port device team_slave_1 removed [ 92.361332][ T36] team0 (unregistering): Port device team_slave_0 removed [ 92.422690][ T6534] chnl_net:caif_netlink_parms(): no params data found [ 92.526034][ T6534] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.544340][ T6534] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.556275][ T6534] bridge_slave_0: entered allmulticast mode [ 92.563304][ T6534] bridge_slave_0: entered promiscuous mode [ 92.572914][ T6534] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.580630][ T6534] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.580728][ T6534] bridge_slave_1: entered allmulticast mode [ 92.581815][ T6534] bridge_slave_1: entered promiscuous mode [ 92.616455][ T6577] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 92.624148][ T6577] UDF-fs: Scanning with blocksize 4096 failed [ 92.638243][ T6534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.659788][ T6534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.711773][ T6534] team0: Port device team_slave_0 added [ 92.738424][ T6534] team0: Port device team_slave_1 added [ 92.815076][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.827966][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.860647][ T6534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.882245][ T6534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.889481][ T6534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.919965][ T6534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.939641][ T6593] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 93.062581][ T6534] hsr_slave_0: entered promiscuous mode [ 93.076650][ T6534] hsr_slave_1: entered promiscuous mode [ 93.084874][ T6534] debugfs: 'hsr0' already exists in 'hsr' [ 93.091418][ T6534] Cannot create hsr debugfs directory [ 93.101984][ T6605] IPv6: syztnl0: Disabled Multicast RS [ 93.427942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 93.436229][ T5898] usb 2-1: USB disconnect, device number 8 [ 93.598709][ T6629] /dev/rnullb0: Can't lookup blockdev [ 93.692443][ T5862] Bluetooth: hci3: command tx timeout [ 93.756682][ T6534] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.768241][ T6534] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.779260][ T6534] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.789177][ T6534] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.131409][ T6534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.174251][ T6534] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.227730][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.234907][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.270457][ T2965] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.277651][ T2965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.349881][ T6534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.682546][ T6534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.761044][ T6534] veth0_vlan: entered promiscuous mode [ 94.800621][ T6534] veth1_vlan: entered promiscuous mode [ 94.849835][ T6534] veth0_macvtap: entered promiscuous mode [ 94.886322][ T6534] veth1_macvtap: entered promiscuous mode [ 94.940717][ T6534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.974226][ T6534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.011105][ T1145] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.048840][ T1145] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.081841][ T1145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.099774][ T1145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.542767][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.582449][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.683345][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.708454][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.730709][ T6697] hpfs: Bad magic ... probably not HPFS [ 95.769100][ T5862] Bluetooth: hci3: command tx timeout [ 95.780072][ T6699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.199'. [ 95.816058][ T6699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.199'. [ 96.229717][ T6727] trusted_key: encrypted_key: key user:syz not found [ 96.235262][ T30] audit: type=1326 audit(1755431776.307:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6725 comm="syz.3.205" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd42e98ebe9 code=0x0 [ 96.774331][ T6742] /dev/rnullb0: Can't open blockdev [ 96.914226][ T6745] /dev/rnullb0: Can't open blockdev [ 97.129261][ T6749] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 97.136376][ T6749] /dev/rnullb0: Can't open blockdev [ 97.265105][ T6753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 97.342987][ T1145] Bluetooth: hci4: Frame reassembly failed (-84) [ 97.350993][ T6755] Bluetooth: hci4: Frame reassembly failed (-90) [ 97.357582][ T6755] netlink: 72 bytes leftover after parsing attributes in process `syz.0.216'. [ 97.389893][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 97.547909][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 97.561817][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.572454][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 97.584645][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 97.595921][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 97.607584][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.622028][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 97.631547][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 97.639881][ T9] usb 2-1: Manufacturer: syz [ 97.646170][ T9] usb 2-1: config 0 descriptor?? [ 97.847950][ T5866] Bluetooth: hci3: command tx timeout [ 99.368014][ T5862] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 99.368126][ T5866] Bluetooth: hci4: command 0x1003 tx timeout [ 99.438869][ T5925] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 99.619049][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 99.627580][ T5925] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 99.642178][ T5925] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 99.652242][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.663126][ T5925] usb 3-1: Product: syz [ 99.667384][ T5925] usb 3-1: Manufacturer: syz [ 99.672407][ T5925] usb 3-1: SerialNumber: syz [ 99.683345][ T5925] usb 3-1: config 0 descriptor?? [ 99.693457][ T5925] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 99.704213][ T5925] usb 3-1: Detected FT232R [ 99.893120][ T6827] /dev/rnullb0: Can't open blockdev [ 99.899508][ T6857] /dev/rnullb0: Can't open blockdev [ 99.900321][ T6827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.914073][ T6827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.922972][ T5925] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 99.931209][ T5925] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 99.938354][ T5862] Bluetooth: hci3: command tx timeout [ 99.944212][ T5925] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 99.951674][ T5925] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 99.965945][ T5925] usb 3-1: USB disconnect, device number 13 [ 99.976475][ T5925] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 99.986202][ T5925] ftdi_sio 3-1:0.0: device disconnected [ 100.102792][ T6859] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 100.267870][ T9] rc_core: IR keymap rc-hauppauge not found [ 100.279710][ T9] Registered IR keymap rc-empty [ 100.288111][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.317942][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.338822][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 100.370112][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 100.393781][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.418005][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.449189][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.478714][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.507957][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.537903][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.557893][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.577871][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.598741][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.617872][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.642388][ T9] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 100.663604][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 100.674733][ T9] usb 2-1: USB disconnect, device number 9 [ 100.683236][ T6881] XFS (rnullb0): Invalid superblock magic number [ 100.727918][ T1220] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 100.791993][ T6890] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ44/@q [ 100.892376][ T1220] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 100.902974][ T1220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.913357][ T1220] usb 3-1: config 0 descriptor?? [ 100.928206][ T1220] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 100.997841][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 101.045190][ T6895] fuse: Bad value for 'fd' [ 101.150379][ T6901] /dev/rnullb0: Can't lookup blockdev [ 101.161291][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 101.170707][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.179282][ T9] usb 2-1: Product: syz [ 101.184986][ T9] usb 2-1: Manufacturer: syz [ 101.191879][ T9] usb 2-1: SerialNumber: syz [ 101.205510][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 101.224793][ T5925] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 101.434342][ C0] Unknown status report in ack skb [ 101.440151][ T6910] /dev/rnullb0: Can't lookup blockdev [ 101.492716][ T6912] netlink: 28 bytes leftover after parsing attributes in process `syz.0.254'. [ 101.503207][ T6912] MTD: Attempt to mount non-MTD device "/dev/nbd0" [ 101.510334][ T6912] cramfs: wrong magic [ 101.520268][ T6912] Mount JFS Failure: -22 [ 101.818006][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 101.960827][ T1220] usb 3-1: USB disconnect, device number 14 [ 101.980527][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 101.993902][ T9] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 102.000513][ T6919] /dev/rnullb0: Can't lookup blockdev [ 102.010064][ T9] usb 1-1: string descriptor 0 read error: -22 [ 102.010205][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 102.010229][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.065783][ T6921] openvswitch: netlink: Tunnel attr 294 out of range max 16 [ 102.148183][ T9] usb 1-1: reset high-speed USB device number 14 using dummy_hcd [ 102.257966][ T5925] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 102.265019][ T5925] ath9k_htc: Failed to initialize the device [ 102.287288][ T5925] usb 2-1: ath9k_htc: USB layer deinitialized [ 102.497205][ T44] usb 2-1: USB disconnect, device number 10 [ 102.837913][ T9] usb 1-1: device descriptor read/64, error -71 [ 103.061273][ T6944] netlink: 196 bytes leftover after parsing attributes in process `syz.1.264'. [ 103.072306][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 103.081438][ T9] usb 1-1: reset high-speed USB device number 14 using dummy_hcd [ 103.298382][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 103.309990][ T9] usb 1-1: device firmware changed [ 103.318595][ T9] usb 1-1: USB disconnect, device number 14 [ 103.487864][ T5925] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 103.649215][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 103.660148][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 103.681160][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 103.711989][ T5925] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 103.729086][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.741114][ T5925] usb 2-1: Product: syz [ 103.745428][ T5925] usb 2-1: Manufacturer: syz [ 103.757839][ T5925] usb 2-1: SerialNumber: syz [ 103.765282][ T5925] usb 2-1: config 0 descriptor?? [ 103.815924][ T5925] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 103.825765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 103.889813][ T6979] vxfs: WRONG superblock magic 00000000 at 1 [ 103.896444][ T6979] vxfs: WRONG superblock magic 00000000 at 8 [ 103.902920][ T6979] vxfs: can't find superblock. [ 103.977635][ T6949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.989880][ T6949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.000829][ T6949] vxfs: WRONG superblock magic 00000000 at 1 [ 104.006858][ T6949] vxfs: WRONG superblock magic 00000000 at 8 [ 104.008365][ T1220] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 104.013214][ T6949] vxfs: can't find superblock. [ 104.047182][ T1163] usb 2-1: Failed to submit usb control message: -71 [ 104.048310][ T5904] usb 2-1: USB disconnect, device number 11 [ 104.069013][ T1163] usb 2-1: unable to send the bmi data to the device: -71 [ 104.080096][ T1163] usb 2-1: unable to get target info from device [ 104.086803][ T1163] usb 2-1: could not get target info (-71) [ 104.093853][ T1163] usb 2-1: could not probe fw (-71) [ 104.920621][ T7005] netlink: 'syz.3.283': attribute type 20 has an invalid length. [ 104.973316][ T7020] hpfs: Bad magic ... probably not HPFS [ 104.988458][ T7018] mmap: syz.3.283 (7018) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.991951][ T7020] netlink: 8 bytes leftover after parsing attributes in process `syz.1.287'. [ 105.041964][ T7018] netlink: 'syz.3.283': attribute type 20 has an invalid length. [ 105.067890][ T1220] usb 3-1: device descriptor read/64, error -71 [ 105.109903][ T7024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 105.124021][ T7024] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 105.136943][ T7026] netlink: 'syz.3.289': attribute type 21 has an invalid length. [ 105.145422][ T7026] netlink: 164 bytes leftover after parsing attributes in process `syz.3.289'. [ 105.197882][ T5898] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 105.307939][ T1220] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 105.358558][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 105.365251][ T5898] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.378442][ T5898] usb 1-1: config 0 interface 0 has no altsetting 0 [ 105.385139][ T5898] usb 1-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00 [ 105.395192][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.404479][ T5898] usb 1-1: config 0 descriptor?? [ 105.447859][ T5925] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 105.458388][ T1220] usb 3-1: Using ep0 maxpacket: 8 [ 105.466406][ T1220] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 105.475584][ T1220] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.486478][ T1220] usb 3-1: Product: syz [ 105.490747][ T1220] usb 3-1: Manufacturer: syz [ 105.495734][ T1220] usb 3-1: SerialNumber: syz [ 105.501950][ T1220] usb 3-1: config 0 descriptor?? [ 105.509412][ T1220] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 105.578200][ T5925] usb 2-1: device descriptor read/64, error -71 [ 105.709402][ T7011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.718361][ T7011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.727050][ T7011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.735803][ T7011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.744565][ T7011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.753329][ T7011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.761891][ T7011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.771175][ T7011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.779890][ T7011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.789867][ T7011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.818190][ T5925] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 105.820237][ T5898] aquacomputer_d5next 0003:0C70:F00E.0002: unknown main item tag 0x0 [ 105.833917][ T5898] aquacomputer_d5next 0003:0C70:F00E.0002: unknown main item tag 0x0 [ 105.842157][ T5898] aquacomputer_d5next 0003:0C70:F00E.0002: unknown main item tag 0x0 [ 105.851733][ T1220] gspca_sonixj: reg_r err -71 [ 105.851740][ T5898] aquacomputer_d5next 0003:0C70:F00E.0002: unknown main item tag 0x0 [ 105.851769][ T5898] aquacomputer_d5next 0003:0C70:F00E.0002: unknown main item tag 0x0 [ 105.875483][ T5898] aquacomputer_d5next 0003:0C70:F00E.0002: hidraw0: USB HID v4.06 Device [HID 0c70:f00e] on usb-dummy_hcd.0-1/input0 [ 105.876811][ T1220] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 105.913914][ T30] audit: type=1326 audit(1755431785.987:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7035 comm="syz.2.292" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc889f8ebe9 code=0x0 [ 105.938995][ T1220] usb 3-1: USB disconnect, device number 16 [ 105.988620][ T5925] usb 2-1: device descriptor read/64, error -71 [ 106.090701][ T9] usb 1-1: USB disconnect, device number 15 [ 106.099068][ T5925] usb usb2-port1: attempt power cycle [ 106.438015][ T5925] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 106.458501][ T5925] usb 2-1: device descriptor read/8, error -71 [ 106.707879][ T5925] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 106.759920][ T5925] usb 2-1: device descriptor read/8, error -71 [ 106.766355][ T7062] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.299'. [ 106.888082][ T5925] usb usb2-port1: unable to enumerate USB device [ 106.954777][ T30] audit: type=1326 audit(1755431787.027:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7065 comm="syz.3.300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42e98ebe9 code=0x7fc00000 [ 107.027863][ T44] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 107.157849][ T44] usb 1-1: device descriptor read/64, error -71 [ 107.187036][ T7076] /dev/rnullb0: Can't open blockdev [ 107.397841][ T44] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 107.537915][ T44] usb 1-1: device descriptor read/64, error -71 [ 107.648134][ T44] usb usb1-port1: attempt power cycle [ 107.685631][ T7081] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.304'. [ 107.694960][ T7081] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 107.704915][ T7081] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 107.855476][ T7088] netlink: 'syz.2.306': attribute type 1 has an invalid length. [ 107.864100][ T7088] netlink: 'syz.2.306': attribute type 101 has an invalid length. [ 107.872277][ T7088] netlink: 564 bytes leftover after parsing attributes in process `syz.2.306'. [ 107.898838][ T7097] MTD: Couldn't look up '/dev/rnullb0': -15 [ 107.934585][ T7099] netlink: 20 bytes leftover after parsing attributes in process `syz.3.310'. [ 107.987901][ T44] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 108.008236][ T44] usb 1-1: device descriptor read/8, error -71 [ 108.247908][ T44] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 108.279364][ T44] usb 1-1: device descriptor read/8, error -71 [ 108.388204][ T44] usb usb1-port1: unable to enumerate USB device [ 108.627877][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 108.668771][ T44] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 108.779143][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.790257][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.800061][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.813156][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.822427][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.831552][ T9] usb 2-1: config 0 descriptor?? [ 109.153251][ T7112] TCP: TCP_TX_DELAY enabled [ 109.240353][ T7104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.252953][ T7104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.263341][ T7104] random: crng reseeded on system resumption [ 109.270168][ T7118] netlink: 76 bytes leftover after parsing attributes in process `syz.2.314'. [ 109.450833][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 109.456943][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 109.469249][ T9] usb 2-1: USB disconnect, device number 16 [ 109.738648][ T7128] netlink: 256 bytes leftover after parsing attributes in process `syz.0.316'. [ 110.087912][ T5898] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 110.298759][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 110.314765][ T5898] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.338018][ T5898] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.360470][ T5898] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 110.377978][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.395385][ T5898] usb 1-1: Product: syz [ 110.403059][ T5898] usb 1-1: Manufacturer: syz [ 110.413304][ T5898] usb 1-1: SerialNumber: syz [ 110.717575][ T5898] usb 1-1: 0:2 : does not exist [ 110.730614][ T5898] usb 1-1: USB disconnect, device number 20 [ 110.798813][ T5925] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 110.953139][ T7144] netlink: 20 bytes leftover after parsing attributes in process `syz.3.322'. [ 110.962160][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 110.972150][ T5925] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0000, bcdDevice=23.a2 [ 110.984629][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.995335][ T5925] usb 3-1: Product: syz [ 111.000545][ T5925] usb 3-1: Manufacturer: syz [ 111.005262][ T5925] usb 3-1: SerialNumber: syz [ 111.014312][ T5925] usb 3-1: config 0 descriptor?? [ 111.139109][ T7157] /dev/rnullb0: Can't lookup blockdev [ 111.249015][ T30] audit: type=1326 audit(1755431791.327:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7167 comm="syz.1.331" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9366d8ebe9 code=0x0 [ 111.523630][ T7175] /dev/rnullb0: Can't open blockdev [ 112.760459][ T7220] tipc: Started in network mode [ 112.766504][ T7220] tipc: Node identity 66e057f289a, cluster identity 4711 [ 112.776467][ T7220] tipc: Enabled bearer , priority 0 [ 112.800560][ T7220] tipc: Disabling bearer [ 112.983344][ T30] audit: type=1804 audit(1755431793.057:7): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.354" name="rnullb0" dev="tmpfs" ino=113 res=1 errno=0 [ 113.096289][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.356'. [ 113.106129][ T7247] /dev/rnullb0: Can't lookup blockdev [ 113.147909][ T44] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 113.341982][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.353360][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.364979][ T44] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 113.374388][ T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.388909][ T44] usb 2-1: config 0 descriptor?? [ 113.583547][ T5904] usb 3-1: USB disconnect, device number 18 [ 113.708581][ T7253] ------------[ cut here ]------------ [ 113.714785][ T7253] UBSAN: shift-out-of-bounds in drivers/comedi/drivers/pcl726.c:331:46 [ 113.726135][ T7253] shift exponent 519 is too large for 32-bit type 'int' [ 113.733809][ T7253] CPU: 0 UID: 0 PID: 7253 Comm: syz.2.359 Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) [ 113.733836][ T7253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.733857][ T7253] Call Trace: [ 113.733864][ T7253] [ 113.733872][ T7253] dump_stack_lvl+0x189/0x250 [ 113.733915][ T7253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.733947][ T7253] ? __pfx__printk+0x10/0x10 [ 113.733979][ T7253] ubsan_epilogue+0xa/0x40 [ 113.733999][ T7253] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 113.734025][ T7253] ? __kmalloc_noprof+0x29b/0x4f0 [ 113.734047][ T7253] pcl726_attach+0xac4/0xd50 [ 113.734075][ T7253] ? rcu_is_watching+0x15/0xb0 [ 113.734104][ T7253] comedi_device_attach+0x51c/0x720 [ 113.734127][ T7253] comedi_unlocked_ioctl+0x5ff/0x1020 [ 113.734152][ T7253] ? rcu_is_watching+0x15/0xb0 [ 113.734174][ T7253] ? lock_release+0x4b/0x3e0 [ 113.734192][ T7253] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 113.734222][ T7253] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 113.734264][ T7253] ? do_futex+0x395/0x420 [ 113.734299][ T7253] ? lock_release+0x4b/0x3e0 [ 113.734316][ T7253] ? __se_sys_futex+0x36f/0x400 [ 113.734333][ T7253] ? __fget_files+0x2a/0x420 [ 113.734365][ T7253] ? __fget_files+0x3a0/0x420 [ 113.734392][ T7253] ? __fget_files+0x2a/0x420 [ 113.734421][ T7253] ? bpf_lsm_file_ioctl+0x9/0x20 [ 113.734453][ T7253] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 113.734477][ T7253] __se_sys_ioctl+0xfc/0x170 [ 113.734496][ T7253] do_syscall_64+0xfa/0x3b0 [ 113.734525][ T7253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.734548][ T7253] ? clear_bhb_loop+0x60/0xb0 [ 113.734572][ T7253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.734589][ T7253] RIP: 0033:0x7fc889f8ebe9 [ 113.734610][ T7253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.734626][ T7253] RSP: 002b:00007fc88adf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.734652][ T7253] RAX: ffffffffffffffda RBX: 00007fc88a1b5fa0 RCX: 00007fc889f8ebe9 [ 113.734681][ T7253] RDX: 0000200000002740 RSI: 0000000040946400 RDI: 0000000000000003 [ 113.734694][ T7253] RBP: 00007fc88a011e19 R08: 0000000000000000 R09: 0000000000000000 [ 113.734707][ T7253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.734717][ T7253] R13: 00007fc88a1b6038 R14: 00007fc88a1b5fa0 R15: 00007ffdde43c9c8 [ 113.734737][ T7253] [ 113.734788][ T7253] ---[ end trace ]--- [ 113.813831][ T44] hid-steam 0003:28DE:1142.0003: unknown main item tag 0x0 [ 113.815332][ T7253] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 113.815352][ T7253] CPU: 0 UID: 0 PID: 7253 Comm: syz.2.359 Not tainted 6.17.0-rc1-next-20250814-syzkaller #0 PREEMPT(full) [ 113.815377][ T7253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.815390][ T7253] Call Trace: [ 113.815399][ T7253] [ 113.815408][ T7253] dump_stack_lvl+0x99/0x250 [ 113.815443][ T7253] ? __asan_memcpy+0x40/0x70 [ 113.815474][ T7253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.815503][ T7253] ? __pfx__printk+0x10/0x10 [ 113.815540][ T7253] vpanic+0x281/0x750 [ 113.815567][ T7253] ? __pfx_vpanic+0x10/0x10 [ 113.815598][ T7253] panic+0xb9/0xc0 [ 113.815623][ T7253] ? __pfx_panic+0x10/0x10 [ 113.815649][ T7253] ? __pfx__printk+0x10/0x10 [ 113.815684][ T7253] check_panic_on_warn+0x89/0xb0 [ 113.815705][ T7253] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 113.815734][ T7253] ? __kmalloc_noprof+0x29b/0x4f0 [ 113.815759][ T7253] pcl726_attach+0xac4/0xd50 [ 113.815781][ T7253] ? rcu_is_watching+0x15/0xb0 [ 113.815827][ T7253] comedi_device_attach+0x51c/0x720 [ 113.815854][ T7253] comedi_unlocked_ioctl+0x5ff/0x1020 [ 113.815902][ T7253] ? rcu_is_watching+0x15/0xb0 [ 113.815929][ T7253] ? lock_release+0x4b/0x3e0 [ 113.815953][ T7253] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 113.815980][ T7253] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 113.816025][ T7253] ? do_futex+0x395/0x420 [ 113.816067][ T7253] ? lock_release+0x4b/0x3e0 [ 113.816087][ T7253] ? __se_sys_futex+0x36f/0x400 [ 113.816108][ T7253] ? __fget_files+0x2a/0x420 [ 113.816138][ T7253] ? __fget_files+0x3a0/0x420 [ 113.816166][ T7253] ? __fget_files+0x2a/0x420 [ 113.816196][ T7253] ? bpf_lsm_file_ioctl+0x9/0x20 [ 113.816230][ T7253] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 113.816261][ T7253] __se_sys_ioctl+0xfc/0x170 [ 113.816283][ T7253] do_syscall_64+0xfa/0x3b0 [ 113.816309][ T7253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.816332][ T7253] ? clear_bhb_loop+0x60/0xb0 [ 113.816357][ T7253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.816378][ T7253] RIP: 0033:0x7fc889f8ebe9 [ 113.816397][ T7253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.816415][ T7253] RSP: 002b:00007fc88adf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.816440][ T7253] RAX: ffffffffffffffda RBX: 00007fc88a1b5fa0 RCX: 00007fc889f8ebe9 [ 113.816458][ T7253] RDX: 0000200000002740 RSI: 0000000040946400 RDI: 0000000000000003 [ 113.816473][ T7253] RBP: 00007fc88a011e19 R08: 0000000000000000 R09: 0000000000000000 [ 113.816488][ T7253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.816501][ T7253] R13: 00007fc88a1b6038 R14: 00007fc88a1b5fa0 R15: 00007ffdde43c9c8 [ 113.816525][ T7253] [ 113.819174][ T7253] Kernel Offset: disabled