last executing test programs: 2m41.259385727s ago: executing program 0 (id=1135): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x64, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0x2, 0x1f7}, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES32=r1, @ANYRES8=0x0], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20040040) 2m41.127890439s ago: executing program 0 (id=1137): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1a00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)={0x0, 0x1, 0xbe}) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000400)={0x2, @time={0x400, 0x7}, 0x7f, {0x1, 0x7}, 0x7, 0x0, 0x7}) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r8}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000200)=[r8, 0x0], &(0x7f0000000180)=[0xfffffffb], &(0x7f00000000c0)=[r9], &(0x7f0000000100)=[0xf], 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000dc0)={&(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c00)=[{}, {}, {}, {}], &(0x7f0000000d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000d80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x9, 0x8}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000011c0)={&(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000e80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001180)=[0x0], 0xa, 0x6, 0x4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f00000013c0)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001280)=[{}, {}], &(0x7f0000001340), &(0x7f0000001380)=[0x0], 0x2, 0x0, 0x5}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000001500)={0x500, 0x2, &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x80000000], &(0x7f0000001440)=[0x0, 0x0, r9, r10, r11, 0x0, 0x0], &(0x7f0000001480)=[0x8, 0x6, 0x100000001, 0x100000000, 0x3, 0x1, 0x8a, 0x8, 0x10], 0x0, 0xe}) (async, rerun: 64) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r6, 0x4068aea3, &(0x7f0000000280)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mincore(&(0x7f0000459000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/43) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000030c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3e216c3bdd587be7ed94246e9dfad0862d47649defbd33d258", @ANYRES16=r12, @ANYBLOB="010027bd7000ffdbdf256500000008000300", @ANYRES32=r13, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008041}, 0x8000) 2m40.811703269s ago: executing program 0 (id=1140): r0 = syz_usb_connect$cdc_ecm(0x0, 0x1c0, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x1ae, 0x1, 0x1, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x92, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8}, [@ncm={0x6, 0x24, 0x1a, 0x7, 0x4}, @mdlm_detail={0x7a, 0x24, 0x13, 0xe, "b798dfb0ecb3ee9f2f07fa12e00057bcd2b1c4058dbac635c89e9d68cf09ce373254c99aa5b1c92bcbf2fbb11385aab64c3939db96dd5b166193a9a81b44a1b1a3b86b2474a3a966f4d4efc1bac76e1cd22a0d3eef96605a650bca41e95ae860e98d19a025b534df1ca7077c8f2be1f6403721dafb83"}, @obex={0x5, 0x24, 0x15, 0xfff}, @mdlm_detail={0xee, 0x24, 0x13, 0x4, "f17c130c9b80ae6023ca4f23ee8421b20dd6f9a9eacc0b9286dfb1725b34a4785cb5d9e7406a3594819454b53a7016944cb3dd41ceade73ca725228a6cf6dd108d46e96fa4406fdc409766f605ea89370faf7062a5b5df6e3e2a7e12462aeb7efcad464134b9264725b04f442311ea025d47076caa8ae7dffc72e2d8a3397b42aa3793802805ab6782cf5299ac463ebbcb3b608cc04969df6607c747dfc285c357001b403fa23dc26ca0e3c31d2b9d020062fe8a14472a0b2581ba8ab634097fe75cd1e1bb27bd8ed728a9f469c3c10904d8eafecbf96d0b0503d1b852b5bea21add0d15da137d86c6ae"}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x0, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2401, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0x2, 0x0, 0x7, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x809, 0x0, 0xfffffffffffffffa, 0x3, 0x9}) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2m39.505970236s ago: executing program 0 (id=1143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf"], 0xf0}, 0x1, 0x0, 0x0, 0x15}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) 2m39.458298067s ago: executing program 0 (id=1144): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000bc0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r1, &(0x7f0000000180)={0x2a, 0x1, 0x8000}, 0xc) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x5, "ab811687fa"}, 0x0}) 2m37.104604544s ago: executing program 0 (id=1155): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x8a) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$NBD_DO_IT(r1, 0xab03) timer_create(0x2, &(0x7f0000000000)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f00000000c0)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1) 2m22.085942496s ago: executing program 32 (id=1155): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) r1 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x8a) (async) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$NBD_DO_IT(r1, 0xab03) timer_create(0x2, &(0x7f0000000000)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f00000000c0)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x1) 1m47.472545599s ago: executing program 1 (id=1456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}, 0x1, 0x0, 0x0, 0x15}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44080}, 0x2000000) 1m47.377671637s ago: executing program 1 (id=1457): r0 = syz_usb_connect(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="230100004106cd40cd060f011bd50000000109022400010000800009040bfd02337761000905070200048140060905870308"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRESOCT=r1], 0x32600) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRESOCT=r1], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) io_setup(0x222, &(0x7f0000000180)) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000030040de2842110000000000010902240001000000000904000001030000000921000000012205000905810300"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0}, 0x0) (async) syz_usb_control_io$hid(r2, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0}, 0x0) socket$tipc(0x1e, 0x5, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f00000001c0)={0x0, 0x21, 0x77, {0x77, 0x6, "92e9ba9b38c82de83405140d2c88c063949fd9bedc3220bf4140af9dbe1a2b9b656a1ec9b70f8ce06dcda4dbd9ff022f43c4fbe3b23b8328a1c61fde99feafc859ed64e76ddc1b499ea2225d811bae22a6740672cda381aeeada5fcb99975ec80cf65d96667fa59c7302e116fd97bf4dea09514f49"}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}, &(0x7f0000000140)={0x0, 0x22, 0x8, {[@local=@item_012={0x1, 0x2, 0x8, "e2"}, @local=@item_012={0x0, 0x2, 0x8}, @global=@item_4={0x3, 0x1, 0xb, "e9e6283f"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x3, 0x1, {0x22, 0x774}}}}, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x20, 0x31, 0xdb, "cf21d4e2715b2665091e37a0002b3a6cd85a9ed11dab49a6c558d7fdcc3d7a16e0ac3cb3e47b61cf7a3332114d4023c315727f96088c41368af882fa50c3dca15418b7791ce3e6b8b29f723577822e250ccb6bd3d4a5244d7c2282efab331d52e21aa3719064ede16c14b6bdae69dd0eb6fd480ed56b1faac50421d1ef24cd26a0bd82676559ca85f6d758f255b18a2a5e2f5fd9b25eb6ab0c43bb94f8b89910965e23ab26be487c33d37bd6d1bea7e9ee1b4b0547eb9fa437b6c962a32dfd74be63ee98e43e4018e39732860a3dce63325d19ac586acff7184278"}, &(0x7f00000003c0)={0x0, 0xa, 0x1}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000440)={0x20, 0x1, 0x15, "4afa992fd31c6a3ac3eb9a17bcf576f006855a3e63"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xc3}}) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) rt_sigsuspend(&(0x7f0000000000)={[0x8]}, 0x8) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 1m44.310673187s ago: executing program 1 (id=1467): r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600609040010050300010009210000360122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001280)="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", 0x224}], 0x1}}], 0x1, 0xc0) (async) sendto$inet(r1, &(0x7f0000000180)="27a3557736d3c84a338e8fe4d32a1251f97e5584ebd3ff587b283d03906d281f7415474f511d7bd3b6159af04f9d050b4f710795bfc2c1ea233becef734750a252bd481c71cc8707e125a34602a37f26929c13ad3fa7e3a8a9bfe4b8bd4a30ff136001b125d672f402474b3d4284693e01b8cd8d92008674d46b4d873a274bd2aeec93157b0c9049bdb947149d4729bb6fd749cbc87e3aeb00"/162, 0xffffffffffffffac, 0x14008885, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201400000000aaf90caa83770ec0d71ea38344698cbf3bd7cd168bd9c5e235606aa834defb464b471e5fdfdbaa64c55c1d8fd08a1a8f092dd1a186cf405b4a8bf07eac1e8014ebea6484cf58839e410647e68206545897a301a5b1dda807d8ead5d8649b6b5396d354ecb5dbdc247cc3b98300"], 0x0, 0x0, 0x0, 0x0}) 1m43.416965147s ago: executing program 1 (id=1468): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) chdir(&(0x7f0000000100)='./file0/file0\x00') move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000280)='./file0/file0\x00', 0x3) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) read(r1, &(0x7f0000000080)=""/38, 0x26) 1m43.272138998s ago: executing program 1 (id=1469): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000a80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x2b, 0x2, 0x120a0020, 0xc, 0xaa6d, 0x5, 0x7fff, 0x0, 0x0, 0x1, 0xffff}}, 0x50) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2000000000) (async) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2000000000) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000002ac0)=[@rdmsr={0x32, 0x18, {0xa33}}, @in_dx={0x82, 0x20, {0x91d, 0x3}}, @wr_drn={0x6e, 0x20, {0x4, 0x7fffffffffffffff}}, @cpuid={0x14, 0x18, {0x7, 0x7}}, @out_dx={0xaa, 0x28, {0xe42d, 0x4, 0x5}}, @wr_drn={0x6e, 0x20, {0x3, 0x6}}, @uexit={0x0, 0x18, 0x73}, @out_dx={0xaa, 0x28, {0x4db1, 0x6, 0x1}}, @wr_crn={0x46, 0x20, {0x3, 0x5}}, @wrmsr={0x1e, 0x20, {0x400000b3, 0x8}}, @set_irq_handler={0xbe, 0x20, {0xcf, 0x1}}, @out_dx={0xaa, 0x28, {0xff76, 0x0, 0x40}}, @code={0xa, 0x79, {"48b800080000000000000f23c80f21f835080060000f23f866ba430066b8080066ef66ba4000ec40d23ec4c239cf80d6a2000066b842000f00d80f0fd99a26410fc7aa800d0000c4827d0ead0d00000048b8da900000000000000f23c80f21f835040060000f23f8"}}, @uexit={0x0, 0x18, 0x9}, @out_dx={0xaa, 0x28, {0x803c, 0x2, 0x8}}, @wrmsr={0x1e, 0x20, {0x8d3, 0x80000001}}, @cpuid={0x14, 0x18, {0x4, 0x80000000}}, @wr_drn={0x6e, 0x20, {0x1, 0x100000001}}, @out_dx={0xaa, 0x28, {0x8114, 0x0, 0x2}}, @code={0xa, 0x65, {"c744240000d8ffffc744240200000000c7442406000000000f01142466b89f000f00d8f3460f1ed0f20f1f4000460f080f35640f013e48b813f78285900402290f23c00f21f835020001000f23f8c4617d50c9f4"}}, @wr_crn={0x46, 0x20, {0x5a18e37928f6cbf5, 0xbd}}, @out_dx={0xaa, 0x28, {0xb667, 0x0, 0x3d8f}}, @rdmsr={0x32, 0x18, {0xa78}}, @set_irq_handler={0xbe, 0x20, {0x47, 0x2}}, @in_dx={0x82, 0x20, {0x189d, 0x4}}, @rdmsr={0x32, 0x18, {0x9be}}, @set_irq_handler={0xbe, 0x20, {0x58, 0x2}}, @set_irq_handler={0xbe, 0x20, {0xea, 0x2}}, @rdmsr={0x32, 0x18, {0x9c8}}, @cpuid={0x14, 0x18, {0x100, 0xfffffffa}}], 0x446}) (async) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000002ac0)=[@rdmsr={0x32, 0x18, {0xa33}}, @in_dx={0x82, 0x20, {0x91d, 0x3}}, @wr_drn={0x6e, 0x20, {0x4, 0x7fffffffffffffff}}, @cpuid={0x14, 0x18, {0x7, 0x7}}, @out_dx={0xaa, 0x28, {0xe42d, 0x4, 0x5}}, @wr_drn={0x6e, 0x20, {0x3, 0x6}}, @uexit={0x0, 0x18, 0x73}, @out_dx={0xaa, 0x28, {0x4db1, 0x6, 0x1}}, @wr_crn={0x46, 0x20, {0x3, 0x5}}, @wrmsr={0x1e, 0x20, {0x400000b3, 0x8}}, @set_irq_handler={0xbe, 0x20, {0xcf, 0x1}}, @out_dx={0xaa, 0x28, {0xff76, 0x0, 0x40}}, @code={0xa, 0x79, {"48b800080000000000000f23c80f21f835080060000f23f866ba430066b8080066ef66ba4000ec40d23ec4c239cf80d6a2000066b842000f00d80f0fd99a26410fc7aa800d0000c4827d0ead0d00000048b8da900000000000000f23c80f21f835040060000f23f8"}}, @uexit={0x0, 0x18, 0x9}, @out_dx={0xaa, 0x28, {0x803c, 0x2, 0x8}}, @wrmsr={0x1e, 0x20, {0x8d3, 0x80000001}}, @cpuid={0x14, 0x18, {0x4, 0x80000000}}, @wr_drn={0x6e, 0x20, {0x1, 0x100000001}}, @out_dx={0xaa, 0x28, {0x8114, 0x0, 0x2}}, @code={0xa, 0x65, {"c744240000d8ffffc744240200000000c7442406000000000f01142466b89f000f00d8f3460f1ed0f20f1f4000460f080f35640f013e48b813f78285900402290f23c00f21f835020001000f23f8c4617d50c9f4"}}, @wr_crn={0x46, 0x20, {0x5a18e37928f6cbf5, 0xbd}}, @out_dx={0xaa, 0x28, {0xb667, 0x0, 0x3d8f}}, @rdmsr={0x32, 0x18, {0xa78}}, @set_irq_handler={0xbe, 0x20, {0x47, 0x2}}, @in_dx={0x82, 0x20, {0x189d, 0x4}}, @rdmsr={0x32, 0x18, {0x9be}}, @set_irq_handler={0xbe, 0x20, {0x58, 0x2}}, @set_irq_handler={0xbe, 0x20, {0xea, 0x2}}, @rdmsr={0x32, 0x18, {0x9c8}}, @cpuid={0x14, 0x18, {0x100, 0xfffffffa}}], 0x446}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000440)={0x10000, 0x4, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) (async) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) (async) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[], 0x118) (async) write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r8, 0x0) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x7b52e4aff0f1e2e1, 0x4}) (async) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000000)={0xc, 0x7b52e4aff0f1e2e1, 0x4}) sendmmsg$inet6(r7, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) (async) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x10, r5, 0xa9c4000) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x10, r5, 0xa9c4000) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x1002, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x4, 0xffffffffffffffff, 0x2000000000000000, 0xcb9, 0x8f], 0xeeee8000, 0x2010d3}) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x1002, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x4, 0xffffffffffffffff, 0x2000000000000000, 0xcb9, 0x8f], 0xeeee8000, 0x2010d3}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r9, 0x400454ce, 0x15) 1m43.102475439s ago: executing program 1 (id=1470): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="600100001000130726bd70000000000000000000000000000000fffff9ffffffffffffff0000002200000000000000004e22000100020003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a0000000000000006000000000000000000000000000000000000001c0000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000100280000000000000068001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000080"], 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m42.74036798s ago: executing program 33 (id=1470): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="600100001000130726bd70000000000000000000000000000000fffff9ffffffffffffff0000002200000000000000004e22000100020003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a0000000000000006000000000000000000000000000000000000001c0000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000100280000000000000068001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000080"], 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m42.25818967s ago: executing program 2 (id=1476): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (rerun: 32) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r5, 0xae80, 0x0) (rerun: 32) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x1000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7f}], 0x1c) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r8, 0xc0585605, &(0x7f0000000500)={0x1, 0x1, @raw_data}) r9 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r9, &(0x7f0000000000), 0x10) (async) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) (async) close_range(r7, 0xffffffffffffffff, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x6, @loopback, 0x8}, @in6={0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x15}, 0x80}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e24, 0x2, @private1, 0x5}], 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0x8a161b80, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m41.756363329s ago: executing program 2 (id=1477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}, {@nfs_export_on}]}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = open$dir(&(0x7f0000000100)='./file1\x00', 0x200000, 0x1a) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000700)={{r5}, "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"}) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', r4, &(0x7f0000000140)='./file1\x00', 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x142, 0x0, &(0x7f0000000580)="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"}) r6 = fsopen(&(0x7f0000000200)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f00000005c0)='#mS\xb2j\xcb\xa18:.)\xc7\xcb\xc5\xd8\x91\xa1\"\xd5\r\x89M;\x99\xd6\x8e?K\x82\xd5\xd7\xab\x10\xea\x14\n\xea\xe9\xcc\xdc\xf3\xc0\xf8\x89\xd0\x0ep\xb1I\x04T[\r&\xf0z\xde\xc0\xf3\xcd\x9a\xae\xa8*v_(\x94]\xdf\xf1\x95!\xb3+\x1aD\xda\xa1G\x06M\xdaz2\xe9\xe6\xda\x92U\xaaN\xff\xca\xb37-<3\xb28\xb8:UQ\x95|\xe5\xaa\x0e\xe7{\xd4T\x84\x83\x86\x9d', 0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x84) 1m41.224332615s ago: executing program 2 (id=1478): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f008, 0x2400}) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) r2 = socket$packet(0x11, 0x3, 0x300) futex(&(0x7f0000000040)=0x2, 0xb, 0x2, 0x0, &(0x7f0000000100)=0x1, 0x2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r4 = eventfd(0x5) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000002c0)={0xb03, 0x3000, 0x4, r4, 0x4}) close(r3) (async) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async, rerun: 32) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000009, 0x20010, 0xffffffffffffffff, 0x6c305000) (async, rerun: 32) futex(&(0x7f0000000040)=0x1, 0x1, 0x0, &(0x7f0000000180)={0x77359400}, 0x0, 0x1) (async) r5 = fanotify_init(0x20, 0x1) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) (async, rerun: 64) r8 = syz_usb_connect(0x3, 0x24, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRES64=r5], 0x0) (async, rerun: 64) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket(0x2, 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r9, 0x84, 0x82, &(0x7f0000000300)={r10, 0x10, 0x7}, 0x8) syz_usb_control_io$uac1(r8, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r8, 0x0, 0x0) (async) syz_usb_control_io(r8, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) vmsplice(r7, &(0x7f0000000500)=[{&(0x7f0000000040)='R', 0x1}], 0x1, 0x8) lseek(r0, 0x3, 0x2) (async) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f00000001c0)={0x2, r6}) (async) ioctl$F2FS_IOC_DECOMPRESS_FILE(r5, 0xf517, 0x0) 1m40.935811639s ago: executing program 2 (id=1480): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="600100001000130726bd70000000000000000000000000000000fffff9ffffffffffffff0000002200000000000000004e22000100020003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000fe8000000000000000000000000000aa0000000000000000000000000000000008000000000000000a000000000000000600000000000000000000000000000000001900000000000300000000000000000000000000000000000000000000000200000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000100280000000000000068001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e000000080"], 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m40.730655998s ago: executing program 2 (id=1482): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f0000000240)=[{0xe, 0xa1, 0x0, 0xfd, @tick=0xc5a, {0x10, 0x49}, {0xe}, @raw8={"1f000e0000000100"}}], 0x1c) 1m40.586762018s ago: executing program 2 (id=1484): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x408c0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24048810}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x140c, 0x20, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x440c0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000380)={0x30c, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8001, 0x49}}}}, [@NL80211_ATTR_TX_RATES={0x2e4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x7, 0x2, 0x8, 0x8001, 0x7, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xcc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x1}, {0x0, 0x6}, {}, {0x0, 0x5}, {0x7}, {0x5, 0x1}, {0x1, 0x6}, {0x1, 0x4}, {0x7}, {0x1, 0x9}, {0x3, 0x9}, {0x2, 0x7}, {0x7, 0x2}, {0x1, 0x2}, {0x2, 0x6}, {0x7, 0x7}, {0x5, 0x5}, {0x2, 0x3}, {0x7, 0x5}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0x5}, {0x3, 0x3}, {0x6, 0x5}, {0x1, 0x6}, {0x4, 0xa}, {0x0, 0x2}, {0x7, 0xa}, {0x5, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x3, 0x6, 0x8, 0x8, 0xbd9, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x1, 0x7fff, 0xfa93, 0x5, 0xce5, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x60, 0x1e, 0x4, 0x9, 0x3, 0x5, 0x1b, 0x48, 0xc, 0x9, 0x6c, 0x24, 0x18, 0x60, 0x12, 0x1b, 0x1b, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x4}, {0x3, 0x5}, {0x2, 0x5}, {0x1, 0x3}, {0x0, 0x9}, {0x1, 0x6}, {0x5, 0x3}, {0x2, 0xa}, {0x2, 0x4}, {0x1, 0x3}, {0x1, 0x7}, {0x6}, {0x3, 0x9}, {0x1, 0x3}, {0x1, 0x6}, {0x6, 0x9}, {0x5, 0x3}, {0x5, 0x2}, {0x0, 0x5}, {0x5, 0x3}, {0x4, 0x6}, {0x3, 0x2}, {0x0, 0xa}, {0x5, 0x7}, {0x4, 0xa}, {0x3}, {0x1, 0x7}, {0x3, 0x2}, {0x1, 0x4}, {}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x7}, {0x6, 0x6}, {0x7, 0x4}, {0x3, 0x3}, {0x2, 0x7}, {0x4, 0x7}, {0x1, 0x1d}, {0x2, 0x5}, {0x1, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xe, 0x9e, 0x7, 0x4, 0x8, 0x1, 0xb]}}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x4, 0x6}, {0x2, 0x1}, {0x7, 0x7}, {0x3, 0x2}, {0x6, 0x6}, {0x1, 0x7}, {0x6, 0xa}, {0x7, 0x7}, {0x0, 0x3}, {0x2}, {0x7, 0x2}, {0x4, 0x8}, {0x0, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x1}, {0x6, 0x5}, {0x2, 0x7}, {0x7}, {0x2}, {0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x890, 0x3, 0xba, 0x7fff, 0x3, 0xdf, 0x7, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x2, 0x8}, {0x3, 0x8}, {0x6}, {0x0, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x6, 0x4}, {0x7, 0x2}, {0x5, 0x6}, {0x7, 0x7}, {0x2, 0x8}, {0x4}, {0x4}, {0x3, 0x6}, {0x7, 0xa}, {0x3, 0x2}, {0x7, 0x9}, {0x2, 0x4}, {0x4, 0x1}, {0x7, 0x8}, {0x4, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x5, 0x7}, {0x3, 0x2}]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x1, 0x4, 0xe7, 0x0, 0x5, 0xbcf3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x1}, {0x5, 0x4}, {0x5, 0x5}, {0x3, 0x9}, {0x1, 0x9}, {0x2, 0x8}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x1, 0x8}, {0x0, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x1ff, 0x8, 0x7, 0x8, 0x4, 0x3, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x9, 0x5, 0xfc01, 0x9, 0x9, 0x9, 0xfff]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x5}, {0x1, 0xa}, {0x5, 0x7}, {0x5, 0x9}, {0x7, 0x2}, {0x4, 0x4}, {0x3, 0x7}, {0x1, 0xa}, {0x7, 0x7}, {0x5, 0xa}, {0x0, 0x8}, {0x2, 0x5}, {0x7, 0xa}, {0x0, 0x8}, {}, {0x7, 0x5}, {0x0, 0x8}, {0x7, 0xa}, {0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x3, 0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x3}, {0x5, 0x1}, {0x7, 0x8}, {0x7, 0x7}]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x3, 0x1, 0x49e7, 0xcd, 0x6, 0xfff7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x9}, {0x0, 0x7}, {0x2, 0x4}, {0x6, 0x3}, {0x5}, {0x1, 0x3}, {0x6, 0x1}, {0x7, 0x9}, {0x3, 0x2}, {0x2, 0x9}, {0x3}, {0x1, 0x3}, {0x2}, {0x4, 0x3}, {0x4, 0x2}, {0x5, 0x7}, {0x5, 0x6}, {0x5, 0x8}, {0x0, 0x5}, {0x6, 0x3}, {0x2, 0x6}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x7, 0x2}, {0x7, 0x4}, {0x6, 0x8}, {0x2, 0x4}, {0x3, 0x4}, {0x2, 0x8}, {0x7, 0x8}, {0x0, 0x1}, {0x0, 0x8}, {0x5, 0x6}, {0x0, 0x8}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x6}, {0x2, 0x5}, {0x7, 0x1}, {0x1, 0x7}, {0x3, 0x4}, {0x0, 0x3}, {0x5, 0x6}, {0x0, 0x6}, {0x1}, {0x7, 0x3}, {0x6, 0x7}, {0x1, 0x4}, {0x2, 0x9}, {0x6, 0xa}, {0x3, 0x3}, {0x3}, {0x2, 0x1}, {0x1, 0x8}, {0x0, 0x7}, {0x6, 0x3}, {0x0, 0xa}, {0x5, 0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x7, 0x4}, {0x2, 0x2}, {0x5, 0x1}, {0x1, 0x7}, {0x2, 0x1e}, {0x1, 0x6}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x6}, {0x7, 0x2}, {}, {0x5, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0xffff, 0x1ff, 0x3, 0xff32, 0x2, 0x1]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x3, 0x8, 0xa, 0x3, 0x3, 0x4]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x9, 0xffff, 0x1, 0xfffe, 0x55e, 0xd42a, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf001, 0xff, 0x1, 0x5, 0x1, 0x5, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xe8}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x800}, 0x1) sync() r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r6) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r3) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r7, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x2044000) (async, rerun: 32) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xe8, r7, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3, 0x12}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfd26}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_DATA={0x9f, 0xc5, "8da958866bf51b9fbd89717f29bee906472ddca22a0590e9dd916bd54e28dda76e154864ddfed7996414381f629e0ead6afb4626cb84171173676b36ba3b83a71ffe0c207533278aa3e58e3b5bd5b986dc4f7460a28ebe2f866eadbbf40f10f715ec6fbd333d999cac6be449906669fee06a70026242c079b2dcb55b9afa07e6bf92624953a214c50d502b505be64e7d7fc08e40b0cddf7aafe34d"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x60000814}, 0x6000040) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ac0), r1) sendmsg$GTP_CMD_ECHOREQ(r8, &(0x7f0000000bc0)={&(0x7f0000000a80), 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x6c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @private2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_VERSION={0x8, 0x2, 0xd}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x3ee85bfe9cdea7ef) (async) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGICOUNT(r10, 0x545d, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000c00)={0x0, 0x7, 0x3008, 0x1}) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xd4, r11, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) r12 = open(&(0x7f0000000e40)='./file0\x00', 0x40800, 0x5e) openat$nci(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000ec0)={0x6, 0x3436324d, 0x3f00, 0x5, 0x3, @stepwise={{0x5, 0xfffff4c5}, {0x7fffffff, 0x10000}, {0x0, 0x8000}}}) (async) poll(&(0x7f0000000f00)=[{r12, 0x21a}], 0x1, 0xc32) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000f40), 0xffffffffffffffff) 1m25.492987875s ago: executing program 34 (id=1484): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x408c0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, r2, 0x100, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x9}}}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24048810}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x140c, 0x20, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x440c0) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000380)={0x30c, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8001, 0x49}}}}, [@NL80211_ATTR_TX_RATES={0x2e4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x7, 0x2, 0x8, 0x8001, 0x7, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0xcc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x1, 0x1}, {0x0, 0x6}, {}, {0x0, 0x5}, {0x7}, {0x5, 0x1}, {0x1, 0x6}, {0x1, 0x4}, {0x7}, {0x1, 0x9}, {0x3, 0x9}, {0x2, 0x7}, {0x7, 0x2}, {0x1, 0x2}, {0x2, 0x6}, {0x7, 0x7}, {0x5, 0x5}, {0x2, 0x3}, {0x7, 0x5}, {0x0, 0x6}, {0x0, 0x7}, {0x1, 0x5}, {0x3, 0x3}, {0x6, 0x5}, {0x1, 0x6}, {0x4, 0xa}, {0x0, 0x2}, {0x7, 0xa}, {0x5, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x3, 0x6, 0x8, 0x8, 0xbd9, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x1, 0x7fff, 0xfa93, 0x5, 0xce5, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x60, 0x1e, 0x4, 0x9, 0x3, 0x5, 0x1b, 0x48, 0xc, 0x9, 0x6c, 0x24, 0x18, 0x60, 0x12, 0x1b, 0x1b, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x1, 0x4}, {0x3, 0x5}, {0x2, 0x5}, {0x1, 0x3}, {0x0, 0x9}, {0x1, 0x6}, {0x5, 0x3}, {0x2, 0xa}, {0x2, 0x4}, {0x1, 0x3}, {0x1, 0x7}, {0x6}, {0x3, 0x9}, {0x1, 0x3}, {0x1, 0x6}, {0x6, 0x9}, {0x5, 0x3}, {0x5, 0x2}, {0x0, 0x5}, {0x5, 0x3}, {0x4, 0x6}, {0x3, 0x2}, {0x0, 0xa}, {0x5, 0x7}, {0x4, 0xa}, {0x3}, {0x1, 0x7}, {0x3, 0x2}, {0x1, 0x4}, {}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x7}, {0x6, 0x6}, {0x7, 0x4}, {0x3, 0x3}, {0x2, 0x7}, {0x4, 0x7}, {0x1, 0x1d}, {0x2, 0x5}, {0x1, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xe, 0x9e, 0x7, 0x4, 0x8, 0x1, 0xb]}}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x4, 0x6}, {0x2, 0x1}, {0x7, 0x7}, {0x3, 0x2}, {0x6, 0x6}, {0x1, 0x7}, {0x6, 0xa}, {0x7, 0x7}, {0x0, 0x3}, {0x2}, {0x7, 0x2}, {0x4, 0x8}, {0x0, 0xa}, {0x1, 0x2}, {0x4, 0x7}, {0x1}, {0x6, 0x5}, {0x2, 0x7}, {0x7}, {0x2}, {0x7, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x890, 0x3, 0xba, 0x7fff, 0x3, 0xdf, 0x7, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x2, 0x8}, {0x3, 0x8}, {0x6}, {0x0, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x6, 0x4}, {0x7, 0x2}, {0x5, 0x6}, {0x7, 0x7}, {0x2, 0x8}, {0x4}, {0x4}, {0x3, 0x6}, {0x7, 0xa}, {0x3, 0x2}, {0x7, 0x9}, {0x2, 0x4}, {0x4, 0x1}, {0x7, 0x8}, {0x4, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x5, 0x7}, {0x3, 0x2}]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x1, 0x4, 0xe7, 0x0, 0x5, 0xbcf3]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x1}, {0x5, 0x4}, {0x5, 0x5}, {0x3, 0x9}, {0x1, 0x9}, {0x2, 0x8}, {0x3, 0x4}, {0x3, 0xa}, {0x6, 0x5}, {0x1, 0x8}, {0x0, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x1ff, 0x8, 0x7, 0x8, 0x4, 0x3, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x9, 0x5, 0xfc01, 0x9, 0x9, 0x9, 0xfff]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x5, 0x5}, {0x1, 0xa}, {0x5, 0x7}, {0x5, 0x9}, {0x7, 0x2}, {0x4, 0x4}, {0x3, 0x7}, {0x1, 0xa}, {0x7, 0x7}, {0x5, 0xa}, {0x0, 0x8}, {0x2, 0x5}, {0x7, 0xa}, {0x0, 0x8}, {}, {0x7, 0x5}, {0x0, 0x8}, {0x7, 0xa}, {0x6}, {0x0, 0x4}, {0x4, 0x9}, {0x3, 0x7}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x3}, {0x5, 0x1}, {0x7, 0x8}, {0x7, 0x7}]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x3, 0x1, 0x49e7, 0xcd, 0x6, 0xfff7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x1, 0x9}, {0x0, 0x7}, {0x2, 0x4}, {0x6, 0x3}, {0x5}, {0x1, 0x3}, {0x6, 0x1}, {0x7, 0x9}, {0x3, 0x2}, {0x2, 0x9}, {0x3}, {0x1, 0x3}, {0x2}, {0x4, 0x3}, {0x4, 0x2}, {0x5, 0x7}, {0x5, 0x6}, {0x5, 0x8}, {0x0, 0x5}, {0x6, 0x3}, {0x2, 0x6}, {0x0, 0xa}, {0x2, 0xa}, {0x0, 0xa}, {0x7, 0x6}, {0x0, 0x3}, {0x7, 0x2}, {0x7, 0x4}, {0x6, 0x8}, {0x2, 0x4}, {0x3, 0x4}, {0x2, 0x8}, {0x7, 0x8}, {0x0, 0x1}, {0x0, 0x8}, {0x5, 0x6}, {0x0, 0x8}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x6}, {0x2, 0x5}, {0x7, 0x1}, {0x1, 0x7}, {0x3, 0x4}, {0x0, 0x3}, {0x5, 0x6}, {0x0, 0x6}, {0x1}, {0x7, 0x3}, {0x6, 0x7}, {0x1, 0x4}, {0x2, 0x9}, {0x6, 0xa}, {0x3, 0x3}, {0x3}, {0x2, 0x1}, {0x1, 0x8}, {0x0, 0x7}, {0x6, 0x3}, {0x0, 0xa}, {0x5, 0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x7, 0x4}, {0x2, 0x2}, {0x5, 0x1}, {0x1, 0x7}, {0x2, 0x1e}, {0x1, 0x6}, {0x4, 0xa}, {0x4, 0x3}, {0x0, 0x6}, {0x7, 0x2}, {}, {0x5, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0xffff, 0x1ff, 0x3, 0xff32, 0x2, 0x1]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x3, 0x8, 0xa, 0x3, 0x3, 0x4]}}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x9, 0xffff, 0x1, 0xfffe, 0x55e, 0xd42a, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf001, 0xff, 0x1, 0x5, 0x1, 0x5, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xe8}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x800}, 0x1) sync() r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r6) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r3) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r7, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x2044000) (async, rerun: 32) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xe8, r7, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x3, 0x12}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x5}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfd26}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_VENDOR_DATA={0x9f, 0xc5, "8da958866bf51b9fbd89717f29bee906472ddca22a0590e9dd916bd54e28dda76e154864ddfed7996414381f629e0ead6afb4626cb84171173676b36ba3b83a71ffe0c207533278aa3e58e3b5bd5b986dc4f7460a28ebe2f866eadbbf40f10f715ec6fbd333d999cac6be449906669fee06a70026242c079b2dcb55b9afa07e6bf92624953a214c50d502b505be64e7d7fc08e40b0cddf7aafe34d"}]}, 0xe8}, 0x1, 0x0, 0x0, 0x60000814}, 0x6000040) (async, rerun: 32) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000ac0), r1) sendmsg$GTP_CMD_ECHOREQ(r8, &(0x7f0000000bc0)={&(0x7f0000000a80), 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x6c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @private2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}, @GTPA_VERSION={0x8, 0x2, 0xd}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x3ee85bfe9cdea7ef) (async) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGICOUNT(r10, 0x545d, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000c00)={0x0, 0x7, 0x3008, 0x1}) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), r1) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000e00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0xd4, r11, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) r12 = open(&(0x7f0000000e40)='./file0\x00', 0x40800, 0x5e) openat$nci(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000ec0)={0x6, 0x3436324d, 0x3f00, 0x5, 0x3, @stepwise={{0x5, 0xfffff4c5}, {0x7fffffff, 0x10000}, {0x0, 0x8000}}}) (async) poll(&(0x7f0000000f00)=[{r12, 0x21a}], 0x1, 0xc32) ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000f40), 0xffffffffffffffff) 27.552936024s ago: executing program 4 (id=1893): r0 = syz_open_dev$video(&(0x7f00000001c0), 0xa7, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000740)={0x1, @sdr={0x50323234, 0x5}}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) accept4(r1, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)=""/185, 0xb9}, {&(0x7f0000000700)=""/228, 0xe4}], 0x2}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) 27.37280123s ago: executing program 4 (id=1894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}, 0x1, 0x0, 0x0, 0x15}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x900, 0x0, 0x44080}, 0x0) 27.160402977s ago: executing program 4 (id=1895): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x10, 0x84, 0x8}], 0x10}, 0x41) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 26.96526197s ago: executing program 4 (id=1897): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) fcntl$setpipe(r0, 0x407, 0x1) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x5e) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 26.653362557s ago: executing program 4 (id=1899): socket$nl_route(0x10, 0x3, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x80) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40051}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c00000009060108c10130fb3e27eb76cf0000000000000000070000000900020073000031000000000500010023000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00000500070088000000060005404e220000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000506010001004253118ed2991507000000090003207379e1cfc2507a01000000000900020073"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0xbf48ce3, "1803c809800000000800000000000000000000000000d63175876b4c69a600", 0xffffffffffffffff}) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000400)={0xf6a, "56603d9c3245d1e6e63c3fad7d48ed51000000000800040000000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000340)={"0c137b43cc00d731ff00070000007dab00", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r9, 0xc0383e04, &(0x7f0000000100)={""/32, 0x0, 0x0, 0xfffffffffffffe4d, 0x0, 0x0}) close(r4) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f00000000c0)={0x2, 0x2000}, 0x4) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000001400)={[0xfffffffffffffffd]}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r11) sendmsg$DEVLINK_CMD_RATE_SET(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r12, 0x801, 0x70bd2a, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)={0x208, r12, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x800}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x4}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x82, 0xa9, @random="10bfc1455aac8ed9b7afcbe996b00cff3e85d50cbf83034ea8649913e411aed756cc2f9c0b02b0e82f580b3704d51576d6777ec4ff47d77b7d0efd796b0adc3ccc4b195abcaed539628d0ee200b9977f8ebccf48a515ad85c063855704f810d58dd3b99b6bc0df39291c24cf52673275820b950a0137e6ab4caef974324c"}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xd0, 0xa8, @random="3c26c44769f51ef4c71a5037052ebe421ff08b2e014014d29c7db2362354318ec07a6657158bc39657861ad624895f81ca51c8fd9ce1ba3212dc87c00823bf9c27bb87bbd5418fd9a75e9523029920b28d41830cc2174f27fcc074240af4cffbe2be7b85a80a3e9f2bf44a778be1369f8f4be84e93109fa692bdc9bfb0ffae53ece8e5cc53e4f7f336f3252afac722d63c6ba6d1cef839a120a71d45bd1c92b5f2a99e758d0284620d62a47fe16d7b428969ef94a3a3e889fddf1d1e4b58f7e5e5d70303a7594ad3e3283bd3"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x69, 0xa9, @random="1c93c4b14b3e86d8c1726e4e618d7cf34c2ee9f1c38268381c5e474a67071c9a6837c11a4fca1b44ededd0cec76606cb63be9fb2d2e7348b6d75cc6008b8398c64cb7817a2f68a88aaa16754cdf536212fb2b8f5f856cfb19cf9f90524ad9a817e86cb92d8"}]}, 0x208}, 0x1, 0x0, 0x0, 0x8004}, 0x40) 26.116491626s ago: executing program 4 (id=1901): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYBLOB="f9826a5ef51a26f75392327d09ef2892e8e97a8db3a5dd7e4468e4d2ab88866e728b845177664e46d7e9126a76070b0a7cfa4419b50bf4106c1e262ad2401eceefedcbce205c26e2048c07b1bcb6b06b8f0bee3835e43db77631597b2eceb3d5ce9223a19e5c1b13ba23089207a28fc6bf76d13e7d246c595a26", @ANYRESOCT=r0, @ANYRESHEX]) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r2 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a11000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0) (async) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) bind$tipc(r3, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x1, 0x1}}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0) (async) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0xfff7, 0x58, 0x9, 0x6, 0x8000000000000001, r1}) 25.532380245s ago: executing program 35 (id=1901): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYBLOB="f9826a5ef51a26f75392327d09ef2892e8e97a8db3a5dd7e4468e4d2ab88866e728b845177664e46d7e9126a76070b0a7cfa4419b50bf4106c1e262ad2401eceefedcbce205c26e2048c07b1bcb6b06b8f0bee3835e43db77631597b2eceb3d5ce9223a19e5c1b13ba23089207a28fc6bf76d13e7d246c595a26", @ANYRESOCT=r0, @ANYRESHEX]) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) r2 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a11000000e8fe55a1180015000600142603600e1209000a0044000000a80016000a0001", 0x37}], 0x1}, 0x0) (async) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) bind$tipc(r3, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x1, 0x1}}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000020"], 0x33fe0) (async) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0xfff7, 0x58, 0x9, 0x6, 0x8000000000000001, r1}) 8.08130084s ago: executing program 7 (id=1983): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000001c0)="d8ae", 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0x48, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x6e0, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x6bc, 0x3, 0x0, 0x1, [{0x524, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x288, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xfc, 0x1, "08f99582055d3f14c0b53f368e542c4e612f38d69cabffb6cb073d13762544581fdf71b76dca1e0248c47c5a5f81b9e12f4d70d459eb1dcf6ca9842cfd3fd672c7916d40789cfec8254e368ca5a7a4a80fef9fbe829b31fd604b878d6b681a7044c61381c56b1a7d293458e8c02b35323284e10e5416f982e691113fa5b68f7ba24ca662e1fe9bbc56ee955fa63135ad82930f93cc8ad20891c9947865581cd10974a999f4b2ed216994853dca56573914f916c255b50d95d491bb1011660e5f33f1655dbf735f44931a16351d1575c7528033e2a4240293a17a63a482c02ebdf04161ab44b8dc2b3f1e06f0dd92cdbb1e458c219485ca3f"}, @NFTA_DATA_VALUE={0xb, 0x1, "f28dfb0c093d8e"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xfa, 0x1, "4cdf1c617444a4ff1651aa1a9a2629820d0378d6f0a40148f8422d87fd5872b6ea060f2f1842183f40cce251963592cad9f651b4c5cd2371c34e94de87135141026d1da2d75e81ceef6a71492fadf2e8259f657a38a1af6bead27ed74d528d6c04f7381f908c3bab1d38cb11b93151f2eefe38bed04fe0f05abf562a821675d9ed85957bcb2e77ad908eb7d3fdc52410a62465e267a8a176a46264f4cfdadfea6a1cf4ba8cd49f640dff43ca5659d275a21e982484c3596d6dff0274d4c00dd72a4c30d5973ce846378f872fb387cbb9dfab60d43b84271346252be0f86457a772e5d47b4a1156f80d86c1417f176c661f3a86cab722"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4800}, @NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FWD_NFPROTO={0x8}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_KEY={0x1e0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x75, 0x1, "50def1fcc27c513b98ee9d476f8465b0b70ca5f2d5a0779038090a7df4f7367bf397f7a12bbe380c68bf587c214cc137b512ba833c695e198e183feaad4ba70c7266a4cfe127fa9421a0f779b454a0b3f3cac7c465435dcd92f8c49a01108c6dfe2b888617a6a7f6d793bb30ae75a47f16"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xfd, 0x1, "698a16a91f5474c1ec0c54159720bb51e92511ce7565fc16e508c91477cb2624979c93b9d0ac556269b5e1c4ba5b2416e8f7e1128b62e2694480957a05a6abade7ff19138db15235a0c193a2e5b388c470f19168288dfd49f41d98babebf0663efabe13c8b23af3aba6bff05eeba568e0fec25b78869d887a6ae2dacae6da0523cef4d1429153d0250b01765056bcfa56c9c7a3f186d036973d12d304b6a4516286d1484a61dbb14c1c2c3dfc1e84ded81a164a3b8d49781f8270b3a2d2c0756b40406cc819f2e20a3fbd90dd29d485c662a3d4f52b47866342588ce0b540c3addf9443befada58abed322e9dd533fbf97b5e748ef8520f568"}]}, @NFTA_SET_ELEM_KEY={0x20, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @last={{0x9}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9ab4}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5}]}}}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}]}, {0x194, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0x70, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x114, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x7a4}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000780)={&(0x7f00000006c0)="f0ad4638", 0x4, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f00000002c0)={r2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f00000002c0)={'bond0\x00', @random="0100"}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b0001000000008203ff03007e00"/45], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r6, 0xc014563b, &(0x7f0000000540)={0x2}) write$char_usb(r5, &(0x7f0000000300)="798c2b1d96", 0x5) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r7, 0x0, r9, 0x0, 0x88000cc, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa6, 0x9b, 0xbc, 0x10, 0x954f, 0x4199, 0xf76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x33, 0x2, 0x0, 0x2, 0xc, 0x7}}]}}]}}, 0x0) fcntl$setpipe(r8, 0x407, 0x100004) write$eventfd(r8, &(0x7f0000000240), 0xffffff14) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r4, 0x400, 0x0) r10 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x100, 0x3, [0x2, 0x3, 0x5a6]}, &(0x7f0000000040)=0xe) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000080)={r11, 0xf3e}, 0x8) r12 = accept4$inet6(r7, &(0x7f0000000200), &(0x7f0000000340)=0x1c, 0x80000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r12, 0x81f8943c, &(0x7f0000000480)) 5.716312307s ago: executing program 3 (id=1999): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000081}, 0x48000) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000080)={[{0x9, 0x7, 0x3, 0x1c, 0x5, 0x2, 0x4e, 0x3, 0xf9, 0x1, 0x80, 0xc, 0x8000200000000000}, {0x6, 0x80, 0x8, 0xc4, 0x4, 0x7, 0x7, 0xf1, 0x7, 0xff, 0x41, 0x7d}, {0xe2a5, 0x4, 0x1, 0x9, 0x2, 0x6, 0x8, 0xb, 0xff, 0x6, 0x3, 0x3, 0x8}]}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8a002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2a) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000006f020000000000000000026f00"]) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x10000, 0x0, 0xeeef0000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r7 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382) r8 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1) writev(r8, &(0x7f0000002a00)=[{&(0x7f0000002840)="d8bf69db0becdfeeb1c0c547e1fb6386b08c57fa3faf098e3fb752056f1355c1a96083a7d85d2751904e02e1e5f623fffc71dc0c26de94b9761ca31c2949ae6019d23b451d42be01268065f690a3787937cf5743f35be19dcea3c8ca413ad12cb53336fb936481b620c1e4db3b9e23a2fa3e55200e90241fa8c21e5f4350d6a7eba8d71ccc8c6bc34483ff5c66a1c200dfdd06c7964346a72190c80d756613fd3f447ee5ecbd254c107b88904b1fc7fb95350fd6712891feba7b0774a0b6fe8da887a93f36f53fd04faf5b912567e6ff34caace632de299bc16173", 0xdb}, {&(0x7f0000000580)="b4ccdc24e4d66b52c84118b56f98df6ac6e56e5662ef82b4a7e8ecbbc43cc8e39f259668d30405866a6e6a18ffd87d8211a53ddec0ba0195ca7602e5dd2aa3f7ba5263248f4445763b32cd953b26704db7f77b26641f49fbf4aafb757f280db63b6a9d39ca6fa440ae3074c7c8355b41b805217a761abf7389cba28e10ac73d3339573f7804b75d0e0a2ecee4decf162f6aeefd5ab1d6ed1191263e6d8fc1da4e76cc26a", 0xa4}, {&(0x7f00000000c0)="2ed16bcb5f550dd7981dcaf6685880d986c568d565d067c837d26964f5eec0561499866d836d7c944762dfa163589f08fc8a8ed656", 0x35}, {&(0x7f0000000480)="d40a34cd8a98267a592166c6bb023bbba1fbc5a6e9a5d1a9b5a719e1d144c6ecf5f9b86baa83c8724898d6addce223138c62b5f0c9ece9dcfb93a8d54f70dddd741d74c59caae4067049550b", 0x4c}], 0x4) ioctl$LOOP_CHANGE_FD(r7, 0x4c00, r8) ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x25, 0xd, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x3, 0x800]}) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac00800", 0x26}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 4.970648055s ago: executing program 7 (id=2000): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000300)=ANY=[@ANYRES8=0x0], 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000000)='rpc_pipefs\x00') syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 4.012053894s ago: executing program 3 (id=2006): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW2(r0, 0x5433, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff9, &(0x7f0000000180)={0x0, 0x3938700}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r2 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000000)={0x27, 0x1, 0x0, "3a8e00000034b52ba75066c27891ca55e21f0000000000b2b678d200", 0x32344d59}) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x2, 0x90000) r4 = accept4$bt_l2cap(r3, 0x0, &(0x7f00000001c0)=0xfffffffffffffe77, 0x80000) open_by_handle_at(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000100000920000005000000ffff00006cf6000004000000"], 0x26ba2) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r6, 0x110, 0x7, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0xfe, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1c4) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x2b, 0x0, 0x10000008, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0xfffffffc}}, 0x50) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r7, &(0x7f00000062c0)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x100000000003ff, {0x0, 0x12}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f00000088c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}) getdents64(r9, 0x0, 0x0) mount$cgroup2(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x203, &(0x7f0000000140)={[{@memory_localevents}, {@memory_hugetlb_accounting}], [{@obj_user={'obj_user', 0x3d, './binderfs/binder1\x00'}}]}) 3.752562838s ago: executing program 6 (id=2008): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00"], 0x51) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) 3.685051844s ago: executing program 6 (id=2009): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000100)="c805f08017fefdccacb61c1f0a348ef4d65c1a8661af95913979fb20dcc50d8154bc6adf", 0x24}], 0x1, 0x0, 0x0, 0x80}}], 0x1, 0x200c8180) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000340)=0xfdd) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x9, 0xa2f67) r5 = dup2(r4, r0) write$uinput_user_dev(r5, &(0x7f0000000380)={'syz1\x00', {0x6, 0x0, 0xfdf0, 0x2}, 0x16, [0x9, 0x3ff, 0x2, 0x2, 0x652, 0x2, 0x9, 0xd, 0x7, 0x100, 0xa, 0xa, 0xf, 0x3, 0x54f, 0x9, 0x8, 0x3, 0x7f, 0x9, 0x6, 0x3, 0x3, 0xe395, 0xc, 0x3, 0x2, 0x4, 0x33, 0x40, 0x8, 0x4, 0xffffffff, 0x4, 0x1, 0x401, 0xfa, 0x2, 0x80000000, 0xfffffff7, 0xcb97, 0x2, 0x48ec, 0x3, 0x0, 0x7, 0x0, 0x7, 0x3, 0xffffffff, 0x1, 0x20000000, 0x1, 0x0, 0x6, 0xe, 0xffffffe3, 0x36, 0xe74, 0x7, 0x4, 0xfffffffd, 0x4, 0x7], [0x7, 0xb13d, 0x2, 0x7, 0x6, 0x0, 0x4, 0x1, 0x153, 0x1, 0x1, 0x3, 0xf0, 0x5, 0xfffffffb, 0x2, 0x7, 0x980, 0x9, 0x9, 0x3, 0x0, 0x1, 0x9, 0x219b, 0x0, 0xffffff00, 0x1, 0x9, 0x0, 0xde4, 0x9, 0xc, 0x7, 0x7ff, 0x7, 0x8, 0x4, 0xc6ab, 0x5, 0x88c1, 0x0, 0xfffffff7, 0x8, 0x3, 0x5, 0xa7, 0x0, 0x3, 0x9, 0x1, 0x5, 0x4a22, 0x4, 0x9, 0x9, 0x6, 0x7, 0x4, 0x3, 0xff, 0xc2, 0x8], [0x9, 0x3, 0x5, 0xcb, 0xffffffff, 0x8, 0x9, 0xf, 0xfb8, 0x5, 0xffff, 0x80000001, 0x3, 0xff, 0x7ff, 0x0, 0x8, 0x8a59, 0xf0d, 0x4, 0x3, 0x1, 0x80000000, 0x0, 0x1, 0x6, 0x9, 0x7, 0x5, 0x8, 0x4, 0x8, 0x1, 0x9, 0x218, 0x9, 0x2800, 0x100, 0x40, 0x8, 0xfc, 0xfffffff2, 0x7, 0x2, 0x1, 0x7, 0x7, 0x1, 0x8, 0x5, 0x704, 0x6, 0xe, 0x8, 0x6, 0xbd38, 0x2, 0xf4, 0x7, 0x1, 0x6, 0x5, 0xc1a1, 0x7], [0x9, 0x0, 0x7, 0x0, 0x0, 0x7, 0x7, 0x6, 0x9286, 0x7, 0xb0, 0x7923, 0x8, 0x0, 0x80000001, 0x1, 0x1ff, 0x2b14, 0xa, 0x100, 0x1, 0x3, 0x2, 0x3, 0x6, 0x1, 0x4, 0x6, 0x5, 0x20, 0x3, 0x5, 0x1000, 0x40, 0x1, 0x5, 0x3, 0x0, 0x2, 0x8fa, 0x4, 0x8, 0x8, 0x5, 0xfffffffc, 0x8, 0x44e0, 0x1, 0x4, 0xff, 0x1, 0x5, 0x1, 0x7f4, 0xffff, 0x3, 0x2000200, 0x7, 0x5, 0x7fffffff, 0xeed, 0x8, 0xffffffff, 0xd6f5]}, 0x45c) 3.58841342s ago: executing program 3 (id=2011): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) mount(0x0, 0x0, &(0x7f0000000040)='virtiofs\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="f30fbd020f060f001966b80d010f00d066bad00466ed0f2382d9c8c4e17d50f80f8c8c2e000066ba4200ed"}], 0x1, 0x6a, 0x0, 0x39) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) getcwd(&(0x7f00000000c0)=""/232, 0xe8) 3.339270318s ago: executing program 5 (id=2012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}, 0x1, 0x0, 0x0, 0x15}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, 0x0, 0x44080}, 0x0) 3.339041204s ago: executing program 5 (id=2013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef4fc94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75beb926118fb7af49ecc00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cf7cadb29c697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f569a15bfd30f671c0a2fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb233267ef663936ccf25f7597a2270724527bf468d22786d0548b25582180b72c51742c4e5c373a1008dd4cfba508e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30237a6e0229fb4562cb8df3d4e64b28e15c075e59554e9d61a6065d49c1e765a49195cf5d6b1e2b6192447817fedfe41fcdf9a4fc5af567906e4b6453da7b97eac255cc253d7bceba09f67da4815438583c6843366b76d9e9277558e48681e9cfa920b47aea0e5c46ef86ea7f1ef534cf7565b24b833ba2cbfe60e6271614850dd68f2a8a6be4f315b83abb8e2699ed8e2a4b3506f9dacbb180c4deeef7489f49faf34cdf4e91a402956564f854d71c892e4aada1c91647ce45d4834d000e8d5be1773ecae388e511228977a69d4cc67fbab60ee1555a219e41eebc31807a87d9cbe88a8b05959e1a988f6ea6ed73a6ac1ec2f3d74d73eaa91a39308e008b7fa1ecc2a020d950a777c0d8d131416ef55a4ec041113df65ba4aea92fcb3e2268510f316bd17f04993b6473338fe7c08fd9874e743a31582162232c7d6c614e7b3513abcc0feb99b2c9111300004fe291f5bd682c039183e61c1fdac90b2a015939a8d10b07a05e99e5772b4b9329275cef8de2b066d4e4d421e4a0a69cdd8f674b12f5b3fa764e4b1e9f4d767e252e37577813a03f18da16d598fddcf4be590d9f65f64c647cb2f330a614fe688d3d80182ed8aa59905a1cb0d3f034d927e070d71f56ee8e5c5bdf23c4f85c7a17834467bd6cf58218868fe53e3675c130bbe44bea271fa67999a0dc3dbf7c40dbba6e7d6cc0936bd8d466a1f041883c093a3a60743d0549b1a989a2fa41ff978388014434909053e279a21e7866bd4efb4a9f46b7a8b0d1d84d83020e9e68936ca3de030269784aa29a3e25146cd5b03d21ca82f961be925c9ad487fb24b1e35c2d043ee4b6a4aaf811c4308a6ced6b4c45e7513a3f0e1421cb3b0fd8571a7085c9a4b454e4ee8b44767428666cd108b78369b871ab32f36943e24976f4bb6bd4068cc19585a2de791e3f950d220b28f4ba268d8c9dbccc1a705b1b1c30881babdbc8cc4cf97b801e4d410fd7c61b34b1f1265b9d114c99fb469914a213bb289c5bdf5af3835d089a", 0x5d5}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000b00)="79dfe4263f037de282e588f3c773eca5f0c383e7425d1573aa90a44223bfeced3ff85afe9d0c0b3b5a7ed7fcdb96a3934fe7af73ee25d5d36ba42e2a858c3d134299abc0393e031db435b2156e55eb2b2b2e0300e0706dfc5c4ec73ba929ffe8a7bb7ce55d95fb6e58560c45d96a58a13aa944b98c481a82927ec071b272b4592616116116527fd2dbc0dfd540810275770aa531098c572f714f6852063afc8358fb33cc7ef5c52565d586cfe6805bb8a95460b32b4e26bea604e534d8983790b5e2a180fed88108b0f5a499d5f80b4e4047d9ecc03d21856a4ec0d0d41496d99dddfa9098d327d9559e82fceb2b1b1c7be309200691488d6616780cd4e9020865ef41a22175dc52d35dac1232ae1164d7fee64a50651978436207fca4a9026a8a903e7857324459b7e8a143e6fdac0823c8d1a3ac864ad2d0402344aee2511247e716436fe118e65455da74ef25627785638dfa4bf365840fe12fbf73f0d42bcc66efc8693855156f6151e49471e1b7cccbfb01344f76cca177551c73147c32615b53f74a0b7c7ac25b86a01ce3", 0x18e}, {&(0x7f0000000cc0)="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"/349, 0x15d}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04", 0x9c}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) (async) socket$kcm(0x2, 0x3, 0x84) (async) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="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", 0x5d5}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca3964f", 0xe5}, {&(0x7f0000000b00)="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", 0x18e}, {&(0x7f0000000cc0)="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"/349, 0x15d}, {&(0x7f0000000700)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9eed83eee86f35f2c0adf50a04", 0x9c}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) 3.338768121s ago: executing program 6 (id=2014): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400840000000009040000028b8647000905e869690900000009050a"], 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_STATUS(r0, 0x8001af71, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000ac0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={&(0x7f0000000100)={0x964, 0x0, 0x5, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [{{0x254, 0x1, {{0x2, 0x991c}, 0x3, 0xe, 0xa, 0x3, 0xc, 'syz0\x00', "30895c3733538fcda09f1b222cae5a33d8dab3981b9caf7990fe779600f347f7", "7d13868507fa4efee774d489fc630867c2129d8248064338e399ec4a2fbb665c", [{0x4, 0xce, {0x2, 0x3}}, {0x2, 0x3726, {0x1}}, {0x10, 0x5, {0x0, 0xffff1593}}, {0x4, 0x5, {0x0, 0x7}}, {0x3, 0xfe00, {0x2, 0x6}}, {0xffff, 0xec, {0x1, 0xffffffc0}}, {0x63bf, 0x100, {0x2, 0xa}}, {0x200, 0x101, {0x1, 0xfffffa5d}}, {0xd7a, 0xe, {0x0, 0x2}}, {0x5fa5, 0x1ff, {0x0, 0x200}}, {0x92, 0x1560, {0x0, 0x3}}, {0x400, 0x5, {0x3, 0x36a}}, {0x80, 0x3}, {0x0, 0x6, {0x2, 0x7f}}, {0xd, 0xfe01, {0x2, 0x9}}, {0x7, 0x44, {0x2, 0x8}}, {0x6, 0x3ff, {0x3, 0x8}}, {0x101, 0xf, {0x0, 0x7}}, {0x400, 0x4, {0x1, 0xffffffff}}, {0x6, 0x7fff, {0x3, 0x2}}, {0x4, 0x8, {0x1, 0x7fff}}, {0xff, 0x5, {0x2, 0x4}}, {0x8, 0xd276, {0x0, 0xf47}}, {0x5, 0xfffa, {0x2, 0x4}}, {0x4, 0x1, {0x3, 0x5}}, {0x7, 0x9514, {0x1}}, {0x9, 0x5, {0x1, 0x5}}, {0xc61a, 0x6, {0x1, 0x4f}}, {0x3, 0x5, {0x0, 0x3}}, {0x3, 0xfff7, {0x0, 0x5d8}}, {0x6, 0x3, {0x3, 0x268}}, {0x40, 0x5, {0x2, 0x4c}}, {0x5, 0x80, {0x3, 0x1}}, {0x96a4, 0xff80, {0x3, 0x5}}, {0x9, 0x4, {0x0, 0xda}}, {0x4, 0x9, {0x3, 0xfffffffd}}, {0x7, 0x8, {0x26b4b38c52fc4d86, 0x7fffffff}}, {0x1, 0x52b, {0x3, 0x7f}}, {0x9, 0x8, {0x0, 0x600}}, {0xa61b, 0x6, {0x2}}]}}}, {{0x254, 0x1, {{0x1, 0xffff}, 0x5, 0x8, 0x6, 0x2, 0x8, 'syz0\x00', "db7a36ffc35b745fca3e936834daca2a0cc91bb7856d8713ee633673aa2e27fc", "d634f16ec9a99959e43e21cead964cac996737d23bff400fe4e46af445804197", [{0x265d, 0xfff9, {0x65fcc0ffe8053309, 0xbc7}}, {0x0, 0x9, {0x2, 0x1}}, {0x0, 0xfff, {0x3, 0xef}}, {0x3ecc, 0x3, {0x1, 0x5}}, {0x80, 0x3b, {0x3, 0x1}}, {0x4, 0x3, {0x1, 0x2}}, {0x3, 0x8000, {0x1, 0x5}}, {0x2, 0x7ff, {0x3, 0x2}}, {0x7fff, 0xc, {0x0, 0x81}}, {0x4, 0x5, {0x1, 0xeec5}}, {0x5258, 0x3ff, {0x2, 0x10001}}, {0x401, 0x5}, {0x6, 0x4, {0x1, 0x8}}, {0xa56, 0x9, {0x3, 0xef}}, {0x81, 0xfffd, {0x3, 0x10}}, {0x2, 0xac, {0x3, 0x200}}, {0x1, 0xe7, {0x3, 0x2}}, {0x8f, 0x2, {0x3, 0x2}}, {0x3, 0xa3, {0x1, 0xfffffefb}}, {0x7fff, 0x8e, {0x2}}, {0x6, 0x4, {0x2, 0x6}}, {0xfb3, 0xa7e5, {0x2, 0x27}}, {0x9, 0x7, {0x1, 0xef7e}}, {0x2, 0x4, {0x2, 0x400}}, {0x1, 0x8, {0x1, 0x1}}, {0xa6f8, 0x1, {0x1, 0x8}}, {0x1000, 0x0, {0x1, 0x6}}, {0x3f, 0x929, {0x2, 0x2}}, {0x5, 0x3, {0x1, 0x4}}, {0x200, 0x8, {0x0, 0xffffff81}}, {0xaff1, 0x40}, {0x7, 0x3800, {0x1, 0x34}}, {0x6, 0x10, {0x1, 0x7}}, {0x6, 0x9, {0x1, 0x8000}}, {0x6, 0x3, {0x3, 0xfffffff6}}, {0x3, 0xfffb, {0x3, 0x9}}, {0x5, 0x6, {0x3, 0x400}}, {0xd, 0x5, {0x0, 0x5}}, {0xf, 0x7f, {0x0, 0x4}}, {0x9, 0x0, {0x3, 0xfffffff8}}]}}}, {{0x254, 0x1, {{0x2, 0x20f}, 0x5a, 0x81, 0x7, 0x1, 0x2, 'syz1\x00', "3968c65b62102ee9371522ae281f6d0e48f7930182c3ce96348d027e6b3a19a1", "6a1cc54e8dc240106eb122836136a8e7de6de2f66910d226ca5ad540a49c1ae8", [{0x5, 0x1, {0x0, 0x7}}, {0x6, 0x6, {0x1, 0x16f}}, {0x81, 0x6, {0x0, 0x8}}, {0x6, 0xfff7, {0x3, 0xffff8297}}, {0x100, 0x3, {0x1, 0x9}}, {0xfff4, 0x5, {0x3, 0x5}}, {0x9, 0x40, {0x2, 0xb851}}, {0x7, 0xf840, {0x3, 0x1}}, {0x9, 0x7f, {0x1, 0x7}}, {0x8, 0x45, {0x0, 0xfffffff8}}, {0x1cf, 0xe, {0x3, 0x10001}}, {0x4, 0x2, {0x3, 0xffffff80}}, {0x5, 0xe26, {0x0, 0x6}}, {0x8, 0x6, {0x2}}, {0xff88, 0x401, {0x2, 0xfff}}, {0xe, 0x82ff, {0x0, 0x9}}, {0x1000, 0x100, {0x3, 0x2}}, {0x6, 0x1, {0x1, 0x5}}, {0x6, 0xe, {0x1, 0x400}}, {0xf, 0x7, {0x0, 0x4}}, {0x2, 0x9, {0x3, 0x8}}, {0x200, 0xf5e1, {0x3}}, {0x9, 0x2b21, {0x2, 0x5}}, {0x2, 0x2, {0x1}}, {0x5, 0x10, {0x0, 0x1000}}, {0x0, 0x5000, {0x3, 0xffffffc0}}, {0xa8, 0x3, {0x3}}, {0x401, 0x5, {0x3}}, {0xa5, 0x4, {0x1, 0x1e080000}}, {0x6f3, 0x7, {0x3, 0x100}}, {0x8, 0x2, {0x3, 0x5}}, {0x9, 0x2, {0x1, 0x9}}, {0x3, 0xf56, {0x1, 0x5d3}}, {0x4, 0x3, {0x3, 0x1}}, {0x3, 0x941f, {0x2, 0x81}}, {0xd90, 0x8, {0x0, 0x2}}, {0x1000, 0x8, {0x3, 0xfff}}, {0xa12, 0xde, {0x1, 0x6}}, {0x7f, 0x424e, {0x3, 0x3}}, {0x100, 0x8000, {0x3, 0x75}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0x3, 0x9d, 0xb7c0, 0x200, 0x15, 'syz0\x00', "cacb080cdcb1e0b16e098852fc5cae80fc011cf7a1cddccde304b35cb6691801", "1f70763da928f3720366354cb0e7782ec0d94b715f01a2ea981b303b54eb803f", [{0x7, 0x8, {0x2, 0x9}}, {0xb, 0x840, {0x0, 0x9}}, {0xfeff, 0x8, {0x2, 0x9}}, {0x5, 0x1, {0x2, 0x5}}, {0x4, 0x8, {0x1, 0xd}}, {0x7, 0x5, {0x1, 0xc}}, {0x2, 0x8001, {0x1, 0xffffffff}}, {0x0, 0x4, {0x1, 0x4}}, {0x0, 0xf1a7, {0x2, 0x3}}, {0x4, 0x5, {0x2, 0x80000000}}, {0x1, 0xff, {0x0, 0x841}}, {0xb6c, 0x8000, {0x0, 0x8001}}, {0xff8, 0x5, {0x1}}, {0x2, 0x73b, {0x3, 0x6}}, {0xb171, 0x2bcd, {0x2, 0xfffffffc}}, {0xc, 0x6, {0x0, 0x400}}, {0x4, 0xfff, {0x2, 0x8}}, {0xfffe, 0x2, {0x0, 0x1600000}}, {0x8, 0x3ff, {0x3, 0x400}}, {0x0, 0x81, {0x2, 0x800}}, {0x5, 0x362c, {0x0, 0x7}}, {0x1ff, 0x5, {0x3, 0x6}}, {0x24, 0x101, {0x0, 0x3}}, {0x0, 0x4, {0x2, 0x4}}, {0x8463, 0x7, {0x2, 0xff}}, {0x7fff, 0x5, {0x3, 0x5}}, {0x9, 0x7, {0x3, 0x4e}}, {0xe, 0x40, {0x1, 0x6}}, {0x5, 0xfff7, {0x0, 0x7}}, {0x2, 0x4, {0x3, 0x9}}, {0x101, 0x4, {0x3, 0x2}}, {0x7fff, 0x7, {0x3, 0xffffffff}}, {0x9, 0x3, {0x1, 0x7}}, {0xfb1, 0x1, {0x3}}, {0x7ff, 0x532, {0x0, 0x7}}, {0x6, 0x1, {0x1, 0x9}}, {0x8e, 0xbc, {0xb885eedc2f81f647, 0x10}}, {0x5, 0x4, {0x2, 0x8}}, {0x7f, 0x2, {0x2, 0x8}}, {0x3, 0xfffd, {0x2, 0x8}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4000}, 0x400c000) fsmount(0xffffffffffffffff, 0x1, 0xf) 3.227425437s ago: executing program 5 (id=2015): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f909, 0x0, '\x00', @p_u32=0x0}}) syz_usb_connect(0x2, 0x3d, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x23, 0xab, 0x38, 0x40, 0x3923, 0x718a, 0x695d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf7, 0x77, 0x2, 0x26, 0x15, 0xbe, 0x0, [], [{{0x9, 0x5, 0xb, 0x0, 0x10, 0x1, 0x2, 0x2}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0xff, 0x0, 0x6, [@generic={0x7, 0x5, "d57a3b2b6c"}]}}]}}]}}]}}, 0x0) 3.154890032s ago: executing program 3 (id=2016): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/../file0\x00', 0x20) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x105001, 0x0) (async) r1 = fanotify_init(0x2, 0x800) getresgid(&(0x7f0000000140), &(0x7f0000000200)=0x0, &(0x7f0000000240)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0xee01, r2}}, './file0\x00'}) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async, rerun: 64) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r3, &(0x7f0000002240)={0x2020}, 0x2020) 3.028354509s ago: executing program 3 (id=2017): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x850}, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x2000003, 0x4010, r1, 0xff5ac000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000100)="66b94503000066b80a00000066ba000000000f3067660f57f266b97e08000066b8f0ffff7f66ba000000000f300fd3ae0a000f800700660f38813dfb0f019d8a6d66b97902000066b80b00000066ba000000000f30660f22d5", 0x59}], 0x1, 0x14, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYRES32=r1, @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r3 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f0000000400)={0x14, &(0x7f0000000300)={0x40, 0x1, 0xb9, {0xb9, 0x4, "04afd73df421d20f7bed41c4a68a8ddd8d5c2ec4b200d44bd714f94854fe77a807778209a282f7ca5e1a61cfecabb9612d5a153ccebf1fb94f64e6883dd79862bf9a901d99d888e3d78d50e03f31acd197208bada53d57e82b77b29711bfa80ad4426efc2541860351363dbf73c5992f632a048bd6df06a85f1b4bfdb391a414c4e5a82a2e95526e7386594e012e11cd132d4cd79563ade9946b9a22e0a498bef322850cd7fde7886b24080894c4dc178c229c325c8b90"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}}, &(0x7f0000000640)={0x34, &(0x7f0000000440)={0x20, 0x30, 0x1b, "a4255ef379beec6471dd09fc67b74e80c427c8a6b7868de853aeb3"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000540)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f00000005c0)={0x40, 0xa0, 0x4, 0x9}, &(0x7f0000000600)={0xc0, 0xa2, 0x2f, "c91edf158006adf5bbd17507d8bc12866fe7d8b7f0e7d8944536a80431b90ae534c961fd0494959bed0bf0cb1cba10"}}) syz_usb_control_io(r2, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000d00)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="4011af000000b7"], 0x0, 0x0, 0x0, 0x0}) write$binfmt_register(r1, &(0x7f00000000c0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xa, 0x3a, '', 0x3a, '', 0x3a, './file0', 0x3a, [0x50, 0x4f, 0x50, 0x50]}, 0x2b) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.874197039s ago: executing program 7 (id=2018): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x802, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1e) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xffffffff, 0x8, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0xfffffffe], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x40, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x5) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040), &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x2, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) poll(&(0x7f0000000000)=[{r3, 0xd010}], 0x1, 0x9) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000580)={'syz1\x00', {0x9, 0x8, 0x5, 0x2}, 0x2c, [0x5, 0x5, 0x1, 0x9, 0x3, 0x0, 0x5, 0x0, 0x7, 0xa34, 0x6, 0x7fffffff, 0x8, 0x18, 0xc, 0x7fff, 0x9, 0x7, 0x21a, 0x9, 0x3, 0x7fffffff, 0x1, 0xa, 0x5, 0xfffffffe, 0x5, 0x7, 0x400, 0x0, 0x3, 0x800, 0x5146, 0xffff, 0x2, 0x8, 0x6, 0x7fff, 0x8, 0xfffffffe, 0x0, 0x4, 0x9, 0x49, 0x7, 0x3, 0xfffffeab, 0x0, 0x2, 0x21, 0x6, 0x4, 0x5, 0x7fffffff, 0x8, 0xa, 0xc, 0x6, 0x7000, 0x200, 0x1, 0x4, 0x1, 0x1b0f], [0x0, 0x4, 0x20007fff, 0x7, 0x6, 0x6, 0x5, 0x10000, 0xa, 0x10, 0x2, 0x3, 0x8, 0x3, 0x8d8f, 0x8, 0x7, 0xff, 0x1, 0xffffffff, 0x3, 0x10, 0x1, 0x800, 0x2, 0xb, 0xe, 0x401, 0x1, 0x6, 0x401, 0x8000, 0x2, 0x2, 0x1, 0x8, 0x2, 0x100, 0x1, 0x73, 0x8, 0x0, 0xe, 0x4, 0x5, 0x2, 0x1076, 0x3, 0x9, 0x6e37663b, 0x7, 0x7, 0x3, 0x8, 0x0, 0x6, 0x6, 0x8000, 0x0, 0x5, 0x7, 0xa, 0x1, 0x1], [0x7510e92a, 0x80000001, 0x8115, 0x0, 0x2, 0x5344, 0x3, 0x5, 0x4, 0x3, 0x401, 0x4, 0x3, 0x986, 0x0, 0x7f, 0xf, 0x5, 0x9, 0x3, 0x10000, 0x5, 0x0, 0x4, 0x3, 0x75, 0x31fa, 0x4, 0x17, 0x4, 0x4, 0x0, 0x4, 0x5, 0x4, 0x7, 0x7e79, 0xedd1, 0x8, 0x9, 0x3, 0x8, 0xffff, 0x3, 0x200000, 0x6, 0x6, 0xfffffff7, 0x1000, 0x9, 0x1, 0x2, 0x0, 0x3, 0x1ff, 0xff, 0xc, 0x0, 0x6, 0xff, 0x25, 0x81, 0xffff7fff, 0x64], [0x16, 0x1, 0x2, 0x8000, 0x4, 0x5, 0x9, 0xfff, 0x3, 0x9, 0x0, 0x38, 0x4, 0x4, 0x2, 0x101, 0xa80, 0x8, 0x6, 0x6, 0xaf, 0xfffffff9, 0xa1d, 0x1c, 0x0, 0x5, 0x17, 0x40, 0x2, 0x4, 0x7, 0x0, 0x5, 0x10, 0x2, 0x2e6, 0xfff, 0x8, 0x6, 0x400, 0x6, 0x9, 0xa70110d2, 0x9, 0xffffffff, 0x1, 0x80000001, 0x80000001, 0x1, 0x1e, 0x2, 0xff, 0x80, 0x8, 0x2, 0x3168, 0xa, 0x1, 0x7e, 0x8, 0x0, 0x5, 0xc4312da, 0x4]}, 0x45c) bind$pptp(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) 1.776417779s ago: executing program 5 (id=2019): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpu.max\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = dup(r3) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) r5 = syz_clone(0x1000800, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000040)='stat\x00') ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r2}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000200)={0x0, 0x1, r6}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r4, 0xc01864cb, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, r7, r8, r9, 0x0, r10], &(0x7f0000000280)=[0x8, 0x417c, 0xcc, 0x9], 0x6}) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r11, 0x8991, &(0x7f0000000180)={'bond0\x00', @ifru_settings={0x800, 0x7, @cisco=0x0}}) write$UHID_INPUT(r1, &(0x7f0000000440)={0xf, {"a2e3ad21e08eeb661b5d350987f70e06d038e7ff7fc6e5539b0d750e8b089b3f363b68090890e0878f0e1ac6e7049b3b48959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63da1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e6409000000000000002fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec1109110900d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e1505f6bf39ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97912507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000010000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227eabc1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b649f07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c47f8156832369c33076da865d258734dd73583df292892448839ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059ec01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c27155005e797b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02c67141a360c3ace48aee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7fdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e44e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333b25bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475fb7807fb33b72685ec37a2d3f7664fe2f0459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b6cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5dd40b0000000000005f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128060000008261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b6c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb00600000000000000dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69cce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) 1.413621817s ago: executing program 6 (id=2020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001"], 0xf0}, 0x1, 0x0, 0x0, 0x15}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x84, 0x0, 0x1, 0x0, 0x0, 0x44080}, 0x0) 1.301692802s ago: executing program 6 (id=2021): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001"], 0xf0}, 0x1, 0x0, 0x0, 0x15}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44080}, 0x0) (fail_nth: 4) 1.286994907s ago: executing program 7 (id=2022): syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) (async) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x7ffffffe, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x59}) socket$netlink(0x10, 0x3, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000080)={0x0, 0x3}) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x5, 0x2, 0x0, &(0x7f0000000000)=0x1, 0x5000001) syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') (async) syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') 971.699143ms ago: executing program 5 (id=2023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"], 0xf0}, 0x1, 0x0, 0x0, 0x15}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x200000000000000, 0x0, 0x44080}, 0x0) 832.393229ms ago: executing program 5 (id=2024): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x1, 0xbe, 0x86, 0x6d, 0x1, [], [{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x3, 0x9}}]}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) syz_usb_ep_read(r0, 0xe, 0xf, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r0, &(0x7f00000008c0)={0x14, 0x0, &(0x7f00000007c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) 823.812985ms ago: executing program 6 (id=2025): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0xf) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x1) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi3\x00', 0x30280, 0x0) ioctl$COMEDI_BUFINFO(r1, 0xc02c640e, &(0x7f0000000100)={0xfffffff9, 0x6, 0xbd8a, 0x8, 0x101, 0x0, 0x40}) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r5}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005080007006e6174"], 0xf0}}, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0xaf02, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 276.231566ms ago: executing program 7 (id=2026): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)={0x3a8, r1, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x400}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7ff}]}, @NL802154_ATTR_SEC_DEVKEY={0x90, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x6c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xf24}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x81}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10}]}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x2c8, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x15e7baca27362420}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x89}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_ID={0x6c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5daaf45f}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0xfc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffff12ea}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x30, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x3a8}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async, rerun: 32) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (rerun: 32) r8 = syz_open_dev$mouse(&(0x7f0000000580), 0x1, 0x103401) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000005c0)={'macvtap0\x00', 0x10}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000440)={0x50, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40400c0}, 0x20000000) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) preadv(r9, &(0x7f0000000180)=[{0x0, 0xed}], 0x1, 0x6, 0x6) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) (async, rerun: 32) bind$inet6(r11, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async, rerun: 32) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r13, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r13, 0x200) (async) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r12) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000480)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)={0x1c, r14, 0x283, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r15}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, r7, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x16}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x11}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xc}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xbc5dc114effdac39}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000084}, 0x40048c0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) 195.137957ms ago: executing program 7 (id=2027): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x3a, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000bc0)=ANY=[@ANYRES32=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x20, 0x1, 0x5, "ab811687fa"}, 0x0}) 0s ago: executing program 3 (id=2028): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRES8=r0, @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x8) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9c", 0x3}], 0x1}], 0x1, 0x40800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_ep_write(r2, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r3 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5c00000010006bcc9e3be35c6e17aa0b006b876c1d0000007ea60864160af36531001ac008000200070002000600020003a9e99fd8dc7add954664bc24eab556a705251e6182942259e65f0151f60a84c9f4d4938037e786a6d00010", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)='D', 0x1, 0x40031, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x2, 0x0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39ddd0) write$FUSE_NOTIFY_RESEND(r4, &(0x7f0000000200)={0x14}, 0x14) r5 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r5, 0x400, 0x1) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0x8}, {0x6}]}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x70, 0xf0, 0x1c, 0x40, 0xfe9, 0xdb98, 0xad73, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x97, 0x0, 0x0, 0xe8, 0x6, 0x1d}}]}}]}}, 0x0) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r6, 0x0, 0x3, &(0x7f0000000780)=0x1, 0x4) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) kernel console output (not intermixed with test programs): terface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 441.760185][ T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 441.776113][ T798] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 441.787666][ T798] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.805155][ T798] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 441.817042][ T798] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 441.825374][ T798] usb 4-1: Manufacturer: syz [ 441.836291][ T798] usb 4-1: config 0 descriptor?? [ 441.864074][T12481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1630'. [ 442.158239][ T798] rc_core: IR keymap rc-hauppauge not found [ 442.170459][ T798] Registered IR keymap rc-empty [ 442.175629][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 442.209582][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 442.244317][ T798] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 442.259363][ T798] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input66 [ 442.300838][T12477] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1629'. [ 442.329723][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 442.378107][ T7514] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 442.380622][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 442.418794][ T56] block nbd0: Possible stuck request ffff88802598e000: control (read@0,1024B). Runtime 90 seconds [ 442.431886][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 442.462736][T12498] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.468405][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 442.498290][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 442.518437][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 442.538808][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 442.541580][ T7514] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 442.558653][ T7514] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 43926, setting to 64 [ 442.568602][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 442.583589][ T7514] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 442.597301][T12498] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.609312][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 442.609843][ T7514] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.625197][ T7514] usb 7-1: Product: syz [ 442.629780][ T7514] usb 7-1: Manufacturer: syz [ 442.634678][ T7514] usb 7-1: SerialNumber: syz [ 442.638754][ T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 442.662192][ T798] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 442.662796][ T7514] usb 7-1: config 0 descriptor?? [ 442.671873][ T798] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 442.677919][T12491] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 442.701115][ T798] usb 4-1: USB disconnect, device number 54 [ 442.717074][T12498] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.820565][ T7514] rc_core: IR keymap rc-streamzap not found [ 442.826802][ T7514] Registered IR keymap rc-empty [ 442.840112][T12498] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.854519][ T7514] rc rc1: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc1 [ 442.868350][ T7514] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc1/input67 [ 442.970777][ T7514] usb 7-1: USB disconnect, device number 9 [ 443.026974][ T2960] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.055996][ T2960] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.073094][ T2960] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.090513][ T2997] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.253655][T12512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1639'. [ 443.380852][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 443.380873][ T30] audit: type=1326 audit(1761366350.601:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12509 comm="syz.3.1638" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe75358efc9 code=0x0 [ 443.383639][T12518] syzkaller1: entered promiscuous mode [ 443.418396][T12518] syzkaller1: entered allmulticast mode [ 443.898237][ T798] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 443.978204][ T5878] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 444.078146][ T798] usb 6-1: Using ep0 maxpacket: 32 [ 444.086608][ T798] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 444.102604][ T798] usb 6-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 444.116500][ T798] usb 6-1: config 1 interface 0 has no altsetting 0 [ 444.131895][ T798] usb 6-1: language id specifier not provided by device, defaulting to English [ 444.144584][ T798] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 444.154746][ T5878] usb 7-1: config 0 interface 0 has no altsetting 0 [ 444.162565][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1648'. [ 444.171631][ T798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.171660][ T798] usb 6-1: Product: 랓⡲Â瓡ᘒࡨ纕ꛘ旉╓ମ闇ⶽỦ鮀¢쫓膬栅㵥⠮ç‡ã·•ê ‚㹎笹쮴⋯୚﵀ì½å„¸ëª¨ì‰“热龇澥⯀湒ᖧ懲䤬æ‘Ṛꕜ뭦쥴벡﫥঴⸧ï¼ç’«äŒ„령盵殽Ψ햎鱖ã¤Ý§à¡¹ì¶§ç§·çš“銼ዞìžç€ë¹´íŽ¤é†‡ì¥°à´‘尸⥮åšéŽí‡–⑺ìœí•ˆè´´á‰µí‘¿äŸ‚ [ 444.171690][ T798] usb 6-1: Manufacturer: င [ 444.171706][ T798] usb 6-1: SerialNumber: syz [ 444.173579][ T5878] usb 7-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 444.232096][T12533] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 444.246928][T12533] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 444.255261][ T5878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.268624][ T5878] usb 7-1: config 0 descriptor?? [ 444.462903][T12533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.479642][T12533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.502474][ T798] usb 6-1: bad CDC descriptors [ 444.511497][ T5878] saitek 0003:06A3:0621.003B: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.6-1/input0 [ 444.531603][ T798] usb 6-1: USB disconnect, device number 18 [ 444.814996][T12542] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1649'. [ 444.834080][ T797] usb 7-1: USB disconnect, device number 10 [ 445.378116][ T5878] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 445.528207][ T5878] usb 6-1: device descriptor read/64, error -71 [ 445.771969][ T5878] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 445.793433][T12572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1657'. [ 445.838350][ T7514] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 445.918111][ T5878] usb 6-1: device descriptor read/64, error -71 [ 445.988130][ T7514] usb 7-1: Using ep0 maxpacket: 32 [ 445.996219][ T7514] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 446.009973][ T7514] usb 7-1: New USB device found, idVendor=0e41, idProduct=534d, bcdDevice=58.d6 [ 446.019453][ T7514] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.027867][ T7514] usb 7-1: Product: syz [ 446.032246][ T7514] usb 7-1: Manufacturer: syz [ 446.036876][ T7514] usb 7-1: SerialNumber: syz [ 446.038489][ T5878] usb usb6-port1: attempt power cycle [ 446.044650][ T7514] usb 7-1: config 0 descriptor?? [ 446.060584][ T7514] snd_usb_variax 7-1:0.0: Line 6 Variax Workbench found [ 446.067775][ T7514] usb 7-1: selecting invalid altsetting 1 [ 446.074085][ T7514] snd_usb_variax 7-1:0.0: set_interface failed [ 446.081617][ T7514] snd_usb_variax 7-1:0.0: Line 6 Variax Workbench now disconnected [ 446.088125][ T798] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 446.090353][ T7514] snd_usb_variax 7-1:0.0: probe with driver snd_usb_variax failed with error -22 [ 446.265714][ T7514] usb 7-1: USB disconnect, device number 11 [ 446.268265][ T798] usb 4-1: Using ep0 maxpacket: 16 [ 446.290691][ T798] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 446.300407][ T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.308506][ T798] usb 4-1: Product: syz [ 446.312712][ T798] usb 4-1: Manufacturer: syz [ 446.317424][ T798] usb 4-1: SerialNumber: syz [ 446.326254][ T798] usb 4-1: config 0 descriptor?? [ 446.334598][ T798] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 446.391456][ T5878] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 446.418911][ T5878] usb 6-1: device descriptor read/8, error -71 [ 446.534938][ T798] usb 4-1: USB disconnect, device number 55 [ 446.660409][ T5878] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 446.698829][ T5878] usb 6-1: device descriptor read/8, error -71 [ 446.810551][ T5878] usb usb6-port1: unable to enumerate USB device [ 446.982313][T12580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.991479][T12580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.143285][T12588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.153144][T12588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.318181][ T797] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 447.398212][ T798] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 447.468149][ T797] usb 4-1: Using ep0 maxpacket: 32 [ 447.476010][ T797] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 447.489537][ T797] usb 4-1: config 0 interface 0 has no altsetting 0 [ 447.496202][ T797] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 447.505300][ T797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.526661][ T797] usb 4-1: config 0 descriptor?? [ 447.571991][ T798] usb 7-1: config 0 has an invalid interface number: 16 but max is 0 [ 447.580637][ T798] usb 7-1: config 0 has no interface number 0 [ 447.590819][ T798] usb 7-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 447.601621][ T798] usb 7-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 447.607515][T12590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.617004][ T798] usb 7-1: New USB device found, idVendor=067b, idProduct=0612, bcdDevice=e0.77 [ 447.625311][T12590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.632658][ T798] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.648410][ T798] usb 7-1: Product: syz [ 447.652687][ T798] usb 7-1: Manufacturer: syz [ 447.657188][T12590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.657559][ T798] usb 7-1: SerialNumber: syz [ 447.667151][T12590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.678797][ T798] usb 7-1: config 0 descriptor?? [ 447.684917][T12587] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 447.693141][T12587] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 447.905202][ T798] pl2303 7-1:0.16: required interrupt-in endpoint missing [ 447.926305][ T798] usb 7-1: USB disconnect, device number 12 [ 447.962719][ T797] input: HID 28bd:0933 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0933.003C/input/input68 [ 447.994930][ T797] uclogic 0003:28BD:0933.003C: input,hidraw0: USB HID v4.06 Mouse [HID 28bd:0933] on usb-dummy_hcd.3-1/input0 [ 448.171383][ T798] usb 4-1: USB disconnect, device number 56 [ 448.238929][T12593] No buffer was provided with the request [ 448.292800][T12596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.304436][T12596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.401125][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1666'. [ 448.629075][T12608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1670'. [ 448.748188][ T9] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 448.782213][T12614] netlink: 'syz.6.1673': attribute type 21 has an invalid length. [ 448.791232][T12614] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1673'. [ 448.899845][ T9] usb 6-1: device descriptor read/64, error -71 [ 448.919674][ T30] audit: type=1400 audit(1761366356.131:976): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=".\" pid=12619 comm="syz.4.1675" [ 448.941330][T12621] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1674'. [ 449.038093][ T5911] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 449.148251][ T9] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 449.208237][ T5911] usb 7-1: Using ep0 maxpacket: 32 [ 449.217628][ T5911] usb 7-1: config 0 has an invalid interface number: 29 but max is 0 [ 449.226275][ T5911] usb 7-1: config 0 has no interface number 0 [ 449.238348][ T5911] usb 7-1: config 0 interface 29 has no altsetting 0 [ 449.248306][ T5911] usb 7-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 449.258918][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.267137][ T5911] usb 7-1: Product: syz [ 449.271773][ T5911] usb 7-1: Manufacturer: syz [ 449.275568][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1676'. [ 449.276497][ T5911] usb 7-1: SerialNumber: syz [ 449.301089][ T5911] usb 7-1: config 0 descriptor?? [ 449.312879][ T9] usb 6-1: device descriptor read/64, error -71 [ 449.324835][ T30] audit: type=1400 audit(1761366356.541:977): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="/proc/thread-self/attr/exec" pid=12619 comm="syz.4.1675" [ 449.338283][T12620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.367821][T12620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.443908][ T9] usb usb6-port1: attempt power cycle [ 449.510191][ T5911] peak_usb 7-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 449.711152][ T5911] peak_usb 7-1:0.29 can0: sending command failure: -22 [ 449.718701][ T5911] peak_usb 7-1:0.29 can0: sending command failure: -22 [ 449.725698][ T5911] peak_usb 7-1:0.29 can0: sending command failure: -22 [ 449.788903][ T5911] peak_usb 7-1:0.29: probe with driver peak_usb failed with error -22 [ 449.798427][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 449.828269][ T10] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 449.836579][ T9] usb 6-1: device descriptor read/8, error -71 [ 449.915766][ T5911] usb 7-1: USB disconnect, device number 13 [ 449.990606][ T10] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 449.999182][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.018440][ T10] usb 4-1: config 0 has no interface number 0 [ 450.044794][ T10] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 450.060200][ T10] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.090139][ T10] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 450.102770][ T9] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 450.111154][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.121579][ T10] usb 4-1: Product: syz [ 450.125878][ T10] usb 4-1: Manufacturer: syz [ 450.130945][ T10] usb 4-1: SerialNumber: syz [ 450.139387][ T10] usb 4-1: config 0 descriptor?? [ 450.148921][ T9] usb 6-1: device descriptor read/8, error -71 [ 450.268187][ T9] usb usb6-port1: unable to enumerate USB device [ 450.560495][T12645] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 450.763968][ T10] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.117/input/input69 [ 450.973829][ T7514] usb 4-1: USB disconnect, device number 57 [ 451.185636][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'. [ 451.501479][T12671] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1688'. [ 451.775054][T12678] net_ratelimit: 2 callbacks suppressed [ 451.775080][T12678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.879962][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 452.028967][T12681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.058139][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 452.064659][T12681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.080946][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 452.109404][ T10] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 452.129616][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.145888][ T10] usb 4-1: Product: syz [ 452.157049][ T10] usb 4-1: Manufacturer: syz [ 452.162049][ T10] usb 4-1: SerialNumber: syz [ 452.187243][ T10] usb 4-1: config 0 descriptor?? [ 452.202973][ T10] hub 4-1:0.0: bad descriptor, ignoring hub [ 452.213059][ T10] hub 4-1:0.0: probe with driver hub failed with error -5 [ 452.539289][ T10] usb 4-1: USB disconnect, device number 58 [ 452.783790][T12717] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 452.880557][T12721] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1699'. [ 452.909676][T12721] nfs4: Unknown parameter 'œ' [ 452.988130][ T5885] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 453.063103][T12725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.088113][ T7514] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 453.102403][T12725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.138091][ T5885] usb 4-1: Using ep0 maxpacket: 16 [ 453.146902][ T5885] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.157835][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 453.171426][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 453.181910][ T5885] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 453.195211][ T5885] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.211990][ T5885] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 453.223468][ T5885] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 453.232242][ T5885] usb 4-1: Manufacturer: syz [ 453.240588][ T5885] usb 4-1: config 0 descriptor?? [ 453.250674][ T7514] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.261802][ T7514] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.277377][ T7514] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 453.290769][ T7514] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.305171][ T7514] usb 6-1: Product: syz [ 453.310082][ T7514] usb 6-1: Manufacturer: syz [ 453.314801][ T7514] usb 6-1: SerialNumber: syz [ 453.538380][ T7514] usb 6-1: 0:2 : does not exist [ 453.574950][ T7514] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 453.593389][ T5885] rc_core: IR keymap rc-hauppauge not found [ 453.609262][ T5885] Registered IR keymap rc-empty [ 453.638330][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 453.663505][ T7514] usb 6-1: USB disconnect, device number 27 [ 453.679587][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 453.762832][ T6059] udevd[6059]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 453.780029][ T5885] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 453.810823][ T5885] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input70 [ 453.842498][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 453.878395][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 453.908250][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 453.933620][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 453.958172][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 454.001477][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 454.058166][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 454.091713][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 454.128311][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 454.158424][ T5885] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 454.200625][ T5885] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 454.228483][ T5885] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 454.283230][ T5885] usb 4-1: USB disconnect, device number 59 [ 454.505855][T12759] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1708'. [ 454.658388][ T5885] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 454.780729][ T797] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 454.842203][ T5885] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 454.865957][ T5885] usb 4-1: config 0 has no interface number 0 [ 454.896355][ T5885] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 454.937064][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.945382][ T797] usb 6-1: device descriptor read/64, error -71 [ 454.974482][ T5885] usb 4-1: config 0 descriptor?? [ 455.003288][ T5885] usb 4-1: selecting invalid altsetting 1 [ 455.018458][ T5885] dvb_ttusb_budget: ttusb_init_controller: error [ 455.035575][ T5885] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 455.213549][ T797] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 455.245405][ T5885] DVB: Unable to find symbol cx22700_attach() [ 455.349372][ T5885] DVB: Unable to find symbol tda10046_attach() [ 455.389547][ T797] usb 6-1: device descriptor read/64, error -71 [ 455.400640][ T5885] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 455.417594][ T5885] usb 4-1: USB disconnect, device number 60 [ 455.508630][ T797] usb usb6-port1: attempt power cycle [ 455.770899][ T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 455.830223][T12802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.849086][T12802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.888106][ T797] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 455.919349][ T797] usb 6-1: device descriptor read/8, error -71 [ 455.942272][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 455.950614][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 455.969606][ T10] usb 7-1: config 255 has an invalid interface number: 2 but max is 0 [ 455.977921][ T10] usb 7-1: config 255 has no interface number 0 [ 455.994738][ T10] usb 7-1: config 255 interface 2 altsetting 126 has an endpoint descriptor with address 0x1E, changing to 0xE [ 456.017145][ T10] usb 7-1: config 255 interface 2 altsetting 126 bulk endpoint 0x3 has invalid maxpacket 8 [ 456.037737][ T10] usb 7-1: config 255 interface 2 altsetting 126 has a duplicate endpoint with address 0xC, skipping [ 456.068094][ T10] usb 7-1: config 255 interface 2 altsetting 126 bulk endpoint 0x7 has invalid maxpacket 32 [ 456.088120][ T10] usb 7-1: config 255 interface 2 altsetting 126 has a duplicate endpoint with address 0x5, skipping [ 456.088263][ T5885] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 456.108072][ T10] usb 7-1: config 255 interface 2 altsetting 126 has a duplicate endpoint with address 0xB, skipping [ 456.157748][ T10] usb 7-1: config 255 interface 2 altsetting 126 has an invalid descriptor for endpoint zero, skipping [ 456.178068][ T10] usb 7-1: config 255 interface 2 altsetting 126 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 456.187959][ T797] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 456.198082][ T10] usb 7-1: config 255 interface 2 altsetting 126 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 456.222455][ T797] usb 6-1: device descriptor read/8, error -71 [ 456.229676][ T10] usb 7-1: config 255 interface 2 has no altsetting 0 [ 456.250139][ T10] usb 7-1: New USB device found, idVendor=09fb, idProduct=602a, bcdDevice=a1.ef [ 456.261029][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.279270][ T10] usb 7-1: Product: à š [ 456.283849][ T5885] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 456.288136][ T10] usb 7-1: Manufacturer: ใ챦⡴㋭蚡宅ë½ã‘ˆè‰Žîž­ç´”ƞﻥá˜Ã–ç¦ã•˜æ—셖㩺ꂳ릑â”᷺﵃ä¦ìµ ï±·æˆ³æ’¨â¥˜à¯¹è¬®ë®ˆé¢è¦ë’€ë‘¯ã¶Œæž©îœ¾ë‡´áš¼ã¯ºêˆ»á©”뵹百⿳⿙パხಾꭊ㽨枫湡鳖촨橂禽ᶓ鶗ૻ蘑㵜粛â˜áŒ™ç°¨âª ä¹¿ì†¢ã»›ã‡†äŒ½ê¢ê‘•ïš˜î…Žç§Žî–¢ã‹ªâ†´å¹‡ê¯¥ç¾ƒæ¬ƒà¡¸ï’½èµ©ì´å’žï‰ƒë½¸ê¿¥ã‰ å¸©å¹ìŸ¿ë‰€í†›ç¸ˆé¼± [ 456.293770][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.345899][ T5885] usb 4-1: Product: syz [ 456.352846][ T797] usb usb6-port1: unable to enumerate USB device [ 456.360388][ T5885] usb 4-1: Manufacturer: syz [ 456.365202][ T5885] usb 4-1: SerialNumber: syz [ 456.377267][ T10] usb 7-1: SerialNumber: 뉗电å曆髲ܑ龦曖濈ë¼Û±ä¿¦á´«àµºá‘¥é½ŒëŽ»áˆˆà±ïœ¨ê‘®Ïˆâ¶œå¯âµ¶îºêŒ»î“°ë¶­ã’…㮗뼶쮋䑅畫㹕홱꨹졋啲鲬췂䆞䬞è¼ê·ªá“¨ç†»í™€èš è¨®ê—’ìŒå–›ìº‚᜺观轳ﲤ憫렰？쟲Ӓ駿ä”롖寷쪃췇㘲윛âŒá¦‰æ’˜ëŒ’îŸì‡±ï²ªî™é­¬æ ¥î‹êŒ‹è„„à°—è›ê±“ê¾Óªí†¥ê¹—艻æ­ã¸¸á®”祂궇꒺铇澼쩆ê¤äŠ©å½­é©¸ë‘ˆæœç¡ž [ 456.395486][ T5885] usb 4-1: config 0 descriptor?? [ 456.469143][T12789] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 456.477155][T12789] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 456.540895][T12814] usb usb8: usbfs: process 12814 (syz.4.1719) did not claim interface 0 before use [ 456.561493][T12814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.574878][T12814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.680030][ T5885] hso 4-1:0.0: Failed to find BULK IN ep [ 456.689097][ T5885] usb-storage 4-1:0.0: USB Mass Storage device detected [ 456.704013][ T10] ftdi_sio 7-1:255.2: FTDI USB Serial Device converter detected [ 456.713729][ T10] ftdi_sio ttyUSB0: unknown device type: 0xa1ef [ 456.733663][ T10] usb 7-1: USB disconnect, device number 14 [ 456.750859][ T10] ftdi_sio 7-1:255.2: device disconnected [ 456.883675][T12806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.892649][T12806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.906346][ T798] usb 4-1: USB disconnect, device number 61 [ 457.258127][T12824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.267157][T12824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.278549][T12824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.296152][T12824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.332897][T12827] netlink: 'syz.6.1722': attribute type 4 has an invalid length. [ 457.866626][T12851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.877921][T12851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.889252][ T5885] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 457.988205][ T797] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 458.049924][ T5885] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 458.060538][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.071290][ T5885] usb 7-1: config 0 descriptor?? [ 458.080731][ T5885] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 458.144334][ T797] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 458.153816][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.162907][ T797] usb 4-1: Product: syz [ 458.167248][ T797] usb 4-1: Manufacturer: syz [ 458.171947][ T797] usb 4-1: SerialNumber: syz [ 458.473216][T12855] netlink: 520 bytes leftover after parsing attributes in process `syz.4.1732'. [ 458.485162][T12853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.494618][T12853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.664940][ T5835] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 458.667359][T12858] befs: (nbd4): No write support. Marking filesystem read-only [ 458.684483][T12858] befs: (nbd4): unable to read superblock [ 458.697302][T12858] CUSE: info not properly terminated [ 458.898781][ T7514] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 458.994357][ T30] audit: type=1326 audit(1761366366.211:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12871 comm="syz.4.1739" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6dc338efc9 code=0x0 [ 459.070745][ T7514] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 459.081459][ T7514] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.111745][ T7514] usb 6-1: config 0 descriptor?? [ 459.132461][ T7514] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 459.197328][T12877] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1740'. [ 459.208824][T12877] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1740'. [ 459.218162][T12877] netlink: 'syz.4.1740': attribute type 6 has an invalid length. [ 459.226899][T12877] netlink: 'syz.4.1740': attribute type 5 has an invalid length. [ 459.235127][T12877] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1740'. [ 459.311482][T12881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.320461][T12881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.534274][ T7514] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 459.710796][ T5885] usb 7-1: USB disconnect, device number 15 [ 459.736736][ T7514] gspca_cpia1: usb_control_msg 01, error -32 [ 459.743751][ T7514] gspca_cpia1: usb_control_msg 01, error -71 [ 459.751109][ T7514] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 459.762914][ T7514] usb 6-1: USB disconnect, device number 32 [ 459.840037][ T797] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 460.064561][T12847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.073659][T12847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.087776][ T797] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 460.100930][ T797] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 460.114280][ T797] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 460.124900][ T797] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 460.135397][ T797] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 460.149801][ T797] usb 4-1: USB disconnect, device number 62 [ 460.994404][T12908] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1749'. [ 461.004830][T12907] x_tables: duplicate underflow at hook 1 [ 461.045977][T12908] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1749'. [ 461.061894][T12908] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1749'. [ 461.071534][T12908] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1749'. [ 461.575675][T12928] syzkaller1: entered promiscuous mode [ 461.583523][T12928] syzkaller1: entered allmulticast mode [ 461.691578][T12934] netlink: zone id is out of range [ 461.838135][ T798] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 462.009481][ T798] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 462.029678][ T798] usb 6-1: config 0 has no interface number 0 [ 462.035959][ T798] usb 6-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 462.063201][ T798] usb 6-1: config 0 interface 231 altsetting 0 endpoint 0x82 has invalid maxpacket 30348, setting to 64 [ 462.080387][ T798] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 462.118174][ T798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.126248][ T798] usb 6-1: Product: syz [ 462.156106][ T798] usb 6-1: Manufacturer: syz [ 462.166186][ T798] usb 6-1: SerialNumber: syz [ 462.180230][ T798] usb 6-1: config 0 descriptor?? [ 462.187969][T12928] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 462.189589][T12954] netlink: 'syz.6.1771': attribute type 29 has an invalid length. [ 462.202282][T12928] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 462.214479][T12954] netlink: 'syz.6.1771': attribute type 29 has an invalid length. [ 462.228822][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1771'. [ 462.237294][ T798] plusb 6-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, e6:4b:68:21:c9:53 [ 462.458399][ T798] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 462.640313][ T798] usb 4-1: Using ep0 maxpacket: 8 [ 462.670545][ T798] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 462.698458][ T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.706711][ T798] usb 4-1: Product: syz [ 462.713771][ T798] usb 4-1: Manufacturer: syz [ 462.728168][ T798] usb 4-1: SerialNumber: syz [ 462.754843][ T798] usb 4-1: config 0 descriptor?? [ 462.791413][ T798] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 463.134463][T12954] syz.6.1771 (12954): drop_caches: 2 [ 463.313606][T12987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.335178][T12985] tipc: New replicast peer: 255.255.255.83 [ 463.336637][T12987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.351796][T12985] tipc: Enabled bearer , priority 10 [ 463.453480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 463.505233][ T30] audit: type=1804 audit(1761366370.721:979): pid=12992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1779" name="/newroot/167/cgroup.controllers" dev="tmpfs" ino=874 res=1 errno=0 [ 463.549719][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 463.558287][ T30] audit: type=1800 audit(1761366370.721:980): pid=12992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1779" name="cgroup.controllers" dev="tmpfs" ino=874 res=0 errno=0 [ 463.594021][ T797] usb 6-1: USB disconnect, device number 33 [ 463.612916][ T797] plusb 6-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.5-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 463.710336][ T10] usb 7-1: device descriptor read/64, error -71 [ 463.948260][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 463.958693][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 463.958789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 464.079947][ T10] usb 7-1: device descriptor read/64, error -71 [ 464.188955][ T10] usb usb7-port1: attempt power cycle [ 464.477447][T13017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.491331][T13017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.528216][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 464.560550][ T10] usb 7-1: device descriptor read/8, error -71 [ 464.677011][T13023] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1782'. [ 464.787189][T13026] befs: (nbd5): No write support. Marking filesystem read-only [ 464.801591][T13026] befs: (nbd5): unable to read superblock [ 464.818282][ T10] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 464.829985][T13026] CUSE: info not properly terminated [ 464.851922][ T10] usb 7-1: device descriptor read/8, error -71 [ 464.970548][ T10] usb usb7-port1: unable to enumerate USB device [ 465.222493][T13038] Invalid source name [ 465.231629][T13038] UBIFS error (pid: 13038): cannot open "./file0", error -22 [ 465.349367][T13045] netlink: zone id is out of range [ 465.618066][ T798] gspca_sonixj: i2c_w8 err -71 [ 465.648856][T13056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.659365][ T798] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 465.659455][ T797] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 465.676962][T13056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.685711][T13055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.703974][T13056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.724454][ T798] usb 4-1: USB disconnect, device number 63 [ 465.726310][T13059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.746983][T13056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.777519][T13055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.792815][T13059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.838244][ T797] usb 6-1: Using ep0 maxpacket: 8 [ 465.851555][ T797] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 465.863665][ T797] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.872704][ T797] usb 6-1: Product: syz [ 465.877550][ T797] usb 6-1: Manufacturer: syz [ 465.883837][ T797] usb 6-1: SerialNumber: syz [ 465.896353][ T797] usb 6-1: config 0 descriptor?? [ 466.112783][ T797] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 466.121488][T13069] netlink: 184 bytes leftover after parsing attributes in process `syz.5.1790'. [ 466.191446][ T797] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 466.269663][ T797] usb 6-1: USB disconnect, device number 34 [ 466.275502][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1792'. [ 466.606039][T13086] netlink: 108 bytes leftover after parsing attributes in process `syz.5.1796'. [ 466.719230][T13090] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 466.722298][T13096] netlink: zone id is out of range [ 466.802994][T13102] netlink: 'syz.3.1799': attribute type 40 has an invalid length. [ 467.257246][T13119] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1803'. [ 467.388797][ T5911] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 467.581169][ T5911] usb 7-1: Using ep0 maxpacket: 16 [ 467.619244][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.620955][T13137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.641852][ T5911] usb 7-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 467.641888][ T5911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.661813][ T5911] usb 7-1: config 0 descriptor?? [ 467.725332][T13137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.978179][ T798] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 468.012166][ T797] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 468.123637][ T5911] apple 0003:05AC:027D.003D: hidraw0: USB HID v0.89 Device [HID 05ac:027d] on usb-dummy_hcd.6-1/input0 [ 468.153814][ T798] usb 6-1: unable to get BOS descriptor or descriptor too short [ 468.167886][ T798] usb 6-1: config 63 has an invalid interface number: 66 but max is 0 [ 468.182900][ T797] usb 4-1: unable to get BOS descriptor or descriptor too short [ 468.186922][ T798] usb 6-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 468.204044][ T797] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 468.218112][ T798] usb 6-1: config 63 has no interface number 0 [ 468.222747][ T797] usb 4-1: can't read configurations, error -61 [ 468.230306][ T798] usb 6-1: config 63 interface 66 has no altsetting 0 [ 468.250790][ T798] usb 6-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 468.276720][ T798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.295940][ T798] usb 6-1: Product: syz [ 468.303862][ T798] usb 6-1: Manufacturer: syz [ 468.309117][ T798] usb 6-1: SerialNumber: syz [ 468.378402][ T797] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 468.379756][ T5911] usb 7-1: USB disconnect, device number 20 [ 468.453260][T13155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.467169][T13155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.582311][ T797] usb 4-1: unable to get BOS descriptor or descriptor too short [ 468.597343][ T797] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 468.612873][T13138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.618122][ T797] usb 4-1: can't read configurations, error -61 [ 468.624934][T13138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.642638][ T797] usb usb4-port1: attempt power cycle [ 468.670154][ T798] uvcvideo 6-1:63.66: Found UVC 0.07 device syz (174f:8a31) [ 468.677806][ T798] uvcvideo 6-1:63.66: No valid video chain found. [ 468.696595][ T798] usb 6-1: USB disconnect, device number 35 [ 469.008169][ T797] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 469.052211][ T797] usb 4-1: unable to get BOS descriptor or descriptor too short [ 469.075140][ T797] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 469.116900][ T797] usb 4-1: can't read configurations, error -61 [ 469.142020][T13170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.153522][T13170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.258430][ T797] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 469.301439][ T797] usb 4-1: unable to get BOS descriptor or descriptor too short [ 469.312339][ T797] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 469.321968][ T797] usb 4-1: can't read configurations, error -61 [ 469.338602][ T797] usb usb4-port1: unable to enumerate USB device [ 469.518259][ T798] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 469.598333][ T5911] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 469.670209][ T798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.681644][ T798] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 469.691910][ T798] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 469.706268][ T798] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 469.728552][ T798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.751831][ T798] usb 6-1: config 0 descriptor?? [ 469.766032][ T5911] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 469.792102][ T5911] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 469.810791][ T5911] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 469.839038][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.846450][T13178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 469.847951][ T5911] usb 7-1: Product: syz [ 469.856629][ T5911] usb 7-1: Manufacturer: syz [ 469.856653][ T5911] usb 7-1: SerialNumber: syz [ 470.000953][T13182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.011292][T13182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.025488][T13182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.034755][T13182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.098083][ T5911] usb 7-1: 0:2 : does not exist [ 470.115838][ T5911] usb 7-1: USB disconnect, device number 21 [ 470.143508][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.191039][ T798] plantronics 0003:047F:FFFF.003E: reserved main item tag 0xe [ 470.199965][ T798] hid_parser_main: 7 callbacks suppressed [ 470.199984][ T798] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 470.218448][ T798] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 470.533477][ T797] usb 6-1: USB disconnect, device number 36 [ 470.634567][T13186] 9pnet_fd: Insufficient options for proto=fd [ 470.644622][ T30] audit: type=1800 audit(1761366377.861:981): pid=13186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1819" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 470.693256][T13191] 9pnet_fd: Insufficient options for proto=fd [ 470.871255][T13198] CIFS mount error: No usable UNC path provided in device string! [ 470.871255][T13198] [ 470.899422][T13198] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 471.092020][T13212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.119818][T13212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.398133][ T7514] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 471.528505][ T7514] usb 7-1: device descriptor read/64, error -71 [ 471.658168][ T798] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 471.768416][ T7514] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 471.840196][ T798] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 471.856258][ T798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.868764][ T798] usb 6-1: config 0 descriptor?? [ 471.877952][ T798] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 471.908406][ T7514] usb 7-1: device descriptor read/64, error -71 [ 472.028555][ T5885] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 472.036430][ T7514] usb usb7-port1: attempt power cycle [ 472.077044][T13225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.094845][T13225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.142122][ T798] usb 6-1: USB disconnect, device number 37 [ 472.192217][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.203732][ T5885] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.214312][ T5885] usb 4-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00 [ 472.224166][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.247078][ T5885] usb 4-1: config 0 descriptor?? [ 472.379659][ T7514] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 472.422088][ T7514] usb 7-1: device descriptor read/8, error -71 [ 472.451112][T13250] lo speed is unknown, defaulting to 1000 [ 472.468568][T13232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.480867][T13232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.488772][ T56] block nbd0: Possible stuck request ffff88802598e000: control (read@0,1024B). Runtime 120 seconds [ 472.679731][ T7514] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 472.705454][ T5885] usbhid 4-1:0.0: can't add hid device: -71 [ 472.713590][ T7514] usb 7-1: device descriptor read/8, error -71 [ 472.722262][ T5885] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 472.737638][ T5885] usb 4-1: USB disconnect, device number 68 [ 472.843715][ T7514] usb usb7-port1: unable to enumerate USB device [ 473.148901][T13262] misc userio: No port type given on /dev/userio [ 473.347026][T13270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.381824][T13270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.404740][T13270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.416020][T13270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.578431][ T5885] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 473.665627][T13279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.675507][T13279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.750162][ T5885] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 473.758773][ T5885] usb 4-1: config 0 has no interface number 0 [ 473.764983][ T5885] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.778368][ T5885] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.789116][ T5885] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 473.799841][ T5885] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.816444][ T5885] usb 4-1: config 0 descriptor?? [ 473.858141][ T798] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 474.017017][ T798] usb 6-1: config 0 has no interfaces? [ 474.026596][ T798] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=2c.e8 [ 474.037562][ T798] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.048706][ T798] usb 6-1: Product: syz [ 474.050551][ T5885] usbhid 4-1:0.18: can't add hid device: -71 [ 474.053180][ T798] usb 6-1: Manufacturer: syz [ 474.067223][ T5885] usbhid 4-1:0.18: probe with driver usbhid failed with error -71 [ 474.075138][ T798] usb 6-1: SerialNumber: syz [ 474.078394][ T798] usb 6-1: config 0 descriptor?? [ 474.102416][ T5885] usb 4-1: USB disconnect, device number 69 [ 474.332050][T13277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.345766][T13277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.417872][T13277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.451850][T13277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.568389][ T798] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 474.623198][ T5835] Bluetooth: hci4: Malformed LE Event: 0x0d [ 474.758099][ T798] usb 7-1: Using ep0 maxpacket: 32 [ 474.767309][ T798] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 474.786826][ T798] usb 7-1: config 0 has no interface number 0 [ 474.793842][ T798] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.822708][ T798] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.851207][ T798] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 474.872368][ T798] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.942512][ T798] usb 7-1: config 0 descriptor?? [ 474.948473][ T797] usb 6-1: USB disconnect, device number 38 [ 474.978335][ T5911] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 475.139093][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 475.152575][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.175487][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.195934][ T5911] usb 4-1: New USB device found, idVendor=056a, idProduct=ff83, bcdDevice= 0.e1 [ 475.228031][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.272964][ T5911] usb 4-1: config 0 descriptor?? [ 475.645891][ T798] usbhid 7-1:0.1: can't add hid device: -71 [ 475.657105][ T798] usbhid 7-1:0.1: probe with driver usbhid failed with error -71 [ 475.696114][ T798] usb 7-1: USB disconnect, device number 26 [ 475.723711][ T5911] usbhid 4-1:0.0: can't add hid device: -71 [ 475.738201][ T5911] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 475.768560][ T5911] usb 4-1: USB disconnect, device number 70 [ 475.911581][T13316] netlink: 'syz.4.1857': attribute type 1 has an invalid length. [ 475.921799][T13316] netlink: 'syz.4.1857': attribute type 2 has an invalid length. [ 475.986722][T13321] netlink: 'syz.5.1859': attribute type 16 has an invalid length. [ 476.348711][T13332] syzkaller1: entered promiscuous mode [ 476.359313][T13332] syzkaller1: entered allmulticast mode [ 476.446095][T13338] lo speed is unknown, defaulting to 1000 [ 476.488080][ T9] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 476.588076][ T5911] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 476.608079][ T798] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 476.658050][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 476.668335][ T9] usb 6-1: config 0 has an invalid interface number: 84 but max is 0 [ 476.676661][ T9] usb 6-1: config 0 has no interface number 0 [ 476.687865][ T9] usb 6-1: New USB device found, idVendor=04e8, idProduct=a100, bcdDevice=81.e4 [ 476.698794][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.706941][ T9] usb 6-1: Product: syz [ 476.711595][ T9] usb 6-1: Manufacturer: syz [ 476.716233][ T9] usb 6-1: SerialNumber: syz [ 476.727063][ T9] usb 6-1: config 0 descriptor?? [ 476.738177][ T798] usb 7-1: device descriptor read/64, error -71 [ 476.758188][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 476.766909][ T5911] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 476.775784][ T5911] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 476.785821][ T5911] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 476.797571][ T5911] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 476.807860][ T5911] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.822652][ T5911] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 476.832026][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.956740][ T9] ax88179_178a 6-1:0.84: probe with driver ax88179_178a failed with error -22 [ 476.990993][ T798] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 477.013024][ T9] usb 6-1: USB disconnect, device number 39 [ 477.056871][ T5911] usb 4-1: usb_control_msg returned -32 [ 477.081150][ T5911] usbtmc 4-1:16.0: can't read capabilities [ 477.158478][ T798] usb 7-1: device descriptor read/64, error -71 [ 477.163579][T13345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.176454][T13345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.268596][ T798] usb usb7-port1: attempt power cycle [ 477.616321][ T797] usb 4-1: USB disconnect, device number 71 [ 477.629434][ T798] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 477.649033][ T798] usb 7-1: device descriptor read/8, error -71 [ 477.798238][ T10] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 477.856674][T13354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.868114][T13354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.898108][ T798] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 477.942471][ T10] usb 6-1: device descriptor read/64, error -71 [ 477.950004][ T798] usb 7-1: device descriptor read/8, error -71 [ 477.987192][T13359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.996386][T13359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.078438][ T798] usb usb7-port1: unable to enumerate USB device [ 478.208295][ T10] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 478.338172][ T10] usb 6-1: device descriptor read/64, error -71 [ 478.388178][ T24] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 478.448383][ T10] usb usb6-port1: attempt power cycle [ 478.550286][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.560874][ T24] usb 4-1: config 0 has no interfaces? [ 478.566556][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 478.576193][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.586915][ T24] usb 4-1: config 0 descriptor?? [ 478.788090][ T10] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 478.799483][T13363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.809037][T13363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.817281][ T10] usb 6-1: device descriptor read/8, error -71 [ 478.831871][T13363] kvm: user requested TSC rate below hardware speed [ 478.909016][ T797] usb 4-1: USB disconnect, device number 72 [ 479.058153][ T10] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 479.078907][ T10] usb 6-1: device descriptor read/8, error -71 [ 479.189237][ T10] usb usb6-port1: unable to enumerate USB device [ 479.406685][T13365] syzkaller1: entered promiscuous mode [ 479.412781][T13365] syzkaller1: entered allmulticast mode [ 479.559606][T13372] FAT-fs (loop3): unable to read boot sector [ 479.572741][T13372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1878'. [ 479.624150][T13374] netlink: 'syz.3.1879': attribute type 10 has an invalid length. [ 479.633676][T13374] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.641327][T13374] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.677538][ T10] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 479.841508][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.853814][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 479.864887][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 479.878695][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 479.887888][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.896085][ T10] usb 7-1: Product: syz [ 479.900292][ T10] usb 7-1: Manufacturer: syz [ 479.904976][ T10] usb 7-1: SerialNumber: syz [ 479.913581][T13365] raw-gadget.4 gadget.6: fail, usb_ep_enable returned -22 [ 479.922893][ T10] cdc_mbim 7-1:1.0: skipping garbage [ 479.928853][ T10] usb 7-1: selecting invalid altsetting 1 [ 480.326334][ T10] cdc_mbim 7-1:1.0: failed GET_NTB_PARAMETERS [ 480.334712][ T10] cdc_mbim 7-1:1.0: bind() failure [ 480.349671][ T10] usb 7-1: USB disconnect, device number 31 [ 480.703044][T13380] program syz.3.1881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 480.850749][T13389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1884'. [ 481.409090][ T10] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 481.585803][ T10] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 481.604964][ T10] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 481.638118][ T10] usb 7-1: config 0 has no interface number 0 [ 481.644606][ T10] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 481.678050][ T10] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 481.714835][ T10] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 481.751803][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.789392][ T10] usb 7-1: config 0 descriptor?? [ 482.029144][T13431] mkiss: ax0: crc mode is auto. [ 482.186538][ T10] usb 7-1: USB disconnect, device number 32 [ 482.344105][T13442] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1896'. [ 482.696106][ T24] usb 5-1: USB disconnect, device number 16 [ 482.988095][ T797] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 483.074171][T11959] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.178057][ T797] usb 4-1: Using ep0 maxpacket: 32 [ 483.186964][ T797] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 483.320455][T11959] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.330735][ T797] usb 4-1: config 0 has no interface number 0 [ 483.372979][ T797] usb 4-1: config 0 interface 184 has no altsetting 0 [ 483.409794][ T797] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 483.448122][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.457062][ T797] usb 4-1: Product: syz [ 483.493016][T11959] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.503184][ T797] usb 4-1: Manufacturer: syz [ 483.507907][ T797] usb 4-1: SerialNumber: syz [ 483.531766][ T797] usb 4-1: config 0 descriptor?? [ 483.570995][ T797] smsc75xx v1.0.0 [ 483.606508][T11959] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.842216][ T797] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 483.888503][ T797] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 483.926001][ T797] usb 4-1: USB disconnect, device number 73 [ 484.070609][ T5830] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 484.082242][ T5830] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 484.091480][ T5830] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 484.099793][ T5830] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 484.107921][ T5830] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 484.545832][T13463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1906'. [ 484.644914][ T798] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 484.799141][ T798] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 484.839745][ T798] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 484.849573][ T798] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 484.869277][ T798] usb 7-1: config 0 interface 0 has no altsetting 0 [ 484.901246][ T798] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 484.918314][ T798] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 484.938216][ T797] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 484.948141][ T798] usb 7-1: config 0 interface 0 has no altsetting 0 [ 484.972249][ T798] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 484.988254][ T798] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 485.018205][ T798] usb 7-1: config 0 interface 0 has no altsetting 0 [ 485.029608][ T798] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 485.048310][ T798] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 485.066076][ T798] usb 7-1: config 0 interface 0 has no altsetting 0 [ 485.076293][ T797] usb 4-1: device descriptor read/64, error -71 [ 485.088799][ T798] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 485.102102][ T798] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 485.118140][ T798] usb 7-1: config 0 interface 0 has no altsetting 0 [ 485.129659][ T798] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 485.148151][ T798] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 485.178109][ T798] usb 7-1: config 0 interface 0 has no altsetting 0 [ 485.198830][ T798] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 485.207928][ T798] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 485.228088][ T798] usb 7-1: config 0 interface 0 has no altsetting 0 [ 485.248939][ T798] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 485.268320][ T798] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 485.281047][T11959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.289508][ T798] usb 7-1: config 0 interface 0 has no altsetting 0 [ 485.310971][ T798] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 485.321088][ T798] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 485.321490][T11959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.332636][ T798] usb 7-1: Product: syz [ 485.338616][ T797] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 485.350805][ T798] usb 7-1: Manufacturer: syz [ 485.355692][ T798] usb 7-1: SerialNumber: syz [ 485.379176][T11959] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 485.388939][ T798] usb 7-1: config 0 descriptor?? [ 485.409718][T11959] bond0 (unregistering): Released all slaves [ 485.421372][ T798] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 485.498410][ T797] usb 4-1: device descriptor read/64, error -71 [ 485.589053][T11959] tipc: Disabling bearer [ 485.605239][T11959] tipc: Disabling bearer [ 485.635832][ T797] usb usb4-port1: attempt power cycle [ 485.639854][T13461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.658648][T13461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.659135][T11959] tipc: Disabling bearer [ 485.684011][T11959] tipc: Left network mode [ 485.713418][ T10] usb 7-1: USB disconnect, device number 33 [ 485.739354][T13456] lo speed is unknown, defaulting to 1000 [ 485.757805][ T10] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 485.789152][ T24] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 485.968914][ T24] usb 6-1: device descriptor read/64, error -71 [ 485.998561][ T797] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 486.038494][ T797] usb 4-1: device descriptor read/8, error -71 [ 486.168445][ T5830] Bluetooth: hci4: command tx timeout [ 486.208087][ T24] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 486.278162][ T797] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 486.339564][ T797] usb 4-1: device descriptor read/8, error -71 [ 486.343252][T13481] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1909'. [ 486.358132][ T24] usb 6-1: device descriptor read/64, error -71 [ 486.448518][ T797] usb usb4-port1: unable to enumerate USB device [ 486.468679][ T24] usb usb6-port1: attempt power cycle [ 486.745760][T11959] hsr_slave_0: left promiscuous mode [ 486.759085][T11959] hsr_slave_1: left promiscuous mode [ 486.765744][T11959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.782432][T11959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.791891][T11959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.803155][T11959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.832309][T11959] veth1_macvtap: left promiscuous mode [ 486.838122][ T24] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 486.838300][T11959] veth0_macvtap: left promiscuous mode [ 486.852482][T11959] veth1_vlan: left promiscuous mode [ 486.857930][T11959] veth0_vlan: left promiscuous mode [ 486.869399][ T24] usb 6-1: device descriptor read/8, error -71 [ 486.963389][T11959] pim6reg (unregistering): left allmulticast mode [ 487.120070][ T798] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 487.124566][ T24] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 487.158921][ T24] usb 6-1: device descriptor read/8, error -71 [ 487.278425][ T24] usb usb6-port1: unable to enumerate USB device [ 487.285785][ T798] usb 7-1: Using ep0 maxpacket: 16 [ 487.293908][ T798] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 487.304108][ T798] usb 7-1: config 0 has no interface number 0 [ 487.310376][ T798] usb 7-1: config 0 interface 133 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 487.326975][ T798] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 487.339105][ T798] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.350485][ T798] usb 7-1: Product: syz [ 487.354731][ T798] usb 7-1: Manufacturer: syz [ 487.361127][ T798] usb 7-1: SerialNumber: syz [ 487.387167][ T798] usb 7-1: config 0 descriptor?? [ 487.544561][T11959] team0 (unregistering): Port device team_slave_1 removed [ 487.614178][T11959] team0 (unregistering): Port device team_slave_0 removed [ 487.701156][T13497] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 487.814675][ T798] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 487.843949][ T798] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 487.856474][ T798] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 487.865549][ T798] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 487.889112][ T798] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 487.928447][ T798] usb 7-1: USB disconnect, device number 34 [ 487.948416][T13505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1914'. [ 487.961491][ T798] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 487.973509][ T798] keyspan 7-1:0.133: device disconnected [ 488.248110][ T5830] Bluetooth: hci4: command tx timeout [ 488.347547][ T24] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 488.517410][ T3022] smc: removing ib device syz2 [ 488.528861][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 488.550093][ T24] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 95, changing to 10 [ 488.593928][ T24] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1023 [ 488.630819][ T24] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 32 [ 488.675397][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 488.717221][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 488.727358][ T7514] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 488.758147][ T797] lo speed is unknown, defaulting to 1000 [ 488.767372][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.784508][ T797] syz2: Port: 1 Link DOWN [ 488.794544][ T24] usb 4-1: Product: П [ 488.808145][ T24] usb 4-1: Manufacturer: ш [ 488.814494][ T24] usb 4-1: SerialNumber: syz [ 488.831435][T13507] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 488.841229][T13507] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 488.938092][ T7514] usb 7-1: Using ep0 maxpacket: 8 [ 488.949411][ T7514] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 488.972616][ T7514] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 488.991643][ T7514] usb 7-1: Product: syz [ 488.996649][ T7514] usb 7-1: Manufacturer: syz [ 489.028974][ T7514] usb 7-1: SerialNumber: syz [ 489.047522][ T5885] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 489.089292][ T7514] usb 7-1: config 0 descriptor?? [ 489.111538][ T7514] gspca_main: sq905-2.14.0 probing 2770:9120 [ 489.113286][T13456] chnl_net:caif_netlink_parms(): no params data found [ 489.230651][ T5885] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 489.252887][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.316832][ T5885] usb 6-1: config 0 descriptor?? [ 489.337604][ T24] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 489.363331][ T5885] cp210x 6-1:0.0: cp210x converter detected [ 489.381853][ T24] usb 4-1: USB disconnect, device number 78 [ 489.587622][T13456] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.606095][T13456] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.648294][T13456] bridge_slave_0: entered allmulticast mode [ 489.665203][T13456] bridge_slave_0: entered promiscuous mode [ 489.702915][T13456] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.710914][ T7514] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 489.717539][T13456] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.726396][T13456] bridge_slave_1: entered allmulticast mode [ 489.734254][ T7514] sq905 7-1:0.0: probe with driver sq905 failed with error -71 [ 489.756258][T13456] bridge_slave_1: entered promiscuous mode [ 489.782173][ T7514] usb 7-1: USB disconnect, device number 35 [ 489.953139][T13456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.972134][ T5885] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 490.008382][T13456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.008517][ T5885] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 490.063613][ T5885] usb 6-1: cp210x converter now attached to ttyUSB0 [ 490.095444][ T5885] usb 6-1: USB disconnect, device number 48 [ 490.123141][ T5885] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 490.145306][ T5885] cp210x 6-1:0.0: device disconnected [ 490.254802][T13456] team0: Port device team_slave_0 added [ 490.285380][T13456] team0: Port device team_slave_1 added [ 490.329438][ T5830] Bluetooth: hci4: command tx timeout [ 490.364662][T13542] FAULT_INJECTION: forcing a failure. [ 490.364662][T13542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.378450][T13542] CPU: 1 UID: 0 PID: 13542 Comm: syz.6.1920 Not tainted syzkaller #0 PREEMPT(full) [ 490.378480][T13542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 490.378493][T13542] Call Trace: [ 490.378502][T13542] [ 490.378512][T13542] dump_stack_lvl+0x189/0x250 [ 490.378543][T13542] ? __pfx____ratelimit+0x10/0x10 [ 490.378582][T13542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.378606][T13542] ? __pfx__printk+0x10/0x10 [ 490.378649][T13542] should_fail_ex+0x414/0x560 [ 490.378679][T13542] _copy_to_user+0x31/0xb0 [ 490.378702][T13542] video_usercopy+0xe32/0x1450 [ 490.378737][T13542] ? __pfx___video_do_ioctl+0x10/0x10 [ 490.378761][T13542] ? __pfx_video_usercopy+0x10/0x10 [ 490.378803][T13542] ? __fget_files+0x3a0/0x420 [ 490.378833][T13542] v4l2_ioctl+0x18d/0x1e0 [ 490.378856][T13542] ? __pfx_v4l2_ioctl+0x10/0x10 [ 490.378879][T13542] __se_sys_ioctl+0xfc/0x170 [ 490.378901][T13542] do_syscall_64+0xfa/0xfa0 [ 490.378918][T13542] ? lockdep_hardirqs_on+0x9c/0x150 [ 490.378947][T13542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.378967][T13542] ? clear_bhb_loop+0x60/0xb0 [ 490.378991][T13542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.379011][T13542] RIP: 0033:0x7eff02f8efc9 [ 490.379030][T13542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.379046][T13542] RSP: 002b:00007eff03eda038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.379069][T13542] RAX: ffffffffffffffda RBX: 00007eff031e5fa0 RCX: 00007eff02f8efc9 [ 490.379084][T13542] RDX: 0000200000000740 RSI: 00000000c0d05604 RDI: 0000000000000003 [ 490.379097][T13542] RBP: 00007eff03eda090 R08: 0000000000000000 R09: 0000000000000000 [ 490.379110][T13542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.379122][T13542] R13: 00007eff031e6038 R14: 00007eff031e5fa0 R15: 00007ffe02ce3328 [ 490.379157][T13542] [ 490.786995][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1922'. [ 490.798183][T13456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.805300][T13456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 490.832226][T13456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.973135][T13456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 491.001972][T13456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.038076][ T5885] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 491.050879][T13456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.228068][ T5885] usb 7-1: Using ep0 maxpacket: 16 [ 491.240054][ T5885] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.264539][ T5885] usb 7-1: config 0 interface 0 has no altsetting 0 [ 491.276447][T13456] hsr_slave_0: entered promiscuous mode [ 491.278435][ T5885] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 491.284091][T13456] hsr_slave_1: entered promiscuous mode [ 491.306818][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.319010][T13456] debugfs: 'hsr0' already exists in 'hsr' [ 491.324928][T13456] Cannot create hsr debugfs directory [ 491.333618][ T5885] usb 7-1: config 0 descriptor?? [ 491.385216][T13558] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 491.639781][T13570] FAULT_INJECTION: forcing a failure. [ 491.639781][T13570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.726822][ T5885] nzxt-smart2 0003:1E71:2009.003F: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 491.728552][T13570] CPU: 0 UID: 0 PID: 13570 Comm: syz.3.1928 Not tainted syzkaller #0 PREEMPT(full) [ 491.728580][T13570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 491.728592][T13570] Call Trace: [ 491.728601][T13570] [ 491.728609][T13570] dump_stack_lvl+0x189/0x250 [ 491.728638][T13570] ? __pfx____ratelimit+0x10/0x10 [ 491.728664][T13570] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.728686][T13570] ? __pfx__printk+0x10/0x10 [ 491.728721][T13570] should_fail_ex+0x414/0x560 [ 491.728751][T13570] _copy_to_user+0x31/0xb0 [ 491.728773][T13570] simple_read_from_buffer+0xe1/0x170 [ 491.728801][T13570] proc_fail_nth_read+0x1b3/0x220 [ 491.728832][T13570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 491.728863][T13570] ? rw_verify_area+0x2a6/0x4d0 [ 491.728881][T13570] ? __lock_acquire+0xab9/0xd20 [ 491.728906][T13570] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 491.728935][T13570] vfs_read+0x200/0xa30 [ 491.728953][T13570] ? fdget_pos+0x247/0x320 [ 491.728979][T13570] ? __pfx___mutex_lock+0x10/0x10 [ 491.728998][T13570] ? __pfx_vfs_read+0x10/0x10 [ 491.729020][T13570] ? __fget_files+0x2a/0x420 [ 491.729046][T13570] ? __fget_files+0x3a0/0x420 [ 491.729066][T13570] ? __fget_files+0x2a/0x420 [ 491.729097][T13570] ksys_read+0x145/0x250 [ 491.729119][T13570] ? __pfx_ksys_read+0x10/0x10 [ 491.729142][T13570] ? do_syscall_64+0xbe/0xfa0 [ 491.729163][T13570] do_syscall_64+0xfa/0xfa0 [ 491.729178][T13570] ? lockdep_hardirqs_on+0x9c/0x150 [ 491.729225][T13570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.729243][T13570] ? clear_bhb_loop+0x60/0xb0 [ 491.729267][T13570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.729284][T13570] RIP: 0033:0x7fe75358d9dc [ 491.729303][T13570] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 491.729327][T13570] RSP: 002b:00007fe75445f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 491.729349][T13570] RAX: ffffffffffffffda RBX: 00007fe7537e5fa0 RCX: 00007fe75358d9dc [ 491.729364][T13570] RDX: 000000000000000f RSI: 00007fe75445f0a0 RDI: 0000000000000004 [ 491.729376][T13570] RBP: 00007fe75445f090 R08: 0000000000000000 R09: 0000000000000000 [ 491.729388][T13570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.729400][T13570] R13: 00007fe7537e6038 R14: 00007fe7537e5fa0 R15: 00007ffd9cf62d68 [ 491.729432][T13570] [ 491.848855][ T798] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 492.048225][ T5885] usb 7-1: USB disconnect, device number 36 [ 492.049349][T13581] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1930'. [ 492.124936][T13575] fido_id[13575]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 492.279861][ T798] usb 6-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 492.291228][ T798] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.326814][ T798] usb 6-1: config 0 descriptor?? [ 492.394827][T13456] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 492.408201][ T5830] Bluetooth: hci4: command tx timeout [ 492.426403][T13456] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 492.446568][T13456] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 492.468434][ T5885] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 492.484819][T13456] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 492.565837][ T798] kaweth 6-1:0.0: Firmware present in device. [ 492.584621][ T798] kaweth 6-1:0.0: Statistics collection: 0 [ 492.595376][ T798] kaweth 6-1:0.0: Multicast filter limit: 0 [ 492.608163][ T798] kaweth 6-1:0.0: MTU: 0 [ 492.618119][ T798] kaweth 6-1:0.0: Read MAC address 00:00:00:00:00:00 [ 492.642552][ T5885] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 492.676230][ T5885] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 492.700982][ T5885] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 492.713206][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 492.733745][ T5885] usb 7-1: SerialNumber: syz [ 492.789911][T13456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.826212][T13456] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.846571][T11959] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.854033][T11959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.882954][T11959] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.890340][T11959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.931424][ T798] kaweth 6-1:0.0: kaweth interface created at eth9 [ 492.983169][ T5885] usb 7-1: 0:2 : does not exist [ 492.997680][ T24] usb 6-1: USB disconnect, device number 49 [ 493.008079][ T5892] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 493.031509][ T5885] usb 7-1: unit 5 not found! [ 493.087784][ T5885] usb 7-1: USB disconnect, device number 37 [ 493.173426][ T5892] usb 4-1: Using ep0 maxpacket: 32 [ 493.188897][ T5828] udevd[5828]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 493.217214][ T5892] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 493.229360][ T5892] usb 4-1: config 0 has no interface number 0 [ 493.245098][ T5892] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 493.269499][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.290285][ T5892] usb 4-1: Product: syz [ 493.294612][ T5892] usb 4-1: Manufacturer: syz [ 493.300145][ T5892] usb 4-1: SerialNumber: syz [ 493.319347][ T5892] usb 4-1: config 0 descriptor?? [ 493.334177][ T5892] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 493.571532][ T24] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 493.584231][ T5892] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 493.609512][T13456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.633640][ T5892] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 493.740556][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 493.771214][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 493.808954][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 493.817595][ T24] usb 6-1: config 0 has no interface number 0 [ 493.839610][ T24] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 493.868152][ T24] usb 6-1: config 0 interface 1 has no altsetting 0 [ 493.883694][ T24] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 493.914526][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.924873][ T24] usb 6-1: Product: syz [ 493.942245][T13606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.959395][ T24] usb 6-1: Manufacturer: syz [ 493.964095][ T24] usb 6-1: SerialNumber: syz [ 493.968577][T13606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.003799][ T24] usb 6-1: config 0 descriptor?? [ 494.006074][ T5911] usb 4-1: USB disconnect, device number 79 [ 494.009078][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 494.063347][ T5911] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 494.103766][ T5911] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 494.130298][ T5911] quatech2 4-1:0.51: device disconnected [ 494.244838][ T24] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 494.282002][ T24] cx231xx 6-1:0.1: Failed to read PCB config [ 494.301487][ T24] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 494.331842][ T24] usb 6-1: USB disconnect, device number 50 [ 494.514189][T13456] veth0_vlan: entered promiscuous mode [ 494.534535][T13456] veth1_vlan: entered promiscuous mode [ 494.586299][T13456] veth0_macvtap: entered promiscuous mode [ 494.607710][T13456] veth1_macvtap: entered promiscuous mode [ 494.646561][T13456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.668532][T13456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.689094][ T79] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.711532][ T79] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.732657][ T79] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.741913][ T79] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.758911][ T24] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 494.827271][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.835740][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.858382][ T5892] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 494.872138][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.880580][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.940397][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 494.959890][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 494.978565][ T24] usb 6-1: config 0 has no interface number 0 [ 494.984913][ T24] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 495.009182][T13651] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 495.017379][ T24] usb 6-1: config 0 interface 1 has no altsetting 0 [ 495.035107][ T5892] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 495.046678][ T5892] usb 4-1: config 0 has no interface number 0 [ 495.055099][ T5892] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 495.067375][ T24] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 495.078289][ T5892] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 495.089639][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.097666][ T24] usb 6-1: Product: syz [ 495.103144][ T5892] usb 4-1: config 0 interface 230 has no altsetting 0 [ 495.111489][ T24] usb 6-1: Manufacturer: syz [ 495.116424][ T24] usb 6-1: SerialNumber: syz [ 495.129840][ T5892] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 495.140831][ T24] usb 6-1: config 0 descriptor?? [ 495.146277][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.158987][T13658] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1942'. [ 495.160619][ T5892] usb 4-1: Product: syz [ 495.174429][ T5892] usb 4-1: Manufacturer: syz [ 495.180963][ T5892] usb 4-1: SerialNumber: syz [ 495.192450][ T5892] usb 4-1: config 0 descriptor?? [ 495.199950][T13648] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 495.207397][T13648] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 495.215673][T13651] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 495.246507][T13651] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.261760][ T5892] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 495.291719][T13651] usb 7-1: config 0 descriptor?? [ 495.313567][T13651] cp210x 7-1:0.0: cp210x converter detected [ 495.324497][ T5892] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 495.362939][ T24] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 495.373472][ T24] cx231xx 6-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 495.495198][ T5892] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 495.506014][ T24] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 495.514802][ T24] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 495.528490][ T5892] usb 4-1: USB disconnect, device number 80 [ 495.538874][ T24] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 495.552141][ T24] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 495.566800][ T24] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 495.574041][T13614] syzkaller1: entered promiscuous mode [ 495.576717][ T24] cx231xx 6-1:0.1: Failed to set devmode to analog: error: -32 [ 495.583535][T13614] syzkaller1: entered allmulticast mode [ 495.624124][ T24] i2c i2c-4: Added multiplexed i2c bus 6 [ 495.636364][ T24] i2c i2c-4: Added multiplexed i2c bus 7 [ 495.646519][ T24] cx231xx 6-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 495.656474][ T24] cx231xx 6-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 495.687273][ T24] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 495.700389][ T24] usb 6-1: USB disconnect, device number 51 [ 495.706668][T13651] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 495.955119][T13651] usb 7-1: cp210x converter now attached to ttyUSB0 [ 496.146510][T13651] usb 7-1: USB disconnect, device number 38 [ 496.169514][T13651] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 496.186346][T13651] cp210x 7-1:0.0: device disconnected [ 496.399551][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 496.522179][T13684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1951'. [ 496.630158][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.642193][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.653694][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 496.667763][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 496.677147][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.698759][ T10] usb 8-1: config 0 descriptor?? [ 496.848247][ T5911] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 496.904415][T13696] pim6reg: entered allmulticast mode [ 496.962456][ T10] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 497.008061][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 497.019508][ T5911] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.043403][ T5911] usb 4-1: config 0 interface 0 has no altsetting 0 [ 497.051280][ T5911] usb 4-1: New USB device found, idVendor=05ac, idProduct=0214, bcdDevice= 0.00 [ 497.061517][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.077672][ T5911] usb 4-1: config 0 descriptor?? [ 497.254313][ T24] usb 8-1: USB disconnect, device number 2 [ 497.310231][T13691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.331364][T13691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.551508][ T5911] apple 0003:05AC:0214.0041: unknown main item tag 0x6 [ 497.563840][ T5911] apple 0003:05AC:0214.0041: unknown main item tag 0x5 [ 497.573657][ T5911] apple 0003:05AC:0214.0041: unknown main item tag 0x4 [ 497.594324][ T5911] apple 0003:05AC:0214.0041: item fetching failed at offset 31/160 [ 497.605862][ T10] usb 6-1: new low-speed USB device number 52 using dummy_hcd [ 497.616900][ T5911] apple 0003:05AC:0214.0041: parse failed [ 497.633771][ T5911] apple 0003:05AC:0214.0041: probe with driver apple failed with error -22 [ 497.750846][ T24] usb 4-1: USB disconnect, device number 81 [ 497.778708][ T10] usb 6-1: Invalid ep0 maxpacket: 64 [ 497.832064][T13708] netlink: 'syz.7.1957': attribute type 21 has an invalid length. [ 497.884063][T13709] binder: 13707:13709 ioctl c0306201 2000000003c0 returned -14 [ 497.911063][ T10] usb 6-1: new low-speed USB device number 53 using dummy_hcd [ 497.978114][T13651] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 498.068239][ T10] usb 6-1: Invalid ep0 maxpacket: 64 [ 498.073931][ T10] usb usb6-port1: attempt power cycle [ 498.148197][T13651] usb 7-1: Using ep0 maxpacket: 32 [ 498.159736][T13651] usb 7-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 498.169745][T13651] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.177861][T13651] usb 7-1: Product: syz [ 498.183297][T13651] usb 7-1: Manufacturer: syz [ 498.188303][T13651] usb 7-1: SerialNumber: syz [ 498.195626][T13651] usb 7-1: config 0 descriptor?? [ 498.418580][ T10] usb 6-1: new low-speed USB device number 54 using dummy_hcd [ 498.438694][ T10] usb 6-1: Invalid ep0 maxpacket: 64 [ 498.573398][ T10] usb 6-1: new low-speed USB device number 55 using dummy_hcd [ 498.582027][ T5911] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 498.608871][ T10] usb 6-1: Invalid ep0 maxpacket: 64 [ 498.626098][ T10] usb usb6-port1: unable to enumerate USB device [ 498.705956][ T5835] block nbd2: Receive control failed (result -32) [ 498.705958][T13711] block nbd7: Receive control failed (result -32) [ 498.707781][ T5834] block nbd3: Receive control failed (result -32) [ 498.713671][ T8068] block nbd4: Receive control failed (result -32) [ 498.715583][ T5150] block nbd5: Receive control failed (result -32) [ 498.721438][T13718] block nbd11: Receive control failed (result -32) [ 498.728483][ T5830] block nbd1: Receive control failed (result -32) [ 498.735474][ T52] block nbd6: Receive control failed (result -32) [ 498.742807][T13714] block nbd8: Receive control failed (result -32) [ 498.748783][T13716] block nbd9: Receive control failed (result -32) [ 498.768583][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 498.769600][T13715] block nbd10: Receive control failed (result -32) [ 498.816868][T13651] peak_usb 7-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 498.826538][ T5911] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 498.836546][T13651] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 498.844985][T13651] peak_usb 7-1:0.0 can0: sending command failure: -22 [ 498.853289][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.866394][ T5911] usb 4-1: Product: syz [ 498.872747][ T5911] usb 4-1: Manufacturer: syz [ 498.877546][ T5911] usb 4-1: SerialNumber: syz [ 498.921418][ T5911] usb 4-1: config 0 descriptor?? [ 498.923819][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1960'. [ 498.940061][T13651] peak_usb 7-1:0.0: probe with driver peak_usb failed with error -22 [ 498.942007][ T5911] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 499.027307][ T798] usb 7-1: USB disconnect, device number 39 [ 499.343286][ T5911] usb 4-1: clie_3_5_startup: get interface number bad return length: 0 [ 499.352815][ T5911] visor 4-1:0.0: probe with driver visor failed with error -5 [ 499.529694][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 499.586284][ T5911] usb 4-1: USB disconnect, device number 82 [ 499.633112][T13736] netlink: 'syz.6.1964': attribute type 1 has an invalid length. [ 499.641831][T13736] netlink: 'syz.6.1964': attribute type 3 has an invalid length. [ 499.650166][T13736] netlink: 172 bytes leftover after parsing attributes in process `syz.6.1964'. [ 499.659538][T13736] NCSI netlink: No device for ifindex 813332851 [ 499.695158][ T24] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 499.705382][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.714716][ T24] usb 8-1: Product: syz [ 499.723944][ T24] usb 8-1: Manufacturer: syz [ 499.729157][ T24] usb 8-1: SerialNumber: syz [ 499.743871][ T24] usb 8-1: config 0 descriptor?? [ 500.171142][T13731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.191257][T13731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.203026][ T24] usb 8-1: Firmware: major: 118, minor: 209, hardware type: HULUSB (4) [ 500.294712][T13750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1969'. [ 500.407599][ T24] usb 8-1: failed to fetch extended address, random address set [ 500.506995][ T24] usb 8-1: USB disconnect, device number 3 [ 500.718579][T13651] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 500.858119][T13651] usb 4-1: device descriptor read/64, error -71 [ 500.887508][ T24] IPVS: starting estimator thread 0... [ 500.899227][T13780] netlink: 'syz.5.1979': attribute type 4 has an invalid length. [ 500.988137][T13781] IPVS: using max 25 ests per chain, 60000 per kthread [ 501.017742][ T2960] nci: nci_rx_work: unknown MT 0x4 [ 501.098122][T13651] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 501.149431][T13795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 501.248168][T13651] usb 4-1: device descriptor read/64, error -71 [ 501.358462][T13651] usb usb4-port1: attempt power cycle [ 501.408180][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 501.560124][ T9] usb 8-1: config 0 has an invalid descriptor of length 130, skipping remainder of the config [ 501.570677][ T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 501.584836][ T9] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 501.594357][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.603083][ T9] usb 8-1: Product: syz [ 501.607289][ T9] usb 8-1: Manufacturer: syz [ 501.612590][ T9] usb 8-1: SerialNumber: syz [ 501.622108][ T9] usb 8-1: config 0 descriptor?? [ 501.698062][T13651] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 501.756471][T13651] usb 4-1: device descriptor read/8, error -71 [ 501.916969][T13810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.936640][T13810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.946171][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.954180][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.018119][T13651] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 502.050722][T13651] usb 4-1: device descriptor read/8, error -71 [ 502.168539][T13651] usb usb4-port1: unable to enumerate USB device [ 502.227371][T13716] Bluetooth: hci1: ACL packet for unknown connection handle 1 [ 502.308865][T13821] FAULT_INJECTION: forcing a failure. [ 502.308865][T13821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.322950][T13821] CPU: 1 UID: 0 PID: 13821 Comm: syz.5.1990 Not tainted syzkaller #0 PREEMPT(full) [ 502.322980][T13821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 502.322993][T13821] Call Trace: [ 502.323003][T13821] [ 502.323012][T13821] dump_stack_lvl+0x189/0x250 [ 502.323042][T13821] ? __pfx____ratelimit+0x10/0x10 [ 502.323072][T13821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 502.323097][T13821] ? __pfx__printk+0x10/0x10 [ 502.323120][T13821] ? __might_fault+0xb0/0x130 [ 502.323160][T13821] should_fail_ex+0x414/0x560 [ 502.323193][T13821] _copy_from_user+0x2d/0xb0 [ 502.323215][T13821] ___sys_sendmsg+0x158/0x2a0 [ 502.323243][T13821] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.323307][T13821] ? __fget_files+0x2a/0x420 [ 502.323330][T13821] ? __fget_files+0x3a0/0x420 [ 502.323374][T13821] __x64_sys_sendmsg+0x19b/0x260 [ 502.323402][T13821] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 502.323436][T13821] ? __pfx_ksys_write+0x10/0x10 [ 502.323463][T13821] ? do_syscall_64+0xbe/0xfa0 [ 502.323486][T13821] do_syscall_64+0xfa/0xfa0 [ 502.323503][T13821] ? lockdep_hardirqs_on+0x9c/0x150 [ 502.323533][T13821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.323554][T13821] ? clear_bhb_loop+0x60/0xb0 [ 502.323580][T13821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.323599][T13821] RIP: 0033:0x7fb0f078efc9 [ 502.323618][T13821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.323636][T13821] RSP: 002b:00007fb0f15bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.323659][T13821] RAX: ffffffffffffffda RBX: 00007fb0f09e5fa0 RCX: 00007fb0f078efc9 [ 502.323675][T13821] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 502.323689][T13821] RBP: 00007fb0f15bf090 R08: 0000000000000000 R09: 0000000000000000 [ 502.323701][T13821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.323714][T13821] R13: 00007fb0f09e6038 R14: 00007fb0f09e5fa0 R15: 00007fff28c66478 [ 502.323749][T13821] [ 502.576367][ T56] block nbd0: Possible stuck request ffff88802598e000: control (read@0,1024B). Runtime 150 seconds [ 502.673991][T13833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1994'. [ 502.908576][T13651] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 503.068487][T13651] usb 7-1: Using ep0 maxpacket: 32 [ 503.077731][T13651] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 503.087025][T13651] usb 7-1: config 0 has no interface number 0 [ 503.099486][T13651] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 503.108682][T13651] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.117747][T13651] usb 7-1: Product: syz [ 503.122037][T13651] usb 7-1: Manufacturer: syz [ 503.126753][T13651] usb 7-1: SerialNumber: syz [ 503.134839][T13651] usb 7-1: config 0 descriptor?? [ 503.143010][T13651] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 503.308251][ T5911] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 503.349720][T13651] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 503.363047][T13651] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 503.468819][ T5911] usb 6-1: Using ep0 maxpacket: 16 [ 503.477467][ T5911] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 503.485290][T13842] loop7: detected capacity change from 0 to 1 [ 503.487180][ T5911] usb 6-1: config 1 has no interface number 1 [ 503.502291][ T5911] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 503.513799][ T5911] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 503.533173][ T5911] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 503.543109][T13842] Dev loop7: unable to read RDB block 1 [ 503.553383][T13842] loop7: unable to read partition table [ 503.561899][ T5911] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 503.574423][T13842] loop7: partition table beyond EOD, truncated [ 503.581079][ T5911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.585917][T13842] loop_reread_partitions: partition scan of loop7 (îÝ·ÂU@™:ÖB$Œ{WÎÉ´å) failed (rc=-5) [ 503.589465][ T5911] usb 6-1: Product: syz [ 503.603740][ T5911] usb 6-1: Manufacturer: syz [ 503.610007][ T5911] usb 6-1: SerialNumber: syz [ 503.790042][T13832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.799432][T13832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.838233][ T798] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 503.859597][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 503.860205][ T9] usb 7-1: USB disconnect, device number 40 [ 503.882993][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 503.898968][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 503.912408][ T9] quatech2 7-1:0.51: device disconnected [ 504.000723][ T798] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 504.009309][ T798] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 504.018666][ T798] usb 4-1: config 220 has an invalid descriptor of length 99, skipping remainder of the config [ 504.029334][ T798] usb 4-1: config 220 has no interface number 2 [ 504.036825][ T5911] usb 6-1: 2:1 : format type 0 is detected, processed as PCM [ 504.044493][ T798] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 504.059743][ T798] usb 4-1: config 220 interface 0 has no altsetting 0 [ 504.066656][ T798] usb 4-1: config 220 interface 76 has no altsetting 0 [ 504.074029][ T798] usb 4-1: config 220 interface 1 has no altsetting 0 [ 504.083338][ T798] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 504.092721][ T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.101958][ T798] usb 4-1: Product: syz [ 504.106289][ T798] usb 4-1: Manufacturer: syz [ 504.111094][ T798] usb 4-1: SerialNumber: syz [ 504.191613][T13651] usb 8-1: USB disconnect, device number 4 [ 504.334535][ T798] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 504.344177][ T798] uvcvideo 4-1:220.0: No valid video chain found. [ 504.351306][ T798] usb 4-1: selecting invalid altsetting 0 [ 504.388930][ T798] usb 4-1: selecting invalid altsetting 0 [ 504.394954][ T798] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 504.415700][ T798] usb 4-1: USB disconnect, device number 87 [ 504.465974][T13848] FAULT_INJECTION: forcing a failure. [ 504.465974][T13848] name failslab, interval 1, probability 0, space 0, times 0 [ 504.479145][T13848] CPU: 0 UID: 0 PID: 13848 Comm: syz.6.2001 Not tainted syzkaller #0 PREEMPT(full) [ 504.479174][T13848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 504.479185][T13848] Call Trace: [ 504.479196][T13848] [ 504.479204][T13848] dump_stack_lvl+0x189/0x250 [ 504.479229][T13848] ? __pfx____ratelimit+0x10/0x10 [ 504.479259][T13848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.479278][T13848] ? __pfx__printk+0x10/0x10 [ 504.479309][T13848] ? __pfx___might_resched+0x10/0x10 [ 504.479325][T13848] ? fs_reclaim_acquire+0x7d/0x100 [ 504.479354][T13848] should_fail_ex+0x414/0x560 [ 504.479379][T13848] should_failslab+0xa8/0x100 [ 504.479396][T13848] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 504.479420][T13848] ? __alloc_skb+0x112/0x2d0 [ 504.479434][T13848] ? netlink_autobind+0xdb/0x300 [ 504.479457][T13848] __alloc_skb+0x112/0x2d0 [ 504.479477][T13848] netlink_sendmsg+0x5c6/0xb30 [ 504.479504][T13848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.479524][T13848] ? aa_sock_msg_perm+0xf1/0x1d0 [ 504.479545][T13848] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 504.479570][T13848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.479589][T13848] __sock_sendmsg+0x21c/0x270 [ 504.479615][T13848] ____sys_sendmsg+0x505/0x830 [ 504.479640][T13848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.479667][T13848] ? import_iovec+0x74/0xa0 [ 504.479688][T13848] ___sys_sendmsg+0x21f/0x2a0 [ 504.479709][T13848] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.479758][T13848] ? __fget_files+0x2a/0x420 [ 504.479777][T13848] ? __fget_files+0x3a0/0x420 [ 504.479805][T13848] __x64_sys_sendmsg+0x19b/0x260 [ 504.479827][T13848] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.479854][T13848] ? __pfx_ksys_write+0x10/0x10 [ 504.479875][T13848] ? do_syscall_64+0xbe/0xfa0 [ 504.479894][T13848] do_syscall_64+0xfa/0xfa0 [ 504.479907][T13848] ? lockdep_hardirqs_on+0x9c/0x150 [ 504.479931][T13848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.479948][T13848] ? clear_bhb_loop+0x60/0xb0 [ 504.479968][T13848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.479984][T13848] RIP: 0033:0x7eff02f8efc9 [ 504.480001][T13848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.480016][T13848] RSP: 002b:00007eff03eda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.480036][T13848] RAX: ffffffffffffffda RBX: 00007eff031e5fa0 RCX: 00007eff02f8efc9 [ 504.480049][T13848] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 504.480061][T13848] RBP: 00007eff03eda090 R08: 0000000000000000 R09: 0000000000000000 [ 504.480071][T13848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.480081][T13848] R13: 00007eff031e6038 R14: 00007eff031e5fa0 R15: 00007ffe02ce3328 [ 504.480108][T13848] [ 504.828076][T13651] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 504.959106][T13651] usb 8-1: device descriptor read/64, error -71 [ 504.987550][T13840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.001753][T13840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.046771][T13861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.087764][T13861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.135994][ T5911] usb 6-1: USB disconnect, device number 56 [ 505.136577][T13862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.181655][T13861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.196018][T13862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.238082][T13651] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 505.263999][T13861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.267838][ T6126] udevd[6126]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 505.288188][ T7514] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 505.428214][T13651] usb 8-1: device descriptor read/64, error -71 [ 505.456266][T13872] cgroup2: Unknown parameter 'obj_user' [ 505.543298][T13651] usb usb8-port1: attempt power cycle [ 505.908556][T13651] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 505.949934][T13651] usb 8-1: device descriptor read/8, error -71 [ 506.188957][T13651] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 506.201066][ T7514] usb 7-1: device descriptor read/64, error -71 [ 506.216302][T13651] usb 8-1: device descriptor read/8, error -71 [ 506.268100][ T5892] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 506.333338][T13651] usb usb8-port1: unable to enumerate USB device [ 506.398120][ T798] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 506.435807][ T5892] usb 6-1: config 4 has an invalid interface number: 247 but max is 0 [ 506.445625][ T5892] usb 6-1: config 4 has no interface number 0 [ 506.452996][ T7514] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 506.465120][ T5892] usb 6-1: config 4 interface 247 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 506.477424][ T5892] usb 6-1: config 4 interface 247 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 506.495663][ T5892] usb 6-1: config 4 interface 247 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64 [ 506.507855][ T5892] usb 6-1: config 4 interface 247 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 506.526813][ T5892] usb 6-1: config 4 interface 247 has no altsetting 0 [ 506.537672][ T5892] usb 6-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=69.5d [ 506.552961][ T798] usb 4-1: device descriptor read/64, error -71 [ 506.553274][ T5892] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.567480][ T5892] usb 6-1: Product: syz [ 506.572107][ T5892] usb 6-1: Manufacturer: syz [ 506.576738][ T5892] usb 6-1: SerialNumber: syz [ 506.590549][T13908] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 506.616213][ T5892] ni6501 6-1:4.247: driver 'ni6501' failed to auto-configure device. [ 506.630350][ T7514] usb 7-1: config 0 has too many interfaces: 132, using maximum allowed: 32 [ 506.648083][ T7514] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 132 [ 506.676121][ T7514] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 506.703434][ T7514] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 506.719536][ T7514] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 506.737652][ T7514] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 506.749116][ T7514] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.757474][ T7514] usb 7-1: Product: syz [ 506.767235][ T7514] usb 7-1: Manufacturer: syz [ 506.774299][ T7514] usb 7-1: SerialNumber: syz [ 506.793331][ T7514] usb 7-1: config 0 descriptor?? [ 506.811425][ T798] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 506.815497][ T7514] iguanair 7-1:0.0: probe with driver iguanair failed with error -12 [ 506.833679][ T24] usb 6-1: USB disconnect, device number 57 [ 506.968155][ T798] usb 4-1: device descriptor read/64, error -71 [ 507.042283][ T24] usb 7-1: USB disconnect, device number 42 [ 507.080963][ T798] usb usb4-port1: attempt power cycle [ 507.417752][T13716] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 507.428549][T13716] CPU: 0 UID: 0 PID: 13716 Comm: kworker/u9:9 Not tainted syzkaller #0 PREEMPT(full) [ 507.428581][T13716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 507.428596][T13716] Workqueue: hci4 hci_rx_work [ 507.428628][T13716] Call Trace: [ 507.428639][T13716] [ 507.428650][T13716] dump_stack_lvl+0x189/0x250 [ 507.428684][T13716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.428711][T13716] ? __pfx__printk+0x10/0x10 [ 507.428743][T13716] ? kernfs_path_from_node+0x250/0x290 [ 507.428772][T13716] ? kernfs_path_from_node+0x2f/0x290 [ 507.428806][T13716] sysfs_create_dir_ns+0x259/0x280 [ 507.428841][T13716] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 507.428873][T13716] ? do_raw_spin_unlock+0x122/0x240 [ 507.428904][T13716] kobject_add_internal+0x59f/0xb40 [ 507.428938][T13716] kobject_add+0x155/0x220 [ 507.428967][T13716] ? __pfx_kobject_add+0x10/0x10 [ 507.429017][T13716] ? _raw_spin_unlock+0x28/0x50 [ 507.429047][T13716] ? get_device_parent+0x366/0x3a0 [ 507.429079][T13716] device_add+0x408/0xb50 [ 507.429111][T13716] hci_conn_add_sysfs+0xd5/0x1e0 [ 507.429137][T13716] le_conn_complete_evt+0xf26/0x14d0 [ 507.429178][T13716] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 507.429205][T13716] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 507.429232][T13716] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 507.429250][T13716] ? skb_pull_data+0xfb/0x200 [ 507.429283][T13716] hci_le_enh_conn_complete_evt+0x189/0x470 [ 507.429326][T13716] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 507.429361][T13716] hci_event_packet+0x78f/0x1200 [ 507.429392][T13716] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 507.429425][T13716] ? __pfx_hci_event_packet+0x10/0x10 [ 507.429454][T13716] ? kcov_remote_start+0x4d3/0x7f0 [ 507.429485][T13716] ? local_clock_noinstr+0xe0/0xe0 [ 507.429518][T13716] ? hci_send_to_monitor+0xe2/0x570 [ 507.429545][T13716] hci_rx_work+0x46a/0xe80 [ 507.429581][T13716] ? process_scheduled_works+0x9ef/0x17b0 [ 507.429617][T13716] process_scheduled_works+0xae1/0x17b0 [ 507.429686][T13716] ? __pfx_process_scheduled_works+0x10/0x10 [ 507.429739][T13716] worker_thread+0x8a0/0xda0 [ 507.429777][T13716] ? __kthread_parkme+0x7b/0x200 [ 507.429812][T13716] kthread+0x711/0x8a0 [ 507.429842][T13716] ? __pfx_worker_thread+0x10/0x10 [ 507.429863][T13716] ? __pfx_kthread+0x10/0x10 [ 507.429891][T13716] ? _raw_spin_unlock_irq+0x23/0x50 [ 507.429920][T13716] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.429948][T13716] ? __pfx_kthread+0x10/0x10 [ 507.429976][T13716] ret_from_fork+0x4bc/0x870 [ 507.430011][T13716] ? __pfx_ret_from_fork+0x10/0x10 [ 507.430049][T13716] ? __switch_to_asm+0x39/0x70 [ 507.430075][T13716] ? __switch_to_asm+0x33/0x70 [ 507.430099][T13716] ? __pfx_kthread+0x10/0x10 [ 507.430125][T13716] ret_from_fork_asm+0x1a/0x30 [ 507.430183][T13716] [ 507.430222][T13716] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 507.478662][T13951] input: syz0 as /devices/virtual/input/input74 [ 507.480652][ T798] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 507.610884][T13716] Bluetooth: hci4: failed to register connection device [ 507.903878][ T798] usb 4-1: device descriptor read/8, error -71 [ 507.982065][T13964] FAULT_INJECTION: forcing a failure. [ 507.982065][T13964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.997841][T13964] CPU: 0 UID: 0 PID: 13964 Comm: syz.6.2021 Not tainted syzkaller #0 PREEMPT(full) [ 507.997871][T13964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 507.997884][T13964] Call Trace: [ 507.997892][T13964] [ 507.997902][T13964] dump_stack_lvl+0x189/0x250 [ 507.997933][T13964] ? __pfx____ratelimit+0x10/0x10 [ 507.997968][T13964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.997991][T13964] ? __pfx__printk+0x10/0x10 [ 507.998013][T13964] ? __might_fault+0xb0/0x130 [ 507.998051][T13964] should_fail_ex+0x414/0x560 [ 507.998083][T13964] _copy_from_iter+0x1de/0x1790 [ 507.998121][T13964] ? rcu_is_watching+0x15/0xb0 [ 507.998151][T13964] ? __pfx__copy_from_iter+0x10/0x10 [ 507.998184][T13964] ? __build_skb_around+0x262/0x3f0 [ 507.998210][T13964] ? netlink_sendmsg+0x642/0xb30 [ 507.998230][T13964] ? skb_put+0x11b/0x210 [ 507.998264][T13964] netlink_sendmsg+0x6b2/0xb30 [ 507.998296][T13964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.998323][T13964] ? aa_sock_msg_perm+0xf1/0x1d0 [ 507.998348][T13964] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 507.998379][T13964] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.998403][T13964] __sock_sendmsg+0x21c/0x270 [ 507.998435][T13964] ____sys_sendmsg+0x505/0x830 [ 507.998464][T13964] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.998497][T13964] ? import_iovec+0x74/0xa0 [ 507.998522][T13964] ___sys_sendmsg+0x21f/0x2a0 [ 507.998549][T13964] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.998614][T13964] ? __fget_files+0x2a/0x420 [ 507.998636][T13964] ? __fget_files+0x3a0/0x420 [ 507.998672][T13964] __x64_sys_sendmsg+0x19b/0x260 [ 507.998699][T13964] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 507.998735][T13964] ? __pfx_ksys_write+0x10/0x10 [ 507.998762][T13964] ? do_syscall_64+0xbe/0xfa0 [ 507.998786][T13964] do_syscall_64+0xfa/0xfa0 [ 507.998803][T13964] ? lockdep_hardirqs_on+0x9c/0x150 [ 507.998833][T13964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.998854][T13964] ? clear_bhb_loop+0x60/0xb0 [ 507.998879][T13964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.998898][T13964] RIP: 0033:0x7eff02f8efc9 [ 507.998917][T13964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.998936][T13964] RSP: 002b:00007eff03eda038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.998960][T13964] RAX: ffffffffffffffda RBX: 00007eff031e5fa0 RCX: 00007eff02f8efc9 [ 507.998976][T13964] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 507.998990][T13964] RBP: 00007eff03eda090 R08: 0000000000000000 R09: 0000000000000000 [ 507.999003][T13964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.999016][T13964] R13: 00007eff031e6038 R14: 00007eff031e5fa0 R15: 00007ffe02ce3328 [ 507.999050][T13964] [ 508.418537][ T798] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 508.438755][ T798] usb 4-1: device descriptor read/8, error -71 [ 508.559000][ T798] usb usb4-port1: unable to enumerate USB device [ 508.618084][T13651] usb 6-1: new full-speed USB device number 58 using dummy_hcd [ 508.770205][T13651] usb 6-1: config 7 has an invalid interface number: 101 but max is 0 [ 508.778849][T13651] usb 6-1: config 7 has no interface number 0 [ 508.787263][T13651] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 508.796816][T13651] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.805163][T13651] usb 6-1: Product: syz [ 508.809848][T13651] usb 6-1: Manufacturer: syz [ 508.814473][T13651] usb 6-1: SerialNumber: syz [ 509.258466][ T5892] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 509.398210][ T5892] usb 8-1: device descriptor read/64, error -71 [ 509.528199][T13715] Bluetooth: hci1: command 0x0c1a tx timeout [ 509.534557][ T24] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 509.540922][ T24] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 509.558134][ T5911] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 509.638241][ T5892] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 509.740376][ T5911] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 509.750424][ T5911] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 509.761009][ T5911] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 509.771322][ T5911] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 509.779151][ T5892] usb 8-1: device descriptor read/64, error -71 [ 509.784485][ T5911] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 509.798192][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 509.806304][ T5911] usb 4-1: Product: syz [ 509.810661][ T5911] usb 4-1: Manufacturer: syz [ 509.822124][ T5911] cdc_wdm 4-1:1.0: skipping garbage [ 509.827548][ T5911] cdc_wdm 4-1:1.0: skipping garbage [ 509.833737][ T5911] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 509.909400][ T5892] usb usb8-port1: attempt power cycle [ 510.194136][T13991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.203128][T13991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.258125][ T5892] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 510.282247][ T5892] usb 8-1: device descriptor read/8, error -71 [ 510.548193][ T5892] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 510.569235][ T5892] usb 8-1: device descriptor read/8, error -71 [ 510.679604][ T5892] usb usb8-port1: unable to enumerate USB device [ 510.888373][ T31] INFO: task syz.0.1155:10549 blocked for more than 143 seconds. [ 510.896576][ T31] Not tainted syzkaller #0 [ 510.903913][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 510.914419][ T31] task:syz.0.1155 state:D stack:27768 pid:10549 tgid:10545 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 510.927134][ T31] Call Trace: [ 510.930596][ T31] [ 510.933575][ T31] __schedule+0x17c4/0x4d60 [ 510.938456][ T31] ? locks_remove_posix+0x395/0x650 [ 510.943910][ T31] ? __lock_acquire+0xab9/0xd20 [ 510.950213][ T31] ? __lock_acquire+0xab9/0xd20 [ 510.955236][ T31] ? __pfx___schedule+0x10/0x10 [ 510.960623][ T31] ? schedule+0x91/0x360 [ 510.964929][ T31] schedule+0x165/0x360 [ 510.969430][ T31] schedule_preempt_disabled+0x13/0x30 [ 510.975244][ T31] __mutex_lock+0x7e6/0x1350 [ 510.982067][ T31] ? __mutex_lock+0x5bb/0x1350 [ 510.986916][ T31] ? bdev_release+0x1a9/0x650 [ 510.992003][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 510.998378][ T31] ? __asan_memset+0x22/0x50 [ 511.003061][ T31] ? __pfx___fsnotify_parent+0x10/0x10 [ 511.008985][ T31] ? do_raw_spin_lock+0x121/0x290 [ 511.014069][ T31] bdev_release+0x1a9/0x650 [ 511.018774][ T31] ? __pfx_blkdev_release+0x10/0x10 [ 511.024134][ T31] blkdev_release+0x15/0x20 [ 511.028803][ T31] __fput+0x44c/0xa70 [ 511.032851][ T31] task_work_run+0x1d4/0x260 [ 511.037509][ T31] ? __pfx_task_work_run+0x10/0x10 [ 511.042876][ T31] ? exit_to_user_mode_loop+0x40/0x130 [ 511.048908][ T31] exit_to_user_mode_loop+0xe9/0x130 [ 511.054332][ T31] do_syscall_64+0x2bd/0xfa0 [ 511.059445][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.064802][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.071007][ T31] ? clear_bhb_loop+0x60/0xb0 [ 511.075891][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.083195][ T31] RIP: 0033:0x7f1353f8efc9 [ 511.087667][ T31] RSP: 002b:00007f1354eca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.096592][ T31] RAX: 0000000000000000 RBX: 00007f13541e6180 RCX: 00007f1353f8efc9 [ 511.105782][ T31] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 511.114152][ T31] RBP: 00007f1354011f91 R08: 0000000000000000 R09: 0000000000000000 [ 511.122504][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.130871][ T31] R13: 00007f13541e6218 R14: 00007f13541e6180 R15: 00007fff8cecbc78 [ 511.139507][ T31] [ 511.142679][ T31] [ 511.142679][ T31] Showing all locks held in the system: [ 511.150820][ T31] 4 locks held by kworker/1:0/24: [ 511.155899][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 511.167453][ T31] #1: ffffc900001e7ba0 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 511.178685][ T31] #2: ffffffff8f7cc9a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 511.190395][ T31] #3: ffff888063048dc8 (&hdev->req_lock){+.+.}-{4:4}, at: hci_rfkill_set_block+0x179/0x2e0 [ 511.201668][ T31] 1 lock held by khungtaskd/31: [ 511.207288][ T31] #0: ffffffff8e13d5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 511.217924][ T31] 2 locks held by getty/5595: [ 511.222981][ T31] #0: ffff888034ebb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 511.233166][ T31] #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 511.243498][ T31] 1 lock held by udevd/5948: [ 511.248257][ T31] #0: ffff8881417ce358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 511.257862][ T31] 3 locks held by kworker/1:6/7514: [ 511.263438][ T31] #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 511.274879][ T31] #1: ffffc9001820fba0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 511.289172][ T31] #2: ffffffff8f7cc9a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 511.302360][ T31] 1 lock held by syz.0.1155/10549: [ 511.308483][ T31] #0: ffff8881417ce358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1a9/0x650 [ 511.318313][ T31] 1 lock held by syz.2.1484/11838: [ 511.323720][ T31] #0: ffff8881417ce358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 511.333403][ T31] 4 locks held by kworker/1:5/13651: [ 511.338748][ T31] #0: ffff88801b6f1948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 511.350559][ T31] #1: ffffc9000e11fba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 511.362974][ T31] #2: ffff888143774198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4b50 [ 511.372965][ T31] #3: ffff88805bfed198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 511.382548][ T31] 4 locks held by udevd/13871: [ 511.387356][ T31] #0: ffff88802a369668 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 511.396560][ T31] #1: ffff888054181c88 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 511.407367][ T31] #2: ffff88807f327a58 (kn->active#29){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 511.419998][ T31] #3: ffff88805bfed198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 511.429641][ T31] 2 locks held by syz.5.2024/13974: [ 511.435219][ T31] #0: ffff8880584e4708 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 511.446204][ T31] #1: ffffffff8e143038 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 511.457774][ T31] 2 locks held by syz.6.2025/13976: [ 511.463227][ T31] #0: ffff888058d7e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 511.473254][ T31] #1: ffffffff8f7cc9a8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 511.483583][ T31] 2 locks held by syz.6.2025/13977: [ 511.488854][ T31] #0: ffff888058d7e1c0 (&tty->legacy_mutex){+.+.}-{4:4}, at: __tty_hangup+0xe8/0x680 [ 511.498860][ T31] #1: ffff888058d7e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_lock+0x6c/0xc0 [ 511.508684][ T31] 1 lock held by syz.3.2028/13990: [ 511.514469][ T31] #0: ffff88804322d468 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x2e/0x440 [ 511.524590][ T31] [ 511.526946][ T31] ============================================= [ 511.526946][ T31] [ 511.542612][ T31] NMI backtrace for cpu 0 [ 511.542636][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 511.542659][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 511.542672][ T31] Call Trace: [ 511.542681][ T31] [ 511.542692][ T31] dump_stack_lvl+0x189/0x250 [ 511.542725][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.542750][ T31] ? __pfx__printk+0x10/0x10 [ 511.542787][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 511.542816][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 511.542845][ T31] ? __pfx__printk+0x10/0x10 [ 511.542871][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 511.542903][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 511.542931][ T31] watchdog+0xfa9/0xff0 [ 511.542975][ T31] ? watchdog+0x1f4/0xff0 [ 511.543013][ T31] kthread+0x711/0x8a0 [ 511.543042][ T31] ? __pfx_watchdog+0x10/0x10 [ 511.543071][ T31] ? __pfx_kthread+0x10/0x10 [ 511.543098][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 511.543126][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.543153][ T31] ? __pfx_kthread+0x10/0x10 [ 511.543178][ T31] ret_from_fork+0x4bc/0x870 [ 511.543211][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 511.543247][ T31] ? __switch_to_asm+0x39/0x70 [ 511.543271][ T31] ? __switch_to_asm+0x33/0x70 [ 511.543295][ T31] ? __pfx_kthread+0x10/0x10 [ 511.543320][ T31] ret_from_fork_asm+0x1a/0x30 [ 511.543363][ T31] [ 511.543372][ T31] Sending NMI from CPU 0 to CPUs 1: [ 511.560434][T13651] as10x_usb: device has been detected [ 511.568411][ C1] NMI backtrace for cpu 1 [ 511.568434][ C1] CPU: 1 UID: 0 PID: 13651 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 511.568454][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 511.568465][ C1] Workqueue: usb_hub_wq hub_event [ 511.568486][ C1] RIP: 0010:rcu_is_watching+0x67/0xb0 [ 511.568506][ C1] Code: 89 f7 e8 fc 7b 7f 00 48 c7 c3 d8 6f 95 92 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 09 78 ed 10 <74> 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f c3 cc cc cc cc cc e8 21 b0 [ 511.568520][ C1] RSP: 0018:ffffc90000a08a40 EFLAGS: 00000006 [ 511.568534][ C1] RAX: 00000000005297f4 RBX: ffff8880b8732fd8 RCX: 53be74a737421f00 [ 511.568547][ C1] RDX: 0000000000000000 RSI: ffffffff8bc0e640 RDI: ffffffff8bc0e600 [ 511.568559][ C1] RBP: ffffc90000a08b10 R08: ffffffff8f9eff77 R09: 1ffffffff1f3dfee [ 511.568571][ C1] R10: dffffc0000000000 R11: fffffbfff1f3dfef R12: dffffc0000000000 [ 511.568583][ C1] R13: 1ffff110170e75c6 R14: ffffffff8da93dd8 R15: dffffc0000000000 [ 511.568596][ C1] FS: 0000000000000000(0000) GS:ffff888125ddc000(0000) knlGS:0000000000000000 [ 511.568609][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.568622][ C1] CR2: 00007fb0f09b12f8 CR3: 0000000022780000 CR4: 00000000003526f0 [ 511.568639][ C1] Call Trace: [ 511.568648][ C1] [ 511.568657][ C1] trace_irq_enable+0x37/0x110 [ 511.568681][ C1] trace_hardirqs_on+0x18/0x40 [ 511.568702][ C1] _raw_spin_unlock_irqrestore+0x85/0x110 [ 511.568725][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 511.568748][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 511.568770][ C1] try_to_wake_up+0x7b7/0x12b0 [ 511.568794][ C1] call_timer_fn+0x17e/0x5f0 [ 511.568817][ C1] ? __pfx_process_timeout+0x10/0x10 [ 511.568833][ C1] ? call_timer_fn+0xbe/0x5f0 [ 511.568854][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 511.568879][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 511.568899][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.568944][ C1] ? __pfx_process_timeout+0x10/0x10 [ 511.568961][ C1] __run_timer_base+0x61a/0x860 [ 511.568988][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 511.569007][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 511.569032][ C1] run_timer_softirq+0xb7/0x180 [ 511.569053][ C1] handle_softirqs+0x286/0x870 [ 511.569070][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 511.569087][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 511.569104][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 511.569125][ C1] __irq_exit_rcu+0xca/0x1f0 [ 511.569140][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 511.569158][ C1] irq_exit_rcu+0x9/0x30 [ 511.569172][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 511.569194][ C1] [ 511.569200][ C1] [ 511.569207][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 511.569231][ C1] RIP: 0010:vprintk_emit+0x49d/0x590 [ 511.569249][ C1] Code: 0f 84 34 ff ff ff e8 a2 e9 1f 00 fb eb 44 e8 9a e9 1f 00 e8 f5 91 b1 09 4d 85 f6 74 94 e8 8b e9 1f 00 fb 48 c7 c7 00 17 13 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 3b 33 [ 511.569263][ C1] RSP: 0018:ffffc9000e11eb40 EFLAGS: 00000283 [ 511.569276][ C1] RAX: ffffffff81a09025 RBX: ffffffff81a08e7e RCX: 0000000000100000 [ 511.569287][ C1] RDX: ffffc90011a7e000 RSI: 000000000004e814 RDI: ffffffff8e131700 [ 511.569298][ C1] RBP: ffffc9000e11ec50 R08: ffffffff8f9eff77 R09: 1ffffffff1f3dfee [ 511.569310][ C1] R10: dffffc0000000000 R11: fffffbfff1f3dfef R12: 0000000000000000 [ 511.569322][ C1] R13: 0000000000000023 R14: 0000000000000200 R15: 1ffff92001c23d6c [ 511.569335][ C1] ? vprintk_emit+0x2ee/0x590 [ 511.569352][ C1] ? vprintk_emit+0x495/0x590 [ 511.569373][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 511.569394][ C1] ? up_write+0x1c4/0x420 [ 511.569414][ C1] _printk+0xcf/0x120 [ 511.569435][ C1] ? __pfx__printk+0x10/0x10 [ 511.569452][ C1] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 511.569475][ C1] ? kobject_get+0xd0/0x120 [ 511.569491][ C1] as102_usb_probe+0x312/0x6b0 [ 511.569509][ C1] ? __pm_runtime_set_status+0x785/0xa50 [ 511.569536][ C1] usb_probe_interface+0x668/0xc30 [ 511.569558][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 511.569574][ C1] really_probe+0x26d/0x9e0 [ 511.569593][ C1] __driver_probe_device+0x18c/0x2f0 [ 511.569610][ C1] driver_probe_device+0x4f/0x430 [ 511.569627][ C1] __device_attach_driver+0x2ce/0x530 [ 511.569644][ C1] bus_for_each_drv+0x251/0x2e0 [ 511.569665][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 511.569681][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 511.569704][ C1] __device_attach+0x2b8/0x400 [ 511.569720][ C1] ? __pfx___device_attach+0x10/0x10 [ 511.569736][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 511.569757][ C1] bus_probe_device+0x185/0x260 [ 511.569778][ C1] device_add+0x7b6/0xb50 [ 511.569802][ C1] usb_set_configuration+0x1a87/0x20e0 [ 511.569828][ C1] usb_generic_driver_probe+0x8d/0x150 [ 511.569855][ C1] usb_probe_device+0x1c4/0x390 [ 511.569873][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 511.569887][ C1] really_probe+0x26d/0x9e0 [ 511.569905][ C1] __driver_probe_device+0x18c/0x2f0 [ 511.569921][ C1] driver_probe_device+0x4f/0x430 [ 511.569938][ C1] __device_attach_driver+0x2ce/0x530 [ 511.569956][ C1] bus_for_each_drv+0x251/0x2e0 [ 511.569975][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 511.569992][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 511.570016][ C1] __device_attach+0x2b8/0x400 [ 511.570031][ C1] ? __pfx___device_attach+0x10/0x10 [ 511.570048][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 511.570069][ C1] bus_probe_device+0x185/0x260 [ 511.570089][ C1] device_add+0x7b6/0xb50 [ 511.570112][ C1] usb_new_device+0xa39/0x16f0 [ 511.570138][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 511.570159][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 511.570179][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.570202][ C1] hub_event+0x2a4f/0x4b50 [ 511.570254][ C1] ? __pfx_hub_event+0x10/0x10 [ 511.570269][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 511.570295][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 511.570316][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 511.570338][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 511.570362][ C1] process_scheduled_works+0xae1/0x17b0 [ 511.570396][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 511.570426][ C1] worker_thread+0x8a0/0xda0 [ 511.570443][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 511.570468][ C1] ? __kthread_parkme+0x7b/0x200 [ 511.570488][ C1] kthread+0x711/0x8a0 [ 511.570508][ C1] ? __pfx_worker_thread+0x10/0x10 [ 511.570523][ C1] ? __pfx_kthread+0x10/0x10 [ 511.570542][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 511.570562][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 511.570583][ C1] ? __pfx_kthread+0x10/0x10 [ 511.570601][ C1] ret_from_fork+0x4bc/0x870 [ 511.570625][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 511.570650][ C1] ? __switch_to_asm+0x39/0x70 [ 511.570668][ C1] ? __switch_to_asm+0x33/0x70 [ 511.570687][ C1] ? __pfx_kthread+0x10/0x10 [ 511.570705][ C1] ret_from_fork_asm+0x1a/0x30 [ 511.570731][ C1] [ 511.615459][T13715] Bluetooth: hci5: command 0x0c1a tx timeout [ 511.620950][T13651] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 512.254550][ T5911] usb 4-1: USB disconnect, device number 92 [ 512.258056][ T24] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 512.431749][ T24] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 512.456331][T13651] usb 6-1: DVB: registering adapter 3 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 512.487833][T13651] as10x_usb: error during firmware upload part1 [ 512.502412][T13651] Registered device Elgato EyeTV DTT Deluxe [ 512.514309][T13651] usb 6-1: USB disconnect, device number 58 [ 512.553633][T13651] Unregistered device Elgato EyeTV DTT Deluxe [ 512.554907][T13651] as10x_usb: device has been disconnected [ 514.568260][ T24] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 514.568354][T13715] Bluetooth: hci4: command 0x0c1a tx timeout [ 514.574705][ T24] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 516.648360][T13715] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 516.648400][T13716] Bluetooth: hci6: command 0x1003 tx timeout [ 519.679737][ T5200] udevd[5200]: worker [5948] /devices/virtual/block/nbd0 is taking a long time