last executing test programs: 29m42.46579727s ago: executing program 32 (id=336): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000140)={0xa, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000030c0)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@grpquota, 0x2e}], [], 0x2e}, 0x1, 0x472, &(0x7f0000000580)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0) unlink(&(0x7f0000000040)='./file1\x00') 29m5.717310262s ago: executing program 33 (id=550): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000580)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x534}}, {@nouid32}, {@noblock_validity}, {@quota}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nouid32}, {@nomblk_io_submit}, {@noinit_itable}, {@dioread_nolock}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) 21m45.837205623s ago: executing program 34 (id=3208): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") umount2(0x0, 0x1) r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) open(&(0x7f0000000240)='./bus\x00', 0x103042, 0x100) r1 = open(&(0x7f0000000200)='./bus\x00', 0x40000, 0x35) read(r1, 0x0, 0x0) 21m30.609703334s ago: executing program 35 (id=3246): r0 = socket$inet6(0xa, 0x1, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) clock_nanosleep(0x7, 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x1}, 0x1c) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0xb6bc}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setregid(0x0, r4) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x92, 0x5, r2}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @dev}}, 0xffffffffffffff55) 19m34.964193539s ago: executing program 36 (id=3646): openat$urandom(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRES16=0x0], 0x3, 0x248, &(0x7f0000000880)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000006c0)={'fscrypt:', @desc3}, &(0x7f0000000700)={0x0, "5a0bcf481347a9ce7dfb5fbaa7646be3dac46381d61200e992e9b0d4fcb5dc1456a9800b17614dd9c293b5bee5084f9f83013b89ef7325bf56b14c218f582802", 0x38}, 0x48, 0xfffffffffffffff9) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) keyctl$instantiate(0xc, 0x0, &(0x7f0000000780)=ANY=[@ANYRESDEC=r4], 0x2a, r3) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x91b4d9, 0x0, 0x40, 0x0, &(0x7f0000000140)) 19m13.932449849s ago: executing program 37 (id=3693): syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000100)={[{@nomblk_io_submit}, {@jqfmt_vfsv0}, {@jqfmt_vfsv0}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@nobarrier}, {@errors_continue}]}, 0xfa, 0x4a4, &(0x7f0000001400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000380)='./bus\x00') 19m9.968699498s ago: executing program 38 (id=3701): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="3801"], 0x138) write$FUSE_NOTIFY_RESEND(r2, &(0x7f00000000c0)={0x14}, 0x14) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) listxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0xde) 19m5.965763327s ago: executing program 39 (id=3710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x4c142, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x1}, 0x1c) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x1a) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24004041, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="200f28"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 18m58.791857988s ago: executing program 40 (id=3719): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x310) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) r2 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, 0xfffffffffffffffd) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x68, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@broadcast}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc000000, {0x2, 0x2, 0x7, 0x644b}}}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x400, 0x3, 0x4, 0x0, {0x8, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x1}, 0x1, 0x7, 0x4}}]}, 0x68}}, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x2c5, &(0x7f0000000600)="$eJzs3U9rJEUUAPDXk57OhICZswj2YQ9eDJu9ejCLRBBzUubgH9BFs7BsBiGBgVVx2JOfwIMHv4c374IXv4HgwaM3FwmUdPf8zUxmdlcnK+H3u6R49V5V9XQ1Ewhd+fSV/ksRcf/x179Fp5NF6zAO40kW3WjFWBoJAOBGeJJS/Plc3+95a1NrAgA2a+b7v31FyvZi6M1NLwsA2KD3P/jw3bvHx0fvlWUnov/toJdF87Ppv3s/HsRpnMTt2IuL6d8CUmrab79zfBR5WenGrf5w0Ksq+5/8Mkktoq4/iL3oLq8/KBsz9cNBXv/mkWURDw6rhdzpjFY8V1/1H91ZUh+9Il4bl1Tz78de/PpZfBGn8Xk9ynT+b4oo30rf/fXVR1VyVZ8NB73tOm8qbV3nfQEAAAAAAAAAAAAAAAAAAAAA4GbbLye6catfhZrzd3pbF3X//lx/fb5Oq+5v6rOIom5cOh9omOKH8fk6t8uyTFmTPznfZyePl/PIX9iFAwAAAAAAAAAAAAAAAAAAwP/I+aMvH947PT05+08ao5f8J6/1P+84hzORV2N18vYzzRVbo/RqrZdzDn7+uD+JVBdxsrOQs7YxaJcRq9bcXojsVOtZP/LfKaWUZREzXTv1XPnTlI8b7WdJvqKxuzqn+oB/+n739Yf3slgzYGd8436c7Sri7PzRpXsa2epJL+YiaW5L5Gu2erFi5GK0Y57m8yl2/+VD9MbvzWSjSLZmY7fHje70KYirtl9n3b2Yf1IAAAAAAAAAAAAAAAAAAIBrNn3pd0nn45WlrY0tCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACu2fT//08bsRC51BjGH3Xx8pyU0nASKeLs/EVfIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADffPwEAAP//NZhh/A==") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x4002, 0x1b7) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r6, 0x0) r7 = open(&(0x7f0000000240)='./bus\x00', 0x103042, 0x100) ftruncate(r7, 0x2007fff) r8 = open(&(0x7f0000000200)='./bus\x00', 0x40000, 0x35) read(r8, &(0x7f0000000180)=""/19, 0xfffffe47) ftruncate(r7, 0x0) truncate(0x0, 0x3) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f00000000c0)=0x38, 0x4) fstat(r9, 0x0) 18m54.728336219s ago: executing program 41 (id=3726): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x2, 0x5, 0x0, 0x5, 0x7, 0x0, 0x70bd26, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x11, 0x4, 0x10}]}, 0x38}}, 0x20004010) flistxattr(r0, 0x0, 0x0) 18m44.745259062s ago: executing program 42 (id=3733): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x195d, 0xec4d2770249a3ef5) ioctl$LOOP_CHANGE_FD(r0, 0x301, 0xffffffffffffffff) 18m37.638880981s ago: executing program 43 (id=3740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80048d4) 18m24.68058282s ago: executing program 44 (id=3764): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r1, &(0x7f0000000340)='$0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, 0x0, 0x0, &(0x7f0000000340)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 18m4.800848945s ago: executing program 8 (id=3830): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000340)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x191a461, &(0x7f0000000440)={[{@gid}]}) 18m4.395923394s ago: executing program 8 (id=3831): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@newsa={0x13c, 0x10, 0x413, 0x70bd28, 0x40, {{@in=@rand_addr=0x64010102, @in=@multicast1, 0x4620, 0x7, 0x4e23, 0x4, 0xa, 0x0, 0x20, 0x2b}, {@in=@dev={0xac, 0x14, 0x14, 0x38}, 0x4d4, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, {0x80000000800, 0x17d, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f, 0x2}, {0x0, 0x21fd, 0x4, 0x2}, {0xf6, 0x4, 0x8}, 0x0, 0x34ff, 0xa, 0x4, 0xbe, 0x33}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4040840}, 0x4000804) 18m3.906611725s ago: executing program 5 (id=3833): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)={0x1000000, 0x10000002000003, 0x0, 0x6}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0x2}}) 18m3.474285634s ago: executing program 5 (id=3834): gettid() socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000240)={@local, @random="9e7eafc0e8f2", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x3, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0xf, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xff80, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r2, &(0x7f0000000100)=""/253, 0xfd, 0x1) 18m2.33848125s ago: executing program 8 (id=3836): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlock(&(0x7f000046d000/0x3000)=nil, 0x3000) munlockall() 18m2.31729708s ago: executing program 5 (id=3837): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x54}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map, 0x24, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x28280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 18m0.676642197s ago: executing program 45 (id=3836): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlock(&(0x7f000046d000/0x3000)=nil, 0x3000) munlockall() 18m0.660691307s ago: executing program 5 (id=3839): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000340)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x191a461, &(0x7f0000000440)={[{@gid}]}) 17m59.383791366s ago: executing program 5 (id=3841): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xda0, 0x0, 0x7}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 17m58.265364541s ago: executing program 5 (id=3842): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$eJzsmbFrFEEUxr+Z3ds7gwRtLGwsDBjR7O3uqaSJEMFSEKKo5WHWEN3k5LJC7kDwsLHRzkKwtbG0sLCy8C+w1UIFwcIrBQthZGZnd4e93fMOTwXzfpDJN/PezLz3YF6xB4Ig9iyfPn778PDc8qWTAPZjAXW9/sXKfbjh//7JnROPV84/ffHu2Zvt+buviucxAEJUXve9aHIAvF61EIPZyYoQmM/tC0YIWuMyOI5rfQUMbiJ/CEUyCcFwTfvcNHRnnxZR6F7vROs3NqPQk4Mvh0AOLTM+GdRwwLAOoKGiE4IZ9p1e/1Y7isJuUdREes+IaVrBK8up41vlWEFaPSGk/9UH9wdyrmsDDzyrnw8OX+sWGNa0XkYdruvmJTHyP2zn51uT5D9jcVbd9WjSXc+VOLj05wNLRPpGptkly/g3SvcfidpMzmHFFfmgs5VDw7QHmj6f/1nu+LVPY/xjhLaPmN7ORdGF34jQKSlUJvL+JDv7MaM/2bCz/tGMt243d3r9pc2t9ka4EW4HQeuMd8rzTgdN1YiScUz/a6j+NGecX6vwdZiD3XYcd/1dIO762TxIxjwBrL3sfJVbDkD1P47Fo+oI1VNV2vXyO5j+4+q/VItWuee9ypwIgiAIgiAIgiAIgiAIgiDKOQKG5JcwwfQH0TKCi+oL5c8AAAD//40vYXw=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)={0x1000000, 0x10000002000003, 0x0, 0x6}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0x2}}) 17m57.646774885s ago: executing program 46 (id=3842): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)={0x1000000, 0x10000002000003, 0x0, 0x6}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x1, 0x2}}) 17m50.563026303s ago: executing program 0 (id=3852): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000040000000000000003000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) write$eventfd(r3, &(0x7f00000001c0)=0xfffffffffffffffb, 0x8) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) write$binfmt_register(r0, &(0x7f0000000580)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xb, 0x3a, '\x01\x01\x00\x00\x00\x00\x00\x00', 0x3a, '\n', 0x3a, './file0', 0x3a, [0x4f, 0x43]}, 0x32) 17m49.37333207s ago: executing program 0 (id=3854): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x502, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxuteoByQghVQvQIUhsSN4pix1HslCb0kJ65IlGJExz5Azj3xJ0LghuXckDiRwRqkDgYzXiSuqndhCaxq/jzkUYzb950vt+XdN6LX2K/AIbW5YjYjYixiLgbEdPZ+Vy2xc32llz3bO/h0v7ew6VctFq3/5FL65Nz0fFvEpeyexYj4gffifhx7uW4je2dtcVqtbKZlWebtY3ZxvbOtdXa4kplpbJeLi/ML8x9dv3T8pm19YPaWHb05ae/3/3GT5O0prIzne04S+2mFw7jJEYj4nvnEWwARrL2jA06EV5LPiLejYgP0+d/OkbS7yYAcJG1WtPRmu4sAwAXXT6dA8vlS9lcwFTk86VSew7vvZjMV+uN5tV79a315fZc2UwU8vdWq5W5bK5wJgq5pDyfHj8vl4+Ur0fEOxHx8/GJtFxaqleXB/mDDwAMsUtHxv9/j7fHfwDggisOOgEAoO+M/wAwfIz/ADB8jP8AMHza4//EoNMAAPrI638AGD7GfwAYKt+/dSvZWvvZ518v39/eWqvfv7ZcaayValtLpaX65kZppV5fST+zp3bc/ar1+sb8J7H1YOabG43mbGN7506tvrXevJN+rvedSiG9arcPLQMAennngyd/yiUj8o2JdIuOtRwKA80MOG/5QScADMzIoBMABsZqXzC8TvEa3/QAXBBdluh9QbHbG4RarVbr/FICztmVL5j/h2HVMf/vr4BhyJj/h+Fl/h+GV6uVO+ma/3HSCwGAN5s5fqDH7//fzfa/yX458KPlo1c8Ps+sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M12sP5vKVsLfCry+VIp4q2ImIlC7t5qtTIXEW9HxB/HC+NJeX7AOQMAp5X/ay5b/+vK9MdTL1S9f+nwcCwifvLL2794sNhsbv4hYiz3z/GD883H2fly/7MHAI53ME6n+44X8s/2Hi4dbP3M52/fjohiO/7+3ljsH8YfjdF0X4xCREz+K5eV23IdcxensfsoIj7frf25mErnQNornx6Nn8R+q6/x8y/Ez6d17X3ytfjcGeQCw+ZJ0v/c7Pb85eNyuu/+/BfTHur0sv4vudXSftoHPo9/0P+N9Oj/Lp80xie/+277aOLlukcRXxyNOIi939H/HMTP9Yj/8Qnj//lL73/Yq671q4gr0T1+Z6zZZm1jtrG9c221trhSWamsl8sL8wtzn13/tDybzlHP9h4N/n7j6tu96pL2T/aIXzym/V89Yft//d+7P/zKK+J//aNu8fPx3iviJ2Pi104Yf3Hyt8VedUn85R7tP+77f/WE8Z/+ZeelZcMBgMFpbO+sLVarlU0HDs7rIPlh9WxumPyX7Wfya//Hxd/qV2JjPb6YP/uo/UwfqWq1XitWrx7jLGbdgDfB4UMfEf8ZdDIAAAAAAAAAAAAAAEBX/XjH0qDbCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX1vwAAAP//qE7Nbw==") r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000005b00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) chown(&(0x7f0000000080)='./file1\x00', r1, r2) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='pids.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) openat$kvm(0xffffff9c, &(0x7f0000001000), 0x343200, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000280)="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", 0x1f9}], 0x1}}], 0x1, 0x400c000) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lchown(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) 17m47.680900527s ago: executing program 0 (id=3858): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp\x00') r1 = fanotify_init(0x4, 0x101000) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) pread64(r0, &(0x7f0000000140)=""/114, 0x72, 0xc) 17m47.064859251s ago: executing program 0 (id=3859): syz_mount_image$udf(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x1004000, &(0x7f0000000340)={[{@gid}, {@mode={'mode', 0x3d, 0x4}}, {@anchor={'anchor', 0x3d, 0x7}}, {@longad}, {@utf8}, {@unhide}, {@undelete}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@uid_forget}, {@rootdir={'rootdir', 0x3d, 0x6}}, {@gid_forget}, {@nostrict}, {@session}, {@gid_forget}]}, 0x1, 0xc34, &(0x7f0000001bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x191a461, 0x0) 17m46.765249868s ago: executing program 0 (id=3860): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket(0x1, 0x3, 0x0) bind$unix(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180), &(0x7f0000000340)=ANY=[@ANYBLOB="00fbe30140b6307274ce88252d14fbf2153f48e94445fcbc0575681a07d31a1e96caded4434df3e5abe6c599371a6fc39867b17a937db23065b99a95dc362093dfa53812ebe1115a87a03336741a389f3e1b1e4d2e607b5535e94dc66fa9ac1f0b3c2439255708c78ef8225dccf31c3931e612a0f7b1c91e959d52c9999a27edf6cbf0e5e7f591f0680d84f444b02ae95bdd0411ffd8088f72a4338ff786c249e19c85c89d33f8d4353a98a4db7f0056c51c4e341cf1c4feb4a87ccfa4110227a57746a26b91143efefedbf3b07c436100"/227], 0xe3, 0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) bind$unix(r3, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e22}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x48, &(0x7f00000000c0)={[{@acl}, {@noload}]}, 0x21, 0x4f3, &(0x7f0000001940)="$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") openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB='errors=co,\x00'], 0x80, 0x14f7, &(0x7f0000000180)="$eJzs3HuYztX6MPB1r7W+jGnS0ySHYd3r/vKkwTJJkkNCDkmSJElOCUmTJAmJIaekcUjIcZIchpAcpjFpnM+HnJMmW5okCQkJ67209/uz99X+/Xr3u3tf17Xn/lzXup51z/e513Ovueea7+GP5/ueo+q1qF+7GRGJfwv89SVFCBEjhBgmhLhBCBEIISrFV4q/cryAgpR/70PYn+vR9GtdAbuWuP95G/c/b+P+523c/7yN+5+3cf/zNu5/3sb9Zywv2zG32I088u7g5/95GZ///4Pklp/y9abyN/f6F1K4/3kb9z9v4/7nbdz/vI37n7dx///z1fofjnH/8zbuP2N52bV+/szj2o5r/ffHGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYYyxvOO+v0kKIK69wrYtijDHGGGOMMcbYn8rnv9YVMMYYY4wxxhhj7P89EFIooUUg8on8IkYUELHiOhEnrhcFxQ0iIm4U8eImUUjcLAqLIqKoKCYSRHFRQhiBwgoSoSgpSomouEWUFreKRFFGlBXlhBPlRZK4TVQQt4uK4g5RSdwpKou7RBVRVVQT1cXdooa4R9QUtURtca+oI+qKeqK+uE80EPeLhuIB0Ug8KBqLh0QT8bBoKh4RzcSjorl4TLQQj4uW4gnRSrQWbURb0e7/Kv8V0Ve8KvqJ/iJFDBADxWtikBgshoihYph4XQwXb4gR4k2RKkaKUWK0GCPeEmPF22KcGC8miHfERDFJTBZTxFQxTaSJd8V08Z6YId4XM8UsMVvMEelirpgnPhDzxQKxUHwoFomPxGKxRCwVy0SG+FhkiuUiS3wiVohPRbZYKVaJ1WKNWCvWifVig9goNonNYovYKraJ7WKH+EzsFLvEbrFH7BX7xH7xuTggvhAHxZciR3z1L+aP/kb8Q34vECBAggQNGvJBPoiBGIiFWIiDOCgIBSECEYiHeCgEhaAwFIaiUBQSIAFKQAlAQCAgKAklIQpRKA2lIRESoSyUBQcOkiAJKsDtUBEqQiWoBJWhMlSBqlAVqkN1qAE1oCbUhNpQG+pAHagH9eA+uA/uh4bQEBpBI2gMjaEJNIGm0BSaQTNoDs2hBbSAltASWkEraANtoB20g/bQHjpAB+gEnaAzdIYu0AWSIRm6QlfoBt2gO3SHHtADekJP6AW9oTe8Aq/Aq/Aq9Ic6cgAMhIEwCAbBEBgKQ+F1GA5vwBvwJqTCSBgFo2E0vAVj4SyMg/EwASZADTkJJsMUIDkN0iANpsN0mAEzYCbMglkwB9JhLsyDeTAfFsAC+BAWwUfwESyBJbAMMiADMmE5ZEEWrIBzkA0rYRWshjWwFtbAetgA62ETbIZNsBW2wnbYDp/BZ7ALdsEe2AP7YB98Dp/DF/AFpEIO5MAhOASH4TAcgSOQC7lwFI7CMTgGx+E4nIATcBJOwWk4BWfgDJyFc3AezsMFuAAX4aWEb5vvK7MxVcgrtNQyn8wnY2SMjJWxMk7GyYKyoIzIiIyX8bKQLCQLy8KyqCwqE2SCLCFLSJQoSYaypCwpozIqS8vSMlEmyrKyrHTSySSZJCvICrKirCgryTtlZXmXrCKryo6uuqwua8hOrqasJWvL2rKOrCvryfqyvmwgG8iGsqFsJBvJxrKxbCIflk3lABgCj8ornWkhR0JLOQpaydayjWwr34InZXs5FjrIjrKTfFqOh3HQRbZ3yfI52VVOhm7yBTkFXpQ95DToKV+WvWRv2Ue+IvvKDq6f7C9nwgA5UM6BQXKwHCKHyvlQV17pWD35pkyVI+UoOVoug7fkWPm2HCfHywnyHTlRTpKT5RQ5VU6TafJdOV2+J2fI9+VMOUvOlnNkupwr58kP5Hy5QC6UH8pF8iO5WC6RS+UymSE/lplyucySn8gV8lOZLVfKVXK1XCPXynVyvdwgN8pNcrPcIrfKbXK73CE/kzvlLrlb7pF75T65X34uD8gv5EH5pcyRX8lD8i/ysPxaHpHfyFz5rTwqv5PH5PfyuPxBnpA/ypPylDwtf5Jn5M/yrDwnz8tf5AX5q7woL8nL0kuhQEmllFaByqfyqxhVQMWq61Scul4VVDeoiLpRxaubVCF1syqsiqiiqphKUMVVCWUUKqtIhaqkKqWi6hZVWt2qElUZVVaVU06VV0nqNlVB3a4qqjtUJXWnqqzuUlVUVVVNVVd3qxrqHlVT1VK11b2qjqqr6qn66j7VQN2vGqoHVCP1oGqsHlJN1MOqqXpENVOPqubqMdVCPa5aqidUK9VatVFtVTv1pGqvnlIdVEfVST2tOqtnVBf1rEpWz6mu6nnVTb2guqsXVQ/1kuqpXla9VG/VR11Sl5VX/VR/laIGqIHqNTVIDVZD1FA1TL2uhqs31Aj1pkpVI9UoNVqNUW+pseptNU6NVxPUO2qimqQmqylqqpqm0tS7arp6T81Q76uZapaareaodDVXDfnbSgv/D/Lf+yf5I3779O1qh/pM7VS71G61R+1V+9R+tV8dUAfUQXVQ5agcdUgdUofVYXVEHVG5KlcdVUfVMXVMHVfH1Ql1Qp1Up9Qv6id1Rv2szqpz6pz6RV1QF9TFv/0OhAYttdJaBzqfzq9jdAEdq6/Tcfp6XVDfoCP6Rh2vb9KF9M26sC6ii+piOkEX1yW00aitJh3qkrqUjupbdGl9q07UZXRZXU47XV4n6dv+7fw/qq+dbqfb6/a6g+6gO+lOurPurLvoLjpZJ+uuuqvuprvp7rq77qF76J66p+6le+k+uo/uq/vqfrqfTtEpeqB+TQ/Sg/UQPVQP06/r4Xq4HqFH6FSdqkfpUXqMHqPH6rF6nB6nJ+gJeqKeqCfryXqqnqrTdJqerqfrGXqGnqln6tl6tk7X6Xqenqfn6/l6oV6oF+lFerFerJfqpTpDZ+hMnamzdJZeoVfobL1Sr9Sr9Wq9Vq/V6/V6vVFv1Jv1Zr1Vb9XZeofeoXfqnXq33q336r16v96vD+gD+qA+qHN0jj6kD+nD+rA+oo/oXJ2rj+qj+pg+po/r4/qEPqFP6pP6tD6tz+gz+qw+q8/r8/qCvqAv6ov6sr585bIvkIEMdKCDfEG+ICaICWKD2CAuiAsKBgWDSBAJ4oP4oFBwc1A4KBIUDYoFCUHxoERgAgxsQEEYlAxKBdHglqB0cGuQGJQJygblAheUD5KC24IKwe1BxeCOoFJwZ1A5uCuoElQNqgXVg7uDGsE9Qc2gVlA7uDeoE9QN6gX1g/uCBsH9QcPggaBR8GDQOHgoaBI8HDQNHgmaBY8GzYPHghbB40HL4ImgVdA6aBO0Ddr9qet7f7bIU66f6W9SzAAz0LxmBpnBZogZaoaZ181w84YZYd40qWakGWVGmzHmLTPWvG3GmfFmgnnHTDSTzGQzxUw100yaeddMN++ZGeZ9M9PMMrPNHJNu5pp55gMz3ywwC82HZpH5yCw2S8xSs8xkmI9NpllusswnZoX51GSblWaVWW3WmLVmnVlvNpiNZpPZbLaYrWab2W52mM/MTrPL7DZ7zF6zz+w3n5sD5gtz0HxpcsxX5pD5izlsvjZHzDcm13xrjprvzDHzvTlufjAnzI/mpDllTpufzBnzszlrzpnz5hdzwfxqLppL5rLxVy7ur5zeUaPGfJgPYzAGYzEW4zAOC2JBjGAE4zEeC2EhLIyFsSgWxQRMwBJYAq8gJCyJJTGKUSyNpTERE7EslkWHDpMwCStgBayIFbESVsLKWBmrYBWshtXwbrwb78F7sBbWwnvxXqyLdbE+1scG2AAbYkNshI2wMTbGJtgEm2JTbIbNsDk2xxbYAltiS2yFrbANtsF22A7bY3vsgB2wE3bCztgZu2AXTMZk7IpdsRt2w+7YHXtgD+yJPbEX9sI+2Af7Yl/sh/0wBVNwIA7EQTgIh+AQHIbDcDgOxxE4AlMxFUfhKByDY3AsjsVxOB4n4Ds4ESfhZJyCU3EapmEaTsfpOANn4EycibNxNqZjOs7DeTgf5+NCXIiLcBEuxsW4FJdiBmZgJmZiFmbhClyB2ZiNq3AVrsE1uA7X4QbcgJtwE27BLbgNt+EO3IE7cSfuxt24F/fiftyPB/AAHsSDmIM5eAgP4WE8jEfwCOZiLh7Fo3gMj+FxPI4n8ASexJN4Gk/jGTyDZ/EsnsfzeAF/xYt4CS+jxxgrRay9zsbZ621Be4ONsQXs38dFbTGbYIvbEtbYwrbIP8RorU20ZWxZW846W94m2dt+F1exVW01W93ebWvYe2zN38UN7P22oX3ANrIP2vr2vn+IG9uHbBP7uG1qn7DNbGvb3La1LezjtqV9wrayrW0b29Z2ts/YLvZZm2yfs13t87+LM+1yu8FutJvsZnvAfmHP21/sMfu9vWB/tf1sfzvMvm6H2zfsCPumTbUjfxdPsO/YiXaSnWyn2Kl22u/i2XaOTbdz7Tz7gZ1vF/wuzrAf20U2yy62S+xSu+y3+EpNWfYTu8J+arPtSrvKrrZr7Fq7zq7/r1pX2612m91u99vP7U67y+62e+xeu++3+Mo+DtovbY79yh6139nD9mt7xB63ufbb3+Ir+ztuf7An7I/2pD1lT9uf7Bn7sz1rz/22/yt7/8lespett4KAJCnSFFA+yk8xVIBi6TqKo+upIN1AEbqR4ukmKkQ3U2EqQkWpGCVQcSpBhpAsEYVUkkpRlG6h0nQrJVIZKkvlyFF5SqLbqALdThXpDqpEd1JluouqUFWqRtXpbqpB91BNqkW16V6qQ3WpHtWn+6gB3U8N6QFqRA9SY3qImtDD1JQeoWb0KDWnx6gFPU4t6QlqRa2pDbWldvQktaenqAN1pE70NHWmZ6gLPUvJ9Bx1peepG71A3elF6kEvUU96mXpRb+pDr1BfepX6UX9KoQE0kF6jQTSYhtBQGkav03B6g0bQm5RKI2kUjaYx9BaNpbdpHI2nCfQOTaRJNJmm0FSaRmn0Lk2n92gGvU8zaRbNpjmUTnNpHn1A82kBLaQPaRF9RItpCS2lZZRBH1MmLacs+oRW0KeUTStpFa2mNbSW1tF62kAbaRNtpi20lbbRdtpBn9FO2kW7aQ/tpX20nz6nA/QFHaQvKYe+okP0FzpMX9MR+oZy6Vs6St/RMfqejtMPdIJ+pJN0ik7TT3SGfqazdI7O0y90gX6li3SJLpMnEUIoQxXqMAjzhfnDmLBAGBteF8aF14cFwxvCSHhjGB/eFBYKbw4Lh0XComGxMCEsHpYITYihDSkMw5JhqTAa3hKWDm8NE8MyYdmwXOjC8mFSeFtYIbw9rBjeEVYK7wwrh3eFVcKq4eMPVg/vDmuE94Q1w1ph7fDesE5YN6wX1g/vCxuE94cNwwfCRuGDYcXwobBJ+HDYNHwkbBY+GjYPHwtbhI+HLcMnwlZh67BN2DZsFz4Ztg+fCjuEHcNO4dNh5/CZsEv4bJgcPhd2DZ//w+Mp4YBwYPha+Fro/QNqaXRZNCP6cTQzujyaFf0kuiL6aTQ7ujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lbo96n39/MKBk0457QKXz+V3Ma6Ai3XXuTh3vSvobnARd6OLdze5Qu5mV9gVcUVdMZfgirsSzjh01pELXUlXykXdLa60u9UlujKurCvnnCvvklxb1861c+3dU66D6+g6uafd0+4Z94x71j3rnnNd3fOum3vBdXcvuh7uJfeSe9n1cr1dH/eK6+tedf1cf5fiUtxAN9ANcoPcEDfEDXPD3HA33I1wI1yqS3Wj3Cg3xo1xY91YN86NcxPcBDfRTXST3WQ31U11aS7NTXfT3Qw3w810M91sN9ulu3Q3z81z8918t9AtdIsSF7nFbrFb6pa6DJfhMl2my3JZboVb4bJdtlvlVrk1bo1b59a5DW6D2+Q2uS1ui9vmtrkdbofb6Xa63W632+v2uv1uvzvgDriD7qDLcTnukDvkDrvD7oj7xuW6b91R95075r53x90P7oT70Z10p9xp95M74352Z905d9794i64X91Fd8lddt6lRd6NTI+8F5kReT8yMzIrMjsyJ5IemRuZF/kgMj+yILIw8mFkUeSjyOLIksjSyLJIRuTjSGZkeSQr8klkReTTSHZkZWRVZHVkTWRtxPviO0Nf0pfyUX+LL+1v9Ym+jC/ry3nny/skf5uv4G/3Ff0dvpK/01f2d/kqvqqv5p/wrXxr38a39e38k769f8p38B19J/+07+yf8V38sz7ZP+e7+ud9N/+C7+5f9D38S76nf9n38r19H/+K7+tf9f18f5/iB/iB/jU/yA/2Q/xQP8y/7of7N/wI/6ZP9SP9KD/aj/Fv+bH+bT/Oj/cT/Dt+op/kJ/spfqqf5tP8u366f8/P8O/7mX6Wn+3n+HQ/18/zH/j5foFf6D/0i/xHfrFf4pf6ZT7Df+wz/XKf5T/xK/ynPtuv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8dr/Df+Z3+l1+t9/j9/p9fr//3B/wX/iD/kuf47/yh/xf/GH/tT/iv/G5/lt/1H/nj/nv/XH/gz/hf/Qn/Sl/2v/kz/if/Vl/zp/3v/gL/ld/0V/yl7331/pJOmOMMcbYf4IB/+Rn8m/jioFCiOt3Fcv9++NKCLGl8F/ng2VC54gQ4rn+PR/936NOnZSUlL+9N1uJoNQSIUTkan4+cTVeKTqJZ0Sy6Cgq/NP6BsveF+gP1o/eKUTs3+XEiKvx1fVv/2/Wf/LpCZmVw/Px/8P6S4RILHU1p4C4Gl9dv+J/s36R9n9Qf4Gv04To8Hc5ceJqfHX9JPGUeF4k/8M7GWOMMcYYY4yxvxosq3X/o/vnK/fnCfpqTn5xNf6j+3PGGGOMMcYYY4xdey/27vPsk8nJHbvzhCc84cl/Ta71fybGGGOMMcbYn+3qRf+1roQxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMu7/n98ndi13iNjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDF2rf2vAAAA///qoTfc") syz_usb_connect$uac2(0x5, 0x7b, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010102000000102307802040000102030109026900030108a007080b0101010520070904000000010120000924010b00070900050904010000010220000904010101010220000905010908000340060825010006a90000090402000b010220000904020101010220000905820900000307080825010730060600d8c1b43b30dcf0e91716f5de9ec5db9b4caba9424c3d24648f0d1b80371ea48b9cd5bde93b4d6d3369694379210ff641e64c9fa816f859b138d4b77868d4c6a0d3ee11be18da25fb2ea659681c09b984000000"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000100)=ANY=[@ANYBLOB="8510000004000000950000000000000018000000000000000000000000000000950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00'}, 0x80) 17m45.284595471s ago: executing program 0 (id=3862): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000004c0)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec01b3b820b1fdfffa233394c6e77c8285b061be4d1d842e4a63ec47a083470f375b81080001cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8cdc85b032f67dc95a947e63e3667ac2b1c953f5017b3cf2ce986800b84dcc3b33bfe950832606c010ac9f8a252454548986e9b7a88529e53efe01210aad5b2300137f1a62cd7a4a17b307956"], 0xff, 0x2a0, &(0x7f00000001c0)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 17m44.942751129s ago: executing program 47 (id=3862): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000004c0)='./file2\x00', 0x8410, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec01b3b820b1fdfffa233394c6e77c8285b061be4d1d842e4a63ec47a083470f375b81080001cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8cdc85b032f67dc95a947e63e3667ac2b1c953f5017b3cf2ce986800b84dcc3b33bfe950832606c010ac9f8a252454548986e9b7a88529e53efe01210aad5b2300137f1a62cd7a4a17b307956"], 0xff, 0x2a0, &(0x7f00000001c0)="$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") r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) 16m37.033318698s ago: executing program 6 (id=4053): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd6a00000000092b01fe8000000000000000000000000000bbfe8000004000e3bc00000000000000aa320004000110000050"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x20, 0x44}, 0x20) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x86e4e5f17327e40a}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5c}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048050}, 0x4048811) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000140600fe8000000000000000000000000000aafee6"], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}]}, 0x2c}}, 0x0) getpid() 16m35.753903176s ago: executing program 6 (id=4056): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000cc0)=ANY=[], 0x4, 0x5d9, &(0x7f00000010c0)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, 0x0, 0x0, &(0x7f0000000340)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 16m35.337495335s ago: executing program 6 (id=4059): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xc, @private1, 0x14}, 0xfffffffffffffecb, 0x0, 0x0, 0x0, 0x56}, 0x20000800) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0xfffffeb1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) 16m34.511110744s ago: executing program 6 (id=4062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mount$9p_fd(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f00000001c0), 0x309288d, &(0x7f00000007c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@mmap}, {@ignoreqv}, {@dfltuid}, {@dfltuid}, {@noextend}, {@access_uid}]}}) 16m32.266842834s ago: executing program 6 (id=4067): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') pread64(r0, &(0x7f0000000000)=""/185, 0xb9, 0x7) 16m32.043732799s ago: executing program 6 (id=4068): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setitimer(0x1, &(0x7f0000000040)={{0x0, 0x2710}, {0x1ff, 0x32e3}}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/mem_sleep', 0x220000, 0x41) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) alarm(0x38) 16m16.878555858s ago: executing program 48 (id=4068): openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setitimer(0x1, &(0x7f0000000040)={{0x0, 0x2710}, {0x1ff, 0x32e3}}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/mem_sleep', 0x220000, 0x41) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) alarm(0x38) 15m58.789960392s ago: executing program 4 (id=4165): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000cc0)=ANY=[], 0x4, 0x5d9, &(0x7f00000010c0)="$eJzs3U9rHOcdB/DvrNZrrQuOktiJ2wYqUvqHitqS1m2TgqlaTNEhlIBfgajlWHitBGlTlByKXfxCUoLeQC+55OCDz+1LEPRYKPRURC8uMzu72tiyLCWWdhV/Pvaz8zx6Zn7zm9/OjHZXAgV4aS3PpfkwRZbn3tsqxzvbne7OdufuoJ/kbJJG9T/NsvvPZOpBMpt+y3eTFHW44ln7ufbF5818ef9Gf9SoW7X+1EHbHc69umWpTnLpBcZ79I3jFcMjLINeHwSfBI+f7z/HuPupY4zNYbT6i+IZz8VMci7JdH0fGJy4jRPM8FhMzAUIAAAAx+iV3exmK+fHnQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcJvXf/y/q1hj0Z1MM/v5/q/5a6v6p9nDcCQAAAAAAAADAC/CD3exmK+cH48dF9TP/t6vBherxO/k4m1nNRi5nKyvppZeNLCSZGQnU2lrp9TYWDrHl4r5bLp7M8QIAAAAAAADAt9Rfsrz3838AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgERTLVX1TtwqA/k0YzyXSSVrneveQfg/5p9nDcCQAAAMAJeGU3u9nK+cH4cVG953+jet8/nY+znl7W0ks3q7lZfRbQf9ff2NnudHe2O3fL9nTc3/77SGlUEdP/7GH/PV+q1mjn1p1mvc0f82G6uZlGtWXp0iCf/fO6X+ZU/KZ2yMxu1ssiKb5ffxoyGWaqipzJraxVNZqvcyur8erBlTjis/PknhbSGH7yc+EYan6uXpY1n57omi+OnH1vHFyJ5EfX/rt+u7t+5/atzbnJOaSv6clKdEYq8eZLVYn5qhIXh+Pl/D43MpfZvJ+NrOVPWUkvq5nN9aq3Up/P5ePMwZVa+sro/edl0qqfl/5d9Gg5vV1tez5r+UM+zM2s5pdZzNW8k4X8qvp3deQZvniIq75xtKv+hz+tO68lRbu/nBBlXV8dqevoPXemmhv9yl6VXnvx98bm9+rOVFI0hzlNgicrsTBSidcPrsRfH5ePm931Oxu3Vz465P5+Ui/L7xJnn/td4iTr1KrP3v4rla+eHeXc6/vOLVRzF4ZzjafmLg7nnnelturXcE9HWqzm3tx3rlPNXRqZaw/nLg9fbwEw8c797Fyr/a/239uftR+0b7ffm/7d2XfOvtXKmUdnft2cn/px463ib/ksf957/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHx9m598emel213d0NHR0Rl2xn1n4iRc6d396MrmJ5/+fO3uygerH6yud+Z/sfhuZ2Hx3atXbq11V+f7j+NOk2Oyd9GPOxMAAAAAAAAAAACO4iR+nXTcxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDpsTyX5sMUWZi/PF+Od7Y73bIN+ntrNpI0y+X/kqkHyWz6LTMj4Ypn7efaF5838+X9G3uxGoP1pw7a7nDu1S1LdZJLLzDeo28crxgeYRn0+iA4jNv/AwAA///YHBzc") bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x4}, @fwd={0x1}]}, {0x0, [0x61, 0x30]}}, 0x0, 0x38}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, 0x0, 0x0, &(0x7f0000000340)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7f03) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 15m56.814153426s ago: executing program 4 (id=4167): symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r0}, 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x804, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) read(r2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) symlink(0x0, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r4, &(0x7f0000000340)={0x9, 0x0, 0x3, 0x0, 0x1}, 0x8) io_uring_enter(0xffffffffffffffff, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) ioctl$UI_DEV_CREATE(r1, 0x5501) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 15m54.476235549s ago: executing program 4 (id=4171): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x3f, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000386dd6a00000000092b01fe8000000000000000000000000000bbfe8000004000e3bc00000000000000aa320004000110000050"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@private0, 0x8000000, 0x0, 0xff, 0x1, 0x20, 0x44}, 0x20) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r5, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x86e4e5f17327e40a}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x5c}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048050}, 0x4048811) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000140600fe8000000000000000000000000000aafee6"], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}]}, 0x2c}}, 0x0) getpid() 15m52.700594229s ago: executing program 4 (id=4174): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000080)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@noblock_validity}, {@nodelalloc}, {@norecovery}, {@delalloc}, {@usrquota}, {@noinit_itable}]}, 0x1, 0xbdb, &(0x7f00000023c0)="$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") syz_open_procfs(0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2859052, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x0, 0x0}) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 15m49.357509843s ago: executing program 4 (id=4179): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) lseek(0xffffffffffffffff, 0xc, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x40}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4814}, 0x80) getrlimit(0xb, &(0x7f0000000180)) fstat(0xffffffffffffffff, 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000004c0)) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000004280)={{0x2, 0x0, 0x0, 0x0, 0xee01, 0xb, 0x1}, 0x0, 0x2, 0x7fffffff, 0x4, 0xffffffffffffffff, 0x0, 0x5}) 15m40.863202073s ago: executing program 4 (id=4187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) fsync(r1) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x20000000000003b0, 0x0, 0xd) syz_open_dev$sndmidi(0x0, 0x8000002, 0x301000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) 15m38.972157425s ago: executing program 49 (id=4187): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000100)='./cgroup\x00', &(0x7f00000000c0)='gfs2\x00', 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) fsync(r1) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r2, &(0x7f0000000100)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x20000000000003b0, 0x0, 0xd) syz_open_dev$sndmidi(0x0, 0x8000002, 0x301000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) 20.644728393s ago: executing program 3 (id=5943): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) io_setup(0x0, &(0x7f0000000080)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x7, &(0x7f0000000280)) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x2}}, 0x20) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) mq_open(0x0, 0x42, 0x1f0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x8080, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') lseek(r5, 0x2000, 0x0) io_cancel(r1, 0x0, &(0x7f0000001580)) ioctl$VIDIOC_ENUMSTD(r0, 0xc0485619, &(0x7f0000000500)={0x80000000, 0x3200e0, "3d9f3f931497dd9772e0bcbffd83b749067cf1598b58a271", {0x7, 0x88}, 0x2}) 16.989539974s ago: executing program 3 (id=5953): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0xffffffffffffff7e) bind$inet6(r1, &(0x7f0000000440)={0xa, 0x4e23, 0x7, @remote, 0x63}, 0x1c) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x140, 0x1f, 0x9, 0x2, 0x10000007, 0x1, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0x400008, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x401, 0x4, 0x484, 0xa2dc, 0x9, 0x1000, 0x80000001, 0xa, 0x0, 0x383, 0x8001, 0x4]}) writev(r5, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000180)="29e3e5864ceda68155960e4b20eb0403a71898733f0dcb64c38849be0185191621d8d87c521201593212da719d600d9262d4ac59dfb5ec2b503053b465b55ae5c7ca58b82c73ad9aa7872d1e4060a6112879a7afe128f10bf20cfd", 0x5b}, {&(0x7f0000000300)="ac3d900278bc4f673648008b3fd9dafb", 0x10}, {&(0x7f0000000340)="79baf7c80af72c6d074d7aa55d18c2b3f92fb55d09041ffa4b66a0ed18f71e54cc0a5bc1461a6d07e6d4f31058721987ab90040f06c98df9afdd7c6614915beee9a0bea8187c6315a4be760ebc06c000bbe9a766f3752ff9ed8b304d3378bfd1a88dfc510d611a8c13259173a7c957bdd73f4bc320391f6d862cfdd58f6c09abefc7302f22bf6795474455a958f56a17d1551e", 0x93}, {0x0}, {&(0x7f00000004c0)="a407d58cecfb1369d434cee2363e2e667262a9fda651de7eb280ec8ff5087e0036af2fef7939cac0a06e6169aa6caa951a4a9b35e608532fafaa74692296b26bf7525aefeadde445128254deda33cb8622aad1f5aa0ab3ba8a81949805c4de7209102f463431fb613efae16477340300ad74baf9e9dcf19667797369fdeb42", 0x7f}, {&(0x7f00000005c0)}], 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r6, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 14.553263558s ago: executing program 9 (id=5957): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x4200, 0x0) r3 = creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r4 = socket(0x2b, 0x1, 0x1) listen(r4, 0x5) close(r3) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/image_size', 0x202, 0x169) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890c, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x12, 0x1000) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r2) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) write(r0, 0x0, 0x0) 14.539922768s ago: executing program 3 (id=5958): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r1 = openat$pfkey(0xffffff9c, &(0x7f0000000080), 0x204000, 0x0) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x1, 0x9, 0xa, 0x19, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d3, 0x86, 0x7, 0x9d, 0x3, 0x1}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}, @sadb_address={0x3, 0x6, 0x2b, 0x80, 0x0, @in={0x2, 0x4e23, @private=0xa010102}}, @sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x6e6bbc, 0x6a03, {0x6, 0x6c, 0xca, 0x0, 0x0, 0x6, 0x0, @in=@rand_addr=0x64010102, @in=@rand_addr=0x64010100}}, @sadb_address={0x5, 0x17, 0x2b, 0x20, 0x0, @in6={0xa, 0x4e20, 0xe, @loopback, 0x12c}}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d2}, @sadb_x_nat_t_type={0x1, 0x14, 0xad}]}, 0xc8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@ipv4_deladdr={0x17, 0x15, 0x1, 0x70bd2c, 0x25dfdbfc, {0x2, 0x38, 0x0, 0xff}, [@IFA_LABEL={0x14, 0x3, 'gre0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8) syz_usb_connect$uac3(0x3, 0x129, &(0x7f0000000380)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1055, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x117, 0x3, 0x1, 0x4, 0x10, 0x80, {0x8, 0xb, 0x0, 0x0, 0x1, 0x21, 0x30, 0xe}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x2f, 0x9}, [@mixer_unit={0xb, 0x24, 0x5, 0x3, 0xff, "b1ba443c2eee"}, @feature_unit={0x11, 0x24, 0x7, 0x1, 0x4, [0xe, 0x10, 0xb]}, @extension_unit={0x9, 0x24, 0xa, 0x6, 0x6, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x5, 0x3, 0x3, 0x0, 0x0, 0x5, 0x2, 0x67}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x9, 0x0, 0x7, 0x6b}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xb1, 0x5, 0x0, 0xfe, 0x1}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x4, 0x9, 0x1, "", '%'}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x10, 0x4, 0x2, 0x80, "d10433cc03d5"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x40}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x2, 0x9, {0xa, 0x25, 0x25, 0xa153ba1, 0x80, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x9, 0x9, 0x40, 0x5, 0xfe, 0x9, 0x3, 0xb}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xb032, 0xf, 0x4, "57b152d1c6d57a"}, @as_header={0x17, 0x24, 0x1, 0x0, 0x5a, 0x9, 0x1001, 0xf, 0x8, 0xff5a, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x70, 0x3, {0xa, 0x25, 0x25, 0x1, 0x80, 0xfffc}}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0x9, 0xb, 0x5, 0xff}, 0xa5, &(0x7f0000000500)={0x5, 0xf, 0xa5, 0x2, [@generic={0x95, 0x10, 0xb, "874857d476201e9d7b83a35e57b34df0675b19db4228b3e1d5d40263076087dc80af3eb2f668579bf06965cdd1cd79d738b638ece7f87010a010162e470839ba038cf28c308cb15df634433b3078b9c9d02c259b26c1ae7167b18b4e846037fa5be37dc74bbbc98be820bfef9ab1144e1c17225cca50db0ce247cab27995e70fe617790c2f56a3f38e46d85c3644bede11d0"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x30, 0x20, 0x0, 0x9, 0xbb}]}, 0x4, [{0xc5, &(0x7f00000005c0)=@string={0xc5, 0x3, "9864bae7be795f5261e727d66c6a4b47f7fc8d3738b48a4816b84cefcf07802c33284867c08d93800e1e9980ca3402bbd0d81471b49edaff94cd6968ec7e126d56ac5ce9447c8d332a56151253c0a936a80a6829f00844bddb99a8638014f613e1de5b814f3d38c0f01cba2e7b399835ab8bba8b6962e5b4d70e8ba87bbe0505374b5134acccc130b391041335392d9ba9af6cc086cbb66428ae383729b91ca453cdb58e544fd7c00f01b6b86f436ce457515a2fdd8faddd83d281740489ea3ea34747"}}, {0xd1, &(0x7f00000006c0)=@string={0xd1, 0x3, "7b6179c469fef6debe9ffe6a3ef7bd58def49e9322b288d2407b680e8e45a690d1a7e1ed3b13fa2d2b180cd850750469d9c0be5e633a3e1a277a2537ba062052252986178feb4ff3d8307de4680bcbad2d3c0c2498741780abeb475beb2344e1f9698a13c4496f4da4ee9927e2760ab8c820b9752205e55d3a3423f8ab0da7faf799b5b749d8b057b2d09ed8c6fe0b9fad4cefe2766b9f75c7f1972a0e231b28d5c462cb5c457d6c90f4c61a225e3927eeeb7b65df36d58737a44724bd7bf98f279cd681d97bac30e0642661b0b36c"}}, {0x75, &(0x7f00000007c0)=@string={0x75, 0x3, "7764f3c93093f03e47ce228ada48ccd6b2ad5c7afb061ba6f5af69b20238b5978e4445cfecb8d837af8dcd60d4ec291c656eefb70f70c01e16f451684b74d18a6579152426c6d8b96dcae94a896ba5fb8a56f5c402b83431debb6a41b792565255ec9e48b18c50063334f2ccb5948a4a4684f9"}}, {0x41, &(0x7f0000000840)=ANY=[@ANYBLOB="410354d2287c1d760493f9d6b5026c6e188dcb8085d8dd83dfffb2df4c74b6efaa266dbb28616a8c4b7d1c5849982a205fbeb66619310ad273fafc31ad4c"]}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r8, &(0x7f0000002f00)=[{{&(0x7f0000000280)=@l2={0x1f, 0x81, @any, 0xf818, 0x2}, 0x80, &(0x7f0000002440)=[{&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="eede2dda3a55bdb73309a84440f0", 0xe}, {&(0x7f0000002380)="734ad445425ef5ca0d95c88f63deddca91bee52afbaae201eb030425af0a75dc4e78a6acc278320f52847ba676304332fd5eb35271d482d2fe449c1e9e73c831282d34615ce8c2a76a555b271f6b1d15d1d1ba887afd8fc1d5db3389b6c020a61ad5f3bccc184d85216ee11b51ca91dd520cb69d7f7088123344d49b119f5e45745072dcbe609790a7d5", 0x8a}], 0x3, &(0x7f0000002480)=[{0x70, 0x113, 0x2, "26dbfdd48a1f61981a0ac736f8a1c32dd8e0a87b001b1ba230456ff25950bf200a76ed0d2c874366dca53ea3dfa7637955395a10c2aa70d719e06f9c1a9f976554d193ddcfbc847c494e654ed15a0c747bf1d5301119ed40f6a51af2ca6d2c1c3b97840e"}, {0x14, 0x10d, 0x3, "8eecfbb3cbd769"}, {0x8c, 0x3a, 0x7, "612ffc261854cebf40f900f03774f36c66e68aea45aad2e7274302510011466d8038c9a304f307964d4953949dba4ac9f9a12b593effd425371d2fffa4fe1534df73881cd71fc0fba3987f26494b21b29fb9cb3f5aa951b79a55fec411f4636044e3c635921e3599c309989fb89df9a06b48d5075b87970b96644373f9"}, {0xf0, 0x10b, 0xfcf8, "ba85a4d1af11b6f1b0386cb67d804c3907c39ddce3f243e88f8beb1c5b3895735e0b810af660b39fcf1e8cc68d75f26d2e43a7dda53788918a3e87a373125c2877022bee293dfc82d06a289f3e5f4eaf9805706e9f6cdc385b6aa166448a3367ed0823d8385e41aead0d3f513a7b1e003479d8013ab21b86cc18a327a186faab0ab895c182598a9a66e74c0c71240aa05c76ffdb972eed5deabc0e5a49648d34ee1cfdd81b0083dca7dcf09e16852c772dcff37802fd034970992e7328afaa670344e65c0afeed0850ab3afe9ec53556655044f503b48bbdd0650ab4c694e9cda471d36c"}, {0x74, 0x116, 0x0, "4bf229717c736a8d7225f9fa5f3cbe9278d55532bc97c2a9be2e458abd3fd5bd9e42ffa16170e6922439ef2dd7239a222dc38fb5296914b1caaadcb6ad388aa229fb8af2920993f8736b302b25d3e943e00b01077536df5e6a0ff33a15ebdb24b88b8873525018fa"}, {0xb4, 0x112, 0xfffffffa, "349c774d84b45b85bc0974cfa35a4758e3f843d52ebbd99483b816215da414213c7a90ec76968ec213febb66694825582c27d72b1d7835a4d088bb736fee2ed00c4f1220c28dfbd5fc9b400aa726b98a29f5579707ea2dd5b1bd93813303e4d68164fdb1ce20d9348c87744dd6bf484864be39fb1321a57af93f97c5258ed944b15cea3e75037a37f1dc0a963acdb6b741edcf3a3a6c36e49e9dc31f5605053df36a1d9ec3cb"}, {0x20, 0x10c, 0x9, "2f20df80deef412e55befb06ea63b1401b3c"}, {0x34, 0x116, 0x0, "f0fa0d2f4a44e9e07579b7d12a5ac6f52b5ddadf9a53fa023bc289175c3c2a05f25fc999e68588"}], 0x37c}}, {{&(0x7f0000002800)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002880)="859171d8826d8927df60", 0xa}], 0x1, &(0x7f0000002900)=[{0x5c, 0x6, 0x1, "43ace2a44c48a022f9ab844fa14bf2c774032176b41e3235255be3de6b7414816a2359fb87a0d5e22fd76a0c755f9d70792b4b7b2c2e611a86cea8f8b04a91c387360544152a7f0f2ddc94b5addce6"}, {0x9c, 0x117, 0x6bf4, "550acbbe48d461fb6db1ec1d4937229c8eb4dbdf4947283211d580566a3e8457ca8ed34170abe1175dd5fa23c93a4d25f87d40f16d660e5dfae522cedce46f021ed3f589ff38708bbbdc8d0663ac234c4bdf6765ccd90d8bf783523bb0f9c7d0078ebe60917572264c3859413b201c1d8438719ec76751c04cf56177811c8f31925cc18a22735814cb136c5b14bf"}, {0xfc, 0x1, 0xf4, "e92aa4a8bf35683897f23b912a87eb55261a7f41122939cee359d7a456107d74c5f5e2ee645ba35267fd53628b85a858472001809b69f3e767d2831eb057112b0d3b99ec4f9d1b9439e7c6afffd7b2ea6b8f5571023f092d8a075c65c01eaaae37264e3a38cace1961a020f51a0ca8d7ff9179eb687de68131a2e9654c969f3e3aa790b926516d9a04edff0cd424080e70c06011653de2f3842ad978960fed0e938ea5fd3e32fc7ae13ea33b86e792866d971bb2a3b84b82912f84125a1606b51c25cc893afc90fc3c51a441dc88c2e85f5cd2ebc77d88497b8d9acce2a90aebd51c619125215b78a38e3c8b33c3ba6b"}, {0x100, 0x117, 0x7, "aa02f436040c42c11a0fc5573c5b3fdae49088358ec8b8154d04dce05c5832a42285d5146761cfddebaa9cd91e642cbd3872f75112b8364f0c3f2b8e6095b231973ae71434c49749f0972af8c62a6b70134c517369183593cd0ac5d20aa5bb1948a3bf9f4f93df0a778320df90587136ea01b209bfcca7e3aa9edb84bc958d65c297aa383edefd5b755757dc9168ec55fce5eded6c826d11129d2e86eedd1430397b39028522943e6859c1b0cfa67bbb301e8dc18efc3b6f235baa1a180cae61c221224ae86999efb77341f8c21740da04e60ec7c7f3d3665def25c8b16bdc8599cd73ee5d433fc99b5743920c5c8aeb39"}, {0xac, 0xff, 0x1ff, "9b6a11f44be92da9dc3904c2534171d812a76e2a1a8eb0139113a56e3d5c1137a4c10bb3f21b80b8e004690f14d4e46e1ab9c41995ac224cc1a30afe07c720118f03f325893244477330b86c9b71beeb221fd5a5f04fb327a120ab085d6fd4f785d2d60c7a4f73645243da3b8c402d0ba198f7ab732aabf476ae5f4b89ac59ae73b148db40112f7d85c189d20ef97ed72393e1c74d1c529086ffffdb11c04a"}, {0x88, 0x6, 0x2, "bd07fd613a491a28c4dae03852ebedf1b1eab06b98cadd59add720f13c386fc62289a95c25793479adcf57dc2ecb22e7fb12db20f1287af4b92a40517dad05019b641f84419363b559dc926df17bfcce04a0db0094258691876464d08ad04d1194b59d95e1b39981d90d4d7b327cb4167355b7660b8df46a422c"}, {0xe4, 0x100, 0x3523, "54d6915d2de9a85390fb3eb70e22de049b23292299b41e3f7f584decb06e5214f7bfa08edb5a14c9d8992653bf69633abbceb5ac2f3660b76695afdd3c1d6891de186c9d863d46ba7d8187920cc3549909e762cbbeda31eabad39223e8b3d5cdc9fd9d5a138a552b1baf61511727d0ef96060a87752f694ebbc420a5184e0d8a12c23444efd6410d7e9fd7a27fccfb286ed04a28234e9097d8d2fafc0416a9cc2885e0e10fc1df706601146da92042706932fd8291664ab50f2e3ee92f7313ad014d0a307077e69357cb70779e910d6df99db064cb01"}, {0x54, 0x109, 0xf, "b0f9c048e29b2f6fc61be54d052bc9f95fcea4344546128f4cf888389614d05570ea58eaf98f33c17ed822a8e1d82d97699eb9b8d5e1cf743abdbc1ec235b35342c8be03c5138a"}, {0x3c, 0x10c, 0x5, "79a082c83ee466493ae5d20fd17717dfed50f04114aa821567bd408677a5b3fcdbb73f015f5029a3d453afce52a1d108"}, {0x50, 0x116, 0x9a7, "693abc887c325ffa1b6b6289f337d3d84d06da010d480576c90b3884f85c28491752f03fe687cdec80a84acc182d2c47b11a2af89cd5976bd8ea027781c6a07cdb"}], 0x5ec}}], 0x2, 0x20008001) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xf}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) ioctl$I2C_RDWR(r12, 0x707, &(0x7f0000000340)={&(0x7f00000001c0)=[{0xf, 0x0, 0x0, 0x0}], 0x1}) 12.791450177s ago: executing program 1 (id=5960): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000480)={{r0}, "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"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0xffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_usbip_server_init(0x5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x68, {0x2, 0x4e20, @rand_addr=0x64010101}}) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffffc38c5162, 0x0, 0x40, 0x8, 0x3, 0x0, 0x0, 0x4, 0x8}}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r3, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x400c800}, 0x200480c4) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x2000000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 12.790695477s ago: executing program 2 (id=5970): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x4200, 0x0) r3 = creat(0x0, 0x175) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) acct(&(0x7f0000000000)='./bus\x00') acct(0x0) r4 = socket(0x2b, 0x1, 0x1) listen(r4, 0x5) close(r3) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/image_size', 0x202, 0x169) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890c, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) fanotify_init(0x12, 0x1000) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r2) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) write(r0, 0x0, 0x0) 12.713591159s ago: executing program 9 (id=5961): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc01c5868, 0x0) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x2f, 0xff, 0xd, 0x5, 0x21, @mcast2, @local, 0x7800, 0x8, 0x6, 0x8}}) r5 = dup(0xffffffffffffffff) write$UHID_INPUT(r5, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) io_submit(0x0, 0x9, &(0x7f0000001280)=[&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x200, 0xffffffffffffffff, &(0x7f0000000a40)="70f237160ec40487c63e31e87efd4abea40f9e3867a9b3ef455174096fbf15852db50c232d4e6d6a1c37ecd3332674ed9734058aa1724bf53b4c01bbb994f4be275c3145e762d3dad8ca57316b640fa02639f22bd91e00d707cd6cf52ee7da0e9f8bd06ffec36cb11da52eb91464d68afade73653f4151b2868737c565b5f41e2eb41ef0fc46b228fd89c9fad1d5ab017efe09502593af9bf0c282dbd8296f0a8e72309d2bb04303fb69db6c30646a39d21c982e1a44867f01a0025575a6e3d31e3bf457642750a9cf6c0a6d65c62538936b885f5e2bed973bb174f4722e118baa4229846bc010895d7f5c7b2862b8e5fa", 0xf1, 0x5, 0x0, 0x2}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x2, 0x1, r1, &(0x7f0000000b80)="ff5be674b266fe702f4d82c3270c2bfffbc338d2c28b11f7940e21b65db0fb8bfe3ee352d5987e1cffeada9ecc55a4eceb2b3d9f9ff1acab5cdb75bcf192d7522b99a31de9d1496c130cf406799d4b7ddc3e08bf817f7c8f8e7b114d1c72908f9142696aae5dde9210d77ac45981967dd8802fb2e8f4d525f7ebcb6c541ef57c4f784bdba6a23f09f50a6f0898e64bc5b9f5d8df18c2e29025bf18b40623c94080abded99b6d9df877", 0xa9, 0x9}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x6, 0xc, 0xffffffffffffffff, &(0x7f0000000c80)="d5d02d71dfa13a39b30b661ec7e9a002efea59c55ce37c8d1ec6d52550bccb4923d8456a1a606c9ed48263d21c059dc88904e10387a71aa5b7255c6988dc8c50e03fa4a695d98e4abf65fdf56f6c0bea6071901e7eb6250b4c756bc26187fbbf42618285e31cf49ca3e2cec5dca4f8f05accd6e26469f072f27bd0876faaf51b80845b29fa81051adef591f240098299", 0x90, 0x8, 0x0, 0x3}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x6, 0x6, r1, &(0x7f0000000d80)="f950b258f909195f39359812055f80f7147c277f18479bd126e403a9fad807e50f326b127d0ed2d74767afbaf6276c620b923332661160d353ed964b9eabb7eaa9aef592b1970f09124546f0578bb68959ea27bcb11dbf4ce596f41f4701cb9c8fe53d351ce7d34f2b", 0x69, 0x3, 0x0, 0x2}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, &(0x7f0000000e40)="e0699950dbb6ee17fb2368291256ea17a73fc1781dd224f1e530b715f38e55c270b2f154ff544a12bc168d301f527343f5f10a90f6e2398e982c09de6f74da1275207a100097c633eadae592d2faddeb8e915c90637056045c61b53d9cc65d23191ecbbd4b47b224326ff64e321141bdd9524eea86155c606dcb2c9a8b54258d51f8ebb6c5bc15aa54039736d323ad204569e99107e432d80922982484c14e3b2a93fd8a6165c279fdd669b8fcf44dfb9de0", 0xb2, 0x81, 0x0, 0x3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0xec7bf190d7369ef2, 0x8, 0xffffffffffffffff, &(0x7f0000000f80)="ef7f834dc3de5677c647c3e8299448ca4c8f9d220e5d8862bed514db3ff613f96f1c748945d84111ca9d6eeb0280a8908bf048c658c4269694abc392793090858a199238d18903ec8ce8a6738e807a6c60459c518c86ccfc6e5bb776ed7f34f4c1d2aa9984e12c444707f486b5f5d96a26aee5a0a7172a8f7e06b72d", 0x7c, 0x2, 0x0, 0x2}, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x8, 0xf, 0xffffffffffffffff, &(0x7f0000001040)="2ea338f60d6a49e2ee962520b6bc1ad7c58dfe4874f35b41a41c30d259e9e8956d4323ffab200f7ebdbe24e47fa54d777717afa8b35123e0c453890a7637f50acfcb918468f06c4eaa59f1b578c7f0b13dd48d139c5c01", 0x57, 0x1}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x400, r0, &(0x7f0000001100)="ec587ce2d79707d54c743b2bf5b2d7816685fa5753995edf323a6d0d518149a65f03f2a5da9e13ea67e5d40950761dc0c46c7935ef6031b003e3e814612e050ee572a1a1a2c23041e1278338d8dbc5912b13b9af0fd96149dcbe64c7a0beea601d75f0b50e1f0d850db834caff04d63d4b959f9a38dd71f5c81987d5feed6b791a7256f4f0223d43206400391f8fde004e1e4a91e429cfc2628f5a456fd355231e76a93ccda6d2f3b6e1082b102d5f4baebd9807a7eaaf0b3ee4cec5fcce9b", 0xbf, 0x0, 0x0, 0x3, r5}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0xf82, r0, &(0x7f0000001200)="a6698da5d46fa735d79af9ed3608158056ee6a1d34973d2187ca40e041184adba5edbccffe3c5d1f4a2fed0ca17be221adde7d3b2f3f964ebb786500", 0x3c, 0x1, 0x0, 0x2}]) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xfff1, 0xf}, {}, {0x3, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x7, 0x1, {0x0, 0x4}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="00022da5ef198ddbdf25030000007c00018008000100", @ANYRES32=r4, @ANYBLOB="1400020067656e657665310000000000000000001400020076657468315f746f5f6261746164760008000100", @ANYRES32=r6, @ANYBLOB="0800030000000000140002006d6163766c616e3100000000000000000800030001000000140002007663616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="05000500070000005000018008000100", @ANYRES32=r9, @ANYBLOB="14000200776c616e310000000000000000000000140002007767320000000000000000000000000014000200626f6e645f736c6176655f300000000008000300020000003400018008000300010000001400020076657468315f746f5f62617461647600140002006d61637674617030000000000000000005000500ff0000000500020009000000"], 0x12c}, 0x1, 0x0, 0x0, 0x40000}, 0x821) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a00118031f9e05e2f606cfc31269b62"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 10.022537068s ago: executing program 2 (id=5962): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 9.94678477s ago: executing program 7 (id=5963): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRES8=r0, @ANYRES8=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff8e2d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$BLKRAGET(r0, 0x1263, &(0x7f00000001c0)) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\v']) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000001340)) write$dsp(r5, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@nested={0x4, 0x6}]}, 0x18}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) ioctl$PTP_PEROUT_REQUEST(r8, 0xc4c03d16, 0x0) 9.923548651s ago: executing program 9 (id=5964): syz_io_uring_setup(0x23c, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x800002) read$dsp(r4, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 8.525755431s ago: executing program 7 (id=5965): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x30, 0x20, 0xf4db158ec847dc81, 0x0, 0x3, {0x2, 0x20, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0xb}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7fffffffffffffff}, @FRA_DST={0x8, 0x1, @private=0xa010102}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000895}, 0x0) 8.503997752s ago: executing program 2 (id=5966): syz_io_uring_setup(0x22f, 0x0, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000080)=0x800002) read$dsp(r4, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 8.226043418s ago: executing program 7 (id=5967): semtimedop(0x0, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r4 = dup(r3) fallocate(r4, 0x10, 0x0, 0x72000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 7.562562172s ago: executing program 3 (id=5968): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x4, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x0, 0x91, 0x4, 0x4, 0xd, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x8, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x44007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0x81, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x10438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x2, 0x5, 0x5, 0x491, 0x9, 0x1200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x8, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0xffffffff, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x60a0, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0xa, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0xff, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x5, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x80006, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x663f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0xd]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004851}, 0x20000014) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x8482) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={0x0, &(0x7f0000000300), 0x0, 0x0}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.994935875s ago: executing program 2 (id=5969): openat$ptp0(0xffffffffffffff9c, 0x0, 0xe8240, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000003}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6.77905297s ago: executing program 7 (id=5971): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xff, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0xffffffffffffff7e) bind$inet6(r1, &(0x7f0000000440)={0xa, 0x4e23, 0x7, @remote, 0x63}, 0x1c) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x140, 0x1f, 0x9, 0x2, 0x10000007, 0x1, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0x400008, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x401, 0x4, 0x484, 0xa2dc, 0x9, 0x1000, 0x80000001, 0xa, 0x0, 0x383, 0x8001, 0x4]}) writev(r6, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000180)="29e3e5864ceda68155960e4b20eb0403a71898733f0dcb64c38849be0185191621d8d87c521201593212da719d600d9262d4ac59dfb5ec2b503053b465b55ae5c7ca58b82c73ad9aa7872d1e4060a6112879a7afe128f10bf20cfd", 0x5b}, {&(0x7f0000000300)="ac3d900278bc4f673648008b3fd9dafb", 0x10}, {&(0x7f0000000340)="79baf7c80af72c6d074d7aa55d18c2b3f92fb55d09041ffa4b66a0ed18f71e54cc0a5bc1461a6d07e6d4f31058721987ab90040f06c98df9afdd7c6614915beee9a0bea8187c6315a4be760ebc06c000bbe9a766f3752ff9ed8b304d3378bfd1a88dfc510d611a8c13259173a7c957bdd73f4bc320391f6d862cfdd58f6c09abefc7302f22bf6795474455a958f56a17d1551e", 0x93}, {0x0}, {&(0x7f00000004c0)="a407d58cecfb1369d434cee2363e2e667262a9fda651de7eb280ec8ff5087e0036af2fef7939cac0a06e6169aa6caa951a4a9b35e608532fafaa74692296b26bf7525aefeadde445128254deda33cb8622aad1f5aa0ab3ba8a81949805c4de7209102f463431fb613efae16477340300ad74baf9e9dcf19667797369fdeb42", 0x7f}, {&(0x7f00000005c0)}], 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r7, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.729236851s ago: executing program 1 (id=5972): openat$ptp0(0xffffffffffffff9c, 0x0, 0xe8240, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x1ff, 0x7a, 0x0, 0x8000, 0x6, 0x3}, 0x0, &(0x7f0000000080)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0x12, 0x80000003}, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5.602615776s ago: executing program 7 (id=5973): pipe(&(0x7f0000000000)) stat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)) getegid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) fcntl$lock(r0, 0x5, &(0x7f0000000100)={0x1, 0x1, 0xd, 0x9c7, 0xffffffffffffffff}) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) recvfrom$inet(r0, &(0x7f0000000780)=""/123, 0x7b, 0x10000, &(0x7f0000000800)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) openat$sequencer(0xffffff9c, &(0x7f00000000c0), 0x10000, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) unshare(0x24020400) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81802) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=0x0) r3 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r3, r2, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x5, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000001, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x401f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x400, 0x0, 0x367}}], 0x1, &(0x7f0000000880)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x2}) mmap(&(0x7f0000008000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x100300) 5.601070746s ago: executing program 2 (id=5974): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000240)=""/187, 0xbb, 0x0, &(0x7f0000000440)=""/208, 0xd0}}, 0x10) r3 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r3, 0x20, &(0x7f0000000000)=[r3], 0x1) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000080)=0xda) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x9) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x40010) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00dbac04095e87889a0063", @ANYRESDEC=r1], 0x2c}}, 0x44040) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4c050) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 4.659976457s ago: executing program 1 (id=5975): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc01c5868, 0x0) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x2f, 0xff, 0xd, 0x5, 0x21, @mcast2, @local, 0x7800, 0x8, 0x6, 0x8}}) r5 = dup(0xffffffffffffffff) write$UHID_INPUT(r5, &(0x7f00000002c0)={0x8, {"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", 0x1000}}, 0x1006) write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) io_submit(0x0, 0x9, &(0x7f0000001280)=[&(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x200, 0xffffffffffffffff, &(0x7f0000000a40)="70f237160ec40487c63e31e87efd4abea40f9e3867a9b3ef455174096fbf15852db50c232d4e6d6a1c37ecd3332674ed9734058aa1724bf53b4c01bbb994f4be275c3145e762d3dad8ca57316b640fa02639f22bd91e00d707cd6cf52ee7da0e9f8bd06ffec36cb11da52eb91464d68afade73653f4151b2868737c565b5f41e2eb41ef0fc46b228fd89c9fad1d5ab017efe09502593af9bf0c282dbd8296f0a8e72309d2bb04303fb69db6c30646a39d21c982e1a44867f01a0025575a6e3d31e3bf457642750a9cf6c0a6d65c62538936b885f5e2bed973bb174f4722e118baa4229846bc010895d7f5c7b2862b8e5fa", 0xf1, 0x5, 0x0, 0x2}, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x2, 0x1, r1, &(0x7f0000000b80)="ff5be674b266fe702f4d82c3270c2bfffbc338d2c28b11f7940e21b65db0fb8bfe3ee352d5987e1cffeada9ecc55a4eceb2b3d9f9ff1acab5cdb75bcf192d7522b99a31de9d1496c130cf406799d4b7ddc3e08bf817f7c8f8e7b114d1c72908f9142696aae5dde9210d77ac45981967dd8802fb2e8f4d525f7ebcb6c541ef57c4f784bdba6a23f09f50a6f0898e64bc5b9f5d8df18c2e29025bf18b40623c94080abded99b6d9df877", 0xa9, 0x9}, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x6, 0xc, 0xffffffffffffffff, &(0x7f0000000c80)="d5d02d71dfa13a39b30b661ec7e9a002efea59c55ce37c8d1ec6d52550bccb4923d8456a1a606c9ed48263d21c059dc88904e10387a71aa5b7255c6988dc8c50e03fa4a695d98e4abf65fdf56f6c0bea6071901e7eb6250b4c756bc26187fbbf42618285e31cf49ca3e2cec5dca4f8f05accd6e26469f072f27bd0876faaf51b80845b29fa81051adef591f240098299", 0x90, 0x8, 0x0, 0x3}, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x6, 0x6, r1, &(0x7f0000000d80)="f950b258f909195f39359812055f80f7147c277f18479bd126e403a9fad807e50f326b127d0ed2d74767afbaf6276c620b923332661160d353ed964b9eabb7eaa9aef592b1970f09124546f0578bb68959ea27bcb11dbf4ce596f41f4701cb9c8fe53d351ce7d34f2b", 0x69, 0x3, 0x0, 0x2}, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, &(0x7f0000000e40)="e0699950dbb6ee17fb2368291256ea17a73fc1781dd224f1e530b715f38e55c270b2f154ff544a12bc168d301f527343f5f10a90f6e2398e982c09de6f74da1275207a100097c633eadae592d2faddeb8e915c90637056045c61b53d9cc65d23191ecbbd4b47b224326ff64e321141bdd9524eea86155c606dcb2c9a8b54258d51f8ebb6c5bc15aa54039736d323ad204569e99107e432d80922982484c14e3b2a93fd8a6165c279fdd669b8fcf44dfb9de0", 0xb2, 0x81, 0x0, 0x3}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0xec7bf190d7369ef2, 0x8, 0xffffffffffffffff, &(0x7f0000000f80)="ef7f834dc3de5677c647c3e8299448ca4c8f9d220e5d8862bed514db3ff613f96f1c748945d84111ca9d6eeb0280a8908bf048c658c4269694abc392793090858a199238d18903ec8ce8a6738e807a6c60459c518c86ccfc6e5bb776ed7f34f4c1d2aa9984e12c444707f486b5f5d96a26aee5a0a7172a8f7e06b72d", 0x7c, 0x2, 0x0, 0x2}, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x8, 0xf, 0xffffffffffffffff, &(0x7f0000001040)="2ea338f60d6a49e2ee962520b6bc1ad7c58dfe4874f35b41a41c30d259e9e8956d4323ffab200f7ebdbe24e47fa54d777717afa8b35123e0c453890a7637f50acfcb918468f06c4eaa59f1b578c7f0b13dd48d139c5c01", 0x57, 0x1}, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x400, r0, &(0x7f0000001100)="ec587ce2d79707d54c743b2bf5b2d7816685fa5753995edf323a6d0d518149a65f03f2a5da9e13ea67e5d40950761dc0c46c7935ef6031b003e3e814612e050ee572a1a1a2c23041e1278338d8dbc5912b13b9af0fd96149dcbe64c7a0beea601d75f0b50e1f0d850db834caff04d63d4b959f9a38dd71f5c81987d5feed6b791a7256f4f0223d43206400391f8fde004e1e4a91e429cfc2628f5a456fd355231e76a93ccda6d2f3b6e1082b102d5f4baebd9807a7eaaf0b3ee4cec5fcce9b", 0xbf, 0x0, 0x0, 0x3, r5}, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0xf82, r0, &(0x7f0000001200)="a6698da5d46fa735d79af9ed3608158056ee6a1d34973d2187ca40e041184adba5edbccffe3c5d1f4a2fed0ca17be221adde7d3b2f3f964ebb786500", 0x3c, 0x1, 0x0, 0x2}]) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xfff1, 0xf}, {}, {0x3, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x7, 0x1, {0x0, 0x4}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r3, @ANYBLOB="00022da5ef198ddbdf25030000007c00018008000100", @ANYRES32=r4, @ANYBLOB="1400020067656e657665310000000000000000001400020076657468315f746f5f6261746164760008000100", @ANYRES32=r6, @ANYBLOB="0800030000000000140002006d6163766c616e3100000000000000000800030001000000140002007663616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="05000500070000005000018008000100", @ANYRES32=r9, @ANYBLOB="14000200776c616e310000000000000000000000140002007767320000000000000000000000000014000200626f6e645f736c6176655f300000000008000300020000003400018008000300010000001400020076657468315f746f5f62617461647600140002006d61637674617030000000000000000005000500ff0000000500020009000000"], 0x12c}, 0x1, 0x0, 0x0, 0x40000}, 0x821) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a00118031f9e05e2f606cfc31269b62"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 4.646873248s ago: executing program 9 (id=5976): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003440)={0x2020}, 0x2020) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xff, 0x8}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0xffffffffffffff7e) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e23, 0x7, @remote, 0x63}, 0x1c) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) writev(r4, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000180)="29e3e5864ceda68155960e4b20eb0403a71898733f0dcb64c38849be0185191621d8d87c521201593212da719d600d9262d4ac59dfb5ec2b503053b465b55ae5c7ca58b82c73ad9aa7872d1e4060a6112879a7afe128f10bf20cfd", 0x5b}, {&(0x7f0000000300)="ac3d900278bc4f673648008b3fd9dafb", 0x10}, {&(0x7f0000000340)="79baf7c80af72c6d074d7aa55d18c2b3f92fb55d09041ffa4b66a0ed18f71e54cc0a5bc1461a6d07e6d4f31058721987ab90040f06c98df9afdd7c6614915beee9a0bea8187c6315a4be760ebc06c000bbe9a766f3752ff9ed8b304d3378bfd1a88dfc510d611a8c13259173a7c957bdd73f4bc320391f6d862cfdd58f6c09abefc7302f22bf6795474455a958f56a17d1551e", 0x93}, {0x0}, {&(0x7f00000004c0)="a407d58cecfb1369d434cee2363e2e667262a9fda651de7eb280ec8ff5087e0036af2fef7939cac0a06e6169aa6caa951a4a9b35e608532fafaa74692296b26bf7525aefeadde445128254deda33cb8622aad1f5aa0ab3ba8a81949805c4de7209102f463431fb613efae16477340300ad74baf9e9dcf19667797369fdeb42", 0x7f}, {&(0x7f00000005c0)}], 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.133609421s ago: executing program 9 (id=5977): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000480)={{r0}, "5d8183bf88f91590b17a0f94bd7c926dec48c8148b8e36ccb9947a187e2a102be5911f93f43f5941e87e8a2d0d53a77fc8bb8c72befbd8a1918ad471d776ecc1aebe1a3f978920fb695741686906b3f0c12ae757acfdfe390c5a56234950ec73f1c92b1c37125401d033b38a463bd79b7b3a19b67be6eda06ad5bc137b8a27505cc0cffdfc1ae35502880f822467e362527f6c9e0cf13bb047f32ab3c157dc345fc3bee7e3bc23b7ad9d48ee0bd5efb88912aa5b2925c9e8c094b91560b2612d6d25f251b39f4f2e2a9bcb9e37f3cb3efd0c3bc7f7fe7757dcab55a29b4fbf5b0ec8f640fe63b3725c905131e6857a6f392a94b0c1dd9f38b5a6497fc32d7640ab3a1a18f60f41294c1646749906cedfbb02322f7882d44f128ad601a5c9d15769c53c65532c01d0eba5c93a321cc7d9eb37898b5379572500f3ace7ff6284582f26ed16276eb5d2db4bf3a80f5a2eebeddd7ec63aedc3d2de69fe1d8876976890d8d96eb5e999e86d07e57b3ce01485f479c3b84daad487c272d89003418b5eda24a859bfb4723911b923f90e2c69a6ec65cd9ce9de2e83904dfafd0aa3d5ba87c354ca84a425c54a41d345234be3d0c950cea7359a5449c46ad0289cdfb5055c2407af2322550d5f404b25471c6483d24b050051862bed9022cdd4d75b9773b443647ebfee84fae97f5cb4296255eb238415f017d6de452d6892bb03cc05f218d9e86cdff1326e958daf9d4bf7d68f7b8223f39c371507b24295f4c7462ff16ad00e84b4210f4161b394c40a14eeeb99e2572ea9bd6bd0c4c716e6078610099e9e30b5f098c2c485cff939557ead1e4aac91d8e6d6799f5b8a49c4a49b118b6d709d07c0507d754cedfdbc991ae483b159ec65fdebb5537de81f64a54d0cf916130cb7f8a7ebbd054ca0e6e4aac0541a67976654985604c3e62afb6ffbee186407a5642509d997dbd1b56404be9396e46f1b01c783dd3220a1641c9610bed49af46c06b98a9b257c78f41763737b313f75da839610c2c0e31b53c6af6e6dc143a248011b35db2e75a0a4f23cbabdeaf221e2716ffa9ecbed14331e0c0596b5aee26bf8ac3b8d8be275579d90f3848e04c3351291a8d9f3034ea30f50ac2544b46ed4d692ec6540a37ee1cce792852cfea69706832b79ebedb6553013ca6ffcb3902256925c30c86116f8fd6b82f54a34334ef1928fd1776bce4ebd66cbbf585864c588e728ffc5b6a1fee2cb737bcd8d9fa01589949f900023efa3856b724e49edbe4091ffbba1f8472252806c26f730a09e60304fccecb1b1339f496903f07a077dbed40a6a3150b68e3a559de7dcf5e2cddf51e9dcb701d9ef3eda9b27246fbeddd0ea606b4b39051da1fdaa95b24e5dadb9b18e115e985509f759efd25555e7ce9938094ad479071562f319145927113e32df49b86c7b709daf95117545ad47eb671695c0e90dc05a5669efd65f057c8aa192008452f5b29ef37d45f9e0b20b735934e7b639334e74ea2cb430f88fba6e255dbdd9f6627053b8287e063a6f632557f50826626b4a6a7e9269b59380c9803a2c70a15e30f3d1fcca71740e231d9f2ee3c5fe66051a6c9ab53d5b3bdb7b5861bffc2fb2084b96c629fa65e59d9c23543798d6004394e8f9b874560b30a01c67fefccf80680f2e29d89176c59661558ff9f31451bbabeb891ef6874e9c0bdf64944eaac5bb9a7b33d56629544d92e98e2fcf5e29a5fe968859bf1fd97d5c23dabba0b3e9335969c2ef09a4abc65b15a5609c4b16ab393beda11a43ecbcec4e23318e0e0dbaa402845ee2317861cc76643cb9e1933d31d4a16e28a859b4c948b3eaf4c8e08b72ddf06628c471547183432b2e2601caeaca0267f87638568c8f096af6a89955871524589a76749bd8bc895a38ec4f9607628f73e568f85b52d4945194d313779e687684291e6476ecc22c75bafc83d4879161f04fff78d1592f31d7bdb801b5a82abc46db8110a9b052ea4d253dd230ea177e59af26648c35a2a780b084c4b798c5fbc428700a9c53f6afc42ec43096610c99abcedbaaf8e452e81fca6b7f200a695254dd4fdfb26194c78c94146067ba7c47a75034b7f3eda87223cf5f5e4c94a21cf3cb0d68c73c9cb5da7742ac3055abea2f1501d44c65bb45f52d89fdc8ded88556a40abdf339ab232d9cbf5ec449de572245be275b2facc84e1871e26d2c6faf3d964d171892993313563f02e6a813da9bfbdb12ce012b34d23d8cbf56d3e123f1394dcc202526c713b4cb21a16ae9083d6df49e85da0a9cd313a467c034b6f8a1e82b163f47b9ea2a117de1d4d1f5d2665a8924e0008d542dfa0cf236727b0ea7e930b28444b264198df6eb502a93577176d311ca17d6afa8271b9f4383a240fc5fe996c7b18c97afa613ef0e2217576579bcf1d31c8d231f658cf524675ed60b20dcffc7981336ad1d30709a8ca41e8fb0182b5b0bc354c4bc461dabfe80a6410d36d2531742df0bf9d0a2f3348e5a904ad73e09e3a49ab1aaf7abbb5e7f847ba5da9736a2f4b439097f44a8b368f77bddf2a6c9d39d3f71d7627bf8407db4be4b990bb945bddb97ad4116e104b5c86e5d6fca733c6d55d4c73f725c4f6a02e43fa7a16de4a68bd11e5437f892c0833d34260ab96f48585621c285c6a3ee47ea6ee6556afb3e4755b4a7e29894d624214942dfdf88faa4def3f20853b1c25cfa2bccdd956444b98354fbd6dc0174e2061d22863f134e1c5bc2274b72654eebf1e7ea6ee986a131e89477b2a6a6131625655745e99b46de2b83ba8a8e77999c8184de32dd954902dd1ce9607db5c84e250a98ae59f7caeaf3651fe619c448eaf911c0c1dbadf61179018f7707c37cd9556871c308f5bec38f8fbe873bb930528201557392009268c976db8d0cc8f82b52574fd37c898a137ea4889f4e1106bdd4cabda5075d9b2ad38637ca3575872405f3028df962b7e0abf70c8eab8320a9947cc5360710f147cc17746fc8073a9a18e514f406292a9cb95a1b1c16d117172847f11944649376f4158086cea5fb108da996418417c38d5fc696150f084413bb6e615a7179bb0efa1ef5d8b0668c5d58d63d9bdec19817f6101352aabd24661c54e942ab65db61d026e4c8b55c6e8b59e5867048f42375448cfc37e65d9eb4fe517c968ca28670f0a9648e5b8349fff70aa8bf336aea76fde90e20d3f8c3703755bc1df30b5be478ea517010ac1cb961cd228ad9b15c9e3995a1d2fbaa0379393fff3874948d6d6aa27fcca9531096cc3ef229901f23b2ce566cfff56b9f034b2f57176b8fbf3831af15222cf330966decf518b1cbb160e61aa3e3c8b61cc9323cc555a43c41c3da7c99ffc339deb1f36cbbcf1aababa3f1c4c230cd478cb53ff37c4a97fbde63a5389ec4d07ec893f51beebaede2a4044d579178c74c59b95c26b4508641f25b3aa1dd7719c4d1b2702a39d597dece90d63a9051281b69719d0077ab7f854d69354b480be56b40629a425fa3b2f4be318392abaa6ca4a459fa3f3af16c873b7829ec6f95ccbd81bffe40315c1e86466563e2b1b7401edf432bc3e73e2378246ecbf8c0ea2147dbca8d59dcfc314127b6a69f35c4d65e980da14c3c0c117be24433b04747790fc029de9084e8d4ba73b9f0252d0d4342ef921aaa71cfbfd92201ceb8b7e9b4beb9c50ee4ddb00e3679b39d51952fe775de2aa72daed1c6a7dc2a627592aaa645907131a3ffcd4b6300d1539803d5b8f38c61b249df4dcfad14741acc52cff8c573de0d8fc6f9d3220f5c082ed8edd6d73b9c5db3c0f618890c788a8521c7ee4e705eac5fb4aeb23e219e52462f88fb3a6d662f366140e588269ba74aa9595962b68156b2f47ed5a92106c351685fddfc8269aa8c5ca307456ab34703197a4f67b531029081bf0830149b3ebf017f9e10d03c2e5f9ba3d5da94418359ba621ecd7c371a685ec6ffbb901b7ede4b6aa846aef71f779c88610da3f8dc8a68eb2044eaf1f327bd850134f027d130e82ea417c4be7a5b27108b5b2b636255b489918d42e69cc369a53aaa501feadcd88ae1782ef11acb02d0bc691af19defc1a5dc042f3ff8cab78882234615c003488e54aabec9b031dc7362d9d16a74d364ad28c98a59a0a472706cf35fe2ca86cb483a97c9be0e64a73288935a410c1d5105e0066da88953cc71c1c9e9f3922e69ea7d0a18a29b72b558eaf402fb1aec46f2c2d9eb61d2eb057bec902c17606a7a77a1e518f574d3fd8c7ab30cc73f621539dda590788498474a86ab4ab80ad87be0c6a9211158b7e10800fb8b4f3d1c371a436fc3416767343381a36b6a7b14aae37e883e19379214dd4b4c24c566c7ea30d5e8a9483a7e1a4f7c1f3e268b8835d58fc59ee5312e19290d3dad1a1341c6b5eb26d7c2ffabb74596d1c18e45130df5a770d16da984018c1e5e181b18aac7fad2bc42bc4bf7c73312e320c091d2b397047411d18c34d7c90365687ac6084bc19d14d39d5a3419b12ed692c190a1e0a8f0185ba4031173314a8ff42e9a82708006f35cd7a3eb15b5680246f792a24d397bbe3014d6372492199df44b6925d80f2f0e7c49469a4000bceac655941ec2ffe64e3a9daab238d528000546e4b239733d14c325853bccd1ae891014f6184feb101942ed2b458e5fd39223d53e2c9f6a2f3708ce710c6593462299de956ca43354b1d6f378c8a81abba83f13b5256d0345340995cc2c10ea866d53e817cf26c72d585253d596222294e6d28629a502843c44f6a076b2ed215922d9ecda14c064c6bc6305219b4e8c202b1344e800762bc223a8ebd6074a0148ae7997fa63156f4180b46133e77f2940b5dcfc4bfabed4dcee6605f949bad8fdf48d39aaae37efd962d34ef88145a50d5939f417442a723633fef8686db7addb9aaede0b730c52f934e577a2a5bcd11f83f3e4e65347293daafe28df8dc0a7b55fb2b44eb1b32dbaedd82d7b230ea3da8d553a28f8cceac970a8db421d22a5c888e3d0cdb0fa740a07d3d2892c6d546408ca1c32471d30f27dc2cb41f7b75028bc86b603a7171d7447daa34026644f87491eb3cbdb5f670d4013a8de7e4494aae8bf9f7d309d0fe95d2a7e68c9b88b9d9334924a2c08046dbdd0d6ec1ce0a8cddf9edd5ea586c92e5d564e5857baee1ce5711608112f04d489fecb6d56ced0308b968e5992e4f4b4013de07debe5954d6c73e05ee493ea58ebc9eee04d37fb487fdb688580cf4d997ad398331272c715ab0ea07b70642216b124d2fab0c6db77cee87f082439d2e307a1a87c6af9d50cf4b6c689d36ede0e3cf0306f69d9cfb5404485b79aea4c9d4e7b8a5db657c30d1dd979bd997351428d8a326295d43c796c4fe5db09a1bd022415abecb54e6c34bdb77e523d30016867de77bd9ee2d656ab005dbe7f8098ee229199036689d0ed1c08efdcdcb7462cf091203d8027203a4e9eb2d28ddb46b648ddbe5a17546d95b02ea452b7a3da23ad83afb9359a6715ada82aaa9a18181eafabfb1b7b7cb43af1b4dd0afe0fb501362bc75abdea0111b5c40683ac4584b5aa7d779315708a786f9e4bb4c7962929be960a0d8ed56c02a0558aaf84acc142aa3f9e85026fcbe21b05050d88050b928f1b494a2133cce9ef97e8b53bd52adf7ab6466d493ce7078a12d0807e50fbf68bf278afc66b4283868bb0299e42af5ec39d2417ee921a84913d8f7f756ec73a045474d4178e55b89a578327f4894cb315dc83b3a73ae195b2606629067bd7f0011d7d18a3632a07e39cc3f15e8f2a"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0xffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_usbip_server_init(0x5) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x68, {0x2, 0x4e20, @rand_addr=0x64010101}}) fcntl$setpipe(r1, 0x407, 0x0) write$FUSE_INIT(r1, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0x2, 0xffffffffc38c5162, 0x0, 0x40, 0x8, 0x3, 0x0, 0x0, 0x4, 0x8}}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRESOCT=r3, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x400c800}, 0x200480c4) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 3.063400983s ago: executing program 3 (id=5978): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r0, &(0x7f0000003440)={0x2020}, 0x2020) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat(0xffffffffffffff9c, 0x0, 0x320800d, 0x31) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0xffffffffffffff7e) bind$inet6(r1, &(0x7f0000000440)={0xa, 0x4e23, 0x7, @remote, 0x63}, 0x1c) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x140, 0x1f, 0x9, 0x2, 0x10000007, 0x1, 0x7fff, 0x30000002, 0x7, 0xc72d, 0x0, 0x7, 0x3, 0x400008, 0x29, 0x72f0, 0x101, 0x6, 0x6, 0x401, 0x4, 0x484, 0xa2dc, 0x9, 0x1000, 0x80000001, 0xa, 0x0, 0x383, 0x8001, 0x4]}) writev(r5, &(0x7f0000001600)=[{0x0}, {&(0x7f0000000180)="29e3e5864ceda68155960e4b20eb0403a71898733f0dcb64c38849be0185191621d8d87c521201593212da719d600d9262d4ac59dfb5ec2b503053b465b55ae5c7ca58b82c73ad9aa7872d1e4060a6112879a7afe128f10bf20cfd", 0x5b}, {&(0x7f0000000300)="ac3d900278bc4f673648008b3fd9dafb", 0x10}, {&(0x7f0000000340)="79baf7c80af72c6d074d7aa55d18c2b3f92fb55d09041ffa4b66a0ed18f71e54cc0a5bc1461a6d07e6d4f31058721987ab90040f06c98df9afdd7c6614915beee9a0bea8187c6315a4be760ebc06c000bbe9a766f3752ff9ed8b304d3378bfd1a88dfc510d611a8c13259173a7c957bdd73f4bc320391f6d862cfdd58f6c09abefc7302f22bf6795474455a958f56a17d1551e", 0x93}, {0x0}, {&(0x7f00000004c0)="a407d58cecfb1369d434cee2363e2e667262a9fda651de7eb280ec8ff5087e0036af2fef7939cac0a06e6169aa6caa951a4a9b35e608532fafaa74692296b26bf7525aefeadde445128254deda33cb8622aad1f5aa0ab3ba8a81949805c4de7209102f463431fb613efae16477340300ad74baf9e9dcf19667797369fdeb42", 0x7f}, {&(0x7f00000005c0)}], 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r6, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.063110152s ago: executing program 1 (id=5979): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf2502000000080001", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16], 0x14) 1.431301258s ago: executing program 1 (id=5980): mount$fuse(0x0, 0x0, &(0x7f0000000300), 0xb4800, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYRESHEX, @ANYRES8, @ANYRES8=0x0]) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, &(0x7f00000001c0)) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000000)={0xffb, 0x0, 0x3, 0xe, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r2, 0x40026f33, 0x0) ioctl$DVB_DEMUX_DMX_START(r2, 0x6f29) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000280)=0x5, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) sched_setscheduler(0x0, 0x2, 0x0) 1.339658661s ago: executing program 9 (id=5981): connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRES8, @ANYRES8, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff8e2d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f00000001c0)) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\v']) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000001340)) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x18, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@nested={0x4, 0x6}]}, 0x18}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) ioctl$PTP_PEROUT_REQUEST(r7, 0xc4c03d16, 0x0) 1.309724941s ago: executing program 2 (id=5982): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r1 = openat$pfkey(0xffffff9c, &(0x7f0000000080), 0x204000, 0x0) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0x1, 0x9, 0xa, 0x19, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d3, 0x86, 0x7, 0x9d, 0x3, 0x1}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}, @sadb_address={0x3, 0x6, 0x2b, 0x80, 0x0, @in={0x2, 0x4e23, @private=0xa010102}}, @sadb_x_policy={0x8, 0x12, 0x4, 0x4, 0x0, 0x6e6bbc, 0x6a03, {0x6, 0x6c, 0xca, 0x0, 0x0, 0x6, 0x0, @in=@rand_addr=0x64010102, @in=@rand_addr=0x64010100}}, @sadb_address={0x5, 0x17, 0x2b, 0x20, 0x0, @in6={0xa, 0x4e20, 0xe, @loopback, 0x12c}}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d2}, @sadb_x_nat_t_type={0x1, 0x14, 0xad}]}, 0xc8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x5, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x1, 0x323b, 0x55}, {@remote, 0x4e27, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@ipv4_deladdr={0x17, 0x15, 0x1, 0x70bd2c, 0x25dfdbfc, {0x2, 0x38, 0x0, 0xff}, [@IFA_LABEL={0x14, 0x3, 'gre0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) getsockopt$SO_COOKIE(r4, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000380)=0x8) syz_usb_connect$uac3(0x3, 0x129, &(0x7f0000000380)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1055, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x117, 0x3, 0x1, 0x4, 0x10, 0x80, {0x8, 0xb, 0x0, 0x0, 0x1, 0x21, 0x30, 0xe}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x2f, 0x9}, [@mixer_unit={0xb, 0x24, 0x5, 0x3, 0xff, "b1ba443c2eee"}, @feature_unit={0x11, 0x24, 0x7, 0x1, 0x4, [0xe, 0x10, 0xb]}, @extension_unit={0x9, 0x24, 0xa, 0x6, 0x6, [0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x5, 0x3, 0x3, 0x0, 0x0, 0x5, 0x2, 0x67}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x9, 0x0, 0x7, 0x6b}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xb1, 0x5, 0x0, 0xfe, 0x1}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x4, 0x4, 0x9, 0x1, "", '%'}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x10, 0x4, 0x2, 0x80, "d10433cc03d5"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x40}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x4, 0x2, 0x9, {0xa, 0x25, 0x25, 0xa153ba1, 0x80, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x9, 0x9, 0x40, 0x5, 0xfe, 0x9, 0x3, 0xb}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xb032, 0xf, 0x4, "57b152d1c6d57a"}, @as_header={0x17, 0x24, 0x1, 0x0, 0x5a, 0x9, 0x1001, 0xf, 0x8, 0xff5a, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x1, 0x70, 0x3, {0xa, 0x25, 0x25, 0x1, 0x80, 0xfffc}}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x250, 0x9, 0xb, 0x5, 0xff}, 0xa5, &(0x7f0000000500)={0x5, 0xf, 0xa5, 0x2, [@generic={0x95, 0x10, 0xb, "874857d476201e9d7b83a35e57b34df0675b19db4228b3e1d5d40263076087dc80af3eb2f668579bf06965cdd1cd79d738b638ece7f87010a010162e470839ba038cf28c308cb15df634433b3078b9c9d02c259b26c1ae7167b18b4e846037fa5be37dc74bbbc98be820bfef9ab1144e1c17225cca50db0ce247cab27995e70fe617790c2f56a3f38e46d85c3644bede11d0"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x30, 0x20, 0x0, 0x9, 0xbb}]}, 0x4, [{0xc5, &(0x7f00000005c0)=@string={0xc5, 0x3, "9864bae7be795f5261e727d66c6a4b47f7fc8d3738b48a4816b84cefcf07802c33284867c08d93800e1e9980ca3402bbd0d81471b49edaff94cd6968ec7e126d56ac5ce9447c8d332a56151253c0a936a80a6829f00844bddb99a8638014f613e1de5b814f3d38c0f01cba2e7b399835ab8bba8b6962e5b4d70e8ba87bbe0505374b5134acccc130b391041335392d9ba9af6cc086cbb66428ae383729b91ca453cdb58e544fd7c00f01b6b86f436ce457515a2fdd8faddd83d281740489ea3ea34747"}}, {0xd1, &(0x7f00000006c0)=@string={0xd1, 0x3, "7b6179c469fef6debe9ffe6a3ef7bd58def49e9322b288d2407b680e8e45a690d1a7e1ed3b13fa2d2b180cd850750469d9c0be5e633a3e1a277a2537ba062052252986178feb4ff3d8307de4680bcbad2d3c0c2498741780abeb475beb2344e1f9698a13c4496f4da4ee9927e2760ab8c820b9752205e55d3a3423f8ab0da7faf799b5b749d8b057b2d09ed8c6fe0b9fad4cefe2766b9f75c7f1972a0e231b28d5c462cb5c457d6c90f4c61a225e3927eeeb7b65df36d58737a44724bd7bf98f279cd681d97bac30e0642661b0b36c"}}, {0x75, &(0x7f00000007c0)=@string={0x75, 0x3, "7764f3c93093f03e47ce228ada48ccd6b2ad5c7afb061ba6f5af69b20238b5978e4445cfecb8d837af8dcd60d4ec291c656eefb70f70c01e16f451684b74d18a6579152426c6d8b96dcae94a896ba5fb8a56f5c402b83431debb6a41b792565255ec9e48b18c50063334f2ccb5948a4a4684f9"}}, {0x41, &(0x7f0000000840)=ANY=[@ANYBLOB="410354d2287c1d760493f9d6b5026c6e188dcb8085d8dd83dfffb2df4c74b6efaa266dbb28616a8c4b7d1c5849982a205fbeb66619310ad273fafc31ad4c"]}]}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg(r8, &(0x7f0000002f00)=[{{&(0x7f0000000280)=@l2={0x1f, 0x81, @any, 0xf818, 0x2}, 0x80, &(0x7f0000002440)=[{&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000002340)="eede2dda3a55bdb73309a84440f0", 0xe}, {&(0x7f0000002380)="734ad445425ef5ca0d95c88f63deddca91bee52afbaae201eb030425af0a75dc4e78a6acc278320f52847ba676304332fd5eb35271d482d2fe449c1e9e73c831282d34615ce8c2a76a555b271f6b1d15d1d1ba887afd8fc1d5db3389b6c020a61ad5f3bccc184d85216ee11b51ca91dd520cb69d7f7088123344d49b119f5e45745072dcbe609790a7d5", 0x8a}], 0x3, &(0x7f0000002480)=[{0x70, 0x113, 0x2, "26dbfdd48a1f61981a0ac736f8a1c32dd8e0a87b001b1ba230456ff25950bf200a76ed0d2c874366dca53ea3dfa7637955395a10c2aa70d719e06f9c1a9f976554d193ddcfbc847c494e654ed15a0c747bf1d5301119ed40f6a51af2ca6d2c1c3b97840e"}, {0x14, 0x10d, 0x3, "8eecfbb3cbd769"}, {0x8c, 0x3a, 0x7, "612ffc261854cebf40f900f03774f36c66e68aea45aad2e7274302510011466d8038c9a304f307964d4953949dba4ac9f9a12b593effd425371d2fffa4fe1534df73881cd71fc0fba3987f26494b21b29fb9cb3f5aa951b79a55fec411f4636044e3c635921e3599c309989fb89df9a06b48d5075b87970b96644373f9"}, {0xf0, 0x10b, 0xfcf8, "ba85a4d1af11b6f1b0386cb67d804c3907c39ddce3f243e88f8beb1c5b3895735e0b810af660b39fcf1e8cc68d75f26d2e43a7dda53788918a3e87a373125c2877022bee293dfc82d06a289f3e5f4eaf9805706e9f6cdc385b6aa166448a3367ed0823d8385e41aead0d3f513a7b1e003479d8013ab21b86cc18a327a186faab0ab895c182598a9a66e74c0c71240aa05c76ffdb972eed5deabc0e5a49648d34ee1cfdd81b0083dca7dcf09e16852c772dcff37802fd034970992e7328afaa670344e65c0afeed0850ab3afe9ec53556655044f503b48bbdd0650ab4c694e9cda471d36c"}, {0x74, 0x116, 0x0, "4bf229717c736a8d7225f9fa5f3cbe9278d55532bc97c2a9be2e458abd3fd5bd9e42ffa16170e6922439ef2dd7239a222dc38fb5296914b1caaadcb6ad388aa229fb8af2920993f8736b302b25d3e943e00b01077536df5e6a0ff33a15ebdb24b88b8873525018fa"}, {0xb4, 0x112, 0xfffffffa, "349c774d84b45b85bc0974cfa35a4758e3f843d52ebbd99483b816215da414213c7a90ec76968ec213febb66694825582c27d72b1d7835a4d088bb736fee2ed00c4f1220c28dfbd5fc9b400aa726b98a29f5579707ea2dd5b1bd93813303e4d68164fdb1ce20d9348c87744dd6bf484864be39fb1321a57af93f97c5258ed944b15cea3e75037a37f1dc0a963acdb6b741edcf3a3a6c36e49e9dc31f5605053df36a1d9ec3cb"}, {0x20, 0x10c, 0x9, "2f20df80deef412e55befb06ea63b1401b3c"}, {0x34, 0x116, 0x0, "f0fa0d2f4a44e9e07579b7d12a5ac6f52b5ddadf9a53fa023bc289175c3c2a05f25fc999e68588"}], 0x37c}}, {{&(0x7f0000002800)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80, &(0x7f00000028c0)=[{&(0x7f0000002880)="859171d8826d8927df60", 0xa}], 0x1, &(0x7f0000002900)=[{0x5c, 0x6, 0x1, "43ace2a44c48a022f9ab844fa14bf2c774032176b41e3235255be3de6b7414816a2359fb87a0d5e22fd76a0c755f9d70792b4b7b2c2e611a86cea8f8b04a91c387360544152a7f0f2ddc94b5addce6"}, {0x9c, 0x117, 0x6bf4, "550acbbe48d461fb6db1ec1d4937229c8eb4dbdf4947283211d580566a3e8457ca8ed34170abe1175dd5fa23c93a4d25f87d40f16d660e5dfae522cedce46f021ed3f589ff38708bbbdc8d0663ac234c4bdf6765ccd90d8bf783523bb0f9c7d0078ebe60917572264c3859413b201c1d8438719ec76751c04cf56177811c8f31925cc18a22735814cb136c5b14bf"}, {0xfc, 0x1, 0xf4, "e92aa4a8bf35683897f23b912a87eb55261a7f41122939cee359d7a456107d74c5f5e2ee645ba35267fd53628b85a858472001809b69f3e767d2831eb057112b0d3b99ec4f9d1b9439e7c6afffd7b2ea6b8f5571023f092d8a075c65c01eaaae37264e3a38cace1961a020f51a0ca8d7ff9179eb687de68131a2e9654c969f3e3aa790b926516d9a04edff0cd424080e70c06011653de2f3842ad978960fed0e938ea5fd3e32fc7ae13ea33b86e792866d971bb2a3b84b82912f84125a1606b51c25cc893afc90fc3c51a441dc88c2e85f5cd2ebc77d88497b8d9acce2a90aebd51c619125215b78a38e3c8b33c3ba6b"}, {0x100, 0x117, 0x7, "aa02f436040c42c11a0fc5573c5b3fdae49088358ec8b8154d04dce05c5832a42285d5146761cfddebaa9cd91e642cbd3872f75112b8364f0c3f2b8e6095b231973ae71434c49749f0972af8c62a6b70134c517369183593cd0ac5d20aa5bb1948a3bf9f4f93df0a778320df90587136ea01b209bfcca7e3aa9edb84bc958d65c297aa383edefd5b755757dc9168ec55fce5eded6c826d11129d2e86eedd1430397b39028522943e6859c1b0cfa67bbb301e8dc18efc3b6f235baa1a180cae61c221224ae86999efb77341f8c21740da04e60ec7c7f3d3665def25c8b16bdc8599cd73ee5d433fc99b5743920c5c8aeb39"}, {0xac, 0xff, 0x1ff, "9b6a11f44be92da9dc3904c2534171d812a76e2a1a8eb0139113a56e3d5c1137a4c10bb3f21b80b8e004690f14d4e46e1ab9c41995ac224cc1a30afe07c720118f03f325893244477330b86c9b71beeb221fd5a5f04fb327a120ab085d6fd4f785d2d60c7a4f73645243da3b8c402d0ba198f7ab732aabf476ae5f4b89ac59ae73b148db40112f7d85c189d20ef97ed72393e1c74d1c529086ffffdb11c04a"}, {0x88, 0x6, 0x2, "bd07fd613a491a28c4dae03852ebedf1b1eab06b98cadd59add720f13c386fc62289a95c25793479adcf57dc2ecb22e7fb12db20f1287af4b92a40517dad05019b641f84419363b559dc926df17bfcce04a0db0094258691876464d08ad04d1194b59d95e1b39981d90d4d7b327cb4167355b7660b8df46a422c"}, {0xe4, 0x100, 0x3523, "54d6915d2de9a85390fb3eb70e22de049b23292299b41e3f7f584decb06e5214f7bfa08edb5a14c9d8992653bf69633abbceb5ac2f3660b76695afdd3c1d6891de186c9d863d46ba7d8187920cc3549909e762cbbeda31eabad39223e8b3d5cdc9fd9d5a138a552b1baf61511727d0ef96060a87752f694ebbc420a5184e0d8a12c23444efd6410d7e9fd7a27fccfb286ed04a28234e9097d8d2fafc0416a9cc2885e0e10fc1df706601146da92042706932fd8291664ab50f2e3ee92f7313ad014d0a307077e69357cb70779e910d6df99db064cb01"}, {0x54, 0x109, 0xf, "b0f9c048e29b2f6fc61be54d052bc9f95fcea4344546128f4cf888389614d05570ea58eaf98f33c17ed822a8e1d82d97699eb9b8d5e1cf743abdbc1ec235b35342c8be03c5138a"}, {0x3c, 0x10c, 0x5, "79a082c83ee466493ae5d20fd17717dfed50f04114aa821567bd408677a5b3fcdbb73f015f5029a3d453afce52a1d108"}, {0x50, 0x116, 0x9a7, "693abc887c325ffa1b6b6289f337d3d84d06da010d480576c90b3884f85c28491752f03fe687cdec80a84acc182d2c47b11a2af89cd5976bd8ea027781c6a07cdb"}], 0x5ec}}], 0x2, 0x20008001) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xf}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r12 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) ioctl$I2C_RDWR(r12, 0x707, &(0x7f0000000340)={&(0x7f00000001c0)=[{0xf, 0x0, 0x0, 0x0}], 0x1}) 308.927833ms ago: executing program 7 (id=5983): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x403, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x4, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10080, 0x0, 0x91, 0x4, 0x4, 0xd, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x8, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x44007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0x81, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x10438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x2, 0x5, 0x5, 0x491, 0x9, 0x1200026, 0x8, 0x400, 0x2, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xf, 0x5, 0x8, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0xffffffff, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x60a0, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0xa, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0xff, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x5, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x80006, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x663f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0xd]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004851}, 0x20000014) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x8482) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={0x0, &(0x7f0000000300), 0x0, 0x0}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000003c0)="ae", 0x1}, {&(0x7f0000000140)="530000008404f5884ce9fa919ac8f285da1f1425efe3e38a6265d4c70c5e04adc22f", 0x22}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 144.510317ms ago: executing program 3 (id=5984): semtimedop(0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) r4 = dup(r3) fallocate(r4, 0x10, 0x0, 0x72000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xd}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 0s ago: executing program 1 (id=5985): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0xfffffeaf, 0x41, 0x107, 0xffffff00, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x32, 0x0, 0x0, @u32}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x13, 0x0, 0x0, @uid}]}, @nested={0x4, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0xe900, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x104085280, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bd24, 0x25dfdc02, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4018}, 0x40000) r4 = dup(0xffffffffffffffff) write$UHID_INPUT(r4, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) kcmp(0x0, r1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) kernel console output (not intermixed with test programs): BIOS Google 05/09/2026 [ 1333.099663][ T47] Workqueue: hci1 hci_rx_work [ 1333.104352][ T47] Call Trace: [ 1333.107628][ T47] [ 1333.110579][ T47] dump_stack_lvl+0x188/0x24e [ 1333.115279][ T47] ? show_regs_print_info+0x12/0x12 [ 1333.120488][ T47] ? load_image+0x410/0x410 [ 1333.125009][ T47] sysfs_create_dir_ns+0x26a/0x290 [ 1333.130127][ T47] ? __lock_acquire+0x7c40/0x7c40 [ 1333.135153][ T47] ? sysfs_warn_dup+0xa0/0xa0 [ 1333.139850][ T47] ? do_raw_spin_unlock+0x11d/0x230 [ 1333.145075][ T47] kobject_add_internal+0x617/0xca0 [ 1333.150304][ T47] kobject_add+0x160/0x230 [ 1333.154728][ T47] ? kobject_init+0x1c0/0x1c0 [ 1333.159414][ T47] ? __raw_spin_lock_init+0x41/0x100 [ 1333.164693][ T47] ? klist_children_get+0x50/0x50 [ 1333.169716][ T47] ? get_device_parent+0x121/0x3e0 [ 1333.174828][ T47] device_add+0x470/0x1050 [ 1333.179244][ T47] hci_conn_add_sysfs+0xd1/0x1e0 [ 1333.184184][ T47] le_conn_complete_evt+0xf69/0x1560 [ 1333.189473][ T47] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1333.195723][ T47] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1333.201356][ T47] ? mutex_unlock+0x10/0x10 [ 1333.205854][ T47] ? skb_pull_data+0xec/0x1f0 [ 1333.210543][ T47] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1333.216536][ T47] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1333.222963][ T47] ? hci_remote_host_features_evt+0x230/0x230 [ 1333.229063][ T47] hci_event_packet+0x7b3/0x1290 [ 1333.234043][ T47] ? __lock_acquire+0x7c40/0x7c40 [ 1333.239100][ T47] ? bis_list+0x280/0x280 [ 1333.243444][ T47] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1333.249346][ T47] ? kcov_remote_start+0x4b0/0x7e0 [ 1333.254466][ T47] ? mt_dump_node+0x1330/0x1900 [ 1333.259326][ T47] ? hci_send_to_monitor+0x9c/0x4a0 [ 1333.264531][ T47] hci_rx_work+0x3eb/0xd40 [ 1333.268948][ T47] ? _raw_spin_unlock+0x40/0x40 [ 1333.273801][ T47] ? process_one_work+0x7b4/0x1160 [ 1333.278919][ T47] process_one_work+0x8ab/0x1160 [ 1333.283871][ T47] ? worker_detach_from_pool+0x240/0x240 [ 1333.289511][ T47] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1333.294536][ T47] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1333.300085][ T47] ? wq_worker_running+0x97/0x190 [ 1333.305121][ T47] worker_thread+0xaf5/0x12a0 [ 1333.309819][ T47] kthread+0x29d/0x330 [ 1333.313884][ T47] ? worker_clr_flags+0x1a0/0x1a0 [ 1333.318992][ T47] ? kthread_blkcg+0xd0/0xd0 [ 1333.323583][ T47] ret_from_fork+0x1f/0x30 [ 1333.328015][ T47] [ 1333.423155][T22026] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1333.432420][T22026] cramfs: wrong magic [ 1333.678969][ T47] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1333.694168][ T47] Bluetooth: hci1: failed to register connection device [ 1333.758316][T21995] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1333.817426][T11941] usb 10-1: USB disconnect, device number 15 [ 1333.850911][T22026] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4835'. [ 1333.928430][T18723] EXT4-fs (loop3): unmounting filesystem. [ 1334.914536][T22040] MPTCP: kernel_bind error, err=-98 [ 1335.124652][T22027] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 1335.139630][T22027] CPU: 1 PID: 22027 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1335.147278][T22027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1335.157357][T22027] Workqueue: hci3 hci_rx_work [ 1335.162056][T22027] Call Trace: [ 1335.165360][T22027] [ 1335.168299][T22027] dump_stack_lvl+0x188/0x24e [ 1335.173000][T22027] ? show_regs_print_info+0x12/0x12 [ 1335.178213][T22027] ? load_image+0x410/0x410 [ 1335.182742][T22027] sysfs_create_dir_ns+0x26a/0x290 [ 1335.187876][T22027] ? __lock_acquire+0x7c40/0x7c40 [ 1335.192917][T22027] ? sysfs_warn_dup+0xa0/0xa0 [ 1335.197615][T22027] ? do_raw_spin_unlock+0x11d/0x230 [ 1335.202835][T22027] kobject_add_internal+0x617/0xca0 [ 1335.208053][T22027] kobject_add+0x160/0x230 [ 1335.212490][T22027] ? kobject_init+0x1c0/0x1c0 [ 1335.217183][T22027] ? __raw_spin_lock_init+0x41/0x100 [ 1335.222478][T22027] ? klist_children_get+0x50/0x50 [ 1335.227521][T22027] ? get_device_parent+0x121/0x3e0 [ 1335.232651][T22027] device_add+0x470/0x1050 [ 1335.237096][T22027] hci_conn_add_sysfs+0xd1/0x1e0 [ 1335.242056][T22027] le_conn_complete_evt+0xf69/0x1560 [ 1335.247370][T22027] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1335.253632][T22027] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1335.259291][T22027] ? mutex_unlock+0x10/0x10 [ 1335.263899][T22027] ? skb_pull_data+0xec/0x1f0 [ 1335.268641][T22027] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1335.274552][T22027] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1335.280987][T22027] ? hci_remote_host_features_evt+0x230/0x230 [ 1335.287069][T22027] hci_event_packet+0x7b3/0x1290 [ 1335.292057][T22027] ? __lock_acquire+0x7c40/0x7c40 [ 1335.297115][T22027] ? bis_list+0x280/0x280 [ 1335.301464][T22027] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1335.307378][T22027] ? kcov_remote_start+0x4b0/0x7e0 [ 1335.312508][T22027] ? mt_dump_node+0x1330/0x1900 [ 1335.317819][T22027] ? hci_send_to_monitor+0x9c/0x4a0 [ 1335.323038][T22027] hci_rx_work+0x3eb/0xd40 [ 1335.327474][T22027] ? _raw_spin_unlock+0x40/0x40 [ 1335.332342][T22027] ? process_one_work+0x7b4/0x1160 [ 1335.337470][T22027] process_one_work+0x8ab/0x1160 [ 1335.342443][T22027] ? worker_detach_from_pool+0x240/0x240 [ 1335.348102][T22027] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1335.353143][T22027] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1335.358808][T22027] ? wq_worker_running+0x97/0x190 [ 1335.363875][T22027] worker_thread+0xaf5/0x12a0 [ 1335.368603][T22027] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1335.374543][T22027] kthread+0x29d/0x330 [ 1335.378638][T22027] ? worker_clr_flags+0x1a0/0x1a0 [ 1335.383685][T22027] ? kthread_blkcg+0xd0/0xd0 [ 1335.388294][T22027] ret_from_fork+0x1f/0x30 [ 1335.392749][T22027] [ 1335.418808][T22027] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1335.442980][T22027] Bluetooth: hci3: failed to register connection device [ 1335.772492][T22027] Bluetooth: hci1: command 0x2016 tx timeout [ 1337.452602][T22027] Bluetooth: hci3: command 0x2016 tx timeout [ 1337.545390][T22050] loop3: detected capacity change from 0 to 16 [ 1337.620528][T22050] erofs: (device loop3): mounted with root inode @ nid 36. [ 1337.662671][T22050] erofs: (device loop3): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 1337.937897][T22050] syz.3.4838: attempt to access beyond end of device [ 1337.937897][T22050] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 1338.080249][T22050] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 1338.208557][T22050] syz.3.4838: attempt to access beyond end of device [ 1338.208557][T22050] loop3: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 1339.014880][T22050] syz.3.4838: attempt to access beyond end of device [ 1339.014880][T22050] loop3: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 1339.029429][ T27] audit: type=1800 audit(1783830086.784:1892): pid=22050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4838" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 1339.326304][T22086] kAFS: unable to lookup cell '/,c¾ûL' [ 1339.349628][T22086] binder: 22081:22086 ioctl 4018620d 0 returned -22 [ 1340.291147][T22089] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1340.299880][T22089] cramfs: wrong magic [ 1340.314675][T22089] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4848'. [ 1341.965571][T11941] Process accounting resumed [ 1343.236891][T22111] MPTCP: kernel_bind error, err=-98 [ 1343.260399][T22027] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1343.275825][T22027] CPU: 1 PID: 22027 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1343.283502][T22027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1343.293673][T22027] Workqueue: hci1 hci_rx_work [ 1343.298385][T22027] Call Trace: [ 1343.301680][T22027] [ 1343.304627][T22027] dump_stack_lvl+0x188/0x24e [ 1343.309341][T22027] ? show_regs_print_info+0x12/0x12 [ 1343.314664][T22027] ? load_image+0x410/0x410 [ 1343.319225][T22027] sysfs_create_dir_ns+0x26a/0x290 [ 1343.324364][T22027] ? __lock_acquire+0x7c40/0x7c40 [ 1343.329410][T22027] ? sysfs_warn_dup+0xa0/0xa0 [ 1343.334233][T22027] ? do_raw_spin_unlock+0x11d/0x230 [ 1343.339459][T22027] kobject_add_internal+0x617/0xca0 [ 1343.344692][T22027] kobject_add+0x160/0x230 [ 1343.349125][T22027] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1343.354777][T22027] ? kobject_init+0x1c0/0x1c0 [ 1343.359468][T22027] ? __raw_spin_lock_init+0x41/0x100 [ 1343.364762][T22027] ? klist_children_get+0x50/0x50 [ 1343.369806][T22027] ? get_device_parent+0x121/0x3e0 [ 1343.374931][T22027] device_add+0x470/0x1050 [ 1343.379366][T22027] hci_conn_add_sysfs+0xd1/0x1e0 [ 1343.384585][T22027] le_conn_complete_evt+0xf69/0x1560 [ 1343.389913][T22027] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1343.396201][T22027] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1343.401889][T22027] ? mutex_unlock+0x10/0x10 [ 1343.406415][T22027] ? skb_pull_data+0xec/0x1f0 [ 1343.411116][T22027] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1343.417034][T22027] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1343.423471][T22027] ? hci_remote_host_features_evt+0x230/0x230 [ 1343.429556][T22027] hci_event_packet+0x7b3/0x1290 [ 1343.434522][T22027] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1343.440229][T22027] ? bis_list+0x280/0x280 [ 1343.444601][T22027] ? kcov_remote_start+0x1b1/0x7e0 [ 1343.449736][T22027] ? hci_send_to_monitor+0x9c/0x4a0 [ 1343.454953][T22027] hci_rx_work+0x3eb/0xd40 [ 1343.459400][T22027] ? process_one_work+0x7b4/0x1160 [ 1343.464529][T22027] process_one_work+0x8ab/0x1160 [ 1343.469496][T22027] ? worker_detach_from_pool+0x240/0x240 [ 1343.475148][T22027] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1343.480182][T22027] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1343.485739][T22027] ? wq_worker_running+0x97/0x190 [ 1343.490781][T22027] worker_thread+0xaf5/0x12a0 [ 1343.495485][T22027] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1343.501399][T22027] kthread+0x29d/0x330 [ 1343.505475][T22027] ? worker_clr_flags+0x1a0/0x1a0 [ 1343.510505][T22027] ? kthread_blkcg+0xd0/0xd0 [ 1343.515117][T22027] ret_from_fork+0x1f/0x30 [ 1343.519565][T22027] [ 1343.691321][T22027] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1343.705661][T22027] Bluetooth: hci1: failed to register connection device [ 1344.438991][T22114] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1344.447984][T22114] cramfs: wrong magic [ 1344.461698][T22114] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4856'. [ 1345.772583][T22027] Bluetooth: hci1: command 0x2016 tx timeout [ 1349.392882][T11939] Process accounting resumed [ 1352.164254][T22168] binder: 22166:22168 ioctl 4018620d 0 returned -22 [ 1352.172459][T22168] binder: 22166:22168 ioctl c0506107 200000000180 returned -22 [ 1354.140144][T22195] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1354.149311][T22195] cramfs: wrong magic [ 1354.162953][T22195] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4872'. [ 1355.825903][T22219] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1355.835123][T22219] cramfs: wrong magic [ 1355.849183][T22219] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4878'. [ 1356.830163][T22223] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4879'. [ 1357.900137][T22230] loop3: detected capacity change from 0 to 512 [ 1358.103671][T22230] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1358.112890][T22230] ext4 filesystem being mounted at /133/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1358.442510][T11941] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1358.521527][T16661] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1358.652529][T11941] usb 3-1: Using ep0 maxpacket: 8 [ 1358.664953][T11941] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1358.753675][T11941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.092570][T11941] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1360.145573][T11941] pvrusb2: ********** [ 1360.187315][T11941] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1360.303845][T11941] pvrusb2: Important functionality might not be entirely working. [ 1360.345200][T22245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.381794][T11941] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1360.423913][T22245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.465695][T11941] pvrusb2: ********** [ 1360.505142][ T2311] pvrusb2: Invalid write control endpoint [ 1360.810200][T18723] EXT4-fs (loop3): unmounting filesystem. [ 1360.900533][ T2311] pvrusb2: Invalid write control endpoint [ 1360.906959][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1360.972407][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1361.064741][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1361.197204][ T2311] pvrusb2: Device being rendered inoperable [ 1361.534424][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.540797][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.611303][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1362.163979][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1362.178543][T16534] usb 3-1: USB disconnect, device number 64 [ 1362.434649][ T2311] pvrusb2: Attached sub-driver cx25840 [ 1362.440164][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1362.450552][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1362.482602][T11941] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1362.692474][T11941] usb 4-1: Using ep0 maxpacket: 8 [ 1362.699378][T11941] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1363.486697][T11941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.506913][T11941] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1363.515092][T11941] pvrusb2: ********** [ 1363.520411][T11941] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1363.530923][T11941] pvrusb2: Important functionality might not be entirely working. [ 1363.539003][T11941] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1363.554458][T11941] pvrusb2: ********** [ 1363.913063][T16661] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1365.376078][T22265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1365.423936][T22265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1365.527655][ T2311] pvrusb2: Invalid write control endpoint [ 1365.586987][T16661] usb 3-1: Using ep0 maxpacket: 32 [ 1365.606806][T16661] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1365.657956][T16661] usb 3-1: can't read configurations, error -61 [ 1365.739989][T22286] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1365.749153][T22286] cramfs: wrong magic [ 1365.763668][T22286] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4893'. [ 1365.842522][T16661] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1366.052588][T16661] usb 3-1: Using ep0 maxpacket: 32 [ 1366.061377][T16661] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1366.191406][T16661] usb 3-1: can't read configurations, error -61 [ 1366.305969][T16661] usb usb3-port1: attempt power cycle [ 1367.212401][T16661] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1367.350846][ T2311] pvrusb2: Invalid write control endpoint [ 1367.362805][T16661] usb 3-1: device descriptor read/8, error -71 [ 1367.369372][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1367.491564][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1367.516746][T12104] usb 4-1: USB disconnect, device number 41 [ 1367.584515][T22302] loop1: detected capacity change from 0 to 512 [ 1367.626353][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1367.724778][T22302] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1367.734415][T22302] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1367.865054][ T2311] pvrusb2: Device being rendered inoperable [ 1367.966029][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1368.062523][T17060] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1368.111682][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1368.256060][ T2311] pvrusb2: Attached sub-driver cx25840 [ 1368.282494][T17060] usb 2-1: Using ep0 maxpacket: 16 [ 1368.289777][T17060] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1368.323772][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1368.382234][T17060] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1368.842745][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1369.612671][T17060] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1369.636485][T17060] usb 2-1: New USB device found, idVendor=0723, idProduct=2080, bcdDevice= 0.40 [ 1369.650811][T17060] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1369.661384][T17060] usb 2-1: Product: syz [ 1369.666574][T17060] usb 2-1: Manufacturer: syz [ 1369.671435][T17060] usb 2-1: SerialNumber: syz [ 1371.494914][T17060] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1371.510184][T19434] EXT4-fs (loop1): unmounting filesystem. [ 1372.469620][T17060] usb 2-1: USB disconnect, device number 40 [ 1373.137889][T22326] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1373.146451][T22326] cramfs: wrong magic [ 1373.161882][T22326] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4901'. [ 1373.203386][T14016] udevd[14016]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1374.138080][T22333] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1374.147282][T22333] cramfs: wrong magic [ 1374.160190][T22333] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4904'. [ 1378.068422][T22365] kAFS: unable to lookup cell '/,c¾ûL' [ 1378.090407][T22365] binder: 22356:22365 ioctl 4018620d 0 returned -22 [ 1378.676947][T22360] kAFS: unable to lookup cell '/,c¾ûL' [ 1378.876100][T22360] binder: 22359:22360 ioctl 4018620d 0 returned -22 [ 1384.236511][T22027] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 1384.245905][T22027] CPU: 1 PID: 22027 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1384.253528][T22027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1384.263591][T22027] Workqueue: hci4 hci_rx_work [ 1384.268296][T22027] Call Trace: [ 1384.271587][T22027] [ 1384.274541][T22027] dump_stack_lvl+0x188/0x24e [ 1384.279338][T22027] ? show_regs_print_info+0x12/0x12 [ 1384.285183][T22027] ? load_image+0x410/0x410 [ 1384.289739][T22027] sysfs_create_dir_ns+0x26a/0x290 [ 1384.294876][T22027] ? __lock_acquire+0x7c40/0x7c40 [ 1384.299904][T22027] ? sysfs_warn_dup+0xa0/0xa0 [ 1384.304688][T22027] ? do_raw_spin_unlock+0x11d/0x230 [ 1384.309911][T22027] kobject_add_internal+0x617/0xca0 [ 1384.315113][T22027] kobject_add+0x160/0x230 [ 1384.319538][T22027] ? kobject_init+0x1c0/0x1c0 [ 1384.324257][T22027] ? __raw_spin_lock_init+0x41/0x100 [ 1384.329542][T22027] ? klist_children_get+0x50/0x50 [ 1384.334585][T22027] ? get_device_parent+0x121/0x3e0 [ 1384.339700][T22027] device_add+0x470/0x1050 [ 1384.344120][T22027] hci_conn_add_sysfs+0xd1/0x1e0 [ 1384.349059][T22027] le_conn_complete_evt+0xf69/0x1560 [ 1384.354344][T22027] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1384.360583][T22027] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1384.366215][T22027] ? mutex_unlock+0x10/0x10 [ 1384.370714][T22027] ? skb_pull_data+0xec/0x1f0 [ 1384.375389][T22027] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1384.381289][T22027] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1384.387697][T22027] ? hci_remote_host_features_evt+0x230/0x230 [ 1384.393757][T22027] hci_event_packet+0x7b3/0x1290 [ 1384.398698][T22027] ? __lock_acquire+0x7c40/0x7c40 [ 1384.403716][T22027] ? bis_list+0x280/0x280 [ 1384.408037][T22027] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1384.413932][T22027] ? kcov_remote_start+0x4b0/0x7e0 [ 1384.419039][T22027] ? mt_dump_node+0x1330/0x1900 [ 1384.423886][T22027] ? hci_send_to_monitor+0x9c/0x4a0 [ 1384.429081][T22027] hci_rx_work+0x3eb/0xd40 [ 1384.433492][T22027] ? _raw_spin_unlock+0x40/0x40 [ 1384.438342][T22027] ? process_one_work+0x7b4/0x1160 [ 1384.443448][T22027] process_one_work+0x8ab/0x1160 [ 1384.448395][T22027] ? worker_detach_from_pool+0x240/0x240 [ 1384.454031][T22027] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1384.459046][T22027] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1384.464585][T22027] ? wq_worker_running+0x97/0x190 [ 1384.469609][T22027] worker_thread+0xaf5/0x12a0 [ 1384.474293][T22027] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1384.480185][T22027] kthread+0x29d/0x330 [ 1384.484329][T22027] ? worker_clr_flags+0x1a0/0x1a0 [ 1384.489348][T22027] ? kthread_blkcg+0xd0/0xd0 [ 1384.493930][T22027] ret_from_fork+0x1f/0x30 [ 1384.498355][T22027] [ 1384.501414][ C1] vkms_vblank_simulate: vblank timer overrun [ 1384.511170][T22027] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1384.524269][T22027] Bluetooth: hci4: failed to register connection device [ 1385.063521][T22421] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4922'. [ 1386.572415][T22027] Bluetooth: hci4: command 0x2016 tx timeout [ 1390.151848][T22455] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1390.160966][T22455] cramfs: wrong magic [ 1390.174912][T22455] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4929'. [ 1392.218854][T22473] fuse: Bad value for 'fd' [ 1392.529562][T22480] kAFS: unable to lookup cell '/,c¾ûL' [ 1392.539974][T22480] binder: 22479:22480 ioctl 4018620d 0 returned -22 [ 1395.432231][T22505] loop7: detected capacity change from 0 to 64 [ 1395.664530][T22505] MINIX-fs: bad superblock or unable to read bitmaps [ 1398.069242][T22529] loop3: detected capacity change from 0 to 64 [ 1399.057930][T22529] MINIX-fs: bad superblock or unable to read bitmaps [ 1399.107622][T14016] blk_print_req_error: 45 callbacks suppressed [ 1399.107638][T14016] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1401.251233][T22557] netlink: 'syz.3.4954': attribute type 1 has an invalid length. [ 1402.443543][T22027] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1402.453212][T22027] CPU: 0 PID: 22027 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1402.460859][T22027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1402.470934][T22027] Workqueue: hci2 hci_rx_work [ 1402.475634][T22027] Call Trace: [ 1402.478923][T22027] [ 1402.481890][T22027] dump_stack_lvl+0x188/0x24e [ 1402.486595][T22027] ? show_regs_print_info+0x12/0x12 [ 1402.491809][T22027] ? load_image+0x410/0x410 [ 1402.496346][T22027] sysfs_create_dir_ns+0x26a/0x290 [ 1402.501522][T22027] ? __lock_acquire+0x7c40/0x7c40 [ 1402.506562][T22027] ? sysfs_warn_dup+0xa0/0xa0 [ 1402.511255][T22027] ? preempt_schedule_thunk+0x16/0x18 [ 1402.516653][T22027] kobject_add_internal+0x617/0xca0 [ 1402.521874][T22027] kobject_add+0x160/0x230 [ 1402.526314][T22027] ? kobject_init+0x1c0/0x1c0 [ 1402.531001][T22027] ? __raw_spin_lock_init+0x41/0x100 [ 1402.536296][T22027] ? klist_children_get+0x50/0x50 [ 1402.541337][T22027] ? get_device_parent+0x121/0x3e0 [ 1402.546467][T22027] device_add+0x470/0x1050 [ 1402.550903][T22027] hci_conn_add_sysfs+0xd1/0x1e0 [ 1402.555861][T22027] le_conn_complete_evt+0xf69/0x1560 [ 1402.561185][T22027] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1402.567468][T22027] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1402.573129][T22027] ? mutex_unlock+0x10/0x10 [ 1402.577651][T22027] ? skb_pull_data+0xec/0x1f0 [ 1402.582345][T22027] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1402.588252][T22027] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1402.594684][T22027] ? hci_remote_host_features_evt+0x230/0x230 [ 1402.600771][T22027] hci_event_packet+0x7b3/0x1290 [ 1402.605729][T22027] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1402.611375][T22027] ? bis_list+0x280/0x280 [ 1402.615721][T22027] ? kcov_remote_start+0x1b1/0x7e0 [ 1402.620845][T22027] ? hci_send_to_monitor+0x9c/0x4a0 [ 1402.626057][T22027] hci_rx_work+0x3eb/0xd40 [ 1402.630497][T22027] ? process_one_work+0x7b4/0x1160 [ 1402.635619][T22027] process_one_work+0x8ab/0x1160 [ 1402.640585][T22027] ? worker_detach_from_pool+0x240/0x240 [ 1402.646231][T22027] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1402.651265][T22027] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1402.656827][T22027] ? wq_worker_running+0x97/0x190 [ 1402.661960][T22027] worker_thread+0xaf5/0x12a0 [ 1402.666666][T22027] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1402.672584][T22027] kthread+0x29d/0x330 [ 1402.676662][T22027] ? worker_clr_flags+0x1a0/0x1a0 [ 1402.681695][T22027] ? kthread_blkcg+0xd0/0xd0 [ 1402.686297][T22027] ret_from_fork+0x1f/0x30 [ 1402.690760][T22027] [ 1403.124347][T22027] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1403.138328][T22027] Bluetooth: hci2: failed to register connection device [ 1403.692629][T12105] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1404.534513][T22581] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1404.543340][T22581] cramfs: wrong magic [ 1404.555968][T22581] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4960'. [ 1404.652417][T12105] usb 4-1: Using ep0 maxpacket: 8 [ 1404.848880][T22583] kAFS: unable to lookup cell '/,c¾ûL' [ 1404.882187][T22583] binder: 22572:22583 ioctl 4018620d 0 returned -22 [ 1404.902603][T22583] binder: 22572:22583 ioctl c0506107 200000000180 returned -22 [ 1405.132080][T12105] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1405.152055][T12105] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.185879][T12105] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1405.201104][T12105] pvrusb2: ********** [ 1405.212889][ T4287] Bluetooth: hci2: command 0x2016 tx timeout [ 1405.219144][T12105] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1405.239043][T12105] pvrusb2: Important functionality might not be entirely working. [ 1405.247627][T12105] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1405.259409][T12105] pvrusb2: ********** [ 1405.460610][T22570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1405.476558][T22570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1405.536448][ T2311] pvrusb2: Invalid write control endpoint [ 1406.252641][T11944] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1406.633135][ C1] raw-gadget.2 gadget.7: ignoring, device is not running [ 1407.622393][T11944] usb 8-1: device descriptor read/64, error -32 [ 1407.747036][ T2311] pvrusb2: Invalid write control endpoint [ 1407.775696][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1407.892884][T11944] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1407.958362][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1407.970067][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1407.986384][ T2311] pvrusb2: Device being rendered inoperable [ 1407.993024][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1408.001228][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1408.017515][ T2311] pvrusb2: Attached sub-driver cx25840 [ 1408.022472][T12105] usb 4-1: USB disconnect, device number 42 [ 1408.047101][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1408.058776][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1408.082716][T11944] usb 8-1: Using ep0 maxpacket: 32 [ 1408.182601][T11944] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1408.190989][T11944] usb 8-1: can't read configurations, error -61 [ 1408.202178][T11944] usb usb8-port1: attempt power cycle [ 1408.662423][T11944] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1409.717483][T11944] usb 8-1: device descriptor read/8, error -71 [ 1410.897819][T22628] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1410.906553][T22628] cramfs: wrong magic [ 1410.919539][T22628] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4971'. [ 1414.725709][T22662] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4979'. [ 1415.668161][T22668] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4980'. [ 1416.112627][T12105] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1417.771168][T12105] usb 3-1: Using ep0 maxpacket: 32 [ 1417.818078][T12105] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1417.833583][T12105] usb 3-1: can't read configurations, error -61 [ 1417.944210][T22683] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1417.953873][T22683] cramfs: wrong magic [ 1417.968155][T22683] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4984'. [ 1418.840732][T12105] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1420.425065][ T4287] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 1420.434531][ T4287] CPU: 0 PID: 4287 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1420.442091][ T4287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1420.452156][ T4287] Workqueue: hci3 hci_rx_work [ 1420.456858][ T4287] Call Trace: [ 1420.460147][ T4287] [ 1420.463093][ T4287] dump_stack_lvl+0x188/0x24e [ 1420.467796][ T4287] ? show_regs_print_info+0x12/0x12 [ 1420.473017][ T4287] ? load_image+0x410/0x410 [ 1420.477543][ T4287] sysfs_create_dir_ns+0x26a/0x290 [ 1420.482673][ T4287] ? __lock_acquire+0x7c40/0x7c40 [ 1420.487716][ T4287] ? sysfs_warn_dup+0xa0/0xa0 [ 1420.492422][ T4287] ? do_raw_spin_unlock+0x11d/0x230 [ 1420.497631][ T4287] kobject_add_internal+0x617/0xca0 [ 1420.502849][ T4287] kobject_add+0x160/0x230 [ 1420.507279][ T4287] ? kobject_init+0x1c0/0x1c0 [ 1420.511976][ T4287] ? __raw_spin_lock_init+0x41/0x100 [ 1420.517269][ T4287] ? klist_children_get+0x50/0x50 [ 1420.522310][ T4287] ? get_device_parent+0x121/0x3e0 [ 1420.527437][ T4287] device_add+0x470/0x1050 [ 1420.531871][ T4287] hci_conn_add_sysfs+0xd1/0x1e0 [ 1420.536911][ T4287] le_conn_complete_evt+0xf69/0x1560 [ 1420.542223][ T4287] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1420.548481][ T4287] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1420.554139][ T4287] ? mutex_unlock+0x10/0x10 [ 1420.558659][ T4287] ? skb_pull_data+0xec/0x1f0 [ 1420.563362][ T4287] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1420.569279][ T4287] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1420.575711][ T4287] ? hci_remote_host_features_evt+0x230/0x230 [ 1420.581793][ T4287] hci_event_packet+0x7b3/0x1290 [ 1420.586755][ T4287] ? __lock_acquire+0x7c40/0x7c40 [ 1420.591796][ T4287] ? bis_list+0x280/0x280 [ 1420.596135][ T4287] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1420.602046][ T4287] ? kcov_remote_start+0x4b0/0x7e0 [ 1420.607185][ T4287] ? mt_dump_node+0x1330/0x1900 [ 1420.612072][ T4287] ? hci_send_to_monitor+0x9c/0x4a0 [ 1420.617297][ T4287] hci_rx_work+0x3eb/0xd40 [ 1420.621732][ T4287] ? _raw_spin_unlock+0x40/0x40 [ 1420.626603][ T4287] ? process_one_work+0x7b4/0x1160 [ 1420.631733][ T4287] process_one_work+0x8ab/0x1160 [ 1420.636706][ T4287] ? worker_detach_from_pool+0x240/0x240 [ 1420.642357][ T4287] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1420.647392][ T4287] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1420.652949][ T4287] ? wq_worker_running+0x97/0x190 [ 1420.658005][ T4287] worker_thread+0xaf5/0x12a0 [ 1420.662737][ T4287] kthread+0x29d/0x330 [ 1420.666837][ T4287] ? worker_clr_flags+0x1a0/0x1a0 [ 1420.671905][ T4287] ? kthread_blkcg+0xd0/0xd0 [ 1420.676534][ T4287] ret_from_fork+0x1f/0x30 [ 1420.681002][ T4287] [ 1420.688990][ T4287] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1420.702186][ T4287] Bluetooth: hci3: failed to register connection device [ 1423.352813][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.359085][ T4287] Bluetooth: hci3: command 0x2016 tx timeout [ 1423.423588][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.971497][T22715] kAFS: unable to lookup cell '/,c¾ûL' [ 1424.111973][T22713] binder: 22712:22713 ioctl 4018620d 0 returned -22 [ 1424.896493][T22730] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1424.919599][T22730] cramfs: wrong magic [ 1425.006237][T22730] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4995'. [ 1425.188025][T22744] netlink: 'syz.1.4997': attribute type 1 has an invalid length. [ 1426.142111][T22744] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1426.305501][T22744] bond3: (slave geneve2): making interface the new active one [ 1426.351067][T22744] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1426.518478][T21382] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 1428.567505][T22765] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5003'. [ 1429.553496][T12105] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1430.556340][T12105] usb 10-1: Using ep0 maxpacket: 32 [ 1431.305902][T22796] MPTCP: kernel_bind error, err=-98 [ 1431.649212][ T4287] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1431.663779][ T4287] CPU: 1 PID: 4287 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1431.671331][ T4287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1431.681381][ T4287] Workqueue: hci1 hci_rx_work [ 1431.686052][ T4287] Call Trace: [ 1431.689315][ T4287] [ 1431.692232][ T4287] dump_stack_lvl+0x188/0x24e [ 1431.696901][ T4287] ? show_regs_print_info+0x12/0x12 [ 1431.702085][ T4287] ? load_image+0x410/0x410 [ 1431.706581][ T4287] sysfs_create_dir_ns+0x26a/0x290 [ 1431.711686][ T4287] ? __lock_acquire+0x7c40/0x7c40 [ 1431.716697][ T4287] ? sysfs_warn_dup+0xa0/0xa0 [ 1431.721359][ T4287] ? do_raw_spin_unlock+0x11d/0x230 [ 1431.726540][ T4287] kobject_add_internal+0x617/0xca0 [ 1431.731728][ T4287] kobject_add+0x160/0x230 [ 1431.736157][ T4287] ? kobject_init+0x1c0/0x1c0 [ 1431.740837][ T4287] ? __raw_spin_lock_init+0x41/0x100 [ 1431.746119][ T4287] ? klist_children_get+0x50/0x50 [ 1431.751135][ T4287] ? get_device_parent+0x121/0x3e0 [ 1431.756233][ T4287] device_add+0x470/0x1050 [ 1431.760639][ T4287] hci_conn_add_sysfs+0xd1/0x1e0 [ 1431.765590][ T4287] le_conn_complete_evt+0xf69/0x1560 [ 1431.770867][ T4287] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1431.777272][ T4287] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1431.783001][ T4287] ? mutex_unlock+0x10/0x10 [ 1431.787499][ T4287] ? skb_pull_data+0xec/0x1f0 [ 1431.792177][ T4287] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1431.798061][ T4287] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1431.804469][ T4287] ? hci_remote_host_features_evt+0x230/0x230 [ 1431.810529][ T4287] hci_event_packet+0x7b3/0x1290 [ 1431.815456][ T4287] ? __lock_acquire+0x7c40/0x7c40 [ 1431.820468][ T4287] ? bis_list+0x280/0x280 [ 1431.824786][ T4287] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1431.830664][ T4287] ? kcov_remote_start+0x4b0/0x7e0 [ 1431.835763][ T4287] ? mt_dump_node+0x1330/0x1900 [ 1431.840682][ T4287] ? hci_send_to_monitor+0x9c/0x4a0 [ 1431.845889][ T4287] hci_rx_work+0x3eb/0xd40 [ 1431.850304][ T4287] ? _raw_spin_unlock+0x40/0x40 [ 1431.855146][ T4287] ? process_one_work+0x7b4/0x1160 [ 1431.860252][ T4287] process_one_work+0x8ab/0x1160 [ 1431.865183][ T4287] ? worker_detach_from_pool+0x240/0x240 [ 1431.870799][ T4287] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1431.875812][ T4287] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1431.881429][ T4287] ? wq_worker_running+0x97/0x190 [ 1431.886442][ T4287] worker_thread+0xaf5/0x12a0 [ 1431.891134][ T4287] kthread+0x29d/0x330 [ 1431.895185][ T4287] ? worker_clr_flags+0x1a0/0x1a0 [ 1431.900188][ T4287] ? kthread_blkcg+0xd0/0xd0 [ 1431.904759][ T4287] ret_from_fork+0x1f/0x30 [ 1431.909186][ T4287] [ 1431.940733][ T4287] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1431.954144][ T4287] Bluetooth: hci1: failed to register connection device [ 1432.140356][T12105] usb 10-1: device descriptor read/all, error -71 [ 1433.995062][T22802] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1434.005181][T22802] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1434.014049][ T4287] Bluetooth: hci1: command 0x2016 tx timeout [ 1434.124411][T22817] netlink: 'syz.2.5014': attribute type 1 has an invalid length. [ 1436.559753][T22827] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1436.569073][T22827] cramfs: wrong magic [ 1436.585903][T22827] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5015'. [ 1437.001155][T22837] kAFS: unable to lookup cell '/,c¾ûL' [ 1437.026272][T22837] binder: 22829:22837 ioctl 4018620d 0 returned -22 [ 1437.037643][T22837] binder: 22829:22837 ioctl c0506107 200000000180 returned -22 [ 1439.457350][T22858] kAFS: unable to lookup cell '/,c¾ûL' [ 1439.477088][T22858] binder: 22854:22858 ioctl 4018620d 0 returned -22 [ 1441.214729][T22869] kAFS: unable to lookup cell '/,c¾ûL' [ 1441.242987][T22869] binder: 22866:22869 ioctl 4018620d 0 returned -22 [ 1441.252916][T22869] binder: 22866:22869 ioctl c0506107 200000000180 returned -22 [ 1444.786336][T22877] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1444.922990][T22877] cramfs: wrong magic [ 1445.707420][T22877] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5030'. [ 1446.003023][T22901] loop3: detected capacity change from 0 to 64 [ 1448.453186][T22901] MINIX-fs: bad superblock or unable to read bitmaps [ 1450.971171][T22027] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 1450.981286][T22027] CPU: 0 PID: 22027 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1450.988946][T22027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1450.999015][T22027] Workqueue: hci4 hci_rx_work [ 1451.003714][T22027] Call Trace: [ 1451.007006][T22027] [ 1451.009945][T22027] dump_stack_lvl+0x188/0x24e [ 1451.014656][T22027] ? show_regs_print_info+0x12/0x12 [ 1451.019873][T22027] ? load_image+0x410/0x410 [ 1451.024417][T22027] sysfs_create_dir_ns+0x26a/0x290 [ 1451.029550][T22027] ? __lock_acquire+0x7c40/0x7c40 [ 1451.034594][T22027] ? sysfs_warn_dup+0xa0/0xa0 [ 1451.039290][T22027] ? do_raw_spin_unlock+0x11d/0x230 [ 1451.044506][T22027] kobject_add_internal+0x617/0xca0 [ 1451.049725][T22027] kobject_add+0x160/0x230 [ 1451.054158][T22027] ? kobject_init+0x1c0/0x1c0 [ 1451.058860][T22027] ? __raw_spin_lock_init+0x41/0x100 [ 1451.064169][T22027] ? klist_children_get+0x50/0x50 [ 1451.069234][T22027] ? get_device_parent+0x121/0x3e0 [ 1451.074389][T22027] device_add+0x470/0x1050 [ 1451.078846][T22027] hci_conn_add_sysfs+0xd1/0x1e0 [ 1451.083824][T22027] le_conn_complete_evt+0xf69/0x1560 [ 1451.089152][T22027] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1451.095435][T22027] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1451.101124][T22027] ? mutex_unlock+0x10/0x10 [ 1451.105806][T22027] ? skb_pull_data+0xec/0x1f0 [ 1451.110524][T22027] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1451.116452][T22027] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1451.122888][T22027] ? hci_remote_host_features_evt+0x230/0x230 [ 1451.128954][T22027] hci_event_packet+0x7b3/0x1290 [ 1451.133887][T22027] ? __lock_acquire+0x7c40/0x7c40 [ 1451.138908][T22027] ? bis_list+0x280/0x280 [ 1451.143237][T22027] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1451.149120][T22027] ? kcov_remote_start+0x4b0/0x7e0 [ 1451.154247][T22027] ? mt_dump_node+0x1330/0x1900 [ 1451.159116][T22027] ? hci_send_to_monitor+0x9c/0x4a0 [ 1451.164327][T22027] hci_rx_work+0x3eb/0xd40 [ 1451.168756][T22027] ? _raw_spin_unlock+0x40/0x40 [ 1451.173597][T22027] ? process_one_work+0x7b4/0x1160 [ 1451.178712][T22027] process_one_work+0x8ab/0x1160 [ 1451.183656][T22027] ? worker_detach_from_pool+0x240/0x240 [ 1451.189277][T22027] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1451.194306][T22027] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1451.199841][T22027] ? wq_worker_running+0x97/0x190 [ 1451.204859][T22027] worker_thread+0xaf5/0x12a0 [ 1451.209534][T22027] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1451.215419][T22027] kthread+0x29d/0x330 [ 1451.219470][T22027] ? worker_clr_flags+0x1a0/0x1a0 [ 1451.224479][T22027] ? kthread_blkcg+0xd0/0xd0 [ 1451.229053][T22027] ret_from_fork+0x1f/0x30 [ 1451.233565][T22027] [ 1451.337334][T22929] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1451.349114][T22929] cramfs: wrong magic [ 1451.374697][T22929] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5041'. [ 1451.445507][T22027] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1451.462226][T22027] Bluetooth: hci4: failed to register connection device [ 1452.039999][T22932] loop7: detected capacity change from 0 to 512 [ 1452.129137][T22932] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1452.704508][T22932] EXT4-fs (loop7): 1 truncate cleaned up [ 1452.713935][T22932] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1453.223174][T22950] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1453.232059][T22950] cramfs: wrong magic [ 1453.247585][T22950] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5045'. [ 1453.532494][T22027] Bluetooth: hci4: command 0x2016 tx timeout [ 1454.108833][T16808] EXT4-fs (loop7): unmounting filesystem. [ 1454.739257][T22963] netlink: 'syz.2.5050': attribute type 1 has an invalid length. [ 1454.985568][T22963] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1457.864192][T22997] loop2: detected capacity change from 0 to 512 [ 1458.005515][T22997] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1458.017467][T22991] MPTCP: kernel_bind error, err=-98 [ 1458.020073][T22027] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1458.035039][T22027] CPU: 0 PID: 22027 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1458.042709][T22027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1458.052787][T22027] Workqueue: hci1 hci_rx_work [ 1458.057498][T22027] Call Trace: [ 1458.060801][T22027] [ 1458.063767][T22027] dump_stack_lvl+0x188/0x24e [ 1458.068472][T22027] ? show_regs_print_info+0x12/0x12 [ 1458.073693][T22027] ? load_image+0x410/0x410 [ 1458.078216][T22027] sysfs_create_dir_ns+0x26a/0x290 [ 1458.083324][T22027] ? __lock_acquire+0x7c40/0x7c40 [ 1458.088341][T22027] ? sysfs_warn_dup+0xa0/0xa0 [ 1458.093012][T22027] ? do_raw_spin_unlock+0x11d/0x230 [ 1458.098198][T22027] kobject_add_internal+0x617/0xca0 [ 1458.103389][T22027] kobject_add+0x160/0x230 [ 1458.107811][T22027] ? kobject_init+0x1c0/0x1c0 [ 1458.112487][T22027] ? __raw_spin_lock_init+0x41/0x100 [ 1458.117770][T22027] ? klist_children_get+0x50/0x50 [ 1458.122783][T22027] ? get_device_parent+0x121/0x3e0 [ 1458.127888][T22027] device_add+0x470/0x1050 [ 1458.132304][T22027] hci_conn_add_sysfs+0xd1/0x1e0 [ 1458.137247][T22027] le_conn_complete_evt+0xf69/0x1560 [ 1458.142534][T22027] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1458.148771][T22027] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1458.154401][T22027] ? mutex_unlock+0x10/0x10 [ 1458.158894][T22027] ? skb_pull_data+0xec/0x1f0 [ 1458.163566][T22027] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1458.169463][T22027] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1458.175893][T22027] ? hci_remote_host_features_evt+0x230/0x230 [ 1458.181956][T22027] hci_event_packet+0x7b3/0x1290 [ 1458.186894][T22027] ? __lock_acquire+0x7c40/0x7c40 [ 1458.191910][T22027] ? bis_list+0x280/0x280 [ 1458.196226][T22027] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1458.202135][T22027] ? kcov_remote_start+0x4b0/0x7e0 [ 1458.207243][T22027] ? mt_dump_node+0x1330/0x1900 [ 1458.212086][T22027] ? hci_send_to_monitor+0x9c/0x4a0 [ 1458.217276][T22027] hci_rx_work+0x3eb/0xd40 [ 1458.221680][T22027] ? _raw_spin_unlock+0x40/0x40 [ 1458.226531][T22027] ? process_one_work+0x7b4/0x1160 [ 1458.231663][T22027] process_one_work+0x8ab/0x1160 [ 1458.236602][T22027] ? worker_detach_from_pool+0x240/0x240 [ 1458.242349][T22027] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1458.247365][T22027] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1458.252900][T22027] ? wq_worker_running+0x97/0x190 [ 1458.257924][T22027] worker_thread+0xaf5/0x12a0 [ 1458.262660][T22027] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1458.268654][T22027] kthread+0x29d/0x330 [ 1458.272708][T22027] ? worker_clr_flags+0x1a0/0x1a0 [ 1458.277751][T22027] ? kthread_blkcg+0xd0/0xd0 [ 1458.282343][T22027] ret_from_fork+0x1f/0x30 [ 1458.286758][T22027] [ 1458.296881][T22027] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1458.310047][T22027] Bluetooth: hci1: failed to register connection device [ 1458.373411][T22989] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1458.380577][T22989] cramfs: wrong magic [ 1458.878482][T22997] EXT4-fs (loop2): 1 truncate cleaned up [ 1458.916599][T22997] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1459.891573][T17324] EXT4-fs (loop2): unmounting filesystem. [ 1460.332521][T22027] Bluetooth: hci1: command 0x2016 tx timeout [ 1461.351534][T23025] netlink: 'syz.2.5061': attribute type 1 has an invalid length. [ 1461.540930][T23025] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1461.839547][T23038] loop3: detected capacity change from 0 to 64 [ 1461.875349][T23038] MINIX-fs: bad superblock or unable to read bitmaps [ 1462.246016][T23050] kAFS: unable to lookup cell '/,c¾ûL' [ 1462.271909][T23050] binder: 23046:23050 ioctl 4018620d 0 returned -22 [ 1462.282504][T23050] binder: 23046:23050 ioctl c0506107 200000000180 returned -22 [ 1463.290836][T23055] o2cb: This node has not been configured. [ 1463.297232][T23055] o2cb: Cluster check failed. Fix errors before retrying. [ 1463.304645][T23055] (syz.3.5069,23055,1):user_dlm_register:674 ERROR: status = -22 [ 1463.312546][T23055] (syz.3.5069,23055,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 1465.281115][T23063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5071'. [ 1466.194170][T23079] MPTCP: kernel_bind error, err=-98 [ 1466.197272][ T4287] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 1466.212540][ T4287] CPU: 1 PID: 4287 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1466.220110][ T4287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1466.230182][ T4287] Workqueue: hci4 hci_rx_work [ 1466.234879][ T4287] Call Trace: [ 1466.238165][ T4287] [ 1466.241105][ T4287] dump_stack_lvl+0x188/0x24e [ 1466.245814][ T4287] ? show_regs_print_info+0x12/0x12 [ 1466.251031][ T4287] ? load_image+0x410/0x410 [ 1466.255570][ T4287] sysfs_create_dir_ns+0x26a/0x290 [ 1466.260698][ T4287] ? __lock_acquire+0x7c40/0x7c40 [ 1466.265742][ T4287] ? sysfs_warn_dup+0xa0/0xa0 [ 1466.270443][ T4287] ? do_raw_spin_unlock+0x11d/0x230 [ 1466.275656][ T4287] kobject_add_internal+0x617/0xca0 [ 1466.280876][ T4287] kobject_add+0x160/0x230 [ 1466.285309][ T4287] ? kobject_init+0x1c0/0x1c0 [ 1466.290003][ T4287] ? __raw_spin_lock_init+0x41/0x100 [ 1466.295297][ T4287] ? klist_children_get+0x50/0x50 [ 1466.300339][ T4287] ? get_device_parent+0x121/0x3e0 [ 1466.305466][ T4287] device_add+0x470/0x1050 [ 1466.309988][ T4287] hci_conn_add_sysfs+0xd1/0x1e0 [ 1466.314944][ T4287] le_conn_complete_evt+0xf69/0x1560 [ 1466.320255][ T4287] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1466.326512][ T4287] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1466.332163][ T4287] ? mutex_unlock+0x10/0x10 [ 1466.336684][ T4287] ? skb_pull_data+0xec/0x1f0 [ 1466.341378][ T4287] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1466.347285][ T4287] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1466.353803][ T4287] ? hci_remote_host_features_evt+0x230/0x230 [ 1466.359947][ T4287] hci_event_packet+0x7b3/0x1290 [ 1466.364940][ T4287] ? __lock_acquire+0x7c40/0x7c40 [ 1466.369989][ T4287] ? bis_list+0x280/0x280 [ 1466.374347][ T4287] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1466.380275][ T4287] ? kcov_remote_start+0x4b0/0x7e0 [ 1466.385415][ T4287] ? mt_dump_node+0x1330/0x1900 [ 1466.390300][ T4287] ? hci_send_to_monitor+0x9c/0x4a0 [ 1466.395517][ T4287] hci_rx_work+0x3eb/0xd40 [ 1466.399951][ T4287] ? _raw_spin_unlock+0x40/0x40 [ 1466.404819][ T4287] ? process_one_work+0x7b4/0x1160 [ 1466.409948][ T4287] process_one_work+0x8ab/0x1160 [ 1466.414913][ T4287] ? worker_detach_from_pool+0x240/0x240 [ 1466.420561][ T4287] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1466.425616][ T4287] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1466.431198][ T4287] ? wq_worker_running+0x97/0x190 [ 1466.436256][ T4287] worker_thread+0xaf5/0x12a0 [ 1466.440985][ T4287] kthread+0x29d/0x330 [ 1466.445068][ T4287] ? worker_clr_flags+0x1a0/0x1a0 [ 1466.450101][ T4287] ? kthread_blkcg+0xd0/0xd0 [ 1466.454709][ T4287] ret_from_fork+0x1f/0x30 [ 1466.459162][ T4287] [ 1467.002468][ T4287] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1467.016078][ T4287] Bluetooth: hci4: failed to register connection device [ 1467.102958][T23082] netlink: 'syz.2.5077': attribute type 1 has an invalid length. [ 1467.611122][T23082] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1468.648800][T23096] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1468.692821][T23096] cramfs: wrong magic [ 1468.770942][T23096] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5082'. [ 1469.052685][T22027] Bluetooth: hci4: command 0x2016 tx timeout [ 1470.309593][T23122] o2cb: This node has not been configured. [ 1470.315642][T23122] o2cb: Cluster check failed. Fix errors before retrying. [ 1470.322878][T23122] (syz.2.5087,23122,1):user_dlm_register:674 ERROR: status = -22 [ 1470.330613][T23122] (syz.2.5087,23122,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 1471.423003][T23138] netlink: 'syz.2.5092': attribute type 1 has an invalid length. [ 1472.143453][T23138] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1472.566495][T23152] netlink: 'syz.2.5094': attribute type 1 has an invalid length. [ 1473.887683][T23159] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1473.895760][T23159] cramfs: wrong magic [ 1473.907613][T23159] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5096'. [ 1473.931322][T23163] loop1: detected capacity change from 0 to 512 [ 1474.096174][T23163] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1474.105493][T23163] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1475.106270][T18831] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1475.312410][T18831] usb 2-1: device descriptor read/64, error -71 [ 1475.597679][T18831] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1475.887096][T18831] usb 2-1: device descriptor read/64, error -71 [ 1476.013892][T18831] usb usb2-port1: attempt power cycle [ 1476.406254][T19434] EXT4-fs (loop1): unmounting filesystem. [ 1476.677546][T17060] Process accounting resumed [ 1477.482786][T23198] netlink: 'syz.3.5105': attribute type 1 has an invalid length. [ 1477.585765][T23198] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1477.869982][T23209] netlink: 'syz.1.5107': attribute type 1 has an invalid length. [ 1480.828597][T23226] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1480.839441][T23226] cramfs: wrong magic [ 1480.855032][T23226] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5110'. [ 1482.351943][T23236] loop9: detected capacity change from 0 to 512 [ 1482.504742][T23236] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1482.513860][T23236] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1482.862953][ T4319] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1483.062530][ T4319] usb 10-1: device descriptor read/64, error -71 [ 1483.352721][ T4319] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1483.392594][T16534] Process accounting resumed [ 1484.312383][ T4319] usb 10-1: device descriptor read/64, error -71 [ 1484.322774][T23260] netlink: 'syz.2.5118': attribute type 1 has an invalid length. [ 1484.343792][T23260] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1484.416344][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.422719][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.440529][ T4319] usb usb10-port1: attempt power cycle [ 1484.639824][T23273] netlink: 'syz.2.5121': attribute type 1 has an invalid length. [ 1484.862394][ T4319] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1485.583729][T17367] EXT4-fs (loop9): unmounting filesystem. [ 1485.813986][ T4319] usb 10-1: device not accepting address 20, error -71 [ 1488.367103][T23305] kAFS: unable to lookup cell '/,c¾ûL' [ 1489.365021][T17569] Process accounting resumed [ 1489.972973][T23317] netlink: 'syz.7.5131': attribute type 1 has an invalid length. [ 1490.152980][T23317] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1490.171584][T23327] loop1: detected capacity change from 0 to 512 [ 1490.443489][T23327] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1490.452598][T23327] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1490.620934][T23340] netlink: 'syz.9.5134': attribute type 1 has an invalid length. [ 1490.743701][T17569] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1491.222530][T17569] usb 2-1: device descriptor read/64, error -71 [ 1493.044247][T17569] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1494.454017][T19434] EXT4-fs (loop1): unmounting filesystem. [ 1497.336791][T23379] netlink: 'syz.1.5145': attribute type 1 has an invalid length. [ 1497.823093][ T7] Process accounting resumed [ 1498.026036][T23379] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1498.217943][T23393] loop3: detected capacity change from 0 to 64 [ 1498.225139][T17569] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1498.248880][T23393] MINIX-fs: bad superblock or unable to read bitmaps [ 1498.352459][T14016] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1498.413181][T17569] usb 8-1: Using ep0 maxpacket: 8 [ 1498.436704][T17569] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1498.469714][T17569] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.521406][T17569] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1498.528625][T17569] pvrusb2: ********** [ 1498.541439][T17569] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1498.572323][T17569] pvrusb2: Important functionality might not be entirely working. [ 1498.580813][T17569] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1498.592864][T17569] pvrusb2: ********** [ 1498.902461][T23389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1498.917590][T23403] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1498.924867][T23403] cramfs: wrong magic [ 1498.936352][T23403] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5151'. [ 1498.975888][T23389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1499.011417][ T2311] pvrusb2: Invalid write control endpoint [ 1500.074453][ T2311] pvrusb2: Invalid write control endpoint [ 1500.080261][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1500.117860][T23415] kAFS: unable to lookup cell '/,c¾ûL' [ 1500.182184][T23415] binder: 23414:23415 ioctl 4018620d 0 returned -22 [ 1500.192122][T23415] binder: 23414:23415 ioctl c0506107 200000000180 returned -22 [ 1500.230970][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1500.258998][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1500.296154][ T5172] usb 8-1: USB disconnect, device number 27 [ 1500.314594][ T2311] pvrusb2: Device being rendered inoperable [ 1500.327016][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1500.362951][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1500.517063][ T2311] pvrusb2: Attached sub-driver cx25840 [ 1501.707126][ T125] Process accounting resumed [ 1502.444377][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1502.454602][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1502.699006][T23441] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1502.709374][T23441] cramfs: wrong magic [ 1503.410692][T23441] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5157'. [ 1503.965066][T23450] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5160'. [ 1504.040359][T23449] netlink: 'syz.7.5160': attribute type 1 has an invalid length. [ 1504.207331][T23449] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1504.264135][T23466] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1504.275165][T23466] cramfs: wrong magic [ 1504.393495][T23466] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5163'. [ 1505.516413][T23485] loop1: detected capacity change from 0 to 512 [ 1506.431501][T23485] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1506.440557][T23485] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1506.752596][T17060] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1507.205518][T12105] Process accounting resumed [ 1507.232567][T17060] usb 2-1: Using ep0 maxpacket: 16 [ 1507.246461][T17060] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1507.334117][T17060] usb 2-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 1507.473813][T17060] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1507.643603][T17060] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1507.818366][T17060] usb 2-1: New USB device found, idVendor=0723, idProduct=2080, bcdDevice= 0.40 [ 1507.909939][T17060] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.985910][T17060] usb 2-1: Product: syz [ 1508.032429][T17060] usb 2-1: Manufacturer: syz [ 1508.072822][T17060] usb 2-1: SerialNumber: syz [ 1508.528726][T17060] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1509.094930][T17060] usb 2-1: USB disconnect, device number 46 [ 1509.257863][T19434] EXT4-fs (loop1): unmounting filesystem. [ 1509.451322][T23511] loop9: detected capacity change from 0 to 1024 [ 1509.685846][T14016] udevd[14016]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1510.900996][T23527] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5176'. [ 1510.946170][T23527] netlink: 'syz.9.5176': attribute type 1 has an invalid length. [ 1511.103092][T23527] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1511.341203][T23548] loop7: detected capacity change from 0 to 512 [ 1511.425884][T23548] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1511.619592][T23548] EXT4-fs (loop7): 1 truncate cleaned up [ 1511.627341][T23548] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1511.643881][T23556] loop1: detected capacity change from 0 to 512 [ 1511.691874][T23556] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1511.701004][T23556] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1512.062648][ T4319] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1512.097484][T12105] Process accounting resumed [ 1513.075639][ T4319] usb 2-1: Using ep0 maxpacket: 16 [ 1513.768269][ T4319] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1513.830529][T16808] EXT4-fs (loop7): unmounting filesystem. [ 1513.953381][ T4319] usb 2-1: config 1 has an invalid descriptor of length 111, skipping remainder of the config [ 1514.167934][ T4319] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1514.343842][ T4319] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1514.424453][ T4319] usb 2-1: New USB device found, idVendor=0723, idProduct=2080, bcdDevice= 0.40 [ 1514.525046][T19434] EXT4-fs (loop1): unmounting filesystem. [ 1514.531268][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1514.584374][ T4319] usb 2-1: Product: syz [ 1514.588611][ T4319] usb 2-1: Manufacturer: syz [ 1514.595700][ T4319] usb 2-1: SerialNumber: syz [ 1515.033743][ T4319] usb 2-1: can't set config #1, error -71 [ 1515.065504][T23582] loop3: detected capacity change from 0 to 1024 [ 1515.099991][ T4319] usb 2-1: USB disconnect, device number 47 [ 1515.961295][T23597] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5192'. [ 1516.006263][T23600] kAFS: unable to lookup cell '/,c¾ûL' [ 1516.034938][T23600] binder: 23595:23600 ioctl 4018620d 0 returned -22 [ 1516.047450][T23600] binder: 23595:23600 ioctl c0506107 200000000180 returned -22 [ 1516.888454][T23597] netlink: 'syz.9.5192': attribute type 1 has an invalid length. [ 1517.723157][T23597] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1518.228203][T23618] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5198'. [ 1519.319375][T23630] loop3: detected capacity change from 0 to 512 [ 1520.269381][T23646] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1520.277960][T23646] cramfs: wrong magic [ 1520.291917][T23646] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5201'. [ 1520.543324][T23630] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1520.552430][T23630] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1520.782136][T23651] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5203'. [ 1520.854652][T12104] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1522.325663][T11944] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1523.362294][T23660] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1523.389493][T23664] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5205'. [ 1523.413095][T23660] cramfs: wrong magic [ 1523.454055][T18723] EXT4-fs (loop3): unmounting filesystem. [ 1523.562441][T11944] usb 2-1: Using ep0 maxpacket: 32 [ 1523.569479][T23651] team0 (unregistering): Port device team_slave_0 removed [ 1523.581656][T11944] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1523.627690][T11944] usb 2-1: can't read configurations, error -61 [ 1523.704472][T23672] kAFS: unable to lookup cell '/,c¾ûL' [ 1523.730650][T23672] binder: 23668:23672 ioctl 4018620d 0 returned -22 [ 1523.741056][T23672] binder: 23668:23672 ioctl c0306201 0 returned -14 [ 1524.558725][T23651] team0 (unregistering): Port device team_slave_1 removed [ 1524.695875][T23674] kAFS: unable to lookup cell '/,c¾ûL' [ 1524.725057][T23674] binder: 23670:23674 ioctl 4018620d 0 returned -22 [ 1524.736438][T23674] binder: 23670:23674 ioctl c0506107 200000000180 returned -22 [ 1525.032415][T11944] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1525.714027][T23686] netlink: 'syz.9.5209': attribute type 1 has an invalid length. [ 1525.934473][T23686] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1528.569593][T23710] loop9: detected capacity change from 0 to 512 [ 1528.657853][T23711] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1528.665159][T23711] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1528.676747][T23711] vhci_hcd vhci_hcd.0: Device attached [ 1528.767352][T23710] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1528.776864][T23710] ext4 filesystem being mounted at /283/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1529.540320][T23712] vhci_hcd: connection closed [ 1529.546912][ T4332] vhci_hcd: stop threads [ 1529.564868][ T5172] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1529.565315][T11944] usb 38-1: SetAddress Request (2) to port 0 [ 1529.737549][T11944] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1529.747803][ T4332] vhci_hcd: release socket [ 1529.762418][ T5172] usb 10-1: Using ep0 maxpacket: 16 [ 1529.774449][ T5172] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1529.879287][ T4332] vhci_hcd: disconnect device [ 1529.955745][ T5172] usb 10-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1530.247284][ T5172] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1530.358156][ T5172] usb 10-1: New USB device found, idVendor=0723, idProduct=2080, bcdDevice= 0.40 [ 1530.524656][ T5172] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.598399][ T5172] usb 10-1: Product: syz [ 1530.618381][ T5172] usb 10-1: Manufacturer: syz [ 1530.652298][ T5172] usb 10-1: SerialNumber: syz [ 1532.157284][T17367] EXT4-fs (loop9): unmounting filesystem. [ 1532.945159][ T5172] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1532.973601][ T5172] usb 10-1: USB disconnect, device number 22 [ 1533.112774][T23757] netlink: 'syz.3.5226': attribute type 1 has an invalid length. [ 1533.241661][T23757] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1533.765148][T23778] o2cb: This node has not been configured. [ 1533.771077][T23778] o2cb: Cluster check failed. Fix errors before retrying. [ 1533.778684][T23778] (syz.1.5228,23778,0):user_dlm_register:674 ERROR: status = -22 [ 1533.786501][T23778] (syz.1.5228,23778,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 1534.972826][T11944] usb 38-1: device descriptor read/8, error -110 [ 1535.072139][T23794] netlink: 'syz.7.5233': attribute type 1 has an invalid length. [ 1536.174340][T23775] kAFS: unable to lookup cell '/,c¾ûL' [ 1536.356135][T23775] binder: 23770:23775 ioctl 4018620d 0 returned -22 [ 1537.003397][T23775] binder: 23770:23775 ioctl c0506107 200000000180 returned -22 [ 1537.238467][T14016] udevd[14016]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1537.255816][T11944] usb usb38-port1: attempt power cycle [ 1537.380761][T23805] loop2: detected capacity change from 0 to 512 [ 1537.577577][T23805] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1537.586555][T23805] ext4 filesystem being mounted at /303/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1537.872687][ T7] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1538.069792][T11944] usb usb38-port1: unable to enumerate USB device [ 1538.192490][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 1538.199991][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1538.229319][ T7] usb 3-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1538.274352][ T7] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1538.352979][T23822] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1538.361707][T23822] cramfs: wrong magic [ 1538.373533][T23822] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5239'. [ 1539.553936][ T7] usb 3-1: New USB device found, idVendor=0723, idProduct=2080, bcdDevice= 0.40 [ 1539.572949][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.581018][ T7] usb 3-1: Product: syz [ 1539.585522][ T7] usb 3-1: Manufacturer: syz [ 1539.590114][ T7] usb 3-1: SerialNumber: syz [ 1539.800043][T23828] netlink: 'syz.7.5242': attribute type 1 has an invalid length. [ 1539.951035][T23828] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1540.861031][ T7] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1540.946416][T23847] loop3: detected capacity change from 0 to 64 [ 1541.016954][ T7] usb 3-1: USB disconnect, device number 71 [ 1541.058021][T23848] netlink: 'syz.9.5246': attribute type 1 has an invalid length. [ 1542.290716][T17324] EXT4-fs (loop2): unmounting filesystem. [ 1542.369054][T23847] MINIX-fs: bad superblock or unable to read bitmaps [ 1543.149007][T14016] udevd[14016]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1544.720192][T23886] netlink: 'syz.9.5255': attribute type 1 has an invalid length. [ 1544.826658][T23886] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1545.241738][T23897] netlink: 'syz.7.5260': attribute type 1 has an invalid length. [ 1545.297253][T23899] loop3: detected capacity change from 0 to 512 [ 1545.408103][T23899] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1545.652560][T23899] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1545.856996][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.863955][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.972656][T11934] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1546.192578][T11934] usb 4-1: Using ep0 maxpacket: 16 [ 1546.209245][T11934] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1546.367089][T11934] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1547.170852][T11934] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1547.185770][T11934] usb 4-1: New USB device found, idVendor=0723, idProduct=2080, bcdDevice= 0.40 [ 1547.206156][T11934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.222291][T11934] usb 4-1: Product: syz [ 1547.226496][T11934] usb 4-1: Manufacturer: syz [ 1547.231180][T11934] usb 4-1: SerialNumber: syz [ 1549.475131][T11934] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1549.657600][T18723] EXT4-fs (loop3): unmounting filesystem. [ 1550.042497][T23953] netlink: 'syz.7.5269': attribute type 1 has an invalid length. [ 1550.066416][T11934] usb 4-1: USB disconnect, device number 44 [ 1550.164652][T14016] udevd[14016]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1550.189776][T23953] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1550.226133][T23952] netlink: 'syz.2.5271': attribute type 1 has an invalid length. [ 1550.330970][T23962] kAFS: unable to lookup cell '/,c¾ûL' [ 1550.358047][T23962] binder: 23959:23962 ioctl 4018620d 0 returned -22 [ 1554.521202][T23986] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1554.530129][T23986] cramfs: wrong magic [ 1554.549390][T23986] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5278'. [ 1555.149188][T24000] loop7: detected capacity change from 0 to 512 [ 1555.229202][T24004] netlink: 'syz.1.5283': attribute type 1 has an invalid length. [ 1555.285609][T24000] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1555.295161][T24000] ext4 filesystem being mounted at /291/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1555.662623][T19497] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1555.955230][T24004] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1556.078839][T24014] netlink: 'syz.9.5285': attribute type 1 has an invalid length. [ 1556.086864][T19497] usb 8-1: Using ep0 maxpacket: 16 [ 1556.097012][T19497] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1556.129350][T19497] usb 8-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1556.192418][T19497] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1556.224564][T19497] usb 8-1: New USB device found, idVendor=0723, idProduct=2080, bcdDevice= 0.40 [ 1556.260182][T19497] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.281502][T19497] usb 8-1: Product: syz [ 1556.428880][T19497] usb 8-1: Manufacturer: syz [ 1556.662756][T19497] usb 8-1: SerialNumber: syz [ 1558.758716][T16808] EXT4-fs (loop7): unmounting filesystem. [ 1558.840080][T24039] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5290'. [ 1558.863061][T19497] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1558.929399][T19497] usb 8-1: USB disconnect, device number 28 [ 1559.352465][T20651] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1560.532390][T20651] usb 10-1: Using ep0 maxpacket: 32 [ 1560.566482][T20651] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1560.726513][T20651] usb 10-1: can't read configurations, error -61 [ 1561.072501][T20651] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1561.442355][T20651] usb 10-1: Using ep0 maxpacket: 32 [ 1562.135624][T20651] usb 10-1: device descriptor read/all, error -71 [ 1562.159755][T20651] usb usb10-port1: attempt power cycle [ 1562.295788][T24069] netlink: 'syz.7.5297': attribute type 1 has an invalid length. [ 1562.347810][T24071] loop9: detected capacity change from 0 to 512 [ 1562.856252][T24071] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1562.879232][T24069] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1563.119266][T24071] EXT4-fs (loop9): 1 truncate cleaned up [ 1563.137814][T24073] netlink: 'syz.1.5298': attribute type 1 has an invalid length. [ 1563.146717][T24071] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1564.018005][T17367] EXT4-fs (loop9): unmounting filesystem. [ 1564.378262][T24097] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1564.387446][T24097] cramfs: wrong magic [ 1564.401934][T24097] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5304'. [ 1564.993998][T24101] loop9: detected capacity change from 0 to 512 [ 1565.092851][T24101] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1565.101842][T24101] ext4 filesystem being mounted at /300/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1565.392364][T20651] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1565.582354][T20651] usb 10-1: Using ep0 maxpacket: 16 [ 1566.527062][T20651] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1566.545364][T20651] usb 10-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1566.572348][T20651] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1566.604764][T20651] usb 10-1: New USB device found, idVendor=0723, idProduct=2080, bcdDevice= 0.40 [ 1566.622886][T20651] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.631491][T20651] usb 10-1: Product: syz [ 1566.636384][T20651] usb 10-1: Manufacturer: syz [ 1566.641097][T20651] usb 10-1: SerialNumber: syz [ 1568.165515][T17367] EXT4-fs (loop9): unmounting filesystem. [ 1568.172605][T20651] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1568.739759][T20651] usb 10-1: USB disconnect, device number 26 [ 1569.648538][T24128] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5311'. [ 1569.753747][T14319] udevd[14319]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1570.864588][T24136] loop2: detected capacity change from 0 to 512 [ 1570.873927][T24137] netlink: 'syz.3.5315': attribute type 1 has an invalid length. [ 1570.914340][T24136] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1571.014985][T24136] EXT4-fs (loop2): 1 truncate cleaned up [ 1571.020717][T24136] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1571.048028][T24142] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5316'. [ 1571.842418][ T4319] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1572.056593][ T4319] usb 2-1: Using ep0 maxpacket: 32 [ 1572.071119][ T4319] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1572.088903][ T4319] usb 2-1: can't read configurations, error -61 [ 1572.253533][ T4319] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1572.276379][T17324] EXT4-fs (loop2): unmounting filesystem. [ 1572.462547][ T4319] usb 2-1: Using ep0 maxpacket: 32 [ 1572.471748][ T4319] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1572.487270][ T4319] usb 2-1: can't read configurations, error -61 [ 1572.495596][ T4319] usb usb2-port1: attempt power cycle [ 1572.971815][ T4319] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1573.267101][T24160] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 1573.273758][T24160] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1573.411949][T24160] vhci_hcd vhci_hcd.0: Device attached [ 1573.656229][T24163] vhci_hcd: connection closed [ 1573.657304][T15608] vhci_hcd: stop threads [ 1573.725196][T20651] usb 48-1: SetAddress Request (2) to port 0 [ 1574.227336][T20651] usb 48-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1574.252875][T15608] vhci_hcd: release socket [ 1574.283064][T15608] vhci_hcd: disconnect device [ 1574.322358][T20651] usb 48-1: enqueue for inactive port 0 [ 1574.363138][T24171] loop9: detected capacity change from 0 to 512 [ 1574.412420][ T4319] usb 2-1: device not accepting address 52, error -71 [ 1574.544121][T24171] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1574.553311][T24171] ext4 filesystem being mounted at /303/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1574.867676][T11836] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1574.913337][T20651] usb usb48-port1: attempt power cycle [ 1575.152336][T11836] usb 10-1: Using ep0 maxpacket: 16 [ 1575.162944][T11836] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1575.774489][T11836] usb 10-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1575.981971][T11836] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1576.185499][T11836] usb 10-1: New USB device found, idVendor=0723, idProduct=2080, bcdDevice= 0.40 [ 1576.333122][T20651] usb usb48-port1: unable to enumerate USB device [ 1576.360199][T11836] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1576.477085][T11836] usb 10-1: Product: syz [ 1576.987495][T11836] usb 10-1: Manufacturer: syz [ 1577.365484][T24204] netlink: 'syz.3.5327': attribute type 1 has an invalid length. [ 1577.432066][T11836] usb 10-1: SerialNumber: syz [ 1577.595473][T11836] usb 10-1: can't set config #1, error -71 [ 1577.744013][T11836] usb 10-1: USB disconnect, device number 27 [ 1577.939613][T17367] EXT4-fs (loop9): unmounting filesystem. [ 1578.302127][T24219] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1578.311653][T24219] cramfs: wrong magic [ 1578.327088][T24219] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5329'. [ 1580.023893][T24228] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 1580.030553][T24228] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1580.039525][T24228] vhci_hcd vhci_hcd.0: Device attached [ 1580.352419][T12105] usb 48-1: SetAddress Request (6) to port 0 [ 1580.719253][T12105] usb 48-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1580.819629][T24229] vhci_hcd: connection closed [ 1580.820638][T23673] vhci_hcd: stop threads [ 1581.321300][T23673] vhci_hcd: release socket [ 1581.432412][T23673] vhci_hcd: disconnect device [ 1581.551472][T20651] Process accounting resumed [ 1582.765624][T24254] loop7: detected capacity change from 0 to 512 [ 1583.899873][T24266] loop2: detected capacity change from 0 to 64 [ 1584.075492][T24266] MINIX-fs: bad superblock or unable to read bitmaps [ 1585.902680][T24254] EXT4-fs: error -4 creating inode table initialization thread [ 1585.910561][T24254] EXT4-fs (loop7): mount failed [ 1585.924650][T24268] netlink: 'syz.3.5341': attribute type 1 has an invalid length. [ 1586.433811][T12105] usb 48-1: device descriptor read/8, error -110 [ 1587.614922][T12105] usb usb48-port1: attempt power cycle [ 1588.952870][T12105] usb usb48-port1: unable to enumerate USB device [ 1589.326837][T24323] loop7: detected capacity change from 0 to 512 [ 1590.231163][T24323] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1590.240315][T24323] ext4 filesystem being mounted at /306/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1591.137577][ T125] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1591.350402][T24339] netlink: 'syz.2.5354': attribute type 1 has an invalid length. [ 1591.492479][ T125] usb 8-1: Using ep0 maxpacket: 16 [ 1591.506276][ T125] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1592.318387][ T125] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1592.337309][T16808] EXT4-fs (loop7): unmounting filesystem. [ 1592.410843][ T125] usb 8-1: can't read configurations, error -71 [ 1595.709626][T24373] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1595.718742][T24373] cramfs: wrong magic [ 1595.733305][T24373] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5363'. [ 1596.859689][T24387] loop9: detected capacity change from 0 to 512 [ 1596.893517][T24386] netlink: 'syz.7.5367': attribute type 1 has an invalid length. [ 1596.959217][T24387] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1596.968343][T24387] ext4 filesystem being mounted at /313/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1596.984168][ T4319] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1597.173282][ T4319] usb 2-1: Using ep0 maxpacket: 8 [ 1597.188273][ T4319] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1597.235799][ T4319] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1597.262420][T12104] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1598.242676][ T4319] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1598.280994][T24379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1598.299588][ T4319] pvrusb2: ********** [ 1598.303975][T12104] usb 10-1: Using ep0 maxpacket: 16 [ 1598.311333][T12104] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1598.330912][ T4319] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1598.341242][T24379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1598.362664][T12104] usb 10-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 1598.395687][T12104] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1598.406207][ T4319] pvrusb2: Important functionality might not be entirely working. [ 1598.414274][ T4319] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1598.434392][T12104] usb 10-1: New USB device found, idVendor=0723, idProduct=2080, bcdDevice= 0.40 [ 1598.447528][ T4319] pvrusb2: ********** [ 1598.458869][T12104] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.467898][T12104] usb 10-1: Product: syz [ 1598.472820][ T2311] pvrusb2: Invalid write control endpoint [ 1598.482078][T12104] usb 10-1: Manufacturer: syz [ 1598.569513][T12104] usb 10-1: SerialNumber: syz [ 1598.746511][ T2311] pvrusb2: Invalid write control endpoint [ 1598.756000][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1598.874963][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1598.892386][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1598.919128][ T2311] pvrusb2: Device being rendered inoperable [ 1598.925826][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1598.933301][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1599.362575][ T2311] pvrusb2: Attached sub-driver cx25840 [ 1599.646092][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1599.658001][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1599.718655][T17569] usb 2-1: USB disconnect, device number 54 [ 1599.737293][T24409] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5370'. [ 1600.202697][T19497] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1601.138209][T12104] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1601.467084][T12104] usb 10-1: USB disconnect, device number 28 [ 1601.514168][T17367] EXT4-fs (loop9): unmounting filesystem. [ 1601.693161][T14016] udevd[14016]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1601.772370][T19497] usb 8-1: Using ep0 maxpacket: 32 [ 1601.892143][T19497] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1601.995807][T24420] MPTCP: kernel_bind error, err=-98 [ 1601.999206][T22027] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1602.292363][T22027] CPU: 0 PID: 22027 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1602.300061][T22027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1602.310128][T22027] Workqueue: hci1 hci_rx_work [ 1602.314832][T22027] Call Trace: [ 1602.318124][T22027] [ 1602.321064][T22027] dump_stack_lvl+0x188/0x24e [ 1602.325761][T22027] ? show_regs_print_info+0x12/0x12 [ 1602.330970][T22027] ? load_image+0x410/0x410 [ 1602.335496][T22027] sysfs_create_dir_ns+0x26a/0x290 [ 1602.340622][T22027] ? __lock_acquire+0x7c40/0x7c40 [ 1602.345669][T22027] ? sysfs_warn_dup+0xa0/0xa0 [ 1602.350392][T22027] ? do_raw_spin_unlock+0x11d/0x230 [ 1602.355622][T22027] kobject_add_internal+0x617/0xca0 [ 1602.360846][T22027] kobject_add+0x160/0x230 [ 1602.365299][T22027] ? kobject_init+0x1c0/0x1c0 [ 1602.369990][T22027] ? __raw_spin_lock_init+0x41/0x100 [ 1602.375286][T22027] ? klist_children_get+0x50/0x50 [ 1602.380329][T22027] ? get_device_parent+0x121/0x3e0 [ 1602.385458][T22027] device_add+0x470/0x1050 [ 1602.389929][T22027] hci_conn_add_sysfs+0xd1/0x1e0 [ 1602.394886][T22027] le_conn_complete_evt+0xf69/0x1560 [ 1602.400200][T22027] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1602.406454][T22027] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1602.412118][T22027] ? mutex_unlock+0x10/0x10 [ 1602.416646][T22027] ? skb_pull_data+0xec/0x1f0 [ 1602.421352][T22027] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1602.427271][T22027] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1602.433709][T22027] ? hci_remote_host_features_evt+0x230/0x230 [ 1602.439797][T22027] hci_event_packet+0x7b3/0x1290 [ 1602.444751][T22027] ? __lock_acquire+0x7c40/0x7c40 [ 1602.449772][T22027] ? bis_list+0x280/0x280 [ 1602.454090][T22027] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1602.459972][T22027] ? kcov_remote_start+0x4b0/0x7e0 [ 1602.465072][T22027] ? mt_dump_node+0x1330/0x1900 [ 1602.469914][T22027] ? hci_send_to_monitor+0x9c/0x4a0 [ 1602.475107][T22027] hci_rx_work+0x3eb/0xd40 [ 1602.479522][T22027] ? _raw_spin_unlock+0x40/0x40 [ 1602.484361][T22027] ? process_one_work+0x7b4/0x1160 [ 1602.489465][T22027] process_one_work+0x8ab/0x1160 [ 1602.494404][T22027] ? worker_detach_from_pool+0x240/0x240 [ 1602.500043][T22027] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1602.505066][T22027] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1602.510602][T22027] ? wq_worker_running+0x97/0x190 [ 1602.515623][T22027] worker_thread+0xaf5/0x12a0 [ 1602.520297][T22027] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1602.526185][T22027] kthread+0x29d/0x330 [ 1602.530238][T22027] ? worker_clr_flags+0x1a0/0x1a0 [ 1602.535247][T22027] ? kthread_blkcg+0xd0/0xd0 [ 1602.539837][T22027] ret_from_fork+0x1f/0x30 [ 1602.544277][T22027] [ 1602.614689][T22027] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1602.627939][T22027] Bluetooth: hci1: failed to register connection device [ 1602.814228][T19497] usb 8-1: can't read configurations, error -61 [ 1602.908562][T24426] MPTCP: kernel_bind error, err=-98 [ 1602.911318][T22027] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 1602.925964][T22027] CPU: 1 PID: 22027 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1602.933596][T22027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1602.943644][T22027] Workqueue: hci4 hci_rx_work [ 1602.948319][T22027] Call Trace: [ 1602.951589][T22027] [ 1602.954521][T22027] dump_stack_lvl+0x188/0x24e [ 1602.959229][T22027] ? show_regs_print_info+0x12/0x12 [ 1602.964441][T22027] ? load_image+0x410/0x410 [ 1602.968939][T22027] sysfs_create_dir_ns+0x26a/0x290 [ 1602.974061][T22027] ? __lock_acquire+0x7c40/0x7c40 [ 1602.979077][T22027] ? sysfs_warn_dup+0xa0/0xa0 [ 1602.983749][T22027] ? do_raw_spin_unlock+0x11d/0x230 [ 1602.988937][T22027] kobject_add_internal+0x617/0xca0 [ 1602.994124][T22027] kobject_add+0x160/0x230 [ 1602.998528][T22027] ? kobject_init+0x1c0/0x1c0 [ 1603.003192][T22027] ? __raw_spin_lock_init+0x41/0x100 [ 1603.008458][T22027] ? klist_children_get+0x50/0x50 [ 1603.013478][T22027] ? get_device_parent+0x121/0x3e0 [ 1603.018586][T22027] device_add+0x470/0x1050 [ 1603.022998][T22027] hci_conn_add_sysfs+0xd1/0x1e0 [ 1603.027929][T22027] le_conn_complete_evt+0xf69/0x1560 [ 1603.033224][T22027] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1603.039492][T22027] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1603.045133][T22027] ? mutex_unlock+0x10/0x10 [ 1603.049633][T22027] ? skb_pull_data+0xec/0x1f0 [ 1603.054397][T22027] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1603.060290][T22027] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1603.066704][T22027] ? hci_remote_host_features_evt+0x230/0x230 [ 1603.072769][T22027] hci_event_packet+0x7b3/0x1290 [ 1603.077711][T22027] ? __lock_acquire+0x7c40/0x7c40 [ 1603.082734][T22027] ? bis_list+0x280/0x280 [ 1603.087064][T22027] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1603.092956][T22027] ? kcov_remote_start+0x4b0/0x7e0 [ 1603.098066][T22027] ? mt_dump_node+0x1330/0x1900 [ 1603.102917][T22027] ? hci_send_to_monitor+0x9c/0x4a0 [ 1603.108112][T22027] hci_rx_work+0x3eb/0xd40 [ 1603.112533][T22027] ? _raw_spin_unlock+0x40/0x40 [ 1603.117385][T22027] ? process_one_work+0x7b4/0x1160 [ 1603.122491][T22027] process_one_work+0x8ab/0x1160 [ 1603.127436][T22027] ? worker_detach_from_pool+0x240/0x240 [ 1603.133071][T22027] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1603.138092][T22027] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1603.143635][T22027] ? wq_worker_running+0x97/0x190 [ 1603.148661][T22027] worker_thread+0xaf5/0x12a0 [ 1603.153349][T22027] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1603.159244][T22027] kthread+0x29d/0x330 [ 1603.163303][T22027] ? worker_clr_flags+0x1a0/0x1a0 [ 1603.168330][T22027] ? kthread_blkcg+0xd0/0xd0 [ 1603.172915][T22027] ret_from_fork+0x1f/0x30 [ 1603.177344][T22027] [ 1603.186449][T19497] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1603.191563][T22027] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1603.207243][T22027] Bluetooth: hci4: failed to register connection device [ 1603.281430][T24409] team0 (unregistering): Port device team_slave_0 removed [ 1603.387678][T24409] team0 (unregistering): Port device team_slave_1 removed [ 1604.664058][T22027] Bluetooth: hci1: command 0x2016 tx timeout [ 1605.292529][T22027] Bluetooth: hci4: command 0x2016 tx timeout [ 1605.391622][T24451] netlink: 'syz.2.5378': attribute type 1 has an invalid length. [ 1607.295467][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.302020][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.590787][T24455] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1607.599339][T24455] cramfs: wrong magic [ 1607.612103][T24455] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5379'. [ 1608.508405][T24457] loop2: detected capacity change from 0 to 512 [ 1608.516333][T24457] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1608.598604][T24457] EXT4-fs (loop2): 1 truncate cleaned up [ 1608.660953][T24457] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1609.644382][T17324] EXT4-fs (loop2): unmounting filesystem. [ 1610.341968][T24482] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1610.348643][T24482] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1610.356830][T24482] vhci_hcd vhci_hcd.0: Device attached [ 1610.761307][T24483] vhci_hcd: connection closed [ 1610.769858][T23357] vhci_hcd: stop threads [ 1610.809050][T23357] vhci_hcd: release socket [ 1610.975493][T12104] usb 36-1: SetAddress Request (2) to port 0 [ 1611.407943][T12104] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1611.426763][T23357] vhci_hcd: disconnect device [ 1611.513269][T12104] usb 36-1: enqueue for inactive port 0 [ 1611.572668][T24493] netlink: 'syz.7.5389': attribute type 1 has an invalid length. [ 1613.955556][T24501] loop1: detected capacity change from 0 to 64 [ 1613.968862][T24501] MINIX-fs: bad superblock or unable to read bitmaps [ 1614.105688][T12104] usb usb36-port1: attempt power cycle [ 1614.197724][T24513] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5391'. [ 1614.782777][T12104] usb usb36-port1: unable to enumerate USB device [ 1615.893006][T24521] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1615.902520][T24521] cramfs: wrong magic [ 1615.917251][T24521] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5394'. [ 1616.218653][T24523] loop9: detected capacity change from 0 to 512 [ 1616.277713][T24523] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1616.332326][T19497] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1616.356603][T24523] EXT4-fs (loop9): 1 truncate cleaned up [ 1616.377975][T24523] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 1616.592830][T19497] usb 8-1: Using ep0 maxpacket: 32 [ 1617.163200][T19497] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1617.866112][T24539] loop2: detected capacity change from 0 to 64 [ 1618.039863][T19497] usb 8-1: can't read configurations, error -61 [ 1618.435685][T24539] MINIX-fs: bad superblock or unable to read bitmaps [ 1618.983312][T17367] EXT4-fs (loop9): unmounting filesystem. [ 1623.332316][T20651] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1623.476983][T24579] loop3: detected capacity change from 0 to 512 [ 1623.564451][T24579] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1623.659774][T20651] usb 3-1: Using ep0 maxpacket: 8 [ 1624.154716][T24579] EXT4-fs (loop3): 1 truncate cleaned up [ 1624.239042][T24579] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1624.319043][T20651] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1624.331769][T20651] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1624.367727][T20651] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1624.486206][T20651] pvrusb2: ********** [ 1624.502345][T20651] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1625.041404][T24569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1625.649623][T20651] pvrusb2: Important functionality might not be entirely working. [ 1625.652043][T24569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1625.659170][T20651] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1625.679056][T20651] pvrusb2: ********** [ 1625.681607][T18723] EXT4-fs (loop3): unmounting filesystem. [ 1625.793641][ T2311] pvrusb2: Invalid write control endpoint [ 1626.119692][T24606] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1626.164137][T24606] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1626.188778][ T2311] pvrusb2: Invalid write control endpoint [ 1626.197218][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1626.224821][T12104] usb 3-1: USB disconnect, device number 72 [ 1626.366622][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1627.004575][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1627.029512][ T2311] pvrusb2: Device being rendered inoperable [ 1627.132408][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1627.150030][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1627.204908][ T2311] pvrusb2: Attached sub-driver cx25840 [ 1627.236967][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1627.286847][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1630.049647][T24656] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1630.058764][T24656] cramfs: wrong magic [ 1630.073158][T24656] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5417'. [ 1634.600915][T24689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5423'. [ 1635.627724][T24704] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5428'. [ 1635.649586][T24700] loop3: detected capacity change from 0 to 64 [ 1636.106495][T24700] MINIX-fs: bad superblock or unable to read bitmaps [ 1636.137978][T14016] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1637.718612][T24719] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1637.725917][T24719] cramfs: wrong magic [ 1637.740610][T24716] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5431'. [ 1640.255851][T24753] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1640.264909][T24753] cramfs: wrong magic [ 1640.282577][T24753] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5438'. [ 1640.483759][T24749] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1640.495560][T24749] cramfs: wrong magic [ 1640.515412][T24749] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5435'. [ 1642.233342][ T125] Process accounting resumed [ 1645.594634][T12104] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1645.619292][T24798] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1645.628061][T24798] cramfs: wrong magic [ 1645.641534][T24798] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5450'. [ 1645.852369][T12104] usb 3-1: Using ep0 maxpacket: 8 [ 1645.864018][T12104] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1645.969882][T12104] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.862808][T12104] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1646.880224][T12104] pvrusb2: ********** [ 1646.884725][T12104] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1646.916461][T12104] pvrusb2: Important functionality might not be entirely working. [ 1646.935693][T12104] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1646.967719][T12104] pvrusb2: ********** [ 1647.797243][T24790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1647.871530][T24790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1649.394358][T24824] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1649.403719][T24824] cramfs: wrong magic [ 1649.427863][T24824] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5453'. [ 1650.267398][ T2311] pvrusb2: Invalid write control endpoint [ 1650.275209][T12104] usb 3-1: USB disconnect, device number 73 [ 1650.527958][ T2311] pvrusb2: Invalid write control endpoint [ 1650.539666][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1650.598923][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1650.628967][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1650.729040][ T2311] pvrusb2: Device being rendered inoperable [ 1650.742047][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1650.792384][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1650.845913][ T2311] pvrusb2: Attached sub-driver cx25840 [ 1650.884532][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1652.454454][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1653.394515][T24879] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5464'. [ 1657.135724][T24936] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10) [ 1657.142381][T24936] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1657.150334][T24936] vhci_hcd vhci_hcd.0: Device attached [ 1657.515532][T12104] usb 52-1: SetAddress Request (2) to port 0 [ 1657.744760][T24937] vhci_hcd: connection closed [ 1657.745723][T23354] vhci_hcd: stop threads [ 1658.328700][T12104] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1658.356101][T23354] vhci_hcd: release socket [ 1658.697303][T23354] vhci_hcd: disconnect device [ 1658.823454][T12104] usb 52-1: enqueue for inactive port 0 [ 1659.856998][T12104] usb usb52-port1: attempt power cycle [ 1660.546050][T12104] usb usb52-port1: unable to enumerate USB device [ 1667.192250][T25014] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1667.201404][T25014] cramfs: wrong magic [ 1668.135601][T25023] loop3: detected capacity change from 0 to 512 [ 1668.347733][T25023] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1668.736719][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.743404][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.017181][T25023] EXT4-fs (loop3): 1 truncate cleaned up [ 1670.083092][T25023] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1671.789636][T18723] EXT4-fs (loop3): unmounting filesystem. [ 1672.941182][T11949] Process accounting resumed [ 1677.122350][T25086] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1677.131307][T25086] cramfs: wrong magic [ 1677.416865][T25090] loop2: detected capacity change from 0 to 512 [ 1677.451877][T25090] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1678.934600][T25090] EXT4-fs (loop2): 1 truncate cleaned up [ 1678.940268][T25090] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1680.320263][T17324] EXT4-fs (loop2): unmounting filesystem. [ 1680.627227][T25113] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1680.633873][T25113] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1680.647235][T25113] vhci_hcd vhci_hcd.0: Device attached [ 1681.042485][ T4317] usb 38-1: SetAddress Request (6) to port 0 [ 1681.050948][ T4317] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1682.120434][T25114] vhci_hcd: connection reset by peer [ 1682.139647][ T51] vhci_hcd: stop threads [ 1682.201059][ T51] vhci_hcd: release socket [ 1682.300878][ T51] vhci_hcd: disconnect device [ 1683.964851][T25132] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1683.971917][T25132] cramfs: wrong magic [ 1683.978684][T25132] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5521'. [ 1684.291928][T25145] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1684.300742][T25145] cramfs: wrong magic [ 1684.313928][T25145] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5523'. [ 1686.285987][ T4317] usb 38-1: device descriptor read/8, error -110 [ 1686.925290][ T4317] usb usb38-port1: attempt power cycle [ 1687.670190][T25171] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1687.679007][T25171] cramfs: wrong magic [ 1687.692372][T25171] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5529'. [ 1688.242903][ T4317] usb usb38-port1: unable to enumerate USB device [ 1688.743376][T25177] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1688.752652][T25177] cramfs: wrong magic [ 1688.892863][T12105] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1689.501547][T25180] loop7: detected capacity change from 0 to 64 [ 1689.527421][T25180] MINIX-fs: bad superblock or unable to read bitmaps [ 1689.752288][T12105] usb 10-1: Using ep0 maxpacket: 8 [ 1689.759355][T12105] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1690.325865][T12105] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.381162][T12105] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1690.409733][T12105] pvrusb2: ********** [ 1690.430559][T12105] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1690.501647][T12105] pvrusb2: Important functionality might not be entirely working. [ 1690.523338][T12105] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1690.659412][T12105] pvrusb2: ********** [ 1690.673136][T25173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1690.696542][T25173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1692.483207][T25206] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1692.489866][T25206] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1692.560368][T25207] vhci_hcd: connection closed [ 1692.561256][T25206] vhci_hcd vhci_hcd.0: Device attached [ 1692.599776][ T2311] pvrusb2: Invalid write control endpoint [ 1692.610078][T12105] usb 10-1: USB disconnect, device number 29 [ 1692.627512][T23725] vhci_hcd: stop threads [ 1692.634181][T23725] vhci_hcd: release socket [ 1692.664371][T23725] vhci_hcd: disconnect device [ 1692.811654][ T2311] pvrusb2: Invalid write control endpoint [ 1692.829404][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1692.870247][T25219] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1692.877428][T25219] cramfs: wrong magic [ 1692.893425][T25219] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5540'. [ 1692.912305][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1692.949317][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1693.871465][T25227] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1693.878211][T25227] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1693.886497][T25227] vhci_hcd vhci_hcd.0: Device attached [ 1693.914879][T25228] vhci_hcd: connection closed [ 1693.915711][T20717] vhci_hcd: stop threads [ 1694.202567][T11949] usb 36-1: SetAddress Request (6) to port 0 [ 1694.405869][T11949] usb 36-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1694.416746][ T2311] pvrusb2: Device being rendered inoperable [ 1694.443820][T20717] vhci_hcd: release socket [ 1694.459791][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1694.467196][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1694.475796][ T2311] pvrusb2: Attached sub-driver cx25840 [ 1694.481284][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1694.491949][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1694.501602][T20717] vhci_hcd: disconnect device [ 1694.552515][T11949] usb 36-1: enqueue for inactive port 0 [ 1695.392756][T11949] usb usb36-port1: attempt power cycle [ 1695.566561][T25247] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1695.575566][T25247] cramfs: wrong magic [ 1695.589162][T25247] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5545'. [ 1695.897578][T25251] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1695.906312][T25251] cramfs: wrong magic [ 1696.123259][T11949] usb usb36-port1: unable to enumerate USB device [ 1697.006764][T25266] MPTCP: kernel_bind error, err=-98 [ 1697.013207][T22027] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1697.027984][T22027] CPU: 1 PID: 22027 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1697.035645][T22027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1697.045717][T22027] Workqueue: hci1 hci_rx_work [ 1697.050415][T22027] Call Trace: [ 1697.053700][T22027] [ 1697.056637][T22027] dump_stack_lvl+0x188/0x24e [ 1697.061353][T22027] ? show_regs_print_info+0x12/0x12 [ 1697.066580][T22027] ? load_image+0x410/0x410 [ 1697.071120][T22027] sysfs_create_dir_ns+0x26a/0x290 [ 1697.076251][T22027] ? __lock_acquire+0x7c40/0x7c40 [ 1697.081303][T22027] ? sysfs_warn_dup+0xa0/0xa0 [ 1697.086015][T22027] ? do_raw_spin_unlock+0x11d/0x230 [ 1697.091255][T22027] kobject_add_internal+0x617/0xca0 [ 1697.096491][T22027] kobject_add+0x160/0x230 [ 1697.100935][T22027] ? kobject_init+0x1c0/0x1c0 [ 1697.105641][T22027] ? __raw_spin_lock_init+0x41/0x100 [ 1697.110957][T22027] ? klist_children_get+0x50/0x50 [ 1697.116007][T22027] ? get_device_parent+0x121/0x3e0 [ 1697.121149][T22027] device_add+0x470/0x1050 [ 1697.125594][T22027] hci_conn_add_sysfs+0xd1/0x1e0 [ 1697.130558][T22027] le_conn_complete_evt+0xf69/0x1560 [ 1697.135870][T22027] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1697.142143][T22027] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1697.147813][T22027] ? mutex_unlock+0x10/0x10 [ 1697.152338][T22027] ? skb_pull_data+0xec/0x1f0 [ 1697.157036][T22027] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1697.162950][T22027] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1697.169383][T22027] ? hci_remote_host_features_evt+0x230/0x230 [ 1697.175470][T22027] hci_event_packet+0x7b3/0x1290 [ 1697.180430][T22027] ? __lock_acquire+0x7c40/0x7c40 [ 1697.185472][T22027] ? bis_list+0x280/0x280 [ 1697.189816][T22027] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1697.195736][T22027] ? kcov_remote_start+0x4b0/0x7e0 [ 1697.200871][T22027] ? mt_dump_node+0x1330/0x1900 [ 1697.205743][T22027] ? hci_send_to_monitor+0x9c/0x4a0 [ 1697.210965][T22027] hci_rx_work+0x3eb/0xd40 [ 1697.215399][T22027] ? _raw_spin_unlock+0x40/0x40 [ 1697.220268][T22027] ? process_one_work+0x7b4/0x1160 [ 1697.225396][T22027] process_one_work+0x8ab/0x1160 [ 1697.230364][T22027] ? worker_detach_from_pool+0x240/0x240 [ 1697.236014][T22027] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1697.241052][T22027] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1697.246613][T22027] ? wq_worker_running+0x97/0x190 [ 1697.251662][T22027] worker_thread+0xaf5/0x12a0 [ 1697.256375][T22027] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1697.262297][T22027] kthread+0x29d/0x330 [ 1697.266377][T22027] ? worker_clr_flags+0x1a0/0x1a0 [ 1697.271418][T22027] ? kthread_blkcg+0xd0/0xd0 [ 1697.276029][T22027] ret_from_fork+0x1f/0x30 [ 1697.280486][T22027] [ 1697.392375][T22027] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1697.495729][T22027] Bluetooth: hci1: failed to register connection device [ 1698.785660][T25272] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5553'. [ 1699.532371][ T4287] Bluetooth: hci1: command 0x2016 tx timeout [ 1699.687793][T16534] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1700.802554][T16534] usb 4-1: Using ep0 maxpacket: 32 [ 1700.810304][T16534] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1700.863843][T16534] usb 4-1: can't read configurations, error -61 [ 1701.042339][T16534] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1701.759932][T25300] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1701.769634][T25300] cramfs: wrong magic [ 1701.792131][T25300] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5558'. [ 1702.217960][T16534] usb 4-1: Using ep0 maxpacket: 32 [ 1703.312799][T16534] usb 4-1: device descriptor read/all, error -71 [ 1703.415122][T16534] usb usb4-port1: attempt power cycle [ 1703.984165][T25315] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1703.992553][T25315] cramfs: wrong magic [ 1704.005092][T25315] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5560'. [ 1704.520785][T25322] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1704.529429][T25322] cramfs: wrong magic [ 1704.537687][T25322] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5562'. [ 1704.887646][T25325] netlink: 'syz.1.5563': attribute type 1 has an invalid length. [ 1707.227413][T25347] loop7: detected capacity change from 0 to 512 [ 1707.327326][T25347] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1707.336364][T25347] ext4 filesystem being mounted at /348/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1707.754149][ T7] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1708.562320][ T7] usb 8-1: Using ep0 maxpacket: 16 [ 1710.180328][ T7] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1710.229840][T16808] EXT4-fs (loop7): unmounting filesystem. [ 1710.260229][ T7] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1710.548112][T25383] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1710.556889][T25383] cramfs: wrong magic [ 1710.565416][T25383] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5575'. [ 1710.776141][ T7] usb 8-1: can't read configurations, error -71 [ 1711.227354][T25390] netlink: 'syz.7.5578': attribute type 1 has an invalid length. [ 1713.113371][T25413] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1713.123066][T25413] cramfs: wrong magic [ 1713.136729][T25413] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5585'. [ 1714.023234][T25425] loop7: detected capacity change from 0 to 512 [ 1714.219965][T25425] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1714.229219][T25425] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1714.447512][T25438] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1714.456832][T25438] cramfs: wrong magic [ 1714.468656][T25438] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5590'. [ 1714.512399][ T7] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1715.342439][ T7] usb 8-1: Using ep0 maxpacket: 16 [ 1715.356760][T25443] netlink: 'syz.3.5591': attribute type 1 has an invalid length. [ 1717.146454][ T7] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1717.171869][T16808] EXT4-fs (loop7): unmounting filesystem. [ 1717.186923][T25468] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1717.196647][T25468] cramfs: wrong magic [ 1717.211500][T25468] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5597'. [ 1718.262582][ T7] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1718.280841][ T7] usb 8-1: can't read configurations, error -71 [ 1720.562813][T25502] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5605'. [ 1720.867538][T25509] netlink: 'syz.3.5607': attribute type 1 has an invalid length. [ 1721.689001][T25517] loop2: detected capacity change from 0 to 512 [ 1721.852981][T25517] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1721.862029][T25517] ext4 filesystem being mounted at /383/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1722.643681][T16534] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1722.982374][T16534] usb 3-1: Using ep0 maxpacket: 16 [ 1724.681712][T16534] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1724.717426][T16534] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1724.902839][T16534] usb 3-1: can't read configurations, error -71 [ 1724.986422][T17324] EXT4-fs (loop2): unmounting filesystem. [ 1725.106170][T25568] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5618'. [ 1728.190314][ T7] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1729.263746][ T7] usb 10-1: Using ep0 maxpacket: 32 [ 1729.277423][ T7] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1729.295158][ T7] usb 10-1: can't read configurations, error -61 [ 1730.012282][ T7] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1730.175991][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.184305][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.273666][T25630] loop1: detected capacity change from 0 to 512 [ 1730.463855][T25630] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1730.472927][T25630] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1730.762395][T11944] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1731.002341][T11944] usb 2-1: Using ep0 maxpacket: 16 [ 1731.510166][T25659] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1731.519735][T25659] cramfs: wrong magic [ 1731.532465][T25659] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5629'. [ 1733.197381][T11944] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1733.209715][T11944] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1733.217511][T19434] EXT4-fs (loop1): unmounting filesystem. [ 1733.260270][T11944] usb 2-1: can't read configurations, error -71 [ 1734.088561][T25689] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5635'. [ 1734.538255][T25698] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1734.547399][T25698] cramfs: wrong magic [ 1734.562550][T25698] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5636'. [ 1735.933907][T25709] MPTCP: kernel_bind error, err=-98 [ 1735.999951][ T4287] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 1736.015019][ T4287] CPU: 1 PID: 4287 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1736.022595][ T4287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1736.032674][ T4287] Workqueue: hci4 hci_rx_work [ 1736.037374][ T4287] Call Trace: [ 1736.040652][ T4287] [ 1736.043583][ T4287] dump_stack_lvl+0x188/0x24e [ 1736.048265][ T4287] ? show_regs_print_info+0x12/0x12 [ 1736.053468][ T4287] ? load_image+0x410/0x410 [ 1736.057982][ T4287] sysfs_create_dir_ns+0x26a/0x290 [ 1736.063086][ T4287] ? __lock_acquire+0x7c40/0x7c40 [ 1736.068104][ T4287] ? sysfs_warn_dup+0xa0/0xa0 [ 1736.072776][ T4287] ? do_raw_spin_unlock+0x11d/0x230 [ 1736.077968][ T4287] kobject_add_internal+0x617/0xca0 [ 1736.083176][ T4287] kobject_add+0x160/0x230 [ 1736.087621][ T4287] ? kobject_init+0x1c0/0x1c0 [ 1736.092307][ T4287] ? __raw_spin_lock_init+0x41/0x100 [ 1736.097588][ T4287] ? klist_children_get+0x50/0x50 [ 1736.102623][ T4287] ? get_device_parent+0x121/0x3e0 [ 1736.107729][ T4287] device_add+0x470/0x1050 [ 1736.112141][ T4287] hci_conn_add_sysfs+0xd1/0x1e0 [ 1736.117084][ T4287] le_conn_complete_evt+0xf69/0x1560 [ 1736.122384][ T4287] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1736.128651][ T4287] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1736.134286][ T4287] ? mutex_unlock+0x10/0x10 [ 1736.138782][ T4287] ? skb_pull_data+0xec/0x1f0 [ 1736.143473][ T4287] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1736.149383][ T4287] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1736.155790][ T4287] ? hci_remote_host_features_evt+0x230/0x230 [ 1736.161848][ T4287] hci_event_packet+0x7b3/0x1290 [ 1736.166786][ T4287] ? __lock_acquire+0x7c40/0x7c40 [ 1736.171805][ T4287] ? bis_list+0x280/0x280 [ 1736.176126][ T4287] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1736.182017][ T4287] ? kcov_remote_start+0x4b0/0x7e0 [ 1736.187122][ T4287] ? mt_dump_node+0x1330/0x1900 [ 1736.191971][ T4287] ? hci_send_to_monitor+0x9c/0x4a0 [ 1736.197163][ T4287] hci_rx_work+0x3eb/0xd40 [ 1736.201570][ T4287] ? _raw_spin_unlock+0x40/0x40 [ 1736.206412][ T4287] ? process_one_work+0x7b4/0x1160 [ 1736.211514][ T4287] process_one_work+0x8ab/0x1160 [ 1736.216453][ T4287] ? worker_detach_from_pool+0x240/0x240 [ 1736.222115][ T4287] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1736.227135][ T4287] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1736.232677][ T4287] ? wq_worker_running+0x97/0x190 [ 1736.237708][ T4287] worker_thread+0xaf5/0x12a0 [ 1736.242403][ T4287] kthread+0x29d/0x330 [ 1736.246465][ T4287] ? worker_clr_flags+0x1a0/0x1a0 [ 1736.251497][ T4287] ? kthread_blkcg+0xd0/0xd0 [ 1736.256080][ T4287] ret_from_fork+0x1f/0x30 [ 1736.260495][ T4287] [ 1736.263757][ T4287] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1736.276838][ T4287] Bluetooth: hci4: failed to register connection device [ 1738.091847][T25724] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1738.100603][T25724] cramfs: wrong magic [ 1738.114776][T25724] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5642'. [ 1738.332263][T25712] Bluetooth: hci4: command 0x2016 tx timeout [ 1740.278827][T25746] loop2: detected capacity change from 0 to 512 [ 1741.147907][T25746] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 1741.157668][T25746] ext4 filesystem being mounted at /388/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1741.452749][ T5172] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1741.669070][T25757] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1741.672690][ T5172] usb 3-1: Using ep0 maxpacket: 16 [ 1741.684458][T25757] cramfs: wrong magic [ 1741.698088][T25757] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5649'. [ 1743.487971][ T5172] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1743.500236][T25765] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5652'. [ 1743.546424][ T5172] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1743.556252][T17324] EXT4-fs (loop2): unmounting filesystem. [ 1743.683999][T25765] netlink: 'syz.3.5652': attribute type 1 has an invalid length. [ 1744.472564][ T5172] usb 3-1: can't read configurations, error -71 [ 1744.552042][T25765] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1744.687826][T25774] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1744.696473][T25774] cramfs: wrong magic [ 1745.634006][T25774] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5653'. [ 1746.301031][T25781] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1750.742556][T12105] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1750.761425][T25800] device ip6gretap0 entered promiscuous mode [ 1750.814243][T25815] MPTCP: kernel_bind error, err=-98 [ 1750.817127][T22027] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:0' [ 1750.832825][T22027] CPU: 1 PID: 22027 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 1750.840483][T22027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1750.850552][T22027] Workqueue: hci3 hci_rx_work [ 1750.855234][T22027] Call Trace: [ 1750.858515][T22027] [ 1750.861441][T22027] dump_stack_lvl+0x188/0x24e [ 1750.866122][T22027] ? show_regs_print_info+0x12/0x12 [ 1750.871319][T22027] ? load_image+0x410/0x410 [ 1750.875830][T22027] sysfs_create_dir_ns+0x26a/0x290 [ 1750.880945][T22027] ? __lock_acquire+0x7c40/0x7c40 [ 1750.885967][T22027] ? sysfs_warn_dup+0xa0/0xa0 [ 1750.890642][T22027] ? do_raw_spin_unlock+0x11d/0x230 [ 1750.895835][T22027] kobject_add_internal+0x617/0xca0 [ 1750.901034][T22027] kobject_add+0x160/0x230 [ 1750.905450][T22027] ? kobject_init+0x1c0/0x1c0 [ 1750.910123][T22027] ? __raw_spin_lock_init+0x41/0x100 [ 1750.915398][T22027] ? klist_children_get+0x50/0x50 [ 1750.920438][T22027] ? get_device_parent+0x121/0x3e0 [ 1750.925551][T22027] device_add+0x470/0x1050 [ 1750.929976][T22027] hci_conn_add_sysfs+0xd1/0x1e0 [ 1750.934917][T22027] le_conn_complete_evt+0xf69/0x1560 [ 1750.940205][T22027] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1750.946473][T22027] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1750.952114][T22027] ? mutex_unlock+0x10/0x10 [ 1750.956616][T22027] ? skb_pull_data+0xec/0x1f0 [ 1750.961384][T22027] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1750.967277][T22027] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1750.973693][T22027] ? hci_remote_host_features_evt+0x230/0x230 [ 1750.979758][T22027] hci_event_packet+0x7b3/0x1290 [ 1750.984699][T22027] ? __lock_acquire+0x7c40/0x7c40 [ 1750.989720][T22027] ? bis_list+0x280/0x280 [ 1750.994043][T22027] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1750.999943][T22027] ? kcov_remote_start+0x4b0/0x7e0 [ 1751.005051][T22027] ? mt_dump_node+0x1330/0x1900 [ 1751.009901][T22027] ? hci_send_to_monitor+0x9c/0x4a0 [ 1751.015095][T22027] hci_rx_work+0x3eb/0xd40 [ 1751.019513][T22027] ? _raw_spin_unlock+0x40/0x40 [ 1751.024364][T22027] ? process_one_work+0x7b4/0x1160 [ 1751.029475][T22027] process_one_work+0x8ab/0x1160 [ 1751.034424][T22027] ? worker_detach_from_pool+0x240/0x240 [ 1751.040053][T22027] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1751.045083][T22027] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1751.050629][T22027] ? wq_worker_running+0x97/0x190 [ 1751.055653][T22027] worker_thread+0xaf5/0x12a0 [ 1751.060355][T22027] kthread+0x29d/0x330 [ 1751.064413][T22027] ? worker_clr_flags+0x1a0/0x1a0 [ 1751.069430][T22027] ? kthread_blkcg+0xd0/0xd0 [ 1751.074011][T22027] ret_from_fork+0x1f/0x30 [ 1751.078444][T22027] [ 1751.081541][ C1] vkms_vblank_simulate: vblank timer overrun [ 1751.091896][T22027] kobject_add_internal failed for hci3:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1751.109391][T22027] Bluetooth: hci3: failed to register connection device [ 1751.112453][T12105] usb 10-1: Using ep0 maxpacket: 32 [ 1751.144394][T12105] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1751.152106][T12105] usb 10-1: can't read configurations, error -61 [ 1751.373058][T25821] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1751.381742][T25821] cramfs: wrong magic [ 1751.395735][T25821] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5663'. [ 1751.412280][T12105] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1753.132271][T25712] Bluetooth: hci3: command 0x2016 tx timeout [ 1753.261273][T25836] netlink: 'syz.3.5666': attribute type 1 has an invalid length. [ 1754.333275][T25844] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1754.342374][T25844] cramfs: wrong magic [ 1754.362575][T25844] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5669'. [ 1757.035106][T12105] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1757.633178][T12105] usb 2-1: Using ep0 maxpacket: 8 [ 1757.648799][T12105] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1757.717022][T12105] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1758.009402][T12105] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1758.078705][T12105] pvrusb2: ********** [ 1758.083271][T12105] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1758.093881][T12105] pvrusb2: Important functionality might not be entirely working. [ 1758.101830][T12105] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1758.120555][T12105] pvrusb2: ********** [ 1758.174120][T25876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1758.222680][T25876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1758.271921][ T2311] pvrusb2: Invalid write control endpoint [ 1758.382890][ T5172] Process accounting resumed [ 1760.009692][ T2311] pvrusb2: Invalid write control endpoint [ 1760.019770][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1760.031388][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1760.212930][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1760.234197][ T5172] usb 2-1: USB disconnect, device number 57 [ 1760.665651][ T2311] pvrusb2: Device being rendered inoperable [ 1760.672535][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1760.679781][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1760.692895][ T2311] pvrusb2: Attached sub-driver cx25840 [ 1760.704451][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1760.715152][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1762.502332][ T5172] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1763.953861][T25935] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1763.962886][T25935] cramfs: wrong magic [ 1763.972370][T25935] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5686'. [ 1764.152321][ T5172] usb 4-1: Using ep0 maxpacket: 32 [ 1764.160535][ T5172] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1764.836209][ T5172] usb 4-1: can't read configurations, error -61 [ 1765.046694][T25940] loop7: detected capacity change from 0 to 64 [ 1765.067794][T25940] MINIX-fs: bad superblock or unable to read bitmaps [ 1765.082559][ T5172] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1765.110669][T14016] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1765.391543][T25952] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1765.400936][T25952] cramfs: wrong magic [ 1765.419886][T25952] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5690'. [ 1765.472299][ T5172] usb 4-1: device not accepting address 49, error -71 [ 1765.504529][ T5172] usb usb4-port1: attempt power cycle [ 1766.349469][T25957] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1766.358429][T25957] cramfs: wrong magic [ 1766.372864][T25957] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5691'. [ 1767.873165][T25965] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5693'. [ 1767.955340][T25969] netlink: 'syz.2.5693': attribute type 1 has an invalid length. [ 1767.978372][T25969] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1768.100121][T25985] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1768.108668][T25985] cramfs: wrong magic [ 1768.923174][T25990] loop7: detected capacity change from 0 to 512 [ 1770.321978][T25990] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1770.331372][T25990] ext4 filesystem being mounted at /371/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1770.472473][T25998] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1770.479131][T25998] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1770.487275][T25998] vhci_hcd vhci_hcd.0: Device attached [ 1770.581535][T25999] vhci_hcd: connection closed [ 1770.583872][T25997] vhci_hcd: stop threads [ 1770.663244][T11944] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1770.671994][T25997] vhci_hcd: release socket [ 1770.764710][T25997] vhci_hcd: disconnect device [ 1770.932411][T11944] usb 8-1: Using ep0 maxpacket: 16 [ 1771.118288][T25985] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5695'. [ 1771.151625][T25995] netlink: 'syz.9.5698': attribute type 1 has an invalid length. [ 1771.252993][T26008] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1771.266196][T26008] cramfs: wrong magic [ 1771.278321][T26008] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5700'. [ 1771.975057][T11944] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1772.051521][T11944] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1772.060863][T16808] EXT4-fs (loop7): unmounting filesystem. [ 1772.148298][T11944] usb 8-1: can't read configurations, error -71 [ 1772.482552][T26014] netlink: 'syz.1.5704': attribute type 1 has an invalid length. [ 1774.742476][T11944] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1774.942499][T11944] usb 8-1: Using ep0 maxpacket: 8 [ 1774.955373][T11944] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1774.964896][T11944] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.034260][T11944] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1775.041425][T11944] pvrusb2: ********** [ 1775.051644][T11944] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1775.062517][T11944] pvrusb2: Important functionality might not be entirely working. [ 1775.070374][T11944] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1775.082540][T11944] pvrusb2: ********** [ 1775.366988][T26030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1775.433728][T26030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1775.498561][ T2311] pvrusb2: Invalid write control endpoint [ 1775.806727][ T2311] pvrusb2: Invalid write control endpoint [ 1775.814095][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1775.825794][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1775.833901][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1775.845552][ T2311] pvrusb2: Device being rendered inoperable [ 1775.851790][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1775.859712][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1775.892721][ T2311] pvrusb2: Attached sub-driver cx25840 [ 1775.900098][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1775.944286][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1776.130115][T11836] usb 8-1: USB disconnect, device number 40 [ 1776.253848][T26068] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1776.266248][T26068] cramfs: wrong magic [ 1776.281601][T26068] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5711'. [ 1776.387670][T26069] loop1: detected capacity change from 0 to 512 [ 1776.540490][T26069] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1776.549865][T26069] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1776.832516][T12104] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1777.052379][T12104] usb 2-1: Using ep0 maxpacket: 16 [ 1777.435237][T26076] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1777.441890][T26076] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1777.450399][T26076] vhci_hcd vhci_hcd.0: Device attached [ 1777.772932][T11836] usb 40-1: SetAddress Request (2) to port 0 [ 1777.788429][T11836] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1778.232093][T26077] vhci_hcd: connection closed [ 1778.235350][T24233] vhci_hcd: stop threads [ 1778.792119][T24233] vhci_hcd: release socket [ 1778.852330][T26082] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1778.865734][T26082] cramfs: wrong magic [ 1778.874272][T26082] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5714'. [ 1779.028455][T24233] vhci_hcd: disconnect device [ 1779.042327][T11836] usb 40-1: enqueue for inactive port 0 [ 1779.203606][T12104] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1779.213772][T19434] EXT4-fs (loop1): unmounting filesystem. [ 1779.251304][T12104] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1779.259805][T12104] usb 2-1: can't read configurations, error -71 [ 1779.535741][T19497] Process accounting resumed [ 1779.639640][T11836] usb usb40-port1: attempt power cycle [ 1781.226265][T26095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5718'. [ 1781.723228][T26106] netlink: 'syz.3.5718': attribute type 1 has an invalid length. [ 1781.795787][T26106] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1781.973702][T11836] usb usb40-port1: unable to enumerate USB device [ 1784.524712][T26134] netlink: 'syz.9.5724': attribute type 1 has an invalid length. [ 1785.627317][T26143] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1785.635955][T26143] cramfs: wrong magic [ 1785.648555][T26143] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5726'. [ 1787.681454][T26153] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1787.688106][T26153] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1787.697477][T26153] vhci_hcd vhci_hcd.0: Device attached [ 1787.705995][T26154] vhci_hcd: connection closed [ 1788.228501][T26159] netlink: 'syz.3.5727': attribute type 1 has an invalid length. [ 1788.289386][T23402] vhci_hcd: stop threads [ 1788.364056][T23402] vhci_hcd: release socket [ 1788.427732][T23402] vhci_hcd: disconnect device [ 1788.727163][T26159] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1788.929721][T26161] netlink: 'syz.9.5729': attribute type 1 has an invalid length. [ 1790.433799][T26184] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5734'. [ 1790.673856][T26188] netlink: 'syz.9.5734': attribute type 1 has an invalid length. [ 1791.041264][T26188] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1791.616468][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.623332][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.307827][T26204] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1792.314486][T26204] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1792.322423][T26204] vhci_hcd vhci_hcd.0: Device attached [ 1792.393645][T26205] vhci_hcd: connection closed [ 1792.418942][T20766] vhci_hcd: stop threads [ 1792.652502][T12104] usb 36-1: SetAddress Request (10) to port 0 [ 1792.878236][T12104] usb 36-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1792.932308][T20766] vhci_hcd: release socket [ 1793.035521][T26212] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1793.044021][T26212] cramfs: wrong magic [ 1793.056132][T26212] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5739'. [ 1793.939036][T20766] vhci_hcd: disconnect device [ 1794.356185][T17569] Process accounting resumed [ 1795.311540][T26233] kAFS: unable to lookup cell '/,c¾ûL' [ 1795.334859][T26233] binder: 26230:26233 ioctl 4018620d 0 returned -22 [ 1797.207455][T26249] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5747'. [ 1797.330121][T26252] netlink: 'syz.3.5747': attribute type 1 has an invalid length. [ 1798.241155][T26252] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1798.569325][T26274] fuse: Bad value for 'fd' [ 1799.179573][T12104] usb 36-1: device descriptor read/8, error -110 [ 1799.322700][T26283] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5756'. [ 1799.603069][T12104] usb usb36-port1: attempt power cycle [ 1801.502354][T18831] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 1801.652693][T12104] usb usb36-port1: unable to enumerate USB device [ 1803.040888][T26295] netlink: 'syz.7.5758': attribute type 1 has an invalid length. [ 1803.902244][T18831] usb 10-1: Using ep0 maxpacket: 32 [ 1804.736452][T18831] usb 10-1: device descriptor read/all, error -71 [ 1805.089103][T26308] netlink: 'syz.1.5759': attribute type 1 has an invalid length. [ 1805.143389][T26305] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1805.150052][T26305] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1805.158609][T26305] vhci_hcd vhci_hcd.0: Device attached [ 1806.117043][T11836] usb 40-1: SetAddress Request (6) to port 0 [ 1806.144137][T11836] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1806.410278][T26307] vhci_hcd: connection closed [ 1806.414073][T21492] vhci_hcd: stop threads [ 1806.542045][T21492] vhci_hcd: release socket [ 1806.606659][T21492] vhci_hcd: disconnect device [ 1806.680497][T26308] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1810.414781][T26337] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5765'. [ 1810.425071][T26339] netlink: 'syz.1.5768': attribute type 1 has an invalid length. [ 1810.471455][T26345] netlink: 'syz.9.5765': attribute type 1 has an invalid length. [ 1810.625251][T26345] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1810.835435][T26359] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5772'. [ 1811.243018][T18831] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1811.532494][T11836] usb 40-1: device descriptor read/8, error -110 [ 1812.823657][T26367] kAFS: unable to lookup cell '/,c¾ûL' [ 1812.846305][T26367] binder: 26365:26367 ioctl 4018620d 0 returned -22 [ 1812.935011][T18831] usb 3-1: Using ep0 maxpacket: 32 [ 1813.012901][T11836] usb usb40-port1: attempt power cycle [ 1813.746490][T26364] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1813.764562][T26364] cramfs: wrong magic [ 1813.780147][T26364] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5773'. [ 1814.045079][T18831] usb 3-1: device descriptor read/all, error -71 [ 1814.322879][T11836] usb usb40-port1: unable to enumerate USB device [ 1815.034772][T26390] loop9: detected capacity change from 0 to 64 [ 1815.839533][T26390] MINIX-fs: bad superblock or unable to read bitmaps [ 1816.016310][T26394] netlink: 'syz.2.5781': attribute type 1 has an invalid length. [ 1817.072263][T26407] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1817.081292][T26407] cramfs: wrong magic [ 1817.103222][T26407] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5783'. [ 1818.388605][T26414] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 1818.395266][T26414] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1818.403234][T26414] vhci_hcd vhci_hcd.0: Device attached [ 1818.506576][T26415] vhci_hcd: connection closed [ 1818.507891][T21492] vhci_hcd: stop threads [ 1819.122490][T20651] usb 40-1: SetAddress Request (10) to port 0 [ 1819.128665][T20651] usb 40-1: new SuperSpeed USB device number 10 using vhci_hcd [ 1819.167360][T21492] vhci_hcd: release socket [ 1819.222761][T21492] vhci_hcd: disconnect device [ 1819.291422][T26426] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1819.300285][T26426] cramfs: wrong magic [ 1819.312457][T26426] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5786'. [ 1820.007304][T20651] usb 40-1: enqueue for inactive port 0 [ 1820.025422][T26424] loop3: detected capacity change from 0 to 64 [ 1820.046090][T26424] MINIX-fs: bad superblock or unable to read bitmaps [ 1820.272424][ T5172] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1820.987066][T20651] usb usb40-port1: attempt power cycle [ 1821.242578][ T5172] usb 2-1: Using ep0 maxpacket: 8 [ 1821.269569][ T5172] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1821.279144][ T5172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1821.471729][ T5172] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1821.478831][ T5172] pvrusb2: ********** [ 1821.482878][ T5172] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1821.493026][ T5172] pvrusb2: Important functionality might not be entirely working. [ 1821.500870][ T5172] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1821.512766][ T5172] pvrusb2: ********** [ 1821.847842][T20651] usb usb40-port1: unable to enumerate USB device [ 1821.992278][ T4319] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 1823.709744][T26450] netlink: 'syz.7.5796': attribute type 1 has an invalid length. [ 1823.791517][T26453] loop3: detected capacity change from 0 to 512 [ 1823.842289][ T4319] usb 10-1: Using ep0 maxpacket: 32 [ 1823.843364][ T2311] pvrusb2: Invalid write control endpoint [ 1823.853865][ T5172] usb 2-1: USB disconnect, device number 60 [ 1823.857595][ T4319] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1823.917383][T26453] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1823.919185][ T4319] usb 10-1: can't read configurations, error -61 [ 1823.926520][T26453] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1824.143302][ T2311] pvrusb2: Invalid write control endpoint [ 1824.149168][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1824.160192][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1824.162372][ T4319] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 1824.168184][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1824.712295][T17569] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1825.073894][T11836] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1825.112507][ T2311] pvrusb2: Device being rendered inoperable [ 1825.162224][T17569] usb 4-1: Using ep0 maxpacket: 16 [ 1825.170967][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1825.201947][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1825.257569][ T2311] pvrusb2: Attached sub-driver cx25840 [ 1825.282508][T11836] usb 8-1: Using ep0 maxpacket: 8 [ 1825.293698][T26476] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1825.303790][T26476] cramfs: wrong magic [ 1825.317295][T11836] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1825.332679][T26476] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5800'. [ 1825.378470][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1825.441609][T11836] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1825.516418][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1825.653885][T11836] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1825.768776][T11836] pvrusb2: ********** [ 1825.837411][T11836] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1825.939452][T26460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1826.237853][T26460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1826.261933][T11836] pvrusb2: Important functionality might not be entirely working. [ 1826.279580][T11836] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1826.310866][T11836] pvrusb2: ********** [ 1826.331443][ T2311] pvrusb2: Invalid write control endpoint [ 1826.551335][T26484] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1826.560304][T26484] cramfs: wrong magic [ 1826.574896][T26484] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5802'. [ 1826.667341][T17569] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1826.689338][T18723] EXT4-fs (loop3): unmounting filesystem. [ 1826.906739][T17569] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1826.932452][T17569] usb 4-1: can't read configurations, error -71 [ 1827.487086][T12104] usb 8-1: USB disconnect, device number 41 [ 1827.516605][ T2311] pvrusb2: Invalid write control endpoint [ 1827.537720][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1827.892073][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1827.904669][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1827.915120][ T2311] pvrusb2: Device being rendered inoperable [ 1827.921194][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1827.929076][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1827.956683][ T2311] pvrusb2: Attached sub-driver cx25840 [ 1828.007300][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1828.177113][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1828.282652][T26500] netlink: 'syz.3.5807': attribute type 1 has an invalid length. [ 1828.340217][T26500] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1828.553693][T26507] netlink: 'syz.7.5808': attribute type 1 has an invalid length. [ 1829.580258][T26523] netlink: 'syz.3.5812': attribute type 1 has an invalid length. [ 1830.249494][T26523] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1830.329378][T26532] loop9: detected capacity change from 0 to 512 [ 1830.426697][T26532] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 1830.435783][T26532] ext4 filesystem being mounted at /410/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1830.512237][ T4409] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1830.702264][ T4409] usb 8-1: Using ep0 maxpacket: 8 [ 1830.715342][ T4409] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1830.742275][T17569] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 1830.770514][ T4409] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1831.648637][T17569] usb 10-1: Using ep0 maxpacket: 16 [ 1832.053748][ T4409] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1832.072392][ T4409] pvrusb2: ********** [ 1832.082233][ T4409] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1832.092606][ T4409] pvrusb2: Important functionality might not be entirely working. [ 1832.100524][ T4409] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1832.112156][ T4409] pvrusb2: ********** [ 1832.262664][T26529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1832.291646][T26529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1832.305124][ T2311] pvrusb2: Invalid write control endpoint [ 1832.630466][ T2311] pvrusb2: Invalid write control endpoint [ 1832.639048][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1832.729911][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1832.777815][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1832.785095][T20651] usb 8-1: USB disconnect, device number 42 [ 1832.941246][T26571] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1832.950824][T26571] cramfs: wrong magic [ 1832.967103][T26571] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5820'. [ 1833.279736][T17569] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1833.726522][ T2311] pvrusb2: Device being rendered inoperable [ 1833.740244][T17367] EXT4-fs (loop9): unmounting filesystem. [ 1833.752332][T17569] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1833.803338][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1833.815690][T26573] netlink: 'syz.1.5822': attribute type 1 has an invalid length. [ 1833.822857][T17569] usb 10-1: can't read configurations, error -71 [ 1833.844856][T26573] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1833.868313][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1833.877849][ T2311] pvrusb2: Attached sub-driver cx25840 [ 1833.885150][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1833.895924][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1834.095286][T26577] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1834.104054][T26577] cramfs: wrong magic [ 1834.113560][T26577] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5821'. [ 1834.980775][T26581] netlink: 'syz.9.5824': attribute type 1 has an invalid length. [ 1839.467109][T26606] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1839.475512][T26606] cramfs: wrong magic [ 1839.486743][T26606] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5830'. [ 1841.465567][T26617] loop1: detected capacity change from 0 to 512 [ 1841.523073][T26617] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1841.532326][T26617] ext4 filesystem being mounted at /302/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1842.192952][T26628] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1842.202708][T26628] cramfs: wrong magic [ 1842.211062][T26628] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5834'. [ 1843.069949][T26631] netlink: 'syz.3.5835': attribute type 1 has an invalid length. [ 1843.102377][T17569] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1843.179709][T26633] fuse: Invalid rootmode [ 1843.302492][T17569] usb 2-1: Using ep0 maxpacket: 16 [ 1844.938939][T17569] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1845.059592][T17569] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1845.064231][T19434] EXT4-fs (loop1): unmounting filesystem. [ 1845.242246][T17569] usb 2-1: can't read configurations, error -71 [ 1845.381790][T26659] netlink: 'syz.1.5840': attribute type 1 has an invalid length. [ 1847.953430][T26689] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5846'. [ 1847.994142][T26688] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5847'. [ 1848.363197][T11836] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 1849.902334][T11836] usb 10-1: Using ep0 maxpacket: 32 [ 1849.911627][T26698] MPTCP: kernel_bind error, err=-98 [ 1849.914604][T25712] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1849.929545][T25712] CPU: 1 PID: 25712 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1849.931308][T11836] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1849.937186][T25712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1849.937240][T25712] Workqueue: hci1 hci_rx_work [ 1849.937267][T25712] Call Trace: [ 1849.937276][T25712] [ 1849.937284][T25712] dump_stack_lvl+0x188/0x24e [ 1849.937314][T25712] ? show_regs_print_info+0x12/0x12 [ 1849.937337][T25712] ? load_image+0x410/0x410 [ 1849.937370][T25712] sysfs_create_dir_ns+0x26a/0x290 [ 1849.937396][T25712] ? __lock_acquire+0x7c40/0x7c40 [ 1849.937420][T25712] ? sysfs_warn_dup+0xa0/0xa0 [ 1849.937446][T25712] ? do_raw_spin_unlock+0x11d/0x230 [ 1849.937468][T25712] kobject_add_internal+0x617/0xca0 [ 1849.937494][T25712] kobject_add+0x160/0x230 [ 1849.937517][T25712] ? kobject_init+0x1c0/0x1c0 [ 1849.937539][T25712] ? __raw_spin_lock_init+0x41/0x100 [ 1849.937556][T25712] ? klist_children_get+0x50/0x50 [ 1849.937580][T25712] ? get_device_parent+0x121/0x3e0 [ 1849.937604][T25712] device_add+0x470/0x1050 [ 1849.937631][T25712] hci_conn_add_sysfs+0xd1/0x1e0 [ 1849.937656][T25712] le_conn_complete_evt+0xf69/0x1560 [ 1849.937685][T25712] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1849.937711][T25712] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1849.937740][T25712] ? mutex_unlock+0x10/0x10 [ 1849.937762][T25712] ? skb_pull_data+0xec/0x1f0 [ 1849.937790][T25712] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1849.937812][T25712] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1849.937841][T25712] ? hci_remote_host_features_evt+0x230/0x230 [ 1849.937866][T25712] hci_event_packet+0x7b3/0x1290 [ 1849.937893][T25712] ? __lock_acquire+0x7c40/0x7c40 [ 1849.937916][T25712] ? bis_list+0x280/0x280 [ 1849.937935][T25712] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1849.937956][T25712] ? kcov_remote_start+0x4b0/0x7e0 [ 1849.937974][T25712] ? mt_dump_node+0x1330/0x1900 [ 1849.937998][T25712] ? hci_send_to_monitor+0x9c/0x4a0 [ 1849.938022][T25712] hci_rx_work+0x3eb/0xd40 [ 1849.938040][T25712] ? _raw_spin_unlock+0x40/0x40 [ 1850.084430][T11836] usb 10-1: can't read configurations, error -61 [ 1850.084493][T25712] ? process_one_work+0x7b4/0x1160 [ 1850.140562][T25712] process_one_work+0x8ab/0x1160 [ 1850.145537][T25712] ? worker_detach_from_pool+0x240/0x240 [ 1850.151200][T25712] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1850.156250][T25712] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1850.161828][T25712] ? wq_worker_running+0x97/0x190 [ 1850.166883][T25712] worker_thread+0xaf5/0x12a0 [ 1850.171599][T25712] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1850.177531][T25712] kthread+0x29d/0x330 [ 1850.181617][T25712] ? worker_clr_flags+0x1a0/0x1a0 [ 1850.186658][T25712] ? kthread_blkcg+0xd0/0xd0 [ 1850.191268][T25712] ret_from_fork+0x1f/0x30 [ 1850.195731][T25712] [ 1850.231526][T25712] kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1850.244753][T25712] Bluetooth: hci1: failed to register connection device [ 1850.412652][T11836] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 1850.852258][T11836] usb 10-1: Using ep0 maxpacket: 32 [ 1850.859779][T11836] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1850.977968][T11836] usb 10-1: can't read configurations, error -61 [ 1850.993298][T11836] usb usb10-port1: attempt power cycle [ 1852.332208][T25712] Bluetooth: hci1: command 0x2016 tx timeout [ 1853.056361][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.062811][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.486257][ T125] Process accounting resumed [ 1853.775005][T26744] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1853.784252][T26744] cramfs: wrong magic [ 1853.803716][T26744] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5856'. [ 1856.228417][T26758] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1856.242227][T26758] cramfs: wrong magic [ 1856.259310][T26758] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5860'. [ 1859.043277][T26795] MPTCP: kernel_bind error, err=-98 [ 1859.053825][T25712] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 1859.068676][T25712] CPU: 1 PID: 25712 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 1859.076335][T25712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1859.086403][T25712] Workqueue: hci4 hci_rx_work [ 1859.091189][T25712] Call Trace: [ 1859.094474][T25712] [ 1859.097413][T25712] dump_stack_lvl+0x188/0x24e [ 1859.102111][T25712] ? show_regs_print_info+0x12/0x12 [ 1859.107325][T25712] ? load_image+0x410/0x410 [ 1859.111855][T25712] sysfs_create_dir_ns+0x26a/0x290 [ 1859.116982][T25712] ? __lock_acquire+0x7c40/0x7c40 [ 1859.122024][T25712] ? sysfs_warn_dup+0xa0/0xa0 [ 1859.126736][T25712] ? do_raw_spin_unlock+0x11d/0x230 [ 1859.131958][T25712] kobject_add_internal+0x617/0xca0 [ 1859.137179][T25712] kobject_add+0x160/0x230 [ 1859.141617][T25712] ? kobject_init+0x1c0/0x1c0 [ 1859.146317][T25712] ? __raw_spin_lock_init+0x41/0x100 [ 1859.151613][T25712] ? klist_children_get+0x50/0x50 [ 1859.156652][T25712] ? get_device_parent+0x121/0x3e0 [ 1859.161790][T25712] device_add+0x470/0x1050 [ 1859.166235][T25712] hci_conn_add_sysfs+0xd1/0x1e0 [ 1859.171186][T25712] le_conn_complete_evt+0xf69/0x1560 [ 1859.176512][T25712] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1859.182756][T25712] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 1859.188475][T25712] ? mutex_unlock+0x10/0x10 [ 1859.193062][T25712] ? skb_pull_data+0xec/0x1f0 [ 1859.197736][T25712] hci_le_enh_conn_complete_evt+0x185/0x460 [ 1859.203626][T25712] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 1859.210039][T25712] ? hci_remote_host_features_evt+0x230/0x230 [ 1859.216138][T25712] hci_event_packet+0x7b3/0x1290 [ 1859.221080][T25712] ? __lock_acquire+0x7c40/0x7c40 [ 1859.226107][T25712] ? bis_list+0x280/0x280 [ 1859.230432][T25712] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1859.236323][T25712] ? kcov_remote_start+0x4b0/0x7e0 [ 1859.241434][T25712] ? mt_dump_node+0x1330/0x1900 [ 1859.246284][T25712] ? hci_send_to_monitor+0x9c/0x4a0 [ 1859.251480][T25712] hci_rx_work+0x3eb/0xd40 [ 1859.255889][T25712] ? _raw_spin_unlock+0x40/0x40 [ 1859.260751][T25712] ? process_one_work+0x7b4/0x1160 [ 1859.265859][T25712] process_one_work+0x8ab/0x1160 [ 1859.270803][T25712] ? worker_detach_from_pool+0x240/0x240 [ 1859.276436][T25712] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1859.281455][T25712] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1859.286996][T25712] ? wq_worker_running+0x97/0x190 [ 1859.292022][T25712] worker_thread+0xaf5/0x12a0 [ 1859.296707][T25712] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1859.302627][T25712] kthread+0x29d/0x330 [ 1859.306686][T25712] ? worker_clr_flags+0x1a0/0x1a0 [ 1859.311703][T25712] ? kthread_blkcg+0xd0/0xd0 [ 1859.316285][T25712] ret_from_fork+0x1f/0x30 [ 1859.320707][T25712] [ 1859.355510][T25712] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1859.369234][T25712] Bluetooth: hci4: failed to register connection device [ 1859.489978][T11836] Process accounting resumed [ 1861.522262][T25712] Bluetooth: hci4: command 0x2016 tx timeout [ 1863.449553][T26837] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1863.458443][T26837] cramfs: wrong magic [ 1863.474131][T26837] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5877'. [ 1867.072233][T24848] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1867.114862][T26877] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1867.123913][T26877] cramfs: wrong magic [ 1867.139193][T26877] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5884'. [ 1868.606811][T24848] usb 2-1: Using ep0 maxpacket: 8 [ 1868.804265][T24848] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1868.872240][T24848] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.885707][T26886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5887'. [ 1868.917553][T24848] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1868.987052][T26892] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1868.996108][T26892] cramfs: wrong magic [ 1869.009213][T24848] pvrusb2: ********** [ 1869.014394][T26892] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5888'. [ 1869.838991][T24848] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1869.903452][T24848] pvrusb2: Important functionality might not be entirely working. [ 1869.929453][T24848] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1870.013008][T24848] pvrusb2: ********** [ 1870.021433][ T2311] pvrusb2: Invalid write control endpoint [ 1870.051016][T24848] usb 2-1: USB disconnect, device number 63 [ 1871.615386][T26914] loop2: detected capacity change from 0 to 64 [ 1871.646816][T26914] MINIX-fs: bad superblock or unable to read bitmaps [ 1871.677364][ T2311] pvrusb2: Invalid write control endpoint [ 1871.692312][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1871.756343][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1871.797520][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1871.857842][T26917] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1871.866811][T26917] cramfs: wrong magic [ 1871.880216][T26917] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5894'. [ 1872.692331][ T2311] pvrusb2: Device being rendered inoperable [ 1872.698422][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1872.712374][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1872.763206][ T2311] pvrusb2: Attached sub-driver cx25840 [ 1872.768726][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1872.949253][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1873.758189][T26927] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5895'. [ 1873.783753][T26926] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1873.797006][T26926] cramfs: wrong magic [ 1874.998004][T26525] Process accounting resumed [ 1875.987405][T26947] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1875.996850][T26947] cramfs: wrong magic [ 1876.016765][T26947] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5901'. [ 1878.215503][T26964] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5903'. [ 1879.327994][T26979] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5909'. [ 1880.712505][T26998] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1880.720997][T26998] cramfs: wrong magic [ 1880.730259][T26998] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5911'. [ 1882.843619][T27008] 9pnet_fd: Insufficient options for proto=fd [ 1886.147302][T27029] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 1886.153960][T27029] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1886.162005][T27029] vhci_hcd vhci_hcd.0: Device attached [ 1886.169437][T27030] vhci_hcd: connection closed [ 1886.170314][T27033] vhci_hcd: stop threads [ 1886.302213][T27033] vhci_hcd: release socket [ 1886.317564][T27033] vhci_hcd: disconnect device [ 1888.560930][T27044] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 1888.567594][T27044] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1888.576468][T27044] vhci_hcd vhci_hcd.0: Device attached [ 1888.874340][T27050] vhci_hcd: connection closed [ 1888.874848][T21207] vhci_hcd: stop threads [ 1888.902602][T11934] usb 38-1: SetAddress Request (11) to port 0 [ 1888.914615][T11934] usb 38-1: new SuperSpeed USB device number 11 using vhci_hcd [ 1888.971028][T21207] vhci_hcd: release socket [ 1889.756237][T21207] vhci_hcd: disconnect device [ 1893.260944][T27089] loop1: detected capacity change from 0 to 512 [ 1893.364618][T27089] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1893.374141][T27089] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1893.682239][T26525] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1894.321999][T27111] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10) [ 1894.328651][T27111] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1894.412448][T26525] usb 2-1: Using ep0 maxpacket: 16 [ 1894.417907][T27111] vhci_hcd vhci_hcd.0: Device attached [ 1894.711875][T27112] vhci_hcd: connection closed [ 1894.718239][T27049] vhci_hcd: stop threads [ 1894.732562][T27049] vhci_hcd: release socket [ 1894.737269][T27049] vhci_hcd: disconnect device [ 1894.745775][T12104] usb 52-1: SetAddress Request (6) to port 0 [ 1894.752260][T12104] usb 52-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1894.802456][T12104] usb 52-1: enqueue for inactive port 0 [ 1894.892609][T11934] usb 38-1: device descriptor read/8, error -110 [ 1895.502334][T17060] Process accounting resumed [ 1895.753117][T11934] usb usb38-port1: attempt power cycle [ 1895.766173][T12104] usb usb52-port1: attempt power cycle [ 1896.373003][T19434] EXT4-fs (loop1): unmounting filesystem. [ 1896.561659][T26525] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1896.689167][T27142] kAFS: unable to lookup cell '/,c¾ûL' [ 1896.712796][T27142] binder: 27138:27142 ioctl 4018620d 0 returned -22 [ 1896.723130][T27142] binder: 27138:27142 ioctl c0506107 200000000180 returned -22 [ 1897.392063][T26525] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1897.490315][T26525] usb 2-1: can't read configurations, error -71 [ 1897.663902][T12104] usb usb52-port1: unable to enumerate USB device [ 1897.670737][T11934] usb usb38-port1: unable to enumerate USB device [ 1898.450641][T27149] kAFS: unable to lookup cell '/,c¾ûL' [ 1898.460782][T27149] binder: 27148:27149 ioctl 4018620d 0 returned -22 [ 1898.469313][T27149] binder: 27148:27149 ioctl c0506107 200000000180 returned -22 [ 1901.412815][T27192] loop7: detected capacity change from 0 to 512 [ 1902.244529][T27192] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1902.254218][T27192] ext4 filesystem being mounted at /424/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1902.543969][T11934] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1902.762888][T11934] usb 8-1: Using ep0 maxpacket: 16 [ 1904.479477][T27218] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1904.487902][T27218] cramfs: wrong magic [ 1904.499893][T27218] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5953'. [ 1904.917854][T11934] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1905.068232][T16808] EXT4-fs (loop7): unmounting filesystem. [ 1905.098051][T11934] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 1905.813455][T11934] usb 8-1: can't read configurations, error -71 [ 1905.945391][T26525] Process accounting resumed [ 1906.962209][T24848] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1906.997389][T26525] Process accounting resumed [ 1907.922553][T27246] netlink: 'syz.9.5961': attribute type 1 has an invalid length. [ 1908.552206][T24848] usb 4-1: Using ep0 maxpacket: 8 [ 1909.348724][T24848] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1909.408774][T24848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1909.728279][T27247] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1909.734929][T27247] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1909.743375][T27247] vhci_hcd vhci_hcd.0: Device attached [ 1909.758092][T27233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1909.780965][T24848] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1909.842419][T27233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1909.901977][T24848] pvrusb2: ********** [ 1909.925720][T24848] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1910.132251][ T125] usb 36-1: SetAddress Request (14) to port 0 [ 1910.852661][ T125] usb 36-1: new SuperSpeed USB device number 14 using vhci_hcd [ 1910.881059][T27248] vhci_hcd: connection closed [ 1910.883967][T23946] vhci_hcd: stop threads [ 1910.914693][T24848] pvrusb2: Important functionality might not be entirely working. [ 1910.933184][T23946] vhci_hcd: release socket [ 1910.941883][T24848] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1910.960444][T23946] vhci_hcd: disconnect device [ 1910.971580][T24848] pvrusb2: ********** [ 1911.001329][ T2311] pvrusb2: Invalid write control endpoint [ 1911.377235][ T2311] pvrusb2: Invalid write control endpoint [ 1911.398523][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1911.401224][ T4409] usb 4-1: USB disconnect, device number 53 [ 1911.437231][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1911.467878][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1911.841139][ T2311] pvrusb2: Device being rendered inoperable [ 1911.892194][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1911.899642][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1911.933505][ T2311] pvrusb2: Attached sub-driver cx25840 [ 1911.939648][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1912.812333][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1913.864217][T27297] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1913.871231][T27297] cramfs: wrong magic [ 1913.884121][T27297] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5971'. [ 1914.494092][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.500390][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.145644][T27318] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1915.160262][T27318] cramfs: wrong magic [ 1915.169688][T27318] netlink: 52 bytes leftover after parsing attributes in process `syz.9.5976'. [ 1915.932277][ T125] usb 36-1: device descriptor read/8, error -110 [ 1916.024548][T27325] netlink: 'syz.1.5975': attribute type 1 has an invalid length. [ 1916.694371][ T125] usb usb36-port1: attempt power cycle [ 1917.746731][ T125] usb usb36-port1: unable to enumerate USB device [ 1918.222081][T27338] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1918.313034][T27342] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5978'. [ 1918.313102][T27338] cramfs: wrong magic [ 1919.582346][ T4319] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1919.942566][ T4319] usb 3-1: Using ep0 maxpacket: 8 [ 1920.022733][ T4319] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1920.147414][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1920.430656][ T4319] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1920.495465][ T4319] pvrusb2: ********** [ 1920.502766][ T4319] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1920.517741][ T4319] pvrusb2: Important functionality might not be entirely working. [ 1920.541878][ T4319] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1920.606451][T27352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1920.653806][T27352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1920.661709][ T4319] pvrusb2: ********** [ 1920.903879][T27390] netlink: 'syz.9.5988': attribute type 1 has an invalid length. [ 1921.643792][ T2311] pvrusb2: Invalid write control endpoint [ 1921.996935][T27391] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1922.004167][T27391] cramfs: wrong magic [ 1922.027270][T27391] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5987'. [ 1922.456858][T27404] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5990'. [ 1923.094507][T11836] usb 3-1: USB disconnect, device number 80 [ 1923.101121][ T2311] pvrusb2: Invalid write control endpoint [ 1923.112865][ T2311] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1923.176535][ T2311] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1923.260411][ T2311] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1923.370623][ T2311] pvrusb2: Device being rendered inoperable [ 1923.433506][ T2311] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1923.493070][ T4319] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1923.523347][ T2311] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1923.681147][ T2311] pvrusb2: Attached sub-driver cx25840 [ 1923.712330][ T4319] usb 8-1: Using ep0 maxpacket: 32 [ 1923.721136][ T4319] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 1924.307449][ T2311] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1925.054285][ T4319] usb 8-1: can't read configurations, error -61 [ 1925.332188][ T2311] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1925.498213][T27426] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1925.510290][T27426] cramfs: wrong magic [ 1925.524371][T27426] netlink: 52 bytes leftover after parsing attributes in process `syz.7.5995'. [ 1975.936522][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.943534][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.374584][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.380906][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.815762][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.822243][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.254133][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.260439][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.695376][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.701725][ T1276] ieee802154 phy1 wpan1: encryption failed: -22