last executing test programs: 58.923559457s ago: executing program 3 (id=463): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r2 = syz_io_uring_setup(0x5b28, &(0x7f0000000040)={0x0, 0x2553, 0x8000, 0x0, 0xc3}, &(0x7f00000000c0), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f0000000140)=[r0, r1, r0, r0, r0]}, 0x5) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x40040) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000200)={{0x42, 0x2c}, {0x3, 0x75}, 0x4, 0x5, 0x7}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x8000) r6 = syz_clone(0x0, &(0x7f00000003c0)="a6f00eb4d92898da6ee0ea0ca86599cfc2175552f37cc9d6956fb1adf16a5a18753e994fc853ab6d5563a6ddf1052c9c2de34b2864221cecd0461cc6ec49904aac69ebad75dd19b2a700dc625034498001e07f344932ef3c687228f7e63747972673696d4c296cd4e54a81481384a5feea0a52dbeb6293aaef49a381d79848fd4fb2cc", 0x83, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500)="e3d8c5243cbfa8da825329b421d9f0a9695700baa6a353b085f551a5112ee1bc2b40f7e5cc30b230b0d170350efb8d62ed22c9794a4638bb3d5e84897cc545a4854cdf9b7540f8e22d6fdc655166516d18205461ca7cdf16b8a6d3252e4796f18d203f8bde7555eb4646eb309a7680e556e7a8634bb8800458fda5746f50334e574afd6d30024d5cf3954ca1dd5725be159bfc5be9e8b14bf9abc8150d53e49c21341ef16b3ec13c502beb435f001e8a50d7d42af41a5d15a5f93a7a3d73c2040643511cface5ecc3679ae63d358f6568e4d8e1e14ad2900b53d9403f5ac2f6eeee3d7b27508877688286b22") r7 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000000600)={0x5, 0x4, 0x8, 0x81}, 0x10) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc) ioctl$KVM_SET_CLOCK(r8, 0x4030ae7b, &(0x7f0000000640)={0x7, 0x12, 0xfffffff9, 0x7fffffff, 0x6}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000680), 0x200400, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f00000006c0)={0xc}) syz_open_dev$video(&(0x7f0000000700), 0x7, 0x0) r10 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000740), 0x80800) bind$unix(r10, &(0x7f0000000780)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r11 = syz_open_dev$ndb(&(0x7f0000000800), 0x0, 0x400000) ioctl$HDIO_GETGEO(r11, 0x301, &(0x7f0000000840)) newfstatat(0xffffffffffffff9c, &(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) newfstatat(0xffffffffffffff9c, &(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001c00)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001c80)={{0x1, 0x1, 0x18, r8, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000001cc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f0000003d00)={'\x00', 0x1, 0x6724, 0xb674, 0x6, 0x1b5, r6}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000003d80)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000003e80)=0xe8) getresgid(&(0x7f0000003ec0), &(0x7f0000003f00), &(0x7f0000003f40)=0x0) sendmsg$unix(r10, &(0x7f0000004500)={&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000000900)="070ac6f3c78a3be2bc565486e4286b0440405ba4fe27acfcb74bc92c011ad66b22802980fc05fc8df868e8947ecb819ac4", 0x31}, {&(0x7f0000000940)="8840f0dd7b40007db94ceff2933e309eac8211f010dbb946c660d91cccdc64cd25866653d6af3e82c6d3d419bc966ef6a51cad0629fb4d84bfb5b84ebd61e54a01c28d140d5106986448e6e58509d82c09cf16710fe333cd370cc35ddc0eca9422733f8a9969b846b8b94e94ad40626c692732ef54a0708455c6677ec3eb604b782e", 0x82}, {&(0x7f0000000a00)="8faf59ea40548e858b2dc2f4f6ac99b0de6dc388342cc629469909e60bdeb229480034d4431f34f97698e0209ddb645ba4f9fd91", 0x34}, {&(0x7f0000000a40)="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", 0x1000}], 0x4, &(0x7f00000043c0)=[@rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r6, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x2c, 0x1, 0x1, [r10, r3, 0xffffffffffffffff, r10, r1, r3, r7]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x140, 0x2000c080}, 0x800) 58.699789107s ago: executing program 3 (id=465): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000013c0)={'veth1_macvtap\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000013c0)={'veth1_macvtap\x00'}) prlimit64(0x0, 0x3, &(0x7f0000000380)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0x3, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) getpid() (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff90) (async) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff90) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r6) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_sctp(0x2, 0x5, 0x84) r7 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) execveat(r7, &(0x7f0000000040)='./file0\x00', &(0x7f0000000340)={[&(0x7f00000000c0)='\\\'#--@@l%\x00', &(0x7f0000000300)='%.)&{\x00']}, &(0x7f0000000440)={[&(0x7f00000003c0)='sched_switch\x00', &(0x7f0000000400)='!!\\\x00']}, 0x100) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() (async) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x10, 0xffffffffffffffff, 0x4a2ac000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x10, 0xffffffffffffffff, 0x4a2ac000) 55.033712429s ago: executing program 3 (id=479): link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') (async) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000020c0)={0x4, 0x1, {0x100000000, @struct={0x5, 0x40}, 0x0, 0x6, 0x200, 0x200000000000, 0xeb9, 0x4, 0x1, @usage=0x8, 0x6, 0x3, [0x2, 0x8, 0x2, 0x101, 0x8000000000000000, 0x9]}, {0x2, @usage=0x5, 0x0, 0x118d, 0xffffffff889e22f1, 0x0, 0x864, 0xffffffffffffffff, 0x20, @struct={0x5, 0x2}, 0x80000000, 0x7b, [0x4, 0x2000000000000, 0x6, 0x4, 0x6, 0x8]}, {0x100, @struct={0x10001, 0x6}, 0x0, 0x8385, 0x8, 0x5, 0x100000000, 0x8, 0x1, @struct={0x4}, 0x946, 0x1000, [0x6, 0x4, 0x6, 0x10, 0x3, 0x9]}, {0x4, 0x4, 0x33}}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f00000024c0)={{r0}, {@val={r2}, @max}}) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000002500)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (rerun: 64) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000002540)={0x3, 0x9, 0xc, 0x2}, 0x8) (async) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f00000025c0)={0x2, &(0x7f0000002580)=[{0x1, 0x9, 0xf0, 0xf7}, {0x5, 0x7, 0x5, 0x1}]}) (async) socket$netlink(0x10, 0x3, 0x9) (async) write$binfmt_misc(r0, &(0x7f0000002600)="8feaaa9f3c085c7ba4358043840a0a0a0ab0208708eda6fa1c463f71c30fc9693c8e5e0fed6460050f6869628a6690e80040cf7bbc7a2f83a154af9ffd3e646527d811412257ade5ae10264a394cbb3a15fe13acbe7caaa2d77f7bc079c7e3d98ba00602a8cde03180a7095bb475be9ec2eb380e9d7cb02aaebe76aff80885d90fc2dfa81d0c279723a434df88983b50466c226de1f90f8b9f91f7ba7962334497866e045105fce6f0705bfeb1ad7074b1a236cea2a9c5ab56358e0a5c15f9039f5172637f2031d3174e4492089b68a7620ece40876a8fbac983057470f2ad7a6b8962f3e16c4eb72c852e19fb68cff5", 0xf0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002880)={r0, 0x0, 0x16, 0x3e, &(0x7f0000002700)="eaf341b7be045ce731f84bc6fdb16faf7ba8ec5c9bd6", &(0x7f0000002740)=""/62, 0x6e0, 0x0, 0x94, 0x14, &(0x7f0000002780)="102e9df9b9c0640bb056f4c552ff3e4bb4e0c4ea85d9d2908b92aa9da78182cf632becd0f0d349251ed310b27514f8b987f191026e5da7b6f98c622da029a59f575ab35c11b0f4523c3b54e78a44d034f105bbf2664cf158b97a5c37caf75fd8fe5b1facd4a3c1a20b53873c89871951fa2fe773f3b809c751121e7a43e4127f0106073e803af96f207a5b367c8ab782643dc3c0", &(0x7f0000002840)="aca7f4629018bdb6246cdeb4974071b1ae52a9ba", 0x2, 0x0, 0x2}, 0x50) (async) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002900), 0x200, 0x0) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000002940)={0x0, 0x6}, &(0x7f0000002980)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000029c0)={r6, 0x5}, &(0x7f0000002a00)=0x8) (async, rerun: 32) getsockopt(r3, 0x6, 0x2, &(0x7f0000002a40)=""/27, &(0x7f0000002a80)=0x1b) (async, rerun: 32) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000002ac0)={@local, 0x7a}) (async, rerun: 64) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002b00), 0x100, 0x0) (async, rerun: 64) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002b80)={0x2, &(0x7f0000002b40)=[{0xfff, 0x2, 0x99, 0x9}, {0x5, 0x1, 0x2, 0x101}]}) (async, rerun: 64) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002c80)={&(0x7f0000002c00)={0x48, 0x3, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20010000}, 0x48004) (async) splice(r5, &(0x7f0000002d00)=0x7f, r7, &(0x7f0000002d40)=0xfff, 0x3, 0x6) (async, rerun: 32) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000002d80)={0x9}) (rerun: 32) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, &(0x7f0000002dc0)={0xeeef0000, 0xd000}) fchdir(r5) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) mount$binder(0x0, &(0x7f0000002e00)='./file0\x00', &(0x7f0000002e40), 0x204050, &(0x7f0000002f40)={[{@stats}, {@max={'max', 0x3d, 0x1}}, {}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x3aaa}}, {@max={'max', 0x3d, 0x2}}, {@stats}], [{@fowner_eq={'fowner', 0x3d, r1}}, {@euid_eq={'euid', 0x3d, r1}}, {@uid_gt={'uid>', r1}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@euid_lt={'euid<', r10}}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@audit}, {@measure}, {@hash}, {@dont_appraise}]}) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000031c0)={@map=r0, 0x1f, 0x0, 0xb1c51133, &(0x7f00000030c0)=[0x0], 0x1, 0x0, &(0x7f0000003100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000003180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003200)={@fallback=r4, r3, 0x2d, 0x8, r0, @void, @value=r0, @void, @void, r11}, 0x20) 53.216696425s ago: executing program 3 (id=483): io_setup(0x6, &(0x7f00000003c0)=0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_submit(r0, 0x0, &(0x7f00000000c0)) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x0, 0x0, 0x9, @SEQ_NOTEON=@note=0x16}) 51.556170535s ago: executing program 3 (id=491): r0 = syz_open_procfs(0x0, &(0x7f0000000600)='net\x00') r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xffffffffffffff49, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x70bd27, 0x0, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x8}, @FIB_RULE_POLICY=@FRA_FWMARK={0x6, 0xa, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048844}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b9040a1d080214000000020009a118000c000300000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) sendto$inet6(r0, &(0x7f0000000000)="01def565bbe1410a64483d921bfe6e607180675c614cb8e63879d14f8b15276d1ba7282163c4902ed9e2861a2864ab75f27a29e487ac7b544d32821df249b7c513caa65a89f5b6a0c0dc3294a56a613d75ed6a", 0x53, 0x4040044, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80}, 0x1c) getdents64(r0, &(0x7f0000000080)=""/55, 0x37) 50.223656853s ago: executing program 3 (id=495): sync() r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x20, 0x1, 0x2, 0x4, {{0x23, 0x4, 0x3, 0x9, 0x8c, 0x65, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0x3c, 0x2e, 0x3, 0x1, [{@rand_addr=0x64010102, 0x4}, {@local}, {@remote, 0xfffffff8}, {@loopback, 0xf}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@empty, 0x6}, {@multicast1, 0x6}]}, @timestamp_prespec={0x44, 0x2c, 0xed, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@remote, 0x1}, {@local, 0x1}, {@local, 0x144}]}, @timestamp_addr={0x44, 0xc, 0xc3, 0x1, 0x9, [{@remote, 0x80}]}, @noop]}}}}}) (async) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0x4e22, 0x0, 0x4e21, 0x2, 0x2, 0x80, 0x20, 0x0, r1, r2}, {0x7, 0x3800000000000000, 0x9, 0x9, 0x8, 0x33, 0x200, 0x7a1}, {0x70, 0x7f, 0x4, 0xf703}, 0x0, 0x6e6bb6, 0x3, 0x1, 0x1, 0x1}, {{@in6=@empty, 0x4d6, 0x2b}, 0xa, @in6=@mcast1, 0x3503, 0x1, 0x2, 0xad, 0x400, 0x1, 0x4}}, 0xe8) (async) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f00000002c0)=""/59, &(0x7f0000000300)=0x3b) (async) sync() (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x8, 0x1) socket$packet(0x11, 0x2, 0x300) (async) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) write$dsp(r5, &(0x7f00000003c0)="8ea22dad0be8453b7d3e4d96156f955971772e6c4b662c5036ab4ae9b1802979658967608832b9350f16fc0090f6bc7255f142f4af4c262a716e1f15e086d5aad4679c8f6d45a2d96cc9a69f66d6bea98c6bdd675d4864613832fc9eebf22e2c271b945240d41413dbc4e7e7c048aaa2daf197730fe714681bc0cfacd87035b3e2edbcb5be239fb8dbaca18862b2150f905029b81b9dbf513dbd4760420cdbae7421dd23eb90123fc1287fe88d67f0ee41cbaee279636603cfb9", 0xba) (async) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480), 0x400080, 0x0) setxattr$incfs_id(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000500), &(0x7f0000000540)={'0000000000000000000000000000000', 0x1}, 0x20, 0x1) (async) mmap$snddsp_status(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x1000004, 0xc0150, r6, 0x82000000) (async) sendmsg$kcm(r6, &(0x7f0000000800)={&(0x7f0000000580)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x64010102}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000600)="6f5fec9bf9a29d1c82d4ffa91106b05402a876052eeae97594593386802311baa2353d95b191a9597691308bead19145a5d8c94328ad5ebed419cf531fc220bde4775391217c3c612fca3fa77543", 0x4e}, {&(0x7f0000000680)="cdf7df027a5544f8e4e7da9798d88110f58b86e7067317da8532998d1c9ed940a4b389740e32201a23c6f94023f5d8129f5611f3db2a26aa8c7946639fbe7197433ef52943c0d6c8f571a5ca819f601fa23f97d7c1de95008400645bf10e0bd5cf3d2738b44b101ee489a081a3d257583c3b", 0x72}, {&(0x7f0000000700)="7a6c0a3b4ea075bbb2c63d184c1997b36c5a79f0b97c3f548559ca22d1b92a00c69006a83280f6cd90c901bf789c4d9d6e1c1f058e4e2800b19042e390a741e492bece0ef9bec0", 0x47}], 0x3, &(0x7f00000007c0)}, 0x800) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000840)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000880)={0x0, r7}) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f00000008c0)) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000cc0)) (async) read$dsp(r5, &(0x7f0000000d00)=""/2, 0x2) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000d40)=0x7fffffff, 0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x80010, r4, 0xc6208000) (async) sync() (async) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12) (async) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000d80), 0x69a201, 0x0) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000e00), r7) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x48, r10, 0x500, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x8082}, 0x0) 34.98930543s ago: executing program 32 (id=495): sync() r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x20, 0x1, 0x2, 0x4, {{0x23, 0x4, 0x3, 0x9, 0x8c, 0x65, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp_prespec={0x44, 0x3c, 0x2e, 0x3, 0x1, [{@rand_addr=0x64010102, 0x4}, {@local}, {@remote, 0xfffffff8}, {@loopback, 0xf}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@empty, 0x6}, {@multicast1, 0x6}]}, @timestamp_prespec={0x44, 0x2c, 0xed, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@remote, 0x1}, {@local, 0x1}, {@local, 0x144}]}, @timestamp_addr={0x44, 0xc, 0xc3, 0x1, 0x9, [{@remote, 0x80}]}, @noop]}}}}}) (async) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast2, @in=@dev={0xac, 0x14, 0x14, 0x14}, 0x4e22, 0x0, 0x4e21, 0x2, 0x2, 0x80, 0x20, 0x0, r1, r2}, {0x7, 0x3800000000000000, 0x9, 0x9, 0x8, 0x33, 0x200, 0x7a1}, {0x70, 0x7f, 0x4, 0xf703}, 0x0, 0x6e6bb6, 0x3, 0x1, 0x1, 0x1}, {{@in6=@empty, 0x4d6, 0x2b}, 0xa, @in6=@mcast1, 0x3503, 0x1, 0x2, 0xad, 0x400, 0x1, 0x4}}, 0xe8) (async) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f00000002c0)=""/59, &(0x7f0000000300)=0x3b) (async) sync() (async) r4 = syz_open_dev$sndmidi(&(0x7f0000000340), 0x8, 0x1) socket$packet(0x11, 0x2, 0x300) (async) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380), 0x200000, 0x0) write$dsp(r5, &(0x7f00000003c0)="8ea22dad0be8453b7d3e4d96156f955971772e6c4b662c5036ab4ae9b1802979658967608832b9350f16fc0090f6bc7255f142f4af4c262a716e1f15e086d5aad4679c8f6d45a2d96cc9a69f66d6bea98c6bdd675d4864613832fc9eebf22e2c271b945240d41413dbc4e7e7c048aaa2daf197730fe714681bc0cfacd87035b3e2edbcb5be239fb8dbaca18862b2150f905029b81b9dbf513dbd4760420cdbae7421dd23eb90123fc1287fe88d67f0ee41cbaee279636603cfb9", 0xba) (async) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480), 0x400080, 0x0) setxattr$incfs_id(&(0x7f00000004c0)='./file1\x00', &(0x7f0000000500), &(0x7f0000000540)={'0000000000000000000000000000000', 0x1}, 0x20, 0x1) (async) mmap$snddsp_status(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x1000004, 0xc0150, r6, 0x82000000) (async) sendmsg$kcm(r6, &(0x7f0000000800)={&(0x7f0000000580)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @rand_addr=0x64010102}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000600)="6f5fec9bf9a29d1c82d4ffa91106b05402a876052eeae97594593386802311baa2353d95b191a9597691308bead19145a5d8c94328ad5ebed419cf531fc220bde4775391217c3c612fca3fa77543", 0x4e}, {&(0x7f0000000680)="cdf7df027a5544f8e4e7da9798d88110f58b86e7067317da8532998d1c9ed940a4b389740e32201a23c6f94023f5d8129f5611f3db2a26aa8c7946639fbe7197433ef52943c0d6c8f571a5ca819f601fa23f97d7c1de95008400645bf10e0bd5cf3d2738b44b101ee489a081a3d257583c3b", 0x72}, {&(0x7f0000000700)="7a6c0a3b4ea075bbb2c63d184c1997b36c5a79f0b97c3f548559ca22d1b92a00c69006a83280f6cd90c901bf789c4d9d6e1c1f058e4e2800b19042e390a741e492bece0ef9bec0", 0x47}], 0x3, &(0x7f00000007c0)}, 0x800) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000840)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af20, &(0x7f0000000880)={0x0, r7}) ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f00000008c0)) (async) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r6, 0x894b, &(0x7f0000000cc0)) (async) read$dsp(r5, &(0x7f0000000d00)=""/2, 0x2) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r8, 0x84, 0x13, &(0x7f0000000d40)=0x7fffffff, 0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x80010, r4, 0xc6208000) (async) sync() (async) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x12) (async) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000d80), 0x69a201, 0x0) (async) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000e00), r7) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000f00)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x48, r10, 0x500, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x8082}, 0x0) 15.427762309s ago: executing program 1 (id=602): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0xc04c000}, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000540)={'pcm3724\x00', [0x109, 0x80008000, 0x86c, 0xc, 0x80000000, 0x0, 0x1, 0xf, 0x1000, 0x1, 0x1, 0x5, 0x6, 0x746, 0x100, 0x6, 0xffffffa7, 0x2000001, 0x0, 0x65c, 0x3ff, 0x10004, 0x800, 0xe2e0, 0x9, 0x6, 0x4, 0x3, 0x7, 0x5, 0x5]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x49f, 0x0, &(0x7f0000000340), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x10000, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000240)=0x80000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, 0x0, 0x68) mkdir(0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$audio1(0xffffffffffffff9c, &(0x7f00000003c0), 0x600203, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) gettid() timer_create(0xb, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_gettime(r6, &(0x7f0000000800)) preadv(r5, &(0x7f0000001b00)=[{&(0x7f0000000000)=""/222, 0xde}], 0x1, 0x8, 0xeffffffc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x20000000000, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8000000000000}, 0x0, &(0x7f0000000100)={0x3ff, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x5}, &(0x7f0000000300)={0x77359400}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) 14.239748098s ago: executing program 1 (id=606): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'pimreg0\x00', 0x0}) pipe(0x0) (async) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e00000008000000040000000004000000010100", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0300000003000000050000000e00"/24, @ANYRES32, @ANYBLOB="0838601dae4dce2b99497bc5b2f55e3b848e38446648f504314330b24ec0b7d7def530f92851b35e3df376a1e4a893b63a82f2412e8067b38883544ac1afdba423295ed4504bd9720df5df7be44690aacabc973bfc2b73025cb09a7b5818b1e7507cd6483d2af1e87d16cbb4830f1669036ca223466e7f820ba9fa13311e1e20eb8338a92e81d4f05a78b2745ad38ec4027c0bfc7bf5b1be40c5fbf21e988dd3bc099045ffac31db2e6202"], 0x50) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x80000, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) move_pages(0xffffffffffffffff, 0x1, &(0x7f00000003c0)=[&(0x7f0000ffd000/0x2000)=nil], 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x2) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000280)="df", 0x0, 0x2}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x25, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f00000004c0)=@known='system.advise\x00') sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000000010104000000000000000002000000100002800c0002800500010000000000080007400000000024000e8014000180080001007f0000010800029b5a878200000000000c0002800500010000000000"], 0x50}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffe, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x0, 0x2}, {0xfff3, 0xf}}}, 0x24}}, 0x800) (async) socket$phonet_pipe(0x23, 0x5, 0x2) 13.917113957s ago: executing program 1 (id=607): socket$kcm(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) 11.666265083s ago: executing program 5 (id=614): truncate(0x0, 0x200000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xfffffffffffffffc) r3 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000240)={0x84, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x80015b1a, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="50000000000800000a01"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x11, @empty, 0x0, 0x0, 'sh\x00', 0x2b, 0x4, 0x23}, 0x2c) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) ioctl$SYNC_IOC_FILE_INFO(r0, 0xc0383e04, &(0x7f0000000240)={""/32, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{}, {}, {}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002, 0x2000, @rand_addr, 0x6}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x22004001, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f0000000200)={r10}, &(0x7f0000000240)=0x8) sendto$inet6(r7, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d9", 0x51, 0x20000001, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000580)={'syz', 0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) 10.607799041s ago: executing program 0 (id=622): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x5e96df73, 0x40000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000697b1e105e04e6047f8d0102030109023400010100000009046e020285b25c0009050402100000fa000905820240000001e6"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000004780)) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x4e, @loopback, 0x1ff}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f4e230000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) r8 = socket$netlink(0x10, 0x3, 0x15) writev(r8, &(0x7f00000003c0), 0x0) syz_usbip_server_init(0x2) fsopen(0x0, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r9, 0x40a85321, 0x0) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.controllers\x00', 0x5000000, 0x0) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f00000001c0)=[0x9, 0x0, 0x1, 0x9, 0x5, 0x10, 0x9, 0x9]) bpf$OBJ_GET_PROG(0x6, &(0x7f0000000300)=@o_path={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 10.551478315s ago: executing program 1 (id=624): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) socket$caif_stream(0x25, 0x1, 0x0) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r3, 0x0) listen(r2, 0x0) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x40, r1, 0x1, 0x70bd25, 0x25dfdbff, {0x2, 0x2, 0x2}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x40030000000000, 0x0, 0x40004}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x144) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140), 0x0}, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="e60dc19dba656d9664ba00ce3210004d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r5) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0x3137, 0x1829, 0x0, 0x0}], 0x1}) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x8, 0x1eb7}, &(0x7f0000000180)=0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000500)={r9, @in6={{0xa, 0x4e20, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x81, 0x4, 0x10001, 0x7, 0x1b, 0x9, 0xfc}, 0x9c) 9.279114483s ago: executing program 4 (id=627): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t\x00'/20, @ANYRES32=0x0, @ANYBLOB="04000d80080001"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000080000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) semget(0x3, 0x1, 0x28f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) accept4(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f00000006c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0xb8, 0x0, 0x2, 0x3}}, 0x48) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000040)=""/43, 0x2b) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) syz_genetlink_get_family_id$team(&(0x7f0000000040), r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000500000000000000000000850000007b00000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x8, 0xf}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="10000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000140000001000210b001e00000c00060003"], 0x28}}, 0x0) syz_genetlink_get_family_id$net_dm(&(0x7f0000000580), r5) 8.443564166s ago: executing program 2 (id=628): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000300)={0x0, [[0x0, 0xfffffffe, 0x0, 0x4], [0x10001], [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]], '\x00', [{0x0, 0x1}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {0x10}, {0x0, 0x900000}, {0x4}]}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000340)=0x15) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x7d) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="40164c0000005d3cfc3d6e49a03befb74f3975d96bb0dccb9223b8cbfbb9fbabf687bb3c4f6f04f8d3db5e28dbb2d7773e2a02a54d94c8136393ccfb059e8300108a2b01f993531b92c3"], 0x0, 0x0, 0x0, 0x0}) 7.7079607s ago: executing program 5 (id=629): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x3, 0x12) 7.70385191s ago: executing program 4 (id=630): r0 = socket(0x11, 0x3, 0x43) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x108, 0x4) sendmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000180)=@phonet={0x23, 0x5, 0x4, 0xc}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="b5f325fa9a316072048100000000", 0xe}], 0x1}}], 0x1, 0x24044015) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000540), &(0x7f0000000580)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa4, 0xa4, 0x4, [@float={0x8, 0x0, 0x0, 0x10, 0x4}, @typedef={0x3, 0x0, 0x0, 0x8, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1}}, @enum={0xe, 0x1, 0x0, 0x6, 0x4, [{0x0, 0x9}]}, @float={0xa, 0x0, 0x0, 0x10, 0x2}, @union={0x8, 0x6, 0x0, 0x5, 0x1, 0x4, [{0x0, 0x3, 0x800}, {0xd, 0x5, 0x1}, {0xa, 0x1, 0x6}, {0x5, 0x0, 0xec}, {0x1, 0x2, 0x10}, {0xa, 0x0, 0x8}]}]}, {0x0, [0x61, 0x5f]}}, &(0x7f0000000340)=""/145, 0xc0, 0x91, 0x1, 0x1, 0x10000}, 0x28) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0xa) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000380)="001b28ab7bc25a21088d218fd98cebb63ee758fce55c426c47bc5774b2ca9f078eb6c67d23bf3252681c768fd1a852c9ea6c103ea4", 0x35, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x800, 0x0, r1, 0x5, '\x00', 0x0, r3, 0x4, 0x2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.583495598s ago: executing program 5 (id=631): r0 = syz_usb_connect(0x0, 0x1a2, &(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYRES32, @ANYRES64=0x0, @ANYRESOCT], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f00000001c0)={0x0, 0xc, 0x2f, {0x2f, 0x7, "e56ed72fffae10ee52b54666bc95e6a1282dcb9c61b589adf7cc3fa497b6188647ecdcaf9697d73e13b87aca88"}}, &(0x7f0000000200)={0x0, 0x3, 0x32, @string={0x32, 0x3, "0e03d644b5a8caac52037c70b48d89c9b8edb738c76cb5464965b7c0436a73ba8fb9f2fac479aaccd90ca22e97c6acdd"}}, &(0x7f0000000240)={0x0, 0x22, 0x14, {[@main=@item_4={0x3, 0x0, 0x8, "df8b5062"}, @main=@item_4={0x3, 0x0, 0xb, "5b9a933c"}, @global=@item_4={0x3, 0x1, 0x1, "6846a588"}, @main=@item_4={0x3, 0x0, 0xe, "339c033a"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x86b5, 0x26, 0x1, {0x22, 0xe2c}}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000300)={0x40, 0xf, 0x2c, "a2ed6433fec28da60c8cd0707f3c28265bbb3fa659cb0777d84ebe9164f0ffe985a962848d0f14dd834a8b79"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000003c0)={0x20, 0x1, 0x49, "9a5656782c50874d217258f203825dbba7ef66d28b3c535ec392306dc48555a3c106c6e2f0dadaea70738d77a10729f74b5b7c9bbfa136b31c678e1f3008903fc42cc8cc81f6197d83"}, &(0x7f0000000440)={0x20, 0x3, 0x1, 0x9}}) syz_open_dev$sndmidi(&(0x7f0000000180), 0x1, 0x200) 6.739917611s ago: executing program 4 (id=632): madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) (async) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9) r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000480)={0x0, &(0x7f0000000000)=[@code={0xa, 0x6c, {"c4617d112c2af3470f0966baf80cb88cfa9d84ef66bafc0c66b864fc66ef400f35c4e189147c430a2e0fc71fc74424007c83cae5c7442402e2d30000c7442406000000000f011424440f01c90fab59000f20c035000001000f22c0"}}, @cpuid={0x14, 0x18, {0x3, 0x10001}}, @cpuid={0x14, 0x18, {0xdf, 0x2aee}}, @rdmsr={0x32, 0x18, {0x2ff}}, @rdmsr={0x32, 0x18, {0x2fb}}, @uexit={0x0, 0x18}, @code={0xa, 0x67, {"66440fd7d066ba2100b800000000efb907040000b8a04fd4bdba000000000f30c7442400f6000000c7442402b8520000ff1c24c42251a8c23e2e8b4ecdc4c17c5e09420f01c1c4e2a9bb4e0066ba410066b84fdd66ef"}}, @cpuid={0x14, 0x18, {0x1, 0x10000}}, @code={0xa, 0x60, {"0f0132440f20c0350c000000440f22c0c461285c6f01c4c17a6fa653000000c4612415a64100000066baf80cb89058c08fef66bafc0cb80f000000ef3edfca0ff8a9895200000f00e366660f382a08"}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18, 0xe24a}, @rdmsr={0x32, 0x18, {0x118}}, @rdmsr={0x32, 0x18, {0x2ae}}, @cpuid={0x14, 0x18, {0x2, 0x744}}, @wrmsr={0x1e, 0x20, {0x40000010, 0xffff}}, @uexit={0x0, 0x18, 0x8}, @wr_crn={0x46, 0x20, {0x2, 0x2}}, @code={0xa, 0x61, {"440f35c4219573d990460fc7b700000000363e266664410f00d63e460f1c43e3b9800000c00f3235000400000f30660fd3a2007000004a0fc71a0f0766baf80cb800129185ef66bafc0cb805000000ef"}}, @rdmsr={0x32, 0x18, {0xc001001f}}, @wrmsr={0x1e, 0x20, {0x9ca, 0x5}}, @uexit={0x0, 0x18, 0x100}, @wr_crn={0x46, 0x20, {0x4, 0x3}}, @wrmsr={0x1e, 0x20, {0x8f5, 0x6}}, @wr_crn={0x46, 0x20, {0x3, 0x9}}, @rdmsr={0x32, 0x18, {0x32c}}, @wrmsr={0x1e, 0x20, {0xb3b, 0x8}}, @rdmsr={0x32, 0x18, {0x40000072}}, @rdmsr={0x32, 0x18, {0x9aa}}, @rdmsr={0x32, 0x18, {0xa30}}, @wrmsr={0x1e, 0x20, {0x852, 0x7ff}}, @cpuid={0x14, 0x18, {0x1, 0x8}}, @cpuid={0x14, 0x18, {0xb, 0x4}}], 0x474}) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r0, 0x2, 0x4113110, r1, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000580)={0x0, &(0x7f00000004c0)=[@wrmsr={0x1e, 0x20, {0x386, 0xfffffffffffffffb}}, @wrmsr={0x1e, 0x20, {0xb29, 0xd90b}}, @rdmsr={0x32, 0x18, {0x1e13}}, @code={0xa, 0x4c, {"65420f01c245dfe066b837018ec08fe978dbaaffffffff64652666460fc734132ef3450fa7c043a56566430f3804dec4c1085900b9940a00000f32"}}], 0xa4}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x9) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x9) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x1, 0x4000, r4}, 0x18) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x1, 0x4000, r4}, 0x18) r5 = syz_open_dev$audion(&(0x7f0000000640), 0xffffffffffffff81, 0x2101) accept4$x25(r5, 0x0, &(0x7f0000000680), 0x80800) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f0000000ac0)={0x2, 0x1, 0x1a, 0x4, 0x1e6, &(0x7f00000006c0)="b83bb37cd6f071e0f91f9c4286642a501789528ab6c6c6404305ca9b07c27ce3ead5cb381320f517e21559b4a9ed1b66c7aa3967e56fd40eabee2536d4186b728c942a65be95c854db2b58c2abfb9c94fc21bb792543ee51a54435ee3b06edcc8c822ed95bf009375aef314d9504cafc351ed61d0d0e9df624eb3f48d1525c476a20bde1d88aa4f1c1fd426087af7265b3c2914d9fcf6f5a7116bbb1814a767c7f8cc435d767eaa6a4b575aa80e0de0b8ba85773a493395e34cb222866e13f8ff1dcbd89680ed39fecd16a90a44d6a7473609b8f08c8e64c86711485217bef0a90a4d5c3f54abbc41f746c08fed4adc2132058bb19a71cbffe9985cf3dffd23d0c3e992ed56a911462ef2bf8a93ff76aefe2ddfba066e3aba6074db8aa790e82dde4cff0da3e4a9a04dd143ca13f6b725ee43a2001a59e454e3a9a646ae01d35403ce37ea378582b383ab56925237afbf746441c3a798b0e3704c1665c3f240b0262794601571d71cbe9bdd99606963a286c68852810f9206b33aa34c674ded5bd84ee6422fa0e631dcf45baca3e1ab3c6384a774fda615225904a7f4bde8a5e45675ebc63c04e5b16add007e176179f17d4195e9b4ff49d49a2b9127d1444fd4729cae2f2fbfae9798b7d86b10f1a48425e6e8c91cfa4c226e4f097bf5378c93723a51252f34b1e1e33b8b3e96b2380eeb3ff96e6e35d0e68c4f349a77445cc4f584dbc042af4fbcd3dceaf0c10c2841ad1397309b6a114c40153925b487d1e356fb584e8cb4d2a6c3bb8763922bc9b258e346723896a0f7ed8df1e6f124f550c0f721f86b60fa6380620ecb27e72f1babda63e91f8cc1c44be972cc81df13337aac31b0cab5a842ed34647ca868f3c9454ec2f0cc79760769585c49c12ea8010f4a57ca51d28db35c5e85422e1daa67ff6ebd4d3f708b952430519d235b0a747f09e090d172f3d7e7e53f57ae773868000e084ff5111f3a04b9c0c0ecf43a32145ae744ea5874e8d7aef4e164811791c1d46d8f190f21ed5b8d34ed90e5684680040471736c066c06844774632b92b8bc97144e2c24ebc34d9e53afe60e8a20db2e9d6fdd08a02c4dd6f742a867fd074a7ccf1503d8828c6f06634904ca0b460d75aa181dd568ee52e92f7dfc5bdf17ed0ffbe4dce17d39b80c0d9f2282d4c40fb5129b2df4e8a83ebe1ddf21cd4637564ca8cc7a2760d40bed65dec84bb7e3053eb7ca9230d2e0c70b7416cbf87e01514a66382f057008b7c8cf1c1d9096c206344c66d56629c3e8ad12704088448654b15a62144627616cf2a52343f171ae363748f4c2b2241f308ac2a3d4d31a8ed8b0dd8829826664140e4af349ef375e9f946e1dc1dc2dcdd5d253213a40a6c108acbd68448c5f28238afb6c2f51dcefe0b8269d2fff40fed1b739e8cf4c11cbdb3778f227889e6f70ae78f55d190fe"}) (async) ioctl$KDFONTOP_SET_DEF(r5, 0x4b72, &(0x7f0000000ac0)={0x2, 0x1, 0x1a, 0x4, 0x1e6, &(0x7f00000006c0)="b83bb37cd6f071e0f91f9c4286642a501789528ab6c6c6404305ca9b07c27ce3ead5cb381320f517e21559b4a9ed1b66c7aa3967e56fd40eabee2536d4186b728c942a65be95c854db2b58c2abfb9c94fc21bb792543ee51a54435ee3b06edcc8c822ed95bf009375aef314d9504cafc351ed61d0d0e9df624eb3f48d1525c476a20bde1d88aa4f1c1fd426087af7265b3c2914d9fcf6f5a7116bbb1814a767c7f8cc435d767eaa6a4b575aa80e0de0b8ba85773a493395e34cb222866e13f8ff1dcbd89680ed39fecd16a90a44d6a7473609b8f08c8e64c86711485217bef0a90a4d5c3f54abbc41f746c08fed4adc2132058bb19a71cbffe9985cf3dffd23d0c3e992ed56a911462ef2bf8a93ff76aefe2ddfba066e3aba6074db8aa790e82dde4cff0da3e4a9a04dd143ca13f6b725ee43a2001a59e454e3a9a646ae01d35403ce37ea378582b383ab56925237afbf746441c3a798b0e3704c1665c3f240b0262794601571d71cbe9bdd99606963a286c68852810f9206b33aa34c674ded5bd84ee6422fa0e631dcf45baca3e1ab3c6384a774fda615225904a7f4bde8a5e45675ebc63c04e5b16add007e176179f17d4195e9b4ff49d49a2b9127d1444fd4729cae2f2fbfae9798b7d86b10f1a48425e6e8c91cfa4c226e4f097bf5378c93723a51252f34b1e1e33b8b3e96b2380eeb3ff96e6e35d0e68c4f349a77445cc4f584dbc042af4fbcd3dceaf0c10c2841ad1397309b6a114c40153925b487d1e356fb584e8cb4d2a6c3bb8763922bc9b258e346723896a0f7ed8df1e6f124f550c0f721f86b60fa6380620ecb27e72f1babda63e91f8cc1c44be972cc81df13337aac31b0cab5a842ed34647ca868f3c9454ec2f0cc79760769585c49c12ea8010f4a57ca51d28db35c5e85422e1daa67ff6ebd4d3f708b952430519d235b0a747f09e090d172f3d7e7e53f57ae773868000e084ff5111f3a04b9c0c0ecf43a32145ae744ea5874e8d7aef4e164811791c1d46d8f190f21ed5b8d34ed90e5684680040471736c066c06844774632b92b8bc97144e2c24ebc34d9e53afe60e8a20db2e9d6fdd08a02c4dd6f742a867fd074a7ccf1503d8828c6f06634904ca0b460d75aa181dd568ee52e92f7dfc5bdf17ed0ffbe4dce17d39b80c0d9f2282d4c40fb5129b2df4e8a83ebe1ddf21cd4637564ca8cc7a2760d40bed65dec84bb7e3053eb7ca9230d2e0c70b7416cbf87e01514a66382f057008b7c8cf1c1d9096c206344c66d56629c3e8ad12704088448654b15a62144627616cf2a52343f171ae363748f4c2b2241f308ac2a3d4d31a8ed8b0dd8829826664140e4af349ef375e9f946e1dc1dc2dcdd5d253213a40a6c108acbd68448c5f28238afb6c2f51dcefe0b8269d2fff40fed1b739e8cf4c11cbdb3778f227889e6f70ae78f55d190fe"}) syz_open_dev$dri(&(0x7f0000000b00), 0x6, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000b40)={r3, 0x5, 0x1, 0x6f}) (async) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000b40)={r3, 0x5, 0x1, 0x6f}) r7 = syz_clone(0x0, &(0x7f0000002d00)="4834ede1e86b0d4035e4c7343c22f3ac9ab34e676f5b34ccb8d6f2fc0f2e07b382f27f01cd9cb5f63e37be43065b5008bf4adf4bf6ac58dfa2f709ccff75366d3dec25cf2f1a8c9f6c8ff4778b82e02b7b47c3667df5d72864dc567a21d349a108ead05224bc1e33903fd73e0b1b2692cf4e8f029b241b670aae59e0dcce20620df99cb399bb3ef4340d1d042125317279e19767ae", 0x95, &(0x7f0000002dc0), &(0x7f0000002e00), &(0x7f0000002e40)="74b856f454116679360572dcbcc597ac2c339db6eecf5a501d23c85f60618a674e5f805062eac287e18eb92676f8efe98e3058023dbabbb2760816a785b250d8b5f50a66cc89f26158f98468f6bd1ceeeee0471639c1dfeb4201cbf3dd811990eeb32470fe35b16cbd6bc7528e3898300cefd7080b7f2f2d957029c53848b981decdc1e6219e1e006d071bb9d3d362ce17691a49a46809b1088d0b8e4c7b396619dd64a9bbb7603d3b21a61312fd462165e8ccd3ff7f06cf") geteuid() (async) r8 = geteuid() getgid() (async) r9 = getgid() statx(r5, &(0x7f0000003100)='./file0\x00', 0x1400, 0x4, &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r5, &(0x7f0000003440)='./file0\x00', 0x6000, 0x80, &(0x7f0000003480)) (async) statx(r5, &(0x7f0000003440)='./file0\x00', 0x6000, 0x80, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(r5, &(0x7f0000003580)='./file0\x00', 0x400, 0x2, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r5, &(0x7f00000036c0)='./file0\x00', 0x1000, 0x10, &(0x7f0000003700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)) (async) getresuid(&(0x7f0000003980), &(0x7f00000039c0), &(0x7f0000003a00)=0x0) stat(&(0x7f0000003a40)='./file0\x00', &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = geteuid() lstat(&(0x7f0000003c00)='./file0\x00', &(0x7f0000003c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000000b80)="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", 0x2000, &(0x7f0000003e00)={&(0x7f0000002b80)={0x50, 0x0, 0x8, {0x7, 0x2b, 0x4, 0x880e80, 0x3e, 0x7f, 0x4, 0x1, 0x0, 0x0, 0x80, 0x9}}, &(0x7f0000002c00)={0x18, 0xffffffffffffffda, 0x1225, {0x1}}, &(0x7f0000002c40)={0x18, 0xfffffffffffffff5, 0x1, {0x3ff}}, &(0x7f0000002c80)={0x18, 0x0, 0xfffffffffffffffb, {0xc}}, &(0x7f0000002cc0)={0x18, 0x0, 0xfffffffffffffffb, {0xffff0000}}, &(0x7f0000002f00)={0x28, 0x0, 0x2, {{0xd, 0xfffffffffffffffa, 0x0, r7}}}, &(0x7f0000002f40)={0x60, 0xfffffffffffffffe, 0x4eb, {{0x6, 0x496, 0xe0000000, 0x80000001, 0xa0, 0x6, 0x1, 0x4}}}, &(0x7f0000002fc0)={0x18, 0x0, 0x101, {0x5}}, &(0x7f0000003000)={0x1f, 0xfffffffffffffff5, 0x1, {'/dev/dri/card#\x00'}}, &(0x7f0000003040)={0x20, 0xffffffffffffffda, 0x6, {0x0, 0xe}}, &(0x7f0000003080)={0x78, 0x0, 0xe, {0x3, 0x2, 0x0, {0x4, 0x1, 0xd, 0x38, 0x1000, 0x6, 0xfffffff8, 0x7, 0x8, 0xa000, 0x5, r8, r9, 0x6, 0x5}}}, &(0x7f0000003240)={0x90, 0xffffffffffffffda, 0x5, {0x5, 0x3, 0x40, 0x8, 0x200, 0x0, {0x1, 0x4b3, 0x8, 0x6, 0x3, 0x0, 0x401, 0x5, 0x8, 0x6000, 0x0, r10, 0xee00, 0x101, 0x7fff}}}, &(0x7f0000003300)={0x118, 0x0, 0x848, [{0x6, 0x101, 0xf, 0x3, '/dev/dri/card#\x00'}, {0x0, 0x4, 0xf, 0xad, '/dev/dri/card#\x00'}, {0x5, 0x1, 0xf, 0x1, '/dev/dri/card#\x00'}, {0x1, 0x5, 0xf, 0xf, '/dev/dri/card#\x00'}, {0x2, 0x9, 0xc, 0x5, '/dev/audio#\x00'}, {0x6, 0x4, 0x0, 0x7}, {0x4, 0x0, 0xc, 0x3, '/dev/audio#\x00'}]}, &(0x7f0000003800)={0x160, 0x7974d1d158195bc5, 0x5, [{{0x3, 0x3, 0xffffffffffffffff, 0x3, 0xfffffffe, 0x8, {0x2, 0x9, 0x3, 0xc, 0x7ff, 0x8, 0x6, 0x9, 0x3, 0x1000, 0x2, 0x0, r11, 0x8, 0x1}}, {0x3, 0x8000000000000001, 0xc, 0x8000, '/dev/audio#\x00'}}, {{0x4, 0x0, 0x5, 0x8, 0x3, 0x4, {0x2, 0x2, 0x4, 0x963e, 0x3, 0x87, 0x4, 0x0, 0x1, 0xc000, 0xdbd, r12, r13, 0x1, 0xe060}}, {0x5, 0x7, 0xf, 0x100, '/dev/dri/card#\x00'}}]}, &(0x7f0000003b00)={0xa0, 0x0, 0x8, {{0x3, 0x2, 0xfdcb, 0x1, 0x5, 0x8, {0x0, 0x5, 0x1d, 0xc82, 0x7fffffff, 0x7fffffffffffffff, 0x6, 0x400, 0x0, 0x1000, 0x8, r14, r15, 0xa0f, 0x7f}}, {0x0, 0x19}}}, &(0x7f0000003bc0)={0x20, 0x0, 0x8, {0x0, 0x0, 0x8, 0xb}}, &(0x7f0000003cc0)={0x130, 0xffffffffffffffda, 0x10000, {0xa4, 0x7, 0x0, '\x00', {0x80, 0xddd9, 0x7, 0x7d2, r16, r17, 0x1000, '\x00', 0x9, 0x10001, 0x1, 0x3, {0x8, 0x1}, {0xb871}, {0x1, 0x7}, {0x9, 0x5}, 0x5, 0x8, 0xe, 0x2}}}}) (async) syz_fuse_handle_req(r6, &(0x7f0000000b80)="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", 0x2000, &(0x7f0000003e00)={&(0x7f0000002b80)={0x50, 0x0, 0x8, {0x7, 0x2b, 0x4, 0x880e80, 0x3e, 0x7f, 0x4, 0x1, 0x0, 0x0, 0x80, 0x9}}, &(0x7f0000002c00)={0x18, 0xffffffffffffffda, 0x1225, {0x1}}, &(0x7f0000002c40)={0x18, 0xfffffffffffffff5, 0x1, {0x3ff}}, &(0x7f0000002c80)={0x18, 0x0, 0xfffffffffffffffb, {0xc}}, &(0x7f0000002cc0)={0x18, 0x0, 0xfffffffffffffffb, {0xffff0000}}, &(0x7f0000002f00)={0x28, 0x0, 0x2, {{0xd, 0xfffffffffffffffa, 0x0, r7}}}, &(0x7f0000002f40)={0x60, 0xfffffffffffffffe, 0x4eb, {{0x6, 0x496, 0xe0000000, 0x80000001, 0xa0, 0x6, 0x1, 0x4}}}, &(0x7f0000002fc0)={0x18, 0x0, 0x101, {0x5}}, &(0x7f0000003000)={0x1f, 0xfffffffffffffff5, 0x1, {'/dev/dri/card#\x00'}}, &(0x7f0000003040)={0x20, 0xffffffffffffffda, 0x6, {0x0, 0xe}}, &(0x7f0000003080)={0x78, 0x0, 0xe, {0x3, 0x2, 0x0, {0x4, 0x1, 0xd, 0x38, 0x1000, 0x6, 0xfffffff8, 0x7, 0x8, 0xa000, 0x5, r8, r9, 0x6, 0x5}}}, &(0x7f0000003240)={0x90, 0xffffffffffffffda, 0x5, {0x5, 0x3, 0x40, 0x8, 0x200, 0x0, {0x1, 0x4b3, 0x8, 0x6, 0x3, 0x0, 0x401, 0x5, 0x8, 0x6000, 0x0, r10, 0xee00, 0x101, 0x7fff}}}, &(0x7f0000003300)={0x118, 0x0, 0x848, [{0x6, 0x101, 0xf, 0x3, '/dev/dri/card#\x00'}, {0x0, 0x4, 0xf, 0xad, '/dev/dri/card#\x00'}, {0x5, 0x1, 0xf, 0x1, '/dev/dri/card#\x00'}, {0x1, 0x5, 0xf, 0xf, '/dev/dri/card#\x00'}, {0x2, 0x9, 0xc, 0x5, '/dev/audio#\x00'}, {0x6, 0x4, 0x0, 0x7}, {0x4, 0x0, 0xc, 0x3, '/dev/audio#\x00'}]}, &(0x7f0000003800)={0x160, 0x7974d1d158195bc5, 0x5, [{{0x3, 0x3, 0xffffffffffffffff, 0x3, 0xfffffffe, 0x8, {0x2, 0x9, 0x3, 0xc, 0x7ff, 0x8, 0x6, 0x9, 0x3, 0x1000, 0x2, 0x0, r11, 0x8, 0x1}}, {0x3, 0x8000000000000001, 0xc, 0x8000, '/dev/audio#\x00'}}, {{0x4, 0x0, 0x5, 0x8, 0x3, 0x4, {0x2, 0x2, 0x4, 0x963e, 0x3, 0x87, 0x4, 0x0, 0x1, 0xc000, 0xdbd, r12, r13, 0x1, 0xe060}}, {0x5, 0x7, 0xf, 0x100, '/dev/dri/card#\x00'}}]}, &(0x7f0000003b00)={0xa0, 0x0, 0x8, {{0x3, 0x2, 0xfdcb, 0x1, 0x5, 0x8, {0x0, 0x5, 0x1d, 0xc82, 0x7fffffff, 0x7fffffffffffffff, 0x6, 0x400, 0x0, 0x1000, 0x8, r14, r15, 0xa0f, 0x7f}}, {0x0, 0x19}}}, &(0x7f0000003bc0)={0x20, 0x0, 0x8, {0x0, 0x0, 0x8, 0xb}}, &(0x7f0000003cc0)={0x130, 0xffffffffffffffda, 0x10000, {0xa4, 0x7, 0x0, '\x00', {0x80, 0xddd9, 0x7, 0x7d2, r16, r17, 0x1000, '\x00', 0x9, 0x10001, 0x1, 0x3, {0x8, 0x1}, {0xb871}, {0x1, 0x7}, {0x9, 0x5}, 0x5, 0x8, 0xe, 0x2}}}}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000003ec0)={0x3000, 0x8000, 0x1, 0xcd8, 0x0}, &(0x7f0000003f00)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000003f40)={r18, 0x1}, 0x8) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) socket$kcm(0x29, 0x0, 0x0) 6.332402714s ago: executing program 4 (id=633): getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) (async, rerun: 32) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) (rerun: 32) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r4, &(0x7f0000000140), 0x4001) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) setresuid(0x0, 0x0, 0xee00) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') (async, rerun: 32) chdir(&(0x7f00000000c0)='./bus\x00') (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) (async) socket$inet6_sctp(0xa, 0x1, 0x84) 6.279277668s ago: executing program 1 (id=634): socket$kcm(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x44080}, 0x0) 5.881355719s ago: executing program 5 (id=635): syz_clone3(&(0x7f0000000200)={0x80000000, &(0x7f0000000000), &(0x7f00000000c0)=0x0, &(0x7f0000000100), {0x1e}, &(0x7f0000000540)=""/4096, 0x1000, &(0x7f0000001540)=""/4096, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x9}, 0x58) sched_setaffinity(r0, 0x8, &(0x7f0000000280)) r1 = getpid() prlimit64(r1, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0xb00, 0x0) r2 = syz_io_uring_setup(0x5169, 0x0, 0x0, 0x0) syz_io_uring_setup(0xa94, &(0x7f00000005c0)={0x0, 0xa1c1, 0x200}, &(0x7f0000000040), &(0x7f0000000140)) io_uring_enter(r2, 0x48e9, 0x252b, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x100000004) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001b00)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4044088) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in6={0xa, 0x4e21, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xb420}, 0x10, &(0x7f000001bc00)=[{&(0x7f0000000380)="75b6a3eedb7d186259c720ba41a766902c934f41f981a136772e1f2ccdd7b017838ec807c6d4282d623a6d48297927607d69a2dcd3a5b25230fd5042ee08da765983a0ef"}, {&(0x7f000001ab00)="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"}, {&(0x7f000001bb00)="89c20ef8613c7a0e83534be7d9bdc277671a9603cc3dd97017f2ec3c5039eeef1f5d337a54336d356bbfec36a111387672cf6d3bc5697049225e50527fb9f38d097d0e82e1b4ef0af2f2f4ebe02d2f810acb88e6190366ae341998befedbf4db55e23f8ecde74f75b333057e43599fa8100cf1207f0b268ff25a83ca1c9a4259417dc70c3da3920e89f75b46963f0b90e4c8a23e9b4e18edd5b2580f3a5a3e5e21d0801cb5c381939f5f167b8ba18f97adb9f4a4377ddd8ab0aec192b10822f52b498165215fd696fdc57f13e366858d405964dcfd743f28af39468e5cdc7643bb2e65017e480db07caac190e5ee652118fe109d"}, {&(0x7f0000000300)="160e2f1ed9bf4564757c3dea855d6f70ead380e7a779dd994476f07da1"}, {&(0x7f0000000400)="1aa9006e07971a730e27f6dff76cdc505f6c10cd9cf345e1ff5d07a12d9e61d9c87edb5a47f5e1366c3495df3a17cfd1b94ad0c1624af982c5983a7c50a586e7b883a1ff09a8900048f14cb7fbdb18e7a6669d1e9450ca20f07dfe7349d4ff40135f8d1a309469479f5489c4840fc368"}, {&(0x7f0000000480)="d5c64a46976aa20401a3df6311b6ee933ecfc178b44967ce0002d4a9651ada86d68af3e2fcd6bb2c0a"}], 0x1, 0x0, 0x2, 0x804c040}, 0xc851) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x141080) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r5, 0xc0045516, &(0x7f0000000b00)=0xa) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000080)=0x3ff) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000100)=0x400) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmmsg$inet_sctp(r4, &(0x7f000001bfc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=r6], 0x20, 0xc005}, {&(0x7f000001bc80)=@in6={0xa, 0x4e24, 0x88, @local}, 0x1c, &(0x7f000001bec0)=[{&(0x7f000001bcc0)="3c4a1a35bf66e5384ae4d7a20134f16cf20635f821fd44e60626e71f3e1531f0114439900dc4f146d43fd3f88bb301213fd23792f4652f04ba72e5db6be71424566584eb8c624471117867ad98d35506fd1d8f3f575cd1e7f44e9385614d6a2d37336e85caac55395303cdcfb0cb16524d2088ee0c88a733dd8d1f946a0cce88d8c76a", 0x83}, {&(0x7f000001bd80)="88508339b488fe9853d96fcd3eb93f4db179c87d4134acd34bc3bc42cddfb96fc1c48aed7f0c8afeea7b54803ed4a0e8b087e358ce6e04a9e37e1ffcf1f9be15f0b51a063a589a347345d466e8be51b9fbbad770b12ec84b2d749deb437661330959", 0x62}, {&(0x7f000001be00)="d1807188a6cfdf151a28285899529033fdb6d4b66579f9f0ae6b4aa516b3b4e6b1cbb0e95fbd9688795690e602ee0e666a41604b6cf89496cda6dbf1e81e840471d0edd7c4a119662fbb574656", 0x4d}, {&(0x7f000001be80)="69f650331404a658c4d24eca0b012fb10d8aa42ea280", 0x16}], 0x4, 0x0, 0x0, 0x40}, {&(0x7f000001bf00)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10, &(0x7f000001bf40), 0x0, &(0x7f000001bf80)=[@authinfo={0x18, 0x84, 0x6, {0xca}}, @authinfo={0x18, 0x84, 0x6, {0x7ff}}], 0x30, 0x4000}], 0x3, 0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000540)=@assoc_value={r6, 0x1}, &(0x7f0000003b40)=0x8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) 4.962967285s ago: executing program 2 (id=636): r0 = syz_open_procfs(0x0, &(0x7f0000001080)='smaps_rollup\x00') r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x7ff, 0x420000) request_key(&(0x7f0000000100)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)='authencesn(michael_mic-generic,xchacha20-generic)\x00', 0xfffffffffffffff8) ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000040)=""/98) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000002140)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(michael_mic-generic,xchacha20-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4) read$FUSE(r0, &(0x7f0000002e40)={0x2020}, 0x2020) 4.795669025s ago: executing program 0 (id=637): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='xfs\x00', 0xa00000, &(0x7f0000000140)='grpquota') r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000280), 0x7fffffff, 0x80082) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x9ea3b) r2 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r2, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x2, {{0x41}}}, 0x80, 0x0}}], 0x1, 0x4) socket$inet(0x2, 0x5, 0x3d) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) r8 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r4, &(0x7f0000000180)={0x20000008}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r10, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x39011}}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x0) close_range(0xffffffffffffffff, r9, 0x2) 4.690767641s ago: executing program 2 (id=638): r0 = io_uring_setup(0x2e30, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xffffffff, 0x73}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000280)=0x1) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0xc) openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, &(0x7f00000002c0)={@multicast1, @loopback, 0xffffffffffffffff, "a0eb7e7e3cca616565dfabe919330aef4c427aa87ea88a17d417350d4478b53a", 0x1, 0xfff, 0x5fbe8fa2, 0x2}, 0x3c) setns(r2, 0x24020000) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYRESDEC=r6], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2000000000}}, 0x18) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r8, &(0x7f0000001940)={0x2020}, 0x2020) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c63616368653d6d6d61702c6b5009d990b1fdc471e58dd3a1f1496eba219cc162ebf8340d361006e2b19c5044"]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r9 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r9, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) umount2(&(0x7f0000000540)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 4.561575543s ago: executing program 4 (id=639): truncate(0x0, 0x200000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xfffffffffffffffc) r3 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000240)={0x84, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x80015b1a, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="50000000000800000a01"]) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x11, @empty, 0x0, 0x0, 'sh\x00', 0x2b, 0x4, 0x23}, 0x2c) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) ioctl$SYNC_IOC_FILE_INFO(r0, 0xc0383e04, &(0x7f0000000240)={""/32, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000340)=[{}, {}, {}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/88, 0x58}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x8000002, 0x2000, @rand_addr, 0x6}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x22004001, 0x0, 0x0) sendto$inet6(r7, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d9", 0x51, 0x20000001, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000580)={'syz', 0x1}) semget(0x2, 0x1, 0x21) 4.322251099s ago: executing program 2 (id=640): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x4, r3, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x0, 0x0, &(0x7f0000000a80)}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) (async) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x985f113f5a5e9cb2) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000001, 0x110, r4, 0x2dda6000) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r5, 0x8, 0x0, 0xff9e, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffedb, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') (async, rerun: 32) r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (rerun: 32) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000040)) (async) getdents64(r7, &(0x7f0000001f00)=""/4093, 0xffd) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) 4.204069297s ago: executing program 0 (id=641): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) write$cgroup_int(r0, &(0x7f0000000080)=0x3, 0x12) 4.150356587s ago: executing program 0 (id=642): socket$packet(0x11, 0x2, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000480)={0xffffffff, [[0x400, 0x90000000, 0x6, 0x81, 0x9, 0x81, 0x6746cfe1, 0x6], [0x8, 0x4, 0x7fff, 0xffffffff, 0x1a, 0xfffffffa, 0xb3, 0x138], [0x5c5, 0x2, 0x3, 0x9, 0x7f, 0x2, 0x7, 0x3]], '\x00', [{0x8, 0x4, 0x0, 0x1, 0x1}, {0x7, 0x6}, {0xfffffff7, 0x9, 0x1, 0x1, 0x1, 0x1}, {0x6, 0x101, 0x0, 0x1}, {0x2, 0x200, 0x0, 0x1}, {0x5, 0x7, 0x1, 0x1}, {0x79cd, 0x51023d9, 0x1, 0x0, 0x0, 0x1}, {0x5, 0xc, 0x0, 0x0, 0x1, 0x1}, {0x9, 0x5, 0x1}, {0x3, 0x80000000, 0x1, 0x0, 0x1, 0x1}, {0xb, 0x2, 0x1, 0x1}, {0x40, 0x7fff, 0x0, 0x1, 0x0, 0x1}], '\x00', 0x10001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)='%', 0x1, 0x4000054, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x3089469, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) 3.822075457s ago: executing program 5 (id=643): timer_create(0x2, &(0x7f0000000200)={0x0, 0x3, 0x1}, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f00000002c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123200"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x840) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbfbf, 0xbf}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRES8=r4, @ANYRES16=r3, @ANYRES64=r4, @ANYRES32=r2, @ANYBLOB="20005e800400010008000700000400000800050008000300080006"], 0x3c}}, 0x0) 3.027616192s ago: executing program 0 (id=644): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000030801080000000000000000030000000c00048008000640800000080500030021000000"], 0x28}, 0x1, 0x0, 0x0, 0xc8dca5301997a772}, 0x80) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000478850400a040200c4b100000001090212000100000000090400000098d93cefae0c8c03767ef99ef1fd11db21688c6c15a681fa61d1fcbef19f074744268c00"/83], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) 2.974315318s ago: executing program 5 (id=645): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r0, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r0, 0x0, {0x1, 0x1, 0x2}, 0xfd}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r0, 0x1, {0x0, 0xff}, 0xfe}, 0x18) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="700100001200020029bd7000fcdbdf250b0302034e214e2009000000f8ffffff020000000400000000000000000000803750000009800000", @ANYRES32=r0, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x4000}, 0x12000000) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$inet(0x2, 0x801, 0x0) listen(r3, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r3, 0x0, r4, 0x0, 0x7ffff000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x58}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = memfd_secret(0x0) mmap(&(0x7f000032e000/0x3000)=nil, 0x3000, 0x1, 0x10010, r8, 0x0) rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r7], 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) 2.896725539s ago: executing program 1 (id=646): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x77359400}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x80000000}]) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000100)={0xcf, 0x1, 0xfd, 0x2, 0x3, 0x1, 0x4, 0x0, 0x3, 0x6, 0x52, 0xe1, 0xd, 0x80}, 0xe) sendto$inet6(r4, &(0x7f00000003c0)="20ce999e3b38581f347258a47de3e90c14e54bbea5b0e8094cf22acdf71cc259419f94b51a0f1894a73e5aab2ba0475238c49e8073e349d7d6602d2a5cbcc0edbd4c1d82d118cbe8b7e488d857b8bb994f82ac4530930fb75a8c", 0x5a, 0x2004c004, &(0x7f00000000c0)={0xa, 0x4e23, 0x80000000, @private2, 0xa}, 0x1c) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5, 0x0, 0x0, 0x0, {}, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000030000000400000004"], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18) socket$key(0xf, 0x3, 0x2) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f0000000040)={r10, 0xff80, 0x10}, 0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r10, 0xe}, &(0x7f0000000380)=0x8) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, &(0x7f0000000140)=0x1) read(r7, &(0x7f0000000040)=""/46, 0x2e) 2.324776401s ago: executing program 2 (id=647): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='rcu_utilization\x00', r0}, 0x18) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) rt_sigsuspend(&(0x7f0000000000)={[0x6d285c1d]}, 0x8) r2 = socket(0x2, 0x5, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000380)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x2, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x40010) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) readv(r4, &(0x7f0000000480)=[{&(0x7f0000000080)=""/87, 0x57}, {&(0x7f0000000100)=""/217, 0xd9}], 0x2) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xf, 0x12, r4, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'bridge0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x1b, [0x1, 0xffffffff, 0x8, 0x5, 0x80, 0x1, 0x3, 0x60000000, 0xfffffffc, 0x4fa, 0x2, 0x1, 0xfffffffd, 0x9, 0x1, 0x1, 0x0, 0x4, 0x9, 0x0, 0x7, 0x7, 0x1e2d, 0x3, 0xfffffffb, 0x2, 0x4, 0x800000, 0xf4b, 0xf9, 0xf2, 0x200, 0x6, 0x664, 0x8, 0x6, 0x5, 0xfff, 0x6, 0x3, 0x6, 0xa22, 0xfb2, 0x5, 0x4, 0x40, 0x100, 0xdf, 0xabe, 0x1000, 0x7, 0x2, 0xd313, 0x5, 0x7, 0xfffffe2f, 0x7, 0xc, 0xf, 0x9, 0x8, 0x80000000, 0x2, 0xf, 0x6, 0xfffffff8, 0xee, 0x6, 0x5, 0x1, 0x7f, 0xfffffff8, 0x9, 0xfff, 0x30c6, 0x3e8, 0x9, 0xe, 0x6, 0x9e56, 0x4, 0xfffffff0, 0x4b, 0x4460, 0x7ff, 0x10, 0xe3b7, 0xd0, 0xe7, 0x9, 0x8, 0xffffa016, 0xe, 0xf, 0x8001, 0xf2, 0x2, 0x80000001, 0x1, 0x1, 0x38a, 0x1001, 0xe, 0x2, 0xff, 0x1, 0x3, 0x4, 0x200, 0x3, 0x9, 0x7, 0x2, 0x4, 0x21b50516, 0x4, 0x1, 0xe, 0x7, 0x81, 0x0, 0x0, 0xdab, 0x7, 0x8e0, 0x7, 0xf615, 0x9]}}) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) bind$unix(r2, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x4, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x0, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x6, 0xe1cc, 0x0, 0xe0000000, 0x3, 0x1ff, 0x80000089, 0xfffffffd, 0x0, 0x20001e56, 0xffffeadb, 0xffffffff, 0x3d, 0x8, 0x4, 0x7ff, 0xdffffffa]}) 1.96404189s ago: executing program 4 (id=648): ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) writev(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYRES32], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x3}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000040)=0x3b89960, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x1b0740, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$key(0xf, 0x3, 0x2) r2 = dup(r1) accept$unix(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x200000000001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x0, &(0x7f0000007000/0x1000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x1f, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="420fc79b07f81b60b9800000c00f3235010000000f30c4a19d71f1000f0d933186000066b825000f00d8410feb150000010026f2470f2b13c744240015010000c74424029f00c0feff1c24c744240074000000c744240251ffd6b0ff1c24450f01d1", 0x62}], 0x1, 0x22, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000280)='g', 0x1, 0x4008891, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1800002}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x5}, 0xe) shutdown(0xffffffffffffffff, 0x1) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') 816.228648ms ago: executing program 0 (id=649): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='btrfs\x00', 0x200000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x82803, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101b01) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000300), 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0902000000000000000001000000dd06f3acb9a723903e3e050004000200"], 0x24}}, 0x0) lstat(&(0x7f0000000480)='./cgroup\x00', 0x0) 0s ago: executing program 2 (id=650): r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000000)=[@uexit={0x0, 0x18}, @wr_crn={0x46, 0x20, {0x2, 0x7}}, @code={0xa, 0x54, {"660f01f867460faeec400f082ef2ae3e260f3566470fe122b9800000c00f3235010000000f30c744240045000000c744240298350000ff2c24410f01c566b819008ec8"}}, @uexit={0x0, 0x18, 0x41d4}, @rdmsr={0x32, 0x18, {0x847}}, @uexit={0x0, 0x18, 0x7}, @cpuid={0x14, 0x18, {0xffffffd4, 0x7b4}}, @wrmsr={0x1e, 0x20, {0xbc5, 0x3}}, @rdmsr={0x32, 0x18, {0x24b}}, @cpuid={0x14, 0x18, {0x5, 0x7}}, @cpuid={0x14, 0x18, {0x4, 0x7fff}}, @uexit={0x0, 0x18, 0x7}, @code={0xa, 0x68, {"0ff84000436fc4c37d08f806c74424009b000000c74424020d000000ff1c248fe820a6cf3d66baf80cb8b0f99786ef66bafc0ced66b868008ed866b83b008ee066baf80cb870979880ef66bafc0c66b80e0066eff30f09"}}], 0x1d4}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000001900)) tgkill(r0, r0, 0x21) kernel console output (not intermixed with test programs): dev loop6, logical block 0, async page read [ 172.079348][ T6696] Buffer I/O error on dev loop6, logical block 1, async page read [ 172.087990][ T6696] Buffer I/O error on dev loop6, logical block 2, async page read [ 172.115202][ T6696] Buffer I/O error on dev loop6, logical block 3, async page read [ 172.139762][ T6410] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.155835][ T6410] Buffer I/O error on dev loop6, logical block 1, async page read [ 172.164876][ T6410] Buffer I/O error on dev loop6, logical block 2, async page read [ 172.176901][ T6410] Buffer I/O error on dev loop6, logical block 3, async page read [ 172.217427][ T6699] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.242076][ T6699] Buffer I/O error on dev loop6, logical block 1, async page read [ 172.734903][ T6694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.968804][ T5927] usb usb4-port1: attempt power cycle [ 173.349280][ T5927] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 173.406905][ T5927] usb 4-1: not running at top speed; connect to a high speed hub [ 173.435267][ T5927] usb 4-1: config 11 has an invalid interface number: 78 but max is 1 [ 173.448608][ T5927] usb 4-1: config 11 has an invalid interface number: 197 but max is 1 [ 173.467257][ T5927] usb 4-1: config 11 has an invalid interface number: 163 but max is 1 [ 173.498510][ T5927] usb 4-1: config 11 has an invalid interface descriptor of length 2, skipping [ 173.510152][ T5927] usb 4-1: config 11 has an invalid descriptor of length 232, skipping remainder of the config [ 173.548506][ T5927] usb 4-1: config 11 has 3 interfaces, different from the descriptor's value: 2 [ 173.567883][ T5927] usb 4-1: config 11 has no interface number 0 [ 173.574203][ T977] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 173.586095][ T5927] usb 4-1: config 11 has no interface number 1 [ 173.593382][ T5927] usb 4-1: config 11 has no interface number 2 [ 173.602037][ T5927] usb 4-1: config 11 interface 78 altsetting 6 endpoint 0xC has invalid wMaxPacketSize 0 [ 173.613026][ T5927] usb 4-1: config 11 interface 78 altsetting 6 endpoint 0xD has an invalid bInterval 0, changing to 4 [ 173.625155][ T5927] usb 4-1: config 11 interface 78 altsetting 6 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 173.642507][ T5927] usb 4-1: config 11 interface 78 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 173.654589][ T5927] usb 4-1: config 11 interface 78 altsetting 6 endpoint 0xA has an invalid bInterval 172, changing to 4 [ 173.667917][ T5927] usb 4-1: config 11 interface 78 altsetting 6 has a duplicate endpoint with address 0xA, skipping [ 173.679732][ T5927] usb 4-1: config 11 interface 78 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 173.878874][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 173.894573][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 173.908670][ T43] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 173.920791][ T977] usb 3-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 173.948078][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.959075][ T5927] usb 4-1: config 11 interface 197 altsetting 130 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 173.970963][ T977] usb 3-1: Product: syz [ 173.975176][ T977] usb 3-1: Manufacturer: syz [ 173.980326][ T5927] usb 4-1: config 11 interface 197 altsetting 130 has 5 endpoint descriptors, different from the interface descriptor's value: 15 [ 173.995681][ T977] usb 3-1: SerialNumber: syz [ 174.010307][ T5927] usb 4-1: too many endpoints for config 11 interface 163 altsetting 121: 109, using maximum allowed: 30 [ 174.022930][ T977] usb 3-1: config 0 descriptor?? [ 174.031503][ T977] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 174.058767][ T5927] usb 4-1: config 11 interface 163 altsetting 121 has a duplicate endpoint with address 0x8, skipping [ 174.078636][ T43] usb 2-1: device descriptor read/64, error -71 [ 174.105542][ T5927] usb 4-1: config 11 interface 163 altsetting 121 has a duplicate endpoint with address 0x3, skipping [ 174.156369][ T5927] usb 4-1: config 11 interface 163 altsetting 121 has a duplicate endpoint with address 0x6, skipping [ 174.183003][ T5927] usb 4-1: config 11 interface 163 altsetting 121 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 174.207097][ T5927] usb 4-1: config 11 interface 163 altsetting 121 has an invalid descriptor for endpoint zero, skipping [ 174.240962][ T6707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.250653][ T6707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.268221][ T5927] usb 4-1: config 11 interface 163 altsetting 121 has 6 endpoint descriptors, different from the interface descriptor's value: 109 [ 174.272094][ T5894] usb 3-1: USB disconnect, device number 12 [ 174.293712][ T5927] usb 4-1: config 11 interface 78 has no altsetting 0 [ 174.307600][ T5927] usb 4-1: config 11 interface 197 has no altsetting 0 [ 174.316570][ T5927] usb 4-1: config 11 interface 163 has no altsetting 0 [ 174.327626][ T5927] usb 4-1: New USB device found, idVendor=0df6, idProduct=0079, bcdDevice=60.41 [ 174.330400][ T43] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 174.351532][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.359880][ T5927] usb 4-1: Product: syz [ 174.364084][ T5927] usb 4-1: Manufacturer: syz [ 174.369224][ T5927] usb 4-1: SerialNumber: syz [ 174.383925][ T6703] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 174.538645][ T43] usb 2-1: device descriptor read/64, error -71 [ 174.652537][ T43] usb usb2-port1: attempt power cycle [ 174.699484][ T5988] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 174.861740][ T6718] syz.0.202: attempt to access beyond end of device [ 174.861740][ T6718] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0 [ 174.883647][ T6718] (syz.0.202,6718,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 174.895132][ T6718] (syz.0.202,6718,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 174.903497][ T6718] (syz.0.202,6718,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 174.918549][ T6718] (syz.0.202,6718,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 175.038502][ T5988] usb 5-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 175.082421][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.121886][ T43] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 175.129112][ T5927] usb 4-1: USB disconnect, device number 11 [ 175.210449][ T5988] usb 5-1: config 0 descriptor?? [ 175.216922][ T43] usb 2-1: device descriptor read/8, error -71 [ 175.455483][ T5988] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7 [ 176.410026][ T43] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 176.451014][ T43] usb 2-1: device descriptor read/8, error -71 [ 176.468937][ T6726] trusted_key: encrypted_key: insufficient parameters specified [ 176.792539][ T43] usb usb2-port1: unable to enumerate USB device [ 178.418693][ T5156] Bluetooth: hci4: command 0x0405 tx timeout [ 178.639066][ T5191] bcm5974 5-1:0.0: could not read from device [ 178.712157][ T5191] bcm5974 5-1:0.0: could not read from device [ 178.783438][ T5988] usb 5-1: USB disconnect, device number 6 [ 178.806656][ T5191] bcm5974 5-1:0.0: could not read from device [ 181.108615][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 181.268819][ T43] usb 4-1: device descriptor read/64, error -71 [ 181.418533][ T5894] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 181.498772][ T5927] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 181.538586][ T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 181.610301][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 181.652742][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.660982][ T5927] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 181.684087][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.697160][ T5927] usb 2-1: config 0 has no interface number 0 [ 181.718512][ T43] usb 4-1: device descriptor read/64, error -71 [ 181.725616][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 181.732207][ T5927] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 181.748479][ T5894] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 181.766188][ T5894] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.798820][ T5927] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 181.813424][ T5894] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 181.830937][ T5927] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 181.833065][ T5894] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 181.851268][ T43] usb usb4-port1: attempt power cycle [ 181.870144][ T5927] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 181.881469][ T5894] usb 1-1: Manufacturer: syz [ 181.897136][ T5927] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 181.899987][ T5894] usb 1-1: config 0 descriptor?? [ 181.958569][ T5927] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 181.983654][ T5927] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 181.996919][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.013648][ T5927] usb 2-1: config 0 descriptor?? [ 182.044437][ T6798] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 182.070211][ T6798] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 182.113392][ T6065] block nbd1: Possible stuck request ffff88802569e000: control (read@0,1024B). Runtime 30 seconds [ 182.114350][ T5927] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 182.125301][ T6065] block nbd1: Possible stuck request ffff88802569e1c0: control (read@1024,1024B). Runtime 30 seconds [ 182.143948][ T6065] block nbd1: Possible stuck request ffff88802569e380: control (read@2048,1024B). Runtime 30 seconds [ 182.155794][ T6065] block nbd1: Possible stuck request ffff88802569e540: control (read@3072,1024B). Runtime 30 seconds [ 182.208699][ T43] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 182.259251][ T43] usb 4-1: device descriptor read/8, error -71 [ 182.449546][ T5894] rc_core: IR keymap rc-hauppauge not found [ 182.455622][ T30] audit: type=1400 audit(1755485723.789:5): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6813 comm="syz.2.225" netif=wpan0 [ 182.464709][ T6798] ldusb 2-1:0.55: Write buffer overflow, 2 bytes dropped [ 182.489563][ T5894] Registered IR keymap rc-empty [ 182.495328][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 182.538656][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 182.567569][ T5894] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 182.579513][ T43] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 182.631928][ T43] usb 4-1: device descriptor read/8, error -71 [ 182.639064][ T5927] usb 2-1: USB disconnect, device number 15 [ 182.665065][ T5927] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 182.667207][ T5894] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 182.756580][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 182.764481][ T43] usb usb4-port1: unable to enumerate USB device [ 182.810619][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 182.941776][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 182.978998][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 182.998611][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 183.034147][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 183.088588][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 183.108645][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 183.139377][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 183.178563][ T5894] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 183.216221][ T5894] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 183.238643][ T5894] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 183.298939][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 183.350278][ T5894] usb 1-1: USB disconnect, device number 12 [ 183.501573][ T9] usb 3-1: device descriptor read/64, error -71 [ 184.398525][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 184.431408][ T30] audit: type=1326 audit(1755485725.789:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6830 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ebf8ebe9 code=0x7ffc0000 [ 184.724655][ T30] audit: type=1326 audit(1755485725.809:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6830 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ebf8ebe9 code=0x7ffc0000 [ 184.821764][ T30] audit: type=1326 audit(1755485725.809:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6830 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f31ebf8ebe9 code=0x7ffc0000 [ 184.854340][ T30] audit: type=1326 audit(1755485725.809:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6830 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ebf8ebe9 code=0x7ffc0000 [ 184.938075][ T9] usb 3-1: device descriptor read/64, error -71 [ 184.977556][ T30] audit: type=1326 audit(1755485725.809:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6830 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ebf8ebe9 code=0x7ffc0000 [ 185.069075][ T9] usb usb3-port1: attempt power cycle [ 185.138168][ T30] audit: type=1326 audit(1755485725.819:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6830 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f31ebf8ebe9 code=0x7ffc0000 [ 185.268351][ T30] audit: type=1326 audit(1755485725.819:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6830 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ebf8ebe9 code=0x7ffc0000 [ 185.309451][ T30] audit: type=1326 audit(1755485725.819:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6830 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ebf8ebe9 code=0x7ffc0000 [ 185.331019][ T30] audit: type=1326 audit(1755485725.819:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6830 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f31ebf8ebe9 code=0x7ffc0000 [ 185.664416][ T9] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 185.838782][ T9] usb 3-1: device descriptor read/8, error -71 [ 185.862099][ T6855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 186.445209][ T9] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 186.498311][ T9] usb 3-1: device descriptor read/8, error -71 [ 186.637950][ T9] usb usb3-port1: unable to enumerate USB device [ 186.666827][ T6852] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 187.115286][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'. [ 187.449817][ T5944] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 187.458101][ T6861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.495163][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.238'. [ 187.625036][ T5944] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 187.661441][ T5944] usb 3-1: config 0 has no interface number 0 [ 187.698006][ T5944] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 187.742231][ T5944] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 187.799860][ T5944] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 187.859264][ T5944] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 187.907064][ T5944] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 187.936038][ T5944] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 187.981224][ T5944] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 187.997422][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.027098][ T5944] usb 3-1: config 0 descriptor?? [ 188.053016][ T6871] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 188.061486][ T6871] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 188.091758][ T5944] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 188.318553][ T6871] ldusb 3-1:0.55: Write buffer overflow, 2 bytes dropped [ 188.333619][ T5894] usb 3-1: USB disconnect, device number 17 [ 188.366493][ T5894] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 188.551827][ T5944] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 188.689897][ T6894] netlink: 36 bytes leftover after parsing attributes in process `syz.0.242'. [ 188.701011][ T6894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.242'. [ 189.214430][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.244'. [ 189.584234][ T5944] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.184802][ T5944] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00 [ 190.194065][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.261496][ T5944] usb 2-1: config 0 descriptor?? [ 190.471696][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 190.471715][ T30] audit: type=1400 audit(1755485731.829:22): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6902 comm="syz.2.246" netif=wpan0 [ 191.015570][ T6907] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 191.015570][ T6907] program syz.4.248 not setting count and/or reply_len properly [ 191.039868][ T6907] vlan2: entered promiscuous mode [ 191.044952][ T6907] macvtap0: entered promiscuous mode [ 191.154655][ T6914] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.165474][ T5944] usbhid 2-1:0.0: can't add hid device: -71 [ 191.171860][ T5944] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 191.214363][ T5944] usb 2-1: USB disconnect, device number 16 [ 191.526170][ T6923] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=41663 (83326 ns) > initial count (4462 ns). Using initial count to start timer. [ 191.744821][ T6934] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 192.046799][ T6941] loop9: detected capacity change from 0 to 7 [ 192.070539][ T6411] buffer_io_error: 498 callbacks suppressed [ 192.070557][ T6411] Buffer I/O error on dev loop9, logical block 0, async page read [ 192.094677][ T6411] Buffer I/O error on dev loop9, logical block 0, async page read [ 192.108079][ T6411] Buffer I/O error on dev loop9, logical block 0, async page read [ 192.125391][ T6411] Buffer I/O error on dev loop9, logical block 0, async page read [ 192.134974][ T6411] Buffer I/O error on dev loop9, logical block 0, async page read [ 192.356831][ T6947] can0: slcan on ttyS3. [ 192.786812][ T6948] can0 (unregistered): slcan off ttyS3. [ 193.560280][ T6965] loop6: detected capacity change from 0 to 1 [ 193.726130][ T30] audit: type=1326 audit(1755485735.069:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6958 comm="syz.3.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ebf8ebe9 code=0x7ffc0000 [ 193.896840][ T30] audit: type=1326 audit(1755485735.069:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6958 comm="syz.3.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f31ebf8ebe9 code=0x7ffc0000 [ 193.918968][ T6965] Dev loop6: unable to read RDB block 1 [ 193.924861][ T6965] loop6: unable to read partition table [ 194.373294][ T30] audit: type=1326 audit(1755485735.079:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6958 comm="syz.3.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ebf8ebe9 code=0x7ffc0000 [ 194.415936][ T6965] loop6: partition table beyond EOD, truncated [ 194.499453][ T6965] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 194.527502][ T30] audit: type=1326 audit(1755485735.079:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6958 comm="syz.3.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f31ebf8ebe9 code=0x7ffc0000 [ 194.576199][ T30] audit: type=1326 audit(1755485735.079:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6958 comm="syz.3.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ebf8ebe9 code=0x7ffc0000 [ 194.748638][ T30] audit: type=1326 audit(1755485735.079:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6958 comm="syz.3.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f31ebf8ebe9 code=0x7ffc0000 [ 194.802941][ T30] audit: type=1326 audit(1755485735.079:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6958 comm="syz.3.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ebf8ebe9 code=0x7ffc0000 [ 194.860169][ T30] audit: type=1326 audit(1755485735.079:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6958 comm="syz.3.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f31ebf8ebe9 code=0x7ffc0000 [ 194.957508][ T30] audit: type=1326 audit(1755485735.079:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6958 comm="syz.3.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31ebf8ebe9 code=0x7ffc0000 [ 195.858973][ T6999] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 196.446847][ T5927] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 196.489479][ T5944] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 196.800036][ T5944] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.814664][ T5944] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 196.844825][ T5927] usb 1-1: not running at top speed; connect to a high speed hub [ 196.969594][ T7015] Device name cannot be null; rc = [-22] [ 196.977419][ T7015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.659359][ T5944] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 197.723264][ T5944] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 197.820692][ T5944] usb 5-1: SerialNumber: syz [ 198.000319][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 198.122315][ T5944] usb 5-1: 0:2 : does not exist [ 198.818954][ T5894] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 198.913518][ T5944] usb 5-1: USB disconnect, device number 8 [ 199.121893][ T5894] usb 4-1: device descriptor read/64, error -71 [ 199.383553][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.486109][ T5927] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 199.493995][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.503346][ T5927] usb 1-1: can't read configurations, error -71 [ 199.608570][ T5894] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 199.749250][ T5894] usb 4-1: device descriptor read/64, error -71 [ 199.759632][ T6410] udevd[6410]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.935129][ T5894] usb usb4-port1: attempt power cycle [ 200.538798][ T5894] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 200.612035][ T5894] usb 4-1: device descriptor read/8, error -71 [ 200.841676][ T7045] can0: slcan on ttyS3. [ 200.908497][ T5894] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 200.933392][ T5894] usb 4-1: device descriptor read/8, error -71 [ 201.076250][ T5894] usb usb4-port1: unable to enumerate USB device [ 201.100264][ T7047] can0 (unregistered): slcan off ttyS3. [ 201.289913][ T5927] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 201.655111][ T5927] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 201.668134][ T5927] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 201.680737][ T5927] usb 5-1: config 0 has no interface number 0 [ 201.687085][ T5927] usb 5-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 201.743305][ T5927] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 201.813077][ T5927] usb 5-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 202.582574][ T5927] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 202.592708][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.604281][ T5927] usb 5-1: config 0 descriptor?? [ 203.017837][ T7050] netlink: 'syz.4.278': attribute type 10 has an invalid length. [ 203.026013][ T7050] netlink: 40 bytes leftover after parsing attributes in process `syz.4.278'. [ 203.047096][ T7050] team0: Port device geneve0 added [ 203.103322][ T5927] usb 5-1: USB disconnect, device number 9 [ 203.168724][ T977] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 203.272591][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 203.331449][ T7087] veth1_to_hsr: entered promiscuous mode [ 203.337896][ T7087] macsec1: entered promiscuous mode [ 203.344533][ T7087] macsec1: entered allmulticast mode [ 203.350063][ T7087] veth1_to_hsr: entered allmulticast mode [ 203.408335][ T7087] veth1_to_hsr: left allmulticast mode [ 203.415602][ T7087] veth1_to_hsr: left promiscuous mode [ 203.616934][ T7074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.920405][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 203.942198][ T977] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 204.141336][ T977] usb 1-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 204.151021][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.163462][ T977] usb 1-1: config 0 descriptor?? [ 204.180251][ T7073] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 204.266873][ T7095] xt_nfacct: accounting object `syz1' does not exists [ 205.355611][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 205.355631][ T30] audit: type=1400 audit(1755485746.639:39): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7099 comm="syz.2.290" netif=wpan0 [ 205.388013][ T977] usbhid 1-1:0.0: can't add hid device: -71 [ 205.406141][ T977] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 205.419344][ T977] usb 1-1: USB disconnect, device number 15 [ 205.761613][ T43] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 206.179756][ T43] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 206.217579][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 206.248842][ T43] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 206.275110][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.306871][ T43] usb 4-1: config 0 descriptor?? [ 206.335283][ T43] usb-storage 4-1:0.0: USB Mass Storage device detected [ 206.480666][ T43] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 206.694158][ T7106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.703293][ T7106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.779832][ T977] usb 4-1: USB disconnect, device number 20 [ 206.803119][ T7114] Process accounting resumed [ 206.942282][ T7125] loop2: detected capacity change from 0 to 7 [ 206.962667][ T7125] Dev loop2: unable to read RDB block 7 [ 206.988529][ T5894] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 206.988710][ T7125] loop2: unable to read partition table [ 207.025968][ T7125] loop2: partition table beyond EOD, truncated [ 207.035891][ T7125] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 207.502325][ T5894] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.527384][ T5894] usb 3-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 207.547243][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.555541][ T5894] usb 3-1: Product: syz [ 207.563932][ T5894] usb 3-1: Manufacturer: syz [ 207.578422][ T5894] usb 3-1: SerialNumber: syz [ 207.616701][ T5894] usb 3-1: config 0 descriptor?? [ 207.649161][ T5894] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 207.668977][ T5894] dvb-usb: bulk message failed: -22 (3/0) [ 207.711202][ T5894] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 207.729316][ T5894] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 207.794914][ T5894] usb 3-1: media controller created [ 207.821461][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.914524][ T5894] dvb-usb: bulk message failed: -22 (6/0) [ 207.944135][ T5894] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 208.014970][ T5894] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 208.071063][ T5894] dvb-usb: schedule remote query interval to 150 msecs. [ 208.111584][ T5894] dvb-usb: bulk message failed: -22 (3/0) [ 208.161154][ T5894] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 208.230441][ T5988] dvb-usb: bulk message failed: -22 (1/0) [ 208.236420][ T5988] dvb-usb: error while querying for an remote control event. [ 208.309027][ T7134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.701323][ T5894] usb 3-1: USB disconnect, device number 18 [ 208.891027][ T5894] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 209.118554][ T5944] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 210.208500][ T5944] usb 2-1: Using ep0 maxpacket: 16 [ 210.375933][ T5944] usb 2-1: too many configurations: 223, using maximum allowed: 8 [ 210.933294][ T5944] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 210.948219][ T5944] usb 2-1: can't read configurations, error -22 [ 210.951152][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.311'. [ 211.188980][ T5944] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 211.428637][ T5944] usb 2-1: Using ep0 maxpacket: 16 [ 211.458043][ T5944] usb 2-1: too many configurations: 223, using maximum allowed: 8 [ 211.478343][ T5944] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 211.497760][ T5944] usb 2-1: can't read configurations, error -22 [ 211.510798][ T5944] usb usb2-port1: attempt power cycle [ 211.588806][ T9] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 211.830284][ T9] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 211.933187][ T5944] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 212.041953][ T9] usb 4-1: config 0 has no interface number 0 [ 212.160593][ T9] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 212.348649][ T5944] usb 2-1: device descriptor read/8, error -71 [ 212.385158][ T6065] block nbd1: Possible stuck request ffff88802569e000: control (read@0,1024B). Runtime 60 seconds [ 212.397001][ T6065] block nbd1: Possible stuck request ffff88802569e1c0: control (read@1024,1024B). Runtime 60 seconds [ 212.407383][ T9] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 212.408132][ T6065] block nbd1: Possible stuck request ffff88802569e380: control (read@2048,1024B). Runtime 60 seconds [ 212.429204][ T6065] block nbd1: Possible stuck request ffff88802569e540: control (read@3072,1024B). Runtime 60 seconds [ 212.469786][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.477840][ T9] usb 4-1: Product: syz [ 212.592402][ T9] usb 4-1: Manufacturer: syz [ 212.614096][ T9] usb 4-1: SerialNumber: syz [ 212.641054][ T9] usb 4-1: config 0 descriptor?? [ 212.651313][ T7200] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 212.671742][ T7183] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 212.682639][ T9] usb-storage 4-1:0.20: USB Mass Storage device detected [ 212.730051][ T9] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 212.909095][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'. [ 212.966031][ T9] scsi host1: usb-storage 4-1:0.20 [ 212.988879][ T7205] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 212.995260][ T7205] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 213.036832][ T7205] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 213.059201][ T7205] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 213.061373][ T9] usb 4-1: USB disconnect, device number 21 [ 213.066866][ T7200] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 213.185794][ T7200] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 213.238146][ T7205] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 213.300517][ T7205] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 213.357430][ T7200] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 213.375209][ T7205] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 213.410281][ T7200] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 213.476055][ T7205] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 213.638229][ T7205] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 213.726183][ T7200] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 213.746436][ T7205] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 213.776260][ T7205] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 213.786266][ T7231] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 213.793033][ T7231] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 213.794598][ T7200] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 213.813467][ T7205] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 213.838761][ T7231] vhci_hcd vhci_hcd.0: Device attached [ 213.855500][ T7235] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 213.868194][ T7200] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 213.880293][ T7205] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 213.899161][ T7200] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 213.912600][ T7231] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 213.919173][ T7231] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 213.935151][ T7205] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 213.944522][ T7231] vhci_hcd vhci_hcd.0: Device attached [ 213.969547][ T7205] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 213.986681][ T7231] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 213.993345][ T7231] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 214.025566][ T7200] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 214.026079][ T7231] vhci_hcd vhci_hcd.0: Device attached [ 214.054245][ T7200] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 214.078547][ T5988] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 214.134950][ T7231] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(16) [ 214.141631][ T7231] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 214.198629][ T7231] vhci_hcd vhci_hcd.0: Device attached [ 214.220064][ T7235] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(21) [ 214.226740][ T7235] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 214.278614][ T7235] vhci_hcd vhci_hcd.0: Device attached [ 214.298513][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 214.310500][ T7231] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 214.565691][ T5944] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 214.598455][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 214.710573][ T7244] vhci_hcd: connection closed [ 214.760610][ T7240] vhci_hcd: connection closed [ 214.761169][ T7236] vhci_hcd: connection closed [ 214.777992][ T2998] vhci_hcd: stop threads [ 214.826050][ T9] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 214.903899][ T2998] vhci_hcd: release socket [ 214.924005][ T7233] vhci_hcd: connection reset by peer [ 214.937787][ T2998] vhci_hcd: disconnect device [ 214.952855][ T5944] usb 2-1: Using ep0 maxpacket: 8 [ 215.019624][ T7246] vhci_hcd: connection closed [ 215.031170][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 215.031554][ T9] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 215.047159][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.047195][ T5944] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.047224][ T5944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 215.047255][ T5944] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 215.047305][ T5944] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 215.047333][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.053188][ T5944] usb 2-1: config 0 descriptor?? [ 215.108568][ T9] usb 3-1: config 0 has no interface number 0 [ 215.118551][ T2998] vhci_hcd: stop threads [ 215.128471][ T9] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0x45, changing to 0x5 [ 215.176791][ T2998] vhci_hcd: release socket [ 215.184973][ T2998] vhci_hcd: disconnect device [ 215.190946][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 215.200902][ T9] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 215.218917][ T2998] vhci_hcd: stop threads [ 215.223475][ T2998] vhci_hcd: release socket [ 215.234793][ T2998] vhci_hcd: disconnect device [ 215.239694][ T9] usb 3-1: Product: syz [ 215.251449][ T2998] vhci_hcd: stop threads [ 215.258048][ T2998] vhci_hcd: release socket [ 215.265844][ T2998] vhci_hcd: disconnect device [ 215.282270][ T9] usb 3-1: config 0 descriptor?? [ 215.286038][ T2998] vhci_hcd: stop threads [ 215.300987][ T7209] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 215.310532][ T2998] vhci_hcd: release socket [ 215.320284][ T2998] vhci_hcd: disconnect device [ 215.777539][ T5847] usb 2-1: USB disconnect, device number 21 [ 215.779254][ T51] Bluetooth: hci5: Opcode 0x0c03 failed: -19 [ 217.086329][ T7271] netlink: 'syz.1.326': attribute type 21 has an invalid length. [ 217.295954][ T43] usb 3-1: USB disconnect, device number 19 [ 219.222573][ T5988] vhci_hcd: vhci_device speed not set [ 220.478624][ T43] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 220.663845][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 220.897124][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.692433][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.741531][ T43] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 221.758641][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.040620][ T5927] usb usb40-port1: attempt power cycle [ 222.090782][ T43] usb 2-1: config 0 descriptor?? [ 222.445811][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 222.462707][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 222.491308][ T43] usb 2-1: USB disconnect, device number 22 [ 223.141917][ T5927] usb usb40-port1: unable to enumerate USB device [ 223.258843][ T7346] program syz.3.339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.888539][ T977] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 226.100809][ T7360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.155327][ T977] usb 5-1: device descriptor read/64, error -71 [ 226.438785][ T977] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 226.619083][ T977] usb 5-1: device descriptor read/64, error -71 [ 226.747939][ T7377] Invalid ELF header magic: != ELF [ 226.769882][ T977] usb usb5-port1: attempt power cycle [ 227.199601][ T977] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 227.292143][ T977] usb 5-1: device descriptor read/8, error -71 [ 227.489019][ T5847] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 227.765458][ T977] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 227.848552][ T5847] usb 4-1: Using ep0 maxpacket: 32 [ 227.859119][ T5847] usb 4-1: config 1 has an invalid interface number: 233 but max is 0 [ 227.868962][ T977] usb 5-1: device descriptor read/8, error -71 [ 227.981535][ T5847] usb 4-1: config 1 has no interface number 0 [ 228.036686][ T5847] usb 4-1: config 1 interface 233 altsetting 250 bulk endpoint 0x9 has invalid maxpacket 8 [ 228.098469][ T977] usb usb5-port1: unable to enumerate USB device [ 228.128792][ T5847] usb 4-1: config 1 interface 233 has no altsetting 0 [ 230.622869][ T5847] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac [ 230.682401][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.808739][ T5847] usb 4-1: Product: syz [ 230.812977][ T5847] usb 4-1: Manufacturer: syz [ 230.919599][ T5847] usb 4-1: SerialNumber: syz [ 230.978772][ T5847] usb 4-1: can't set config #1, error -71 [ 231.014918][ T5847] usb 4-1: USB disconnect, device number 22 [ 231.083576][ T30] audit: type=1326 audit(1755485772.439:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7395 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b0b8ebe9 code=0x7ffc0000 [ 231.238545][ T30] audit: type=1326 audit(1755485772.439:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7395 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69b0b8ebe9 code=0x7ffc0000 [ 231.282473][ T7417] netlink: 48 bytes leftover after parsing attributes in process `syz.2.354'. [ 231.383089][ T30] audit: type=1326 audit(1755485772.439:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7395 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b0b8ebe9 code=0x7ffc0000 [ 232.039172][ T30] audit: type=1326 audit(1755485772.439:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7395 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b0b8ebe9 code=0x7ffc0000 [ 232.065924][ T30] audit: type=1326 audit(1755485772.479:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7395 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f69b0b8ebe9 code=0x7ffc0000 [ 232.193881][ T30] audit: type=1326 audit(1755485772.489:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7395 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b0b8ebe9 code=0x7ffc0000 [ 232.301720][ T30] audit: type=1326 audit(1755485772.489:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7395 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69b0b8ebe9 code=0x7ffc0000 [ 232.489742][ T30] audit: type=1326 audit(1755485772.539:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7395 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f69b0b8ebe9 code=0x7ffc0000 [ 233.347652][ T5972] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 233.501372][ T7428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.512465][ T5972] usb 5-1: device descriptor read/64, error -71 [ 233.948527][ T5972] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 234.046227][ T7456] warning: `syz.0.365' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 234.111268][ T5972] usb 5-1: device descriptor read/64, error -71 [ 234.230055][ T5972] usb usb5-port1: attempt power cycle [ 234.272441][ T7460] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 234.285924][ T7460] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 234.588691][ T5847] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 234.608720][ T5972] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 234.621876][ T7468] bridge_slave_0: left allmulticast mode [ 234.637666][ T7468] bridge_slave_0: left promiscuous mode [ 234.650651][ T5972] usb 5-1: device descriptor read/8, error -71 [ 234.662977][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.690691][ T7468] bridge_slave_1: left allmulticast mode [ 234.696571][ T7468] bridge_slave_1: left promiscuous mode [ 234.706092][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.739282][ T7468] bond0: (slave bond_slave_0): Releasing backup interface [ 234.761668][ T7468] bond0: (slave bond_slave_1): Releasing backup interface [ 234.772417][ T7476] netlink: 48 bytes leftover after parsing attributes in process `syz.2.370'. [ 234.791795][ T5847] usb 4-1: unable to get BOS descriptor or descriptor too short [ 234.813794][ T5847] usb 4-1: not running at top speed; connect to a high speed hub [ 234.832247][ T5847] usb 4-1: too many configurations: 50, using maximum allowed: 8 [ 234.850185][ T7468] team0: Port device team_slave_0 removed [ 234.860962][ T5847] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 234.872189][ T5847] usb 4-1: can't read configurations, error -61 [ 234.879156][ T5928] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 234.901413][ T7468] team0: Port device team_slave_1 removed [ 234.908234][ T7468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.920311][ T7468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.929399][ T5972] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 234.943763][ T7468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.953145][ T7468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.970110][ T5972] usb 5-1: device descriptor read/8, error -71 [ 235.028651][ T5847] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 235.059082][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 235.078257][ T5928] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 235.087601][ T5972] usb usb5-port1: unable to enumerate USB device [ 235.094620][ T5928] usb 2-1: config 0 has no interface number 0 [ 235.113746][ T5928] usb 2-1: config 0 interface 12 has no altsetting 0 [ 235.421027][ T7490] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 235.478734][ T5928] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40 [ 235.487846][ T5928] usb 2-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3 [ 235.539731][ T5847] usb 4-1: unable to get BOS descriptor or descriptor too short [ 235.548227][ T5847] usb 4-1: not running at top speed; connect to a high speed hub [ 235.568541][ T5928] usb 2-1: Product: syz [ 235.572773][ T5928] usb 2-1: Manufacturer: syz [ 235.577410][ T5928] usb 2-1: SerialNumber: syz [ 235.584905][ T5847] usb 4-1: too many configurations: 50, using maximum allowed: 8 [ 235.600528][ T5847] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 235.608154][ T5847] usb 4-1: can't read configurations, error -61 [ 235.621454][ T5928] usb 2-1: config 0 descriptor?? [ 235.645861][ T5847] usb usb4-port1: attempt power cycle [ 235.906892][ T7503] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.375'. [ 236.023534][ T5847] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 236.105749][ T5847] usb 4-1: unable to get BOS descriptor or descriptor too short [ 236.134414][ T5847] usb 4-1: not running at top speed; connect to a high speed hub [ 236.157894][ T5847] usb 4-1: too many configurations: 50, using maximum allowed: 8 [ 236.185058][ T5847] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 236.207058][ T5847] usb 4-1: can't read configurations, error -61 [ 236.350473][ T5847] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 237.094525][ T5847] usb 4-1: unable to get BOS descriptor or descriptor too short [ 237.113166][ T5847] usb 4-1: not running at top speed; connect to a high speed hub [ 237.139239][ T5847] usb 4-1: too many configurations: 50, using maximum allowed: 8 [ 237.158199][ T5847] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 237.193036][ T5847] usb 4-1: can't read configurations, error -61 [ 237.214972][ T5847] usb usb4-port1: unable to enumerate USB device [ 237.681762][ T7533] netlink: 48 bytes leftover after parsing attributes in process `syz.3.381'. [ 237.988479][ T5988] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 238.139025][ T5988] usb 5-1: device descriptor read/64, error -71 [ 238.398739][ T5988] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 238.593713][ T7468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.603066][ T7468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.648642][ T5988] usb 5-1: device descriptor read/64, error -71 [ 238.664175][ T7468] team0: Mode changed to "activebackup" [ 238.684142][ T5928] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: f8 failed: -71 [ 238.693027][ T5928] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 238.713179][ T5928] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 238.723371][ T5928] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 238.760119][ T5988] usb usb5-port1: attempt power cycle [ 238.792522][ T5928] usb 2-1: USB disconnect, device number 23 [ 238.891108][ T7555] sctp: [Deprecated]: syz.0.386 (pid 7555) Use of int in max_burst socket option. [ 238.891108][ T7555] Use struct sctp_assoc_value instead [ 239.118646][ T5988] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 239.190940][ T5988] usb 5-1: device descriptor read/8, error -71 [ 239.450831][ T5988] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 239.458703][ T43] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 239.492305][ T5988] usb 5-1: device descriptor read/8, error -71 [ 239.588997][ T5928] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 239.609372][ T5988] usb usb5-port1: unable to enumerate USB device [ 239.628514][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 239.640441][ T43] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 239.658507][ T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 239.687851][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 239.706855][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.747405][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.795177][ T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 239.835357][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.888562][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 239.901322][ T5928] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 239.917181][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.202187][ T5928] usb 2-1: config 0 descriptor?? [ 240.567991][ T5928] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 240.694938][ T43] usb 4-1: GET_CAPABILITIES returned 0 [ 240.702148][ T43] usbtmc 4-1:16.0: can't read capabilities [ 240.800195][ T43] usb 4-1: USB disconnect, device number 27 [ 241.068660][ T5988] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 241.076706][ T7590] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 241.188845][ T5894] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 241.331301][ T5988] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.342691][ T5988] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 241.406655][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.420991][ T5988] usb 3-1: config 0 descriptor?? [ 241.431674][ T5894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 241.451013][ T5988] pwc: Askey VC010 type 2 USB webcam detected. [ 241.462504][ T5894] usb 5-1: config 6 has an invalid interface number: 200 but max is 0 [ 241.472253][ T5894] usb 5-1: config 6 has no interface number 0 [ 241.480616][ T5894] usb 5-1: config 6 interface 200 has no altsetting 0 [ 241.494542][ T5894] usb 5-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 241.504182][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.512559][ T5894] usb 5-1: Product: syz [ 241.516974][ T5894] usb 5-1: Manufacturer: syz [ 241.521671][ T5894] usb 5-1: SerialNumber: syz [ 241.850316][ T5847] usb 2-1: USB disconnect, device number 24 [ 241.882320][ T5988] pwc: recv_control_msg error -32 req 02 val 2b00 [ 241.935120][ T5988] pwc: recv_control_msg error -32 req 02 val 2700 [ 241.953346][ T5988] pwc: recv_control_msg error -32 req 02 val 2c00 [ 242.030757][ T5988] pwc: recv_control_msg error -32 req 04 val 1000 [ 242.050431][ T5988] pwc: recv_control_msg error -32 req 04 val 1300 [ 242.057919][ T5988] pwc: recv_control_msg error -32 req 04 val 1400 [ 242.065562][ T5988] pwc: recv_control_msg error -32 req 02 val 2000 [ 242.093321][ T5988] pwc: recv_control_msg error -32 req 02 val 2100 [ 242.104302][ T5988] pwc: recv_control_msg error -32 req 04 val 1500 [ 242.121281][ T5988] pwc: recv_control_msg error -32 req 02 val 2500 [ 242.661718][ T5988] pwc: recv_control_msg error -71 req 02 val 2600 [ 242.671158][ T5894] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 242.702511][ T5988] pwc: recv_control_msg error -71 req 02 val 2900 [ 242.754537][ T5988] pwc: recv_control_msg error -71 req 02 val 2800 [ 242.764174][ T5894] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 242.774259][ T5988] pwc: recv_control_msg error -71 req 04 val 1100 [ 242.788895][ T5988] pwc: recv_control_msg error -71 req 04 val 1200 [ 242.799099][ T5894] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 242.807128][ T7608] netlink: 'syz.0.399': attribute type 1 has an invalid length. [ 242.832481][ T7608] bond1: entered promiscuous mode [ 242.837828][ T7608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.860992][ T5894] usb 5-1: media controller created [ 242.867386][ T5988] pwc: Registered as video103. [ 242.897442][ T5988] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 242.914515][ T7608] bond1: (slave dummy0): making interface the new active one [ 242.921999][ T7608] dummy0: entered promiscuous mode [ 242.928582][ T7608] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 242.942252][ T6065] block nbd1: Possible stuck request ffff88802569e000: control (read@0,1024B). Runtime 90 seconds [ 242.955967][ T6065] block nbd1: Possible stuck request ffff88802569e1c0: control (read@1024,1024B). Runtime 90 seconds [ 242.967047][ T6065] block nbd1: Possible stuck request ffff88802569e380: control (read@2048,1024B). Runtime 90 seconds [ 242.978250][ T6065] block nbd1: Possible stuck request ffff88802569e540: control (read@3072,1024B). Runtime 90 seconds [ 242.994781][ T5894] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 243.030846][ T5988] usb 3-1: USB disconnect, device number 20 [ 243.091837][ T5894] dvb-usb: recv bulk message failed: -22 [ 243.137592][ T7605] bridge1: entered allmulticast mode [ 243.289137][ T5894] dvb-usb: bulk message failed: -71 (6/0) [ 243.295701][ T5894] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 243.349717][ T5894] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 243.419053][ T5894] dvb-usb: schedule remote query interval to 150 msecs. [ 243.426338][ T5894] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 243.428288][ T7626] fuse: Bad value for 'rootmode' [ 243.483872][ T5894] usb 5-1: USB disconnect, device number 22 [ 243.515960][ T7631] overlay: filesystem on ./bus not supported as upperdir [ 243.538558][ T5928] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 243.723065][ T5928] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 243.742987][ T5928] usb 4-1: config 0 has no interface number 0 [ 243.785033][ T5928] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 243.791442][ T5894] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 243.889143][ T5988] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 244.607106][ T7638] netlink: 48 bytes leftover after parsing attributes in process `syz.0.407'. [ 244.608749][ T5928] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 244.633301][ T5928] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 244.645035][ T5928] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 244.656355][ T5928] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 244.667516][ T5928] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 244.698520][ T5928] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 244.708579][ T5988] usb 3-1: Using ep0 maxpacket: 8 [ 244.732815][ T5988] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 244.751927][ T5988] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 244.761915][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.771464][ T5928] usb 4-1: config 0 descriptor?? [ 244.803455][ T5988] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 244.810726][ T7624] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 244.814395][ T5988] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 244.838493][ T5988] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.853853][ T7624] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 244.895610][ T5988] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 244.911203][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.923286][ T5928] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 244.973938][ T7647] program syz.4.409 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.158768][ T7624] ldusb 4-1:0.55: Write buffer overflow, 2 bytes dropped [ 245.207041][ T5988] usb 3-1: usb_control_msg returned -32 [ 245.248112][ T5894] usb 4-1: USB disconnect, device number 28 [ 245.263284][ T5988] usbtmc 3-1:16.0: can't read capabilities [ 245.280580][ T5894] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 246.306581][ T5847] IPVS: starting estimator thread 0... [ 246.461884][ T7664] IPVS: using max 25 ests per chain, 60000 per kthread [ 246.577524][ T7673] x_tables: duplicate underflow at hook 2 [ 246.728788][ T5894] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 246.755833][ T7681] syz.3.418: attempt to access beyond end of device [ 246.755833][ T7681] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 246.912945][ T7681] (syz.3.418,7681,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 246.921267][ T7681] (syz.3.418,7681,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 246.928797][ T7681] (syz.3.418,7681,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 246.937484][ T7681] (syz.3.418,7681,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 246.968525][ T5847] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 247.108695][ T5847] usb 1-1: device descriptor read/64, error -71 [ 247.670858][ T5894] usb 2-1: config 0 interface 0 altsetting 227 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 247.788942][ T5894] usb 2-1: config 0 interface 0 altsetting 227 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 247.821643][ T5988] usb 3-1: USB disconnect, device number 21 [ 247.848769][ T5894] usb 2-1: config 0 interface 0 has no altsetting 0 [ 247.868749][ T5894] usb 2-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 247.888855][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.931196][ T5894] usb 2-1: config 0 descriptor?? [ 247.960804][ T7670] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 247.973162][ T7693] netlink: 48 bytes leftover after parsing attributes in process `syz.4.421'. [ 247.988567][ T5847] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 248.138512][ T5847] usb 1-1: device descriptor read/64, error -71 [ 248.379212][ T5847] usb usb1-port1: attempt power cycle [ 248.872431][ T5894] usb 2-1: string descriptor 0 read error: -71 [ 248.890308][ T5894] usbhid 2-1:0.0: can't add hid device: -71 [ 248.896878][ T5894] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 248.907964][ T5894] usb 2-1: USB disconnect, device number 25 [ 248.922718][ T5847] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 248.938653][ T5988] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 248.969255][ T5847] usb 1-1: device descriptor read/8, error -71 [ 249.079553][ T5972] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 249.098737][ T5988] usb 3-1: device descriptor read/64, error -71 [ 249.251613][ T5847] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 249.313210][ T5972] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 249.337164][ T5847] usb 1-1: device descriptor read/8, error -71 [ 249.372073][ T5972] usb 5-1: config 0 has no interface number 0 [ 249.404980][ T5972] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 249.492776][ T5847] usb usb1-port1: unable to enumerate USB device [ 249.510870][ T5972] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 249.639955][ T5972] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 249.773851][ T5972] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 249.786180][ T5928] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 249.904721][ T5972] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 249.958611][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 249.973727][ T5928] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 250.040167][ T5928] usb 4-1: config 0 has no interface number 0 [ 250.048276][ T5972] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 250.120810][ T5928] usb 4-1: config 0 interface 230 has no altsetting 0 [ 250.178628][ T5972] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 250.228929][ T5928] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 250.291648][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.320459][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.474185][ T5928] usb 4-1: Product: syz [ 250.545317][ T5928] usb 4-1: Manufacturer: syz [ 250.571229][ T5972] usb 5-1: config 0 descriptor?? [ 250.617716][ T5928] usb 4-1: SerialNumber: syz [ 250.681065][ T7698] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 250.836759][ T7698] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 250.935474][ T5928] usb 4-1: config 0 descriptor?? [ 251.074859][ T5988] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 251.345190][ T5928] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 251.609375][ T5972] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 251.973412][ T5928] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 252.001584][ T5972] usb 5-1: USB disconnect, device number 23 [ 253.081890][ T5972] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 255.454357][ T5928] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 255.675892][ T5928] usb 4-1: USB disconnect, device number 29 [ 255.900700][ T7733] xt_hashlimit: size too large, truncated to 1048576 [ 257.925046][ T7762] netlink: 36 bytes leftover after parsing attributes in process `syz.3.436'. [ 259.040003][ T43] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 259.272506][ T5828] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 259.288122][ T43] usb 5-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 259.328005][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.340900][ T7784] block device autoloading is deprecated and will be removed. [ 259.454495][ T43] usb 5-1: Product: syz [ 259.499559][ T43] usb 5-1: Manufacturer: syz [ 259.509983][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 259.549124][ T43] usb 5-1: SerialNumber: syz [ 259.658526][ T5828] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 259.703815][ T43] usb 5-1: config 0 descriptor?? [ 259.733176][ T5828] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 259.809953][ T5828] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 259.874110][ T43] hub 5-1:0.0: bad descriptor, ignoring hub [ 259.919651][ T5828] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 259.962371][ T43] hub 5-1:0.0: probe with driver hub failed with error -5 [ 260.060515][ T5828] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 260.170326][ T43] f81232 5-1:0.0: f81534a converter detected [ 260.213509][ T5828] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 260.321501][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.036385][ T43] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 261.099982][ T43] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 261.133468][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.146026][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.947568][ T5828] usb 2-1: usb_control_msg returned -32 [ 262.006455][ T5828] usbtmc 2-1:16.0: can't read capabilities [ 262.344788][ T7784] syz.0.440: attempt to access beyond end of device [ 262.344788][ T7784] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 262.380988][ T43] usb 5-1: USB disconnect, device number 24 [ 262.416950][ T5828] IPVS: starting estimator thread 0... [ 262.424355][ T43] f81232 5-1:0.0: device disconnected [ 262.529065][ T7797] IPVS: using max 25 ests per chain, 60000 per kthread [ 262.608672][ T5894] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 263.040193][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 263.064880][ T5894] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 263.086228][ T5894] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 263.150101][ T5894] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.187554][ T5894] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.218010][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.246590][ T5894] usb 3-1: Product: 믠á—ࡻㆅ鯗椆ㅽ㛙쾷괒ä¥à®·æ¯Ÿá²“첋宋껾야̢欢Ⳗ෾锯娅â“璖⾉ä‹á¤ë¥½Ï»á²˜ã´ƒã®¬ë™·ê›’쿢牖喀믿箌媴릟ﲀî¶è없ã¯í—˜è©î¦ƒì‘妜綂햲㾨ç‚䪻鎙넖옙é¢é··ê­…鹯⪟ê“߹㔅㤌ↅ糆䎽䴜昇匈浿丘ꩥ㮩ś깰쨨垬惜ᕠ[ 263.276385][ T5894] usb 3-1: Manufacturer: à Š [ 263.286421][ T5894] usb 3-1: SerialNumber: syz [ 263.636536][ T5894] usb 3-1: 0:2 : does not exist [ 263.999129][ T5927] usb 2-1: USB disconnect, device number 26 [ 264.033080][ T5894] usb 3-1: USB disconnect, device number 24 [ 264.421375][ T7821] xt_CT: You must specify a L4 protocol and not use inversions on it [ 264.431164][ T7821] netlink: 168 bytes leftover after parsing attributes in process `syz.4.451'. [ 264.570316][ T6410] udevd[6410]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 264.808607][ T5894] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 264.849035][ T7825] orangefs_devreq_open: device cannot be opened in blocking mode [ 265.058513][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 265.176447][ T5894] usb 3-1: device descriptor read/all, error -71 [ 265.315669][ T7835] netlink: 128 bytes leftover after parsing attributes in process `syz.4.456'. [ 265.966522][ T7839] netlink: 60 bytes leftover after parsing attributes in process `syz.1.458'. [ 266.619687][ T7857] block nbd4: NBD_DISCONNECT [ 267.088723][ T5894] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 267.982558][ T5894] usb 1-1: Using ep0 maxpacket: 8 [ 268.070600][ T5894] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 268.100405][ T5894] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 268.157146][ T5894] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 268.205577][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.269493][ T7864] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 268.404035][ T7882] batadv_slave_0: entered promiscuous mode [ 268.566945][ T5894] usb 1-1: string descriptor 0 read error: -71 [ 268.585671][ T5894] hub 1-1:32.0: USB hub found [ 268.600978][ T5894] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 268.688597][ T43] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 268.728664][ T5944] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 268.760955][ T5894] usb 1-1: USB disconnect, device number 20 [ 268.888559][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 268.906872][ T5944] usb 2-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.918094][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.948564][ T5944] usb 2-1: config 0 interface 0 has no altsetting 0 [ 268.955263][ T5944] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 268.964826][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 268.980759][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.990292][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.013124][ T5944] usb 2-1: config 0 descriptor?? [ 269.031609][ T43] usb 5-1: config 0 descriptor?? [ 269.050394][ T43] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 269.253750][ T7890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.471'. [ 269.305811][ T7890] tipc: Failed to remove unknown binding: 66,1,1/0:3206187878/3206187880 [ 269.344458][ T7890] tipc: Failed to remove unknown binding: 66,1,1/0:3206187878/3206187880 [ 269.376104][ T7890] tipc: Failed to remove unknown binding: 66,1,1/0:3206187878/3206187880 [ 269.481655][ T5944] apple 0003:05AC:027A.0005: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.1-1/input0 [ 269.499310][ T7894] sit1: entered allmulticast mode [ 269.506940][ T43] gspca_vc032x: reg_r err -71 [ 269.515474][ T43] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 269.516938][ T7882] batadv_slave_0: left promiscuous mode [ 269.568554][ T43] usb 5-1: USB disconnect, device number 25 [ 269.642715][ T5944] usb 2-1: USB disconnect, device number 27 [ 269.743504][ T7895] fido_id[7895]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 269.906327][ T7906] Invalid source name [ 270.431253][ T7912] mkiss: ax0: crc mode is auto. [ 270.606445][ T7912] befs: (nullb0): invalid magic header [ 271.227869][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.482'. [ 271.517290][ T7928] ubi31: attaching mtd0 [ 271.534544][ T7928] ubi31: scanning is finished [ 271.534647][ T7928] ubi31: empty MTD device detected [ 272.100049][ T7928] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 272.107826][ T7928] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 272.115193][ T7928] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 272.122261][ T7928] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 272.129834][ T7928] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 272.136733][ T7928] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 272.144872][ T7928] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3249616577 [ 272.154988][ T7928] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 272.202170][ T7933] ubi31: background thread "ubi_bgt31d" started, PID 7933 [ 272.559486][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.484'. [ 273.002714][ T5944] Process accounting resumed [ 273.738570][ T6065] block nbd1: Possible stuck request ffff88802569e000: control (read@0,1024B). Runtime 120 seconds [ 273.752996][ T6065] block nbd1: Possible stuck request ffff88802569e1c0: control (read@1024,1024B). Runtime 120 seconds [ 273.765011][ T6065] block nbd1: Possible stuck request ffff88802569e380: control (read@2048,1024B). Runtime 120 seconds [ 273.776344][ T6065] block nbd1: Possible stuck request ffff88802569e540: control (read@3072,1024B). Runtime 120 seconds [ 273.843151][ T7942] Process accounting resumed [ 273.881920][ T5928] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 274.088633][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 274.113349][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.151742][ T5928] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 274.183282][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.229402][ T7958] netlink: 'syz.3.491': attribute type 10 has an invalid length. [ 274.265508][ T5928] usb 2-1: config 0 descriptor?? [ 274.267784][ T7958] netlink: 'syz.3.491': attribute type 10 has an invalid length. [ 274.418804][ T5944] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 274.487783][ T7966] netlink: 56 bytes leftover after parsing attributes in process `syz.0.493'. [ 274.936240][ T7957] kvm: user requested TSC rate below hardware speed [ 274.959089][ T7969] netlink: 'syz.3.491': attribute type 12 has an invalid length. [ 274.966932][ T7969] netlink: 132 bytes leftover after parsing attributes in process `syz.3.491'. [ 275.039091][ T7957] netlink: 24 bytes leftover after parsing attributes in process `syz.4.490'. [ 275.138924][ T30] audit: type=1326 audit(1755485816.489:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7956 comm="syz.4.490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69b0b8ebe9 code=0x0 [ 275.495110][ T7981] sock: sock_timestamping_bind_phc: sock not bind to device [ 276.228567][ T5944] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 276.404866][ T5944] usb 3-1: Using ep0 maxpacket: 8 [ 276.424700][ T5944] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 276.457411][ T5944] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.486170][ T5944] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.496550][ T5944] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.509253][ T5944] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.522869][ T5944] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 276.537183][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.649637][ T5928] usbhid 2-1:0.0: can't add hid device: -71 [ 276.655914][ T5928] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 276.681060][ T5928] usb 2-1: USB disconnect, device number 28 [ 276.769097][ T5944] usb 3-1: usb_control_msg returned -32 [ 276.774859][ T5944] usbtmc 3-1:16.0: can't read capabilities [ 277.378667][ T8015] usbtmc 3-1:16.0: control status returned 0 [ 277.633732][ T5847] usb 3-1: USB disconnect, device number 28 [ 277.811757][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'. [ 277.824401][ T8019] netlink: 40 bytes leftover after parsing attributes in process `syz.1.505'. [ 278.698512][ T5944] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 278.858487][ T5972] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 279.018658][ T5944] usb 3-1: Using ep0 maxpacket: 8 [ 279.018824][ T5972] usb 5-1: Using ep0 maxpacket: 16 [ 279.131849][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.233266][ T5944] usb 3-1: New USB device found, idVendor=04b3, idProduct=3108, bcdDevice= 0.00 [ 279.339638][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.747023][ T5972] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 279.763252][ T5972] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 279.790943][ T5972] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 279.801067][ T5972] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 279.817236][ T5972] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 279.832975][ T5972] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.843168][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 279.860983][ T5972] usb 5-1: SerialNumber: syz [ 279.894006][ T5944] usb 3-1: config 0 descriptor?? [ 279.896643][ T8029] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 279.957371][ T8029] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 280.127686][ T5944] lenovo 0003:04B3:3108.0006: unknown main item tag 0x0 [ 280.148465][ T5944] lenovo 0003:04B3:3108.0006: unknown main item tag 0x0 [ 280.155493][ T5944] lenovo 0003:04B3:3108.0006: unknown main item tag 0x0 [ 280.353087][ T8025] netlink: 'syz.2.508': attribute type 1 has an invalid length. [ 280.379839][ T5944] lenovo 0003:04B3:3108.0006: unknown main item tag 0x0 [ 280.389247][ T5944] lenovo 0003:04B3:3108.0006: unknown main item tag 0x0 [ 280.498016][ T5944] lenovo 0003:04B3:3108.0006: hidraw0: USB HID v0.03 Device [HID 04b3:3108] on usb-dummy_hcd.2-1/input0 [ 280.501442][ T8029] netlink: 'syz.4.509': attribute type 21 has an invalid length. [ 280.687115][ T5944] usb 3-1: USB disconnect, device number 29 [ 280.878262][ T43] usb 5-1: USB disconnect, device number 26 [ 281.009158][ T8046] fido_id[8046]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 281.404637][ T8060] geneve1: entered allmulticast mode [ 281.678482][ T43] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 281.817996][ T43] usb 3-1: device descriptor read/64, error -71 [ 281.881273][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.519'. [ 281.888507][ T5894] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 281.918748][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.519'. [ 282.052452][ T5894] usb 1-1: Using ep0 maxpacket: 16 [ 282.069466][ T43] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 282.079018][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.117149][ T5894] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.138501][ T5894] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 282.157641][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.189956][ T5894] usb 1-1: config 0 descriptor?? [ 282.228555][ T43] usb 3-1: device descriptor read/64, error -71 [ 282.297322][ T8070] netlink: 'syz.1.522': attribute type 3 has an invalid length. [ 282.338876][ T43] usb usb3-port1: attempt power cycle [ 282.678668][ T43] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 282.786178][ T43] usb 3-1: device descriptor read/8, error -71 [ 282.797381][ T5894] corsair 0003:1B1C:1B02.0007: unknown main item tag 0x0 [ 282.871623][ T5894] corsair 0003:1B1C:1B02.0007: unknown main item tag 0x0 [ 282.935414][ T5894] corsair 0003:1B1C:1B02.0007: unknown main item tag 0x0 [ 282.972704][ T5894] corsair 0003:1B1C:1B02.0007: unknown main item tag 0x0 [ 282.984182][ T5894] corsair 0003:1B1C:1B02.0007: unknown main item tag 0x0 [ 283.069857][ T5894] corsair 0003:1B1C:1B02.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 283.089423][ T43] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 283.151517][ T43] usb 3-1: device descriptor read/8, error -71 [ 283.157985][ T5894] corsair 0003:1B1C:1B02.0007: Read invalid backlight brightness: be. [ 283.288919][ T43] usb usb3-port1: unable to enumerate USB device [ 283.357900][ T5847] usb 1-1: USB disconnect, device number 21 [ 283.458503][ T5972] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 283.611914][ T5972] usb 5-1: config 0 has an invalid interface number: 17 but max is 0 [ 283.620284][ T5972] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.631088][ T5972] usb 5-1: config 0 has no interface number 0 [ 283.637424][ T5972] usb 5-1: config 0 interface 17 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.650883][ T5972] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 283.660418][ T5972] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.675210][ T8093] capability: warning: `syz.1.526' uses 32-bit capabilities (legacy support in use) [ 283.675908][ T5972] usb 5-1: config 0 descriptor?? [ 283.696237][ T5972] usbhid 5-1:0.17: couldn't find an input interrupt endpoint [ 284.155872][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'. [ 284.187032][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'. [ 284.368145][ T8106] binder: 8105:8106 ioctl 40089416 2000000000c0 returned -22 [ 284.501235][ T8108] binder_alloc: 8105: binder_alloc_buf size 8 failed, no address space [ 284.531059][ T8108] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 284.649602][ T8118] ip6erspan0: entered allmulticast mode [ 284.921692][ T8122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.171243][ T43] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 285.341097][ T43] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 285.349386][ T43] usb 1-1: config 0 has no interface number 0 [ 285.355501][ T43] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 285.366461][ T43] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 285.377276][ T43] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 285.391104][ T43] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 285.403544][ T43] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 285.417307][ T43] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 285.434414][ T43] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 285.443555][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.454953][ T43] usb 1-1: config 0 descriptor?? [ 285.470547][ T8125] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 285.479116][ T8125] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 285.505982][ T43] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 285.704268][ T8125] ldusb 1-1:0.55: Write buffer overflow, 2 bytes dropped [ 285.714646][ T43] usb 1-1: USB disconnect, device number 22 [ 285.727208][ T43] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 286.221607][ T5847] usb 5-1: USB disconnect, device number 27 [ 287.127501][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 287.367020][ T30] audit: type=1326 audit(1755485828.719:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8141 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795c98ebe9 code=0x7ffc0000 [ 287.466700][ T30] audit: type=1326 audit(1755485828.719:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8141 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795c98ebe9 code=0x7ffc0000 [ 287.508433][ T30] audit: type=1326 audit(1755485828.759:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8141 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f795c98ebe9 code=0x7ffc0000 [ 287.569057][ T30] audit: type=1326 audit(1755485828.759:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8141 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795c98ebe9 code=0x7ffc0000 [ 287.592499][ T8146] vti0: entered promiscuous mode [ 287.597511][ T8146] vti0: entered allmulticast mode [ 287.608549][ T30] audit: type=1326 audit(1755485828.759:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8141 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795c98ebe9 code=0x7ffc0000 [ 287.614544][ T8147] netlink: 36 bytes leftover after parsing attributes in process `syz.0.542'. [ 287.664740][ T43] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 288.049819][ T8147] bridge_slave_1: left allmulticast mode [ 288.130287][ T8147] bridge_slave_1: left promiscuous mode [ 288.136488][ T8147] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.137627][ T43] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 288.146805][ T30] audit: type=1326 audit(1755485828.759:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8141 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f795c98ebe9 code=0x7ffc0000 [ 288.162512][ T43] usb 3-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0xCD, changing to 0x8D [ 288.196144][ T8153] trusted_key: syz.0.542 sent an empty control message without MSG_MORE. [ 288.201312][ T43] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 11971, setting to 1024 [ 288.207055][ T30] audit: type=1326 audit(1755485828.759:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8141 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795c98ebe9 code=0x7ffc0000 [ 288.244771][ T30] audit: type=1326 audit(1755485828.759:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8141 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f795c98d550 code=0x7ffc0000 [ 288.245914][ T8147] bridge_slave_0: left allmulticast mode [ 288.272903][ T43] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024 [ 288.296354][ T30] audit: type=1326 audit(1755485828.759:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8141 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f795c98e7eb code=0x7ffc0000 [ 288.317974][ T43] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 288.318007][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.345695][ T8142] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 288.348046][ T8147] bridge_slave_0: left promiscuous mode [ 288.361698][ T30] audit: type=1326 audit(1755485828.759:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8141 comm="syz.2.540" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f795c98e7eb code=0x7ffc0000 [ 288.363939][ T43] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 288.408808][ T8147] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.420780][ T43] usb 3-1: invalid MIDI out EP 0 [ 289.037879][ T5851] udevd[5851]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 289.087955][ T43] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 289.104850][ T43] usb 3-1: USB disconnect, device number 34 [ 289.929274][ T5847] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 290.336007][ T8184] netlink: 'syz.1.546': attribute type 1 has an invalid length. [ 290.449753][ T5847] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 290.457958][ T5847] usb 5-1: config 0 has no interface number 0 [ 290.488540][ T5847] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 290.538754][ T5847] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 290.565876][ T8187] IPv6: NLM_F_CREATE should be specified when creating new route [ 290.573762][ T5847] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 290.617889][ T5847] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 290.652449][ T5847] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 290.718633][ T5847] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 290.748422][ T5847] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 290.766329][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.798469][ T5847] usb 5-1: config 0 descriptor?? [ 290.804360][ T8173] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 290.818625][ T8173] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 290.878249][ T5847] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 291.099743][ T8173] ldusb 5-1:0.55: Write buffer overflow, 2 bytes dropped [ 291.110573][ T5847] usb 5-1: USB disconnect, device number 28 [ 291.141350][ T5847] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 291.461874][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.471806][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.480035][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.491187][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.501945][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 291.515960][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.530812][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.538308][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.554678][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.562564][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 293.376289][ T5988] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 293.639887][ T5156] Bluetooth: hci5: command tx timeout [ 293.695022][ T5988] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.731315][ T5988] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.743811][ T5988] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 293.753476][ T5988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 293.862292][ T5988] usb 2-1: SerialNumber: syz [ 294.028490][ T8230] unsupported nlmsg_type 40 [ 294.542701][ T5988] usb 2-1: 0:2 : does not exist [ 294.608203][ T5988] usb 2-1: USB disconnect, device number 29 [ 294.712968][ T8240] netlink: 'syz.0.563': attribute type 2 has an invalid length. [ 294.902341][ T6410] udevd[6410]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.950087][ T8240] : entered promiscuous mode [ 295.698764][ T5156] Bluetooth: hci5: command tx timeout [ 296.488543][ T5972] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 296.603941][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 296.603990][ T30] audit: type=1326 audit(1755485837.959:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8254 comm="syz.2.566" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f795c98ebe9 code=0x0 [ 296.721019][ T8201] chnl_net:caif_netlink_parms(): no params data found [ 296.739560][ T5972] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 296.792410][ T5972] usb 2-1: config 0 has no interface number 0 [ 296.811855][ T5972] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 296.858537][ T5972] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 296.884143][ T5972] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 296.907017][ T5972] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 297.121928][ T5972] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 297.133487][ T5972] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 297.147349][ T5972] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 297.156495][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.166613][ T8201] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.167886][ T5972] usb 2-1: config 0 descriptor?? [ 297.176293][ T8201] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.178883][ T5847] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 297.185657][ T8252] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 297.196285][ T8201] bridge_slave_0: entered allmulticast mode [ 297.206418][ T8252] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 297.210185][ T8201] bridge_slave_0: entered promiscuous mode [ 297.456133][ T5847] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 297.540044][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.607913][ T5972] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 297.652269][ T5847] usb 3-1: Product: syz [ 297.694479][ T5847] usb 3-1: Manufacturer: syz [ 297.798763][ T5156] Bluetooth: hci5: command tx timeout [ 297.818255][ T8201] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.825560][ T8201] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.843839][ T5847] usb 3-1: SerialNumber: syz [ 297.849651][ T8201] bridge_slave_1: entered allmulticast mode [ 297.857537][ T8201] bridge_slave_1: entered promiscuous mode [ 297.875727][ T5847] usb 3-1: config 0 descriptor?? [ 297.939478][ T8252] ldusb 2-1:0.55: Write buffer overflow, 2 bytes dropped [ 297.955858][ T8227] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 298.002010][ T5972] usb 2-1: USB disconnect, device number 30 [ 298.044482][ T8201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.048035][ T5972] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 298.069264][ T8201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.120983][ T5847] usb-storage 3-1:0.0: USB Mass Storage device detected [ 298.134583][ T8227] usb 1-1: Using ep0 maxpacket: 32 [ 298.158838][ T8227] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 298.172139][ T8227] usb 1-1: config 4 has no interface number 0 [ 298.178605][ T8227] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.190947][ T8227] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.201641][ T8227] usb 1-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00 [ 298.225319][ T8227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.285183][ T8227] hub 1-1:4.128: USB hub found [ 298.290280][ T8201] team0: Port device team_slave_0 added [ 298.312825][ T8201] team0: Port device team_slave_1 added [ 298.384315][ T8201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.388576][ T8263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.395313][ T8201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.432087][ T8263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.469788][ T8201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.488703][ T8201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.516304][ T8201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.582983][ T8201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.623340][ T8284] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 298.818316][ T8201] hsr_slave_0: entered promiscuous mode [ 299.020961][ T8201] hsr_slave_1: entered promiscuous mode [ 299.037288][ T8201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.377654][ T8201] Cannot create hsr debugfs directory [ 299.433230][ T8289] netdevsim netdevsim1: Direct firmware load for . [ 299.433230][ T8289] failed with error -2 [ 299.484104][ T8289] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 299.484104][ T8289] [ 299.499920][ T8227] hub 1-1:4.128: config failed, can't read hub descriptor (err -22) [ 299.616719][ T8227] usb 1-1: USB disconnect, device number 23 [ 299.831643][ T43] usb 3-1: USB disconnect, device number 35 [ 299.858628][ T5156] Bluetooth: hci5: command tx timeout [ 299.968416][ T8295] netlink: 60 bytes leftover after parsing attributes in process `syz.1.572'. [ 299.998711][ T8293] netlink: 60 bytes leftover after parsing attributes in process `syz.1.572'. [ 300.563654][ T8201] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 300.646187][ T8201] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 300.746880][ T8201] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 301.502552][ T8201] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 301.528557][ T5847] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 301.670088][ T5847] usb 3-1: device descriptor read/64, error -71 [ 301.948467][ T5847] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 302.809534][ T5928] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 302.817859][ T5847] usb 3-1: device descriptor read/64, error -71 [ 302.932760][ T8201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.940349][ T5847] usb usb3-port1: attempt power cycle [ 302.994200][ T5928] usb 2-1: descriptor type invalid, skip [ 303.009607][ T5928] usb 2-1: No LPM exit latency info found, disabling LPM. [ 303.157307][ T5928] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 303.173911][ T5928] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 303.184727][ T5928] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.202071][ T8201] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.221407][ T5928] usb 2-1: string descriptor 0 read error: -22 [ 303.228940][ T5928] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 303.238073][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.419570][ T5847] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 303.530396][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.537704][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.954773][ T5847] usb 3-1: device descriptor read/8, error -71 [ 303.962335][ T5928] usb 2-1: 0:2 : does not exist [ 304.005192][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.012384][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.028228][ T5928] usb 2-1: USB disconnect, device number 31 [ 304.225914][ T6410] udevd[6410]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.482012][ T6065] block nbd1: Possible stuck request ffff88802569e000: control (read@0,1024B). Runtime 150 seconds [ 304.492850][ T6065] block nbd1: Possible stuck request ffff88802569e1c0: control (read@1024,1024B). Runtime 150 seconds [ 304.503974][ T6065] block nbd1: Possible stuck request ffff88802569e380: control (read@2048,1024B). Runtime 150 seconds [ 304.515941][ T6065] block nbd1: Possible stuck request ffff88802569e540: control (read@3072,1024B). Runtime 150 seconds [ 305.477552][ T8342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'. [ 305.776810][ T8349] netlink: 11 bytes leftover after parsing attributes in process `syz.1.586'. [ 306.591468][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 306.980646][ T8355] ip6gre1: entered allmulticast mode [ 307.104092][ T8201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.172426][ T43] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 307.382722][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.409015][ T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 307.438925][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.464423][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.492288][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 307.519491][ T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 307.551453][ T43] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 307.577147][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.592458][ T43] usb 5-1: Product: syz [ 307.606903][ T43] usb 5-1: Manufacturer: syz [ 307.617012][ T43] usb 5-1: SerialNumber: syz [ 307.638803][ T43] usb 5-1: config 0 descriptor?? [ 308.361517][ T8201] veth0_vlan: entered promiscuous mode [ 308.414659][ T8201] veth1_vlan: entered promiscuous mode [ 308.518940][ T8201] veth0_macvtap: entered promiscuous mode [ 308.544113][ T8201] veth1_macvtap: entered promiscuous mode [ 308.615806][ T8201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.679305][ T8201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.725333][ T8201] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.770769][ T8201] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.800416][ T8201] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.830479][ T8201] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.006888][ T43] usb 5-1: ucan: probing device on interface #0 [ 309.058092][ T43] usb 5-1: ucan: invalid endpoint configuration [ 309.079385][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.093935][ T43] usb 5-1: ucan: probe failed; try to update the device firmware [ 309.113991][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.156409][ T43] usb 5-1: USB disconnect, device number 29 [ 309.162719][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.193647][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.226553][ T8394] sctp: [Deprecated]: syz.0.598 (pid 8394) Use of int in maxseg socket option. [ 309.226553][ T8394] Use struct sctp_assoc_value instead [ 311.398958][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 311.579960][ T5847] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 311.607548][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 311.648688][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.676746][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 311.687568][ T24] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 311.701999][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.737215][ T24] usb 1-1: config 0 descriptor?? [ 311.758004][ T5847] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 311.780550][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.798725][ T5847] usb 6-1: Product: syz [ 311.808788][ T5847] usb 6-1: Manufacturer: syz [ 311.819814][ T5847] usb 6-1: SerialNumber: syz [ 311.866954][ T8440] netlink: 48 bytes leftover after parsing attributes in process `syz.1.607'. [ 311.876941][ T5847] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 311.957596][ T5928] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 311.968962][ T43] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 312.168744][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 312.202004][ T43] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 312.281340][ T43] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 312.291228][ T24] usb 6-1: USB disconnect, device number 2 [ 312.356450][ T8415] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 312.377271][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.423321][ T43] usb 3-1: Product: syz [ 312.434090][ T43] usb 3-1: Manufacturer: syz [ 312.468751][ T43] usb 3-1: SerialNumber: syz [ 312.541025][ T43] usb 3-1: config 0 descriptor?? [ 312.576404][ T8437] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 312.619690][ T43] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input16 [ 312.879006][ T43] usb 3-1: USB disconnect, device number 40 [ 312.884995][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 313.059887][ T5928] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 313.100061][ T5928] ath9k_htc: Failed to initialize the device [ 313.120395][ T24] usb 6-1: ath9k_htc: USB layer deinitialized [ 314.193306][ T5927] usb 1-1: USB disconnect, device number 24 [ 314.286314][ T8465] program syz.2.617 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 314.358916][ T5928] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 314.559722][ T5928] usb 6-1: Using ep0 maxpacket: 8 [ 314.586737][ T5928] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 314.619719][ T5928] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 314.672001][ T5928] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 314.698225][ T24] kernel write not supported for file /register (pid: 24 comm: kworker/1:0) [ 314.707161][ T5928] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 314.745107][ T5928] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 314.785023][ T5928] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 314.819676][ T5928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.045332][ T5928] usb 6-1: usb_control_msg returned -32 [ 315.057180][ T5928] usbtmc 6-1:16.0: can't read capabilities [ 315.268623][ T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 315.298684][ T5988] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 315.486188][ T8491] usbtmc 6-1:16.0: control status returned 0 [ 315.509961][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 315.569822][ T5988] usb 1-1: Using ep0 maxpacket: 16 [ 315.752932][ T5988] usb 1-1: config index 0 descriptor too short (expected 52, got 36) [ 315.768996][ T5988] usb 1-1: config 1 has an invalid interface number: 110 but max is 0 [ 315.771397][ T5928] IPVS: starting estimator thread 0... [ 315.796787][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.798966][ T5927] usb 6-1: USB disconnect, device number 3 [ 315.813047][ T5988] usb 1-1: config 1 has no interface number 0 [ 315.822730][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.832764][ T5988] usb 1-1: config 1 interface 110 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 315.843190][ T24] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 315.859553][ T5988] usb 1-1: config 1 interface 110 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 315.900540][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.921361][ T5988] usb 1-1: config 1 interface 110 has no altsetting 0 [ 315.937712][ T5988] usb 1-1: New USB device found, idVendor=045e, idProduct=04e6, bcdDevice=8d.7f [ 315.948821][ T8492] IPVS: using max 27 ests per chain, 64800 per kthread [ 315.976639][ T24] usb 2-1: config 0 descriptor?? [ 316.129249][ T5988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.147953][ T5988] usb 1-1: Product: syz [ 316.188784][ T5988] usb 1-1: Manufacturer: syz [ 316.194194][ T5988] usb 1-1: SerialNumber: syz [ 316.893870][ T8487] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 316.948240][ T8487] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 317.025265][ T5988] ipaq 1-1:1.110: PocketPC PDA converter detected [ 317.654961][ T24] usbhid 2-1:0.0: can't add hid device: -32 [ 317.694976][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 317.719719][ T5988] usb 1-1: PocketPC PDA converter now attached to ttyUSB0 [ 317.979820][ T5927] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 318.170759][ T5927] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 318.184690][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.207158][ T5927] usb 3-1: config 0 descriptor?? [ 318.218887][ T5988] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 318.224278][ T5927] cp210x 3-1:0.0: cp210x converter detected [ 318.370427][ T5988] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 318.381027][ T5988] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 318.394815][ T5988] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 318.423905][ T5988] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 318.437922][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.446490][ T5988] usb 6-1: Product: syz [ 318.455678][ T5988] usb 6-1: Manufacturer: syz [ 318.460767][ T5988] usb 6-1: SerialNumber: syz [ 318.475726][ T5988] usb 6-1: config 0 descriptor?? [ 318.500256][ T8515] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 318.506856][ T8515] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 318.536149][ T8515] vhci_hcd vhci_hcd.0: Device attached [ 318.705274][ T5988] usb 6-1: Found UVC 34.00 device syz (8086:0b5b) [ 318.716142][ T24] vhci_hcd: vhci_device speed not set [ 318.738789][ T5988] usb 6-1: No valid video chain found. [ 318.790086][ T5927] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 318.798663][ T24] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 318.814671][ T5927] usb 3-1: cp210x converter now attached to ttyUSB1 [ 318.903517][ T5988] usb 6-1: USB disconnect, device number 4 [ 319.143588][ T43] usb 2-1: USB disconnect, device number 32 [ 319.522705][ T8531] netlink: 48 bytes leftover after parsing attributes in process `syz.1.634'. [ 319.672086][ T8502] team0 (unregistering): Port device team_slave_0 removed [ 319.704177][ T8502] team0 (unregistering): Port device team_slave_1 removed [ 319.884224][ T43] usb 3-1: USB disconnect, device number 41 [ 319.955165][ T8534] sctp: [Deprecated]: syz.5.635 (pid 8534) Use of struct sctp_assoc_value in delayed_ack socket option. [ 319.955165][ T8534] Use struct sctp_sack_info instead [ 319.994071][ T43] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 320.127798][ T43] cp210x 3-1:0.0: device disconnected [ 320.223547][ T8516] vhci_hcd: connection reset by peer [ 320.234565][ T5988] usb 1-1: USB disconnect, device number 25 [ 320.243647][ T6052] vhci_hcd: stop threads [ 320.247945][ T6052] vhci_hcd: release socket [ 320.267233][ T6052] vhci_hcd: disconnect device [ 320.276838][ T5988] ipaq ttyUSB0: PocketPC PDA converter now disconnected from ttyUSB0 [ 320.288494][ T5847] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 320.316615][ T5988] ipaq 1-1:1.110: device disconnected [ 320.488743][ T5847] usb 6-1: Using ep0 maxpacket: 32 [ 320.546415][ T5847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.570384][ T5847] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.612052][ T5847] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 320.644589][ T5847] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.670036][ T5847] usb 6-1: config 0 descriptor?? [ 320.922938][ T5847] usbhid 6-1:0.0: can't add hid device: -71 [ 320.946179][ T5847] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 321.001440][ T5847] usb 6-1: USB disconnect, device number 5 [ 321.398643][ T977] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 321.648488][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 321.660442][ T977] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 321.668994][ T977] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 321.678874][ T977] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 321.689166][ T977] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 321.699580][ T977] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 321.713162][ T977] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 321.825936][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.291678][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.298045][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.301126][ T977] usb 5-1: usb_control_msg returned -32 [ 322.343782][ T977] usbtmc 5-1:16.0: can't read capabilities [ 322.664564][ T8568] usbtmc 5-1:16.0: control status returned 0 [ 322.681312][ T30] audit: type=1326 audit(1755485864.029:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930538ebe9 code=0x7ffc0000 [ 322.718319][ T8227] IPVS: starting estimator thread 0... [ 322.727254][ T30] audit: type=1326 audit(1755485864.039:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930538ebe9 code=0x7ffc0000 [ 322.749182][ T30] audit: type=1326 audit(1755485864.059:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f930538ebe9 code=0x7ffc0000 [ 322.772105][ T30] audit: type=1326 audit(1755485864.059:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930538ebe9 code=0x7ffc0000 [ 322.793863][ T30] audit: type=1326 audit(1755485864.059:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930538ebe9 code=0x7ffc0000 [ 322.818473][ T8570] IPVS: using max 26 ests per chain, 62400 per kthread [ 322.827920][ T30] audit: type=1326 audit(1755485864.059:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f930538ebe9 code=0x7ffc0000 [ 322.853998][ T30] audit: type=1326 audit(1755485864.059:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930538ebe9 code=0x7ffc0000 [ 322.879440][ T977] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 322.890550][ T30] audit: type=1326 audit(1755485864.059:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930538ebe9 code=0x7ffc0000 [ 322.918796][ T8227] usb 5-1: USB disconnect, device number 30 [ 322.927431][ T30] audit: type=1326 audit(1755485864.059:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f930538ebe9 code=0x7ffc0000 [ 322.949113][ T5988] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 322.959773][ T5927] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 322.970869][ T30] audit: type=1326 audit(1755485864.059:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8567 comm="syz.1.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f930538ebe9 code=0x7ffc0000 [ 323.045215][ T977] usb 1-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=b1.c4 [ 323.055534][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.076524][ T977] usb 1-1: config 0 descriptor?? [ 323.119725][ T5927] usb 6-1: Using ep0 maxpacket: 16 [ 323.129752][ T5988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.149408][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.154517][ T5988] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.171176][ T5927] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.181506][ T5988] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 323.196452][ T5988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.196647][ T5927] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 323.216616][ T5927] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 323.239369][ T5988] usb 2-1: config 0 descriptor?? [ 323.264380][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.282524][ T5927] usb 6-1: config 0 descriptor?? [ 323.308034][ T977] usb 1-1: string descriptor 0 read error: -71 [ 323.326080][ T977] gspca_main: spca501-2.14.0 probing 040a:0002 [ 323.347964][ T977] gspca_spca501: reg write: error -71 [ 323.354092][ T977] spca501 1-1:0.0: Reg write failed for 0x00,0xaa,0x00 [ 323.375872][ T977] spca501 1-1:0.0: probe with driver spca501 failed with error -22 [ 323.401084][ T977] usb 1-1: USB disconnect, device number 26 [ 323.694343][ T5988] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 323.715211][ T5988] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 323.944394][ T5988] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0008/input/input17 [ 323.988788][ T24] vhci_hcd: vhci_device speed not set [ 325.511171][ T5988] cm6533_jd 0003:0D8C:0022.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 325.714034][ T5927] usbhid 6-1:0.0: can't add hid device: -71 [ 325.748790][ T5927] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 325.853387][ T5927] usb 6-1: USB disconnect, device number 6 [ 326.114579][ T24] usb 2-1: USB disconnect, device number 33 [ 326.160270][ T8589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.651'. [ 326.238708][ T8591] netlink: 16 bytes leftover after parsing attributes in process `syz.0.649'. [ 327.298476][ T5988] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 328.057997][ T8609] netlink: 48 bytes leftover after parsing attributes in process `syz.5.656'. [ 328.098475][ T5988] usb 1-1: device descriptor read/64, error -71 [ 328.468528][ T5988] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 328.610137][ T5988] usb 1-1: device descriptor read/64, error -71 [ 328.718910][ T5988] usb usb1-port1: attempt power cycle [ 329.068491][ T5988] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 329.089107][ T5988] usb 1-1: device descriptor read/8, error -71 [ 329.328537][ T5988] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 329.348923][ T5988] usb 1-1: device descriptor read/8, error -71 [ 329.459204][ T5988] usb usb1-port1: unable to enumerate USB device [ 332.947026][ T5206] udevd[5206]: worker [5845] /devices/virtual/block/nbd1 timeout; kill it [ 332.959883][ T5206] udevd[5206]: seq 11935 '/devices/virtual/block/nbd1' killed [ 335.059303][ T6065] block nbd1: Possible stuck request ffff88802569e000: control (read@0,1024B). Runtime 180 seconds [ 335.070304][ T6065] block nbd1: Possible stuck request ffff88802569e1c0: control (read@1024,1024B). Runtime 180 seconds [ 335.081407][ T6065] block nbd1: Possible stuck request ffff88802569e380: control (read@2048,1024B). Runtime 180 seconds [ 335.188723][ T6065] block nbd1: Possible stuck request ffff88802569e540: control (read@3072,1024B). Runtime 180 seconds [ 365.139713][ T6065] block nbd1: Possible stuck request ffff88802569e000: control (read@0,1024B). Runtime 210 seconds [ 365.150588][ T6065] block nbd1: Possible stuck request ffff88802569e1c0: control (read@1024,1024B). Runtime 210 seconds [ 365.163485][ T6065] block nbd1: Possible stuck request ffff88802569e380: control (read@2048,1024B). Runtime 210 seconds [ 365.218657][ T6065] block nbd1: Possible stuck request ffff88802569e540: control (read@3072,1024B). Runtime 210 seconds [ 383.704415][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.710897][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 395.218728][ T6065] block nbd1: Possible stuck request ffff88802569e000: control (read@0,1024B). Runtime 240 seconds [ 395.229567][ T6065] block nbd1: Possible stuck request ffff88802569e1c0: control (read@1024,1024B). Runtime 240 seconds [ 395.240628][ T6065] block nbd1: Possible stuck request ffff88802569e380: control (read@2048,1024B). Runtime 240 seconds [ 395.272111][ T6065] block nbd1: Possible stuck request ffff88802569e540: control (read@3072,1024B). Runtime 240 seconds [ 425.301834][ T6065] block nbd1: Possible stuck request ffff88802569e000: control (read@0,1024B). Runtime 270 seconds [ 425.313276][ T6065] block nbd1: Possible stuck request ffff88802569e1c0: control (read@1024,1024B). Runtime 270 seconds [ 425.324592][ T6065] block nbd1: Possible stuck request ffff88802569e380: control (read@2048,1024B). Runtime 270 seconds [ 425.335666][ T6065] block nbd1: Possible stuck request ffff88802569e540: control (read@3072,1024B). Runtime 270 seconds [ 431.698799][ T31] INFO: task syz.3.495:7982 blocked for more than 143 seconds. [ 431.706465][ T31] Not tainted 6.16.0-syzkaller #0 [ 431.712120][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.720901][ T31] task:syz.3.495 state:D stack:27672 pid:7982 tgid:7980 ppid:5849 task_flags:0x400040 flags:0x00004006 [ 431.733572][ T31] Call Trace: [ 431.736898][ T31] [ 431.740068][ T31] __schedule+0x16aa/0x4c90 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 431.744672][ T31] ? __lock_acquire+0x9c1/0xd20 [ 431.749640][ T31] ? schedule+0x165/0x360 [ 431.754427][ T31] ? __pfx___schedule+0x10/0x10 [ 431.759846][ T31] ? schedule+0x91/0x360 [ 431.764157][ T31] schedule+0x165/0x360 [ 431.768444][ T31] schedule_preempt_disabled+0x13/0x30 [ 431.773948][ T31] __mutex_lock+0x724/0xe80 [ 431.779530][ T31] ? __mutex_lock+0x51b/0xe80 [ 431.784276][ T31] ? sync_bdevs+0x1ac/0x340 [ 431.789991][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 431.795084][ T31] ? iput+0x398/0x9d0 [ 431.873642][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 431.914372][ T31] sync_bdevs+0x1ac/0x340 [ 431.928544][ T31] ksys_sync+0xb9/0x150 [ 431.932811][ T31] ? __pfx_ksys_sync+0x10/0x10 [ 431.960512][ T31] ? do_syscall_64+0xbe/0x3b0 [ 431.965292][ T31] __ia32_sys_sync+0xe/0x20 [ 431.983354][ T31] do_syscall_64+0xfa/0x3b0 [ 431.987955][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.000494][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.006642][ T31] ? clear_bhb_loop+0x60/0xb0 [ 432.017189][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.024945][ T31] RIP: 0033:0x7f31ebf8ebe9 [ 432.030532][ T31] RSP: 002b:00007f31ecd1a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 432.039422][ T31] RAX: ffffffffffffffda RBX: 00007f31ec1b5fa0 RCX: 00007f31ebf8ebe9 [ 432.047468][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 432.056018][ T31] RBP: 00007f31ec1b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 432.071251][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.079834][ T31] R13: 00007f31ec1b6038 R14: 00007f31ec1b5fa0 R15: 00007ffc72b71dd8 [ 432.087885][ T31] [ 432.102819][ T31] [ 432.102819][ T31] Showing all locks held in the system: [ 432.150566][ T31] 1 lock held by khungtaskd/31: [ 432.188499][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 432.228767][ T31] 6 locks held by kworker/u8:7/2998: [ 432.234132][ T31] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.282084][ T31] #1: ffffc9000b877bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.328366][ T31] #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 432.337812][ T31] #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 432.400320][ T31] #4: ffff8880578094e8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_netns_pre_exit+0xb0/0x1d0 [ 432.438465][ T31] #5: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 432.478424][ T31] 2 locks held by getty/5597: [ 432.483175][ T31] #0: ffff8880311950a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 432.535491][ T31] #1: ffffc9000333b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 432.593075][ T31] 1 lock held by syz-executor/5829: [ 432.609751][ T31] 1 lock held by syz-executor/5830: [ 432.615110][ T31] 1 lock held by syz-executor/5834: [ 432.653658][ T31] #0: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 432.689156][ T31] 1 lock held by udevd/5845: [ 432.693819][ T31] #0: ffff888025603358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 432.738422][ T31] 1 lock held by syz.3.495/7982: [ 432.743437][ T31] #0: ffff888025603358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340 [ 432.812840][ T31] 3 locks held by kworker/1:8/8227: [ 432.828641][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 432.882858][ T31] #1: ffffc9001c74fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 432.902833][ T31] #2: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 432.914233][ T31] [ 432.919980][ T31] ============================================= [ 432.919980][ T31] [ 432.933494][ T31] NMI backtrace for cpu 1 [ 432.933521][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 432.933544][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 432.933558][ T31] Call Trace: [ 432.933566][ T31] [ 432.933575][ T31] dump_stack_lvl+0x189/0x250 [ 432.933602][ T31] ? __wake_up_klogd+0xd9/0x110 [ 432.933634][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.933657][ T31] ? __pfx__printk+0x10/0x10 [ 432.933698][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 432.933733][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 432.933761][ T31] ? _printk+0xcf/0x120 [ 432.933792][ T31] ? __pfx__printk+0x10/0x10 [ 432.933821][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 432.933856][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 432.933891][ T31] watchdog+0xfee/0x1030 [ 432.933924][ T31] ? watchdog+0x1de/0x1030 [ 432.933964][ T31] kthread+0x70e/0x8a0 [ 432.933995][ T31] ? __pfx_watchdog+0x10/0x10 [ 432.934032][ T31] ? __pfx_kthread+0x10/0x10 [ 432.934062][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 432.934082][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.934102][ T31] ? __pfx_kthread+0x10/0x10 [ 432.934130][ T31] ret_from_fork+0x3fc/0x770 [ 432.934155][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 432.934181][ T31] ? __switch_to_asm+0x39/0x70 [ 432.934205][ T31] ? __switch_to_asm+0x33/0x70 [ 432.934229][ T31] ? __pfx_kthread+0x10/0x10 [ 432.934257][ T31] ret_from_fork_asm+0x1a/0x30 [ 432.934299][ T31] [ 432.934308][ T31] Sending NMI from CPU 1 to CPUs 0: [ 433.094513][ C0] NMI backtrace for cpu 0 [ 433.094531][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 433.094552][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 433.094564][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 433.094588][ C0] Code: 53 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ad 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 433.094604][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 433.094621][ C0] RAX: dd651b0517f38700 RBX: ffffffff81976918 RCX: dd651b0517f38700 [ 433.094636][ C0] RDX: 0000000000000001 RSI: ffffffff8d982fba RDI: ffffffff8be1ba40 [ 433.094649][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 433.094663][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa0b3f0 [ 433.094677][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 433.094689][ C0] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 433.094704][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 433.094717][ C0] CR2: 00007f58612e7d60 CR3: 000000000df38000 CR4: 00000000003526f0 [ 433.094733][ C0] Call Trace: [ 433.094741][ C0] [ 433.094748][ C0] default_idle+0x13/0x20 [ 433.094770][ C0] default_idle_call+0x74/0xb0 [ 433.094793][ C0] do_idle+0x1e8/0x510 [ 433.094813][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.094834][ C0] ? __pfx_do_idle+0x10/0x10 [ 433.094858][ C0] ? do_idle+0x10/0x510 [ 433.094879][ C0] cpu_startup_entry+0x44/0x60 [ 433.094899][ C0] rest_init+0x2de/0x300 [ 433.094922][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 433.094952][ C0] start_kernel+0x47d/0x500 [ 433.094975][ C0] x86_64_start_reservations+0x24/0x30 [ 433.095002][ C0] x86_64_start_kernel+0x143/0x1c0 [ 433.095029][ C0] common_startup_64+0x13e/0x147 [ 433.095063][ C0] [ 433.096318][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 433.293846][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 433.303579][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 433.313779][ T31] Call Trace: [ 433.317089][ T31] [ 433.320038][ T31] dump_stack_lvl+0x99/0x250 [ 433.324680][ T31] ? __asan_memcpy+0x40/0x70 [ 433.329368][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.334603][ T31] ? __pfx__printk+0x10/0x10 [ 433.339410][ T31] panic+0x2db/0x790 [ 433.343329][ T31] ? __pfx_panic+0x10/0x10 [ 433.347783][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 433.353799][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 433.359206][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 433.365419][ T31] watchdog+0x102d/0x1030 [ 433.369950][ T31] ? watchdog+0x1de/0x1030 [ 433.374411][ T31] kthread+0x70e/0x8a0 [ 433.378602][ T31] ? __pfx_watchdog+0x10/0x10 [ 433.383318][ T31] ? __pfx_kthread+0x10/0x10 [ 433.387924][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.393145][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.398372][ T31] ? __pfx_kthread+0x10/0x10 [ 433.403025][ T31] ret_from_fork+0x3fc/0x770 [ 433.407635][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 433.412763][ T31] ? __switch_to_asm+0x39/0x70 [ 433.417554][ T31] ? __switch_to_asm+0x33/0x70 [ 433.422390][ T31] ? __pfx_kthread+0x10/0x10 [ 433.427012][ T31] ret_from_fork_asm+0x1a/0x30 [ 433.431905][ T31] [ 433.435121][ T31] Kernel Offset: disabled [ 433.439472][ T31] Rebooting in 86400 seconds..