last executing test programs: 6m11.702398599s ago: executing program 3 (id=245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20c2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000804}, 0x40004) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r1, 0xb1ba28e6190e0ded, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c800) (async) r2 = fsopen(&(0x7f0000000000)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) (async) close(0x3) open_by_handle_at(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="6b000000fb00000000fb6b0207a575d60075236518c7d945c23fbd51d205e88dd78c1884d13f79d5709ae85b97fa02f2cb55ac4704be34e60c4f689d20b191fb48df725e066d3180c00017f0b0091bd6eafd31fadada909c00000080ac7035ff3a08f6d5f6effbb6beaa2df6877bc0c565ea07"], 0x800) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200), 0x12718c1, &(0x7f0000000000)=ANY=[@ANYRESHEX]) 6m11.607887484s ago: executing program 3 (id=246): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async, rerun: 64) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x6c}]}, 0x10) (rerun: 64) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) (async) syz_usb_connect(0x3, 0x8c6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) 6m10.187032811s ago: executing program 3 (id=251): r0 = socket$nl_route(0x10, 0x3, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000000c0)={[&(0x7f0000000000), &(0x7f0000000040)='ipt\x00'], 0x500}) sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x15}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000000)=@md0, r1, &(0x7f0000000100)='\x00') 6m10.049388595s ago: executing program 3 (id=252): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@rand_addr=' \x01\x00', 0x0, 0x2, 0xff, 0x1, 0xfffd}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="0005010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="df16540000004e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}}, 0x0) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x20000000, 0x4041, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) r7 = dup2(r5, r0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r8, 0x4b4e, 0x28) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r10, 0x0, 0x44) ioctl$FS_IOC_GETFSLABEL(r9, 0x400452c8, &(0x7f0000000100)) syz_usb_connect(0x3, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0xd5, 0xaf, 0x96, 0x40, 0x61d, 0xc180, 0x6617, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x3f, 0x10, 0x1, [{{0x9, 0x4, 0x91, 0xc8, 0x0, 0x54, 0x2b, 0x17, 0x82}}]}}]}}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_opts(r7, 0x29, 0x36, &(0x7f00000000c0)=@fragment={0xff, 0x0, 0x3, 0x0, 0x0, 0x5, 0x67}, 0x8) 6m7.995401906s ago: executing program 3 (id=258): r0 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2a062, 0x0) fallocate(r1, 0x0, 0x5, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) 6m7.575984211s ago: executing program 3 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000001b80)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200fffe2800048024000180090001006d6574610000000014000280080002400000001d08000340000000020900010073797a30000000000900020073797a3200000000142000001100010000000000000000000500000a"], 0x7c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 6m7.161550647s ago: executing program 32 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000001b80)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200fffe2800048024000180090001006d6574610000000014000280080002400000001d08000340000000020900010073797a30000000000900020073797a3200000000142000001100010000000000000000000500000a"], 0x7c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 5m29.283307428s ago: executing program 4 (id=419): r0 = socket$inet6(0xa, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000081ff80013a2a5e247b0000005c001b80570000007d00c62615dde4c88fa60f1a5475dac613fca9b5f031064f062d48b3fbd7d0e710a64f92e3ddb658cdc79152e500e300a36a444abd29d8f02663fffffffffff9de83d225ad591efaa67687dbf97701750b000000000000000002b53a30cd2b5ba2602f96141b474425bc1bc70270eb74b9aff00935bc5d7e8a9cbc70b6d59dbd28aae6eff344385677c68ddb588c3b383b2c9c56b27af3c569d6dacb9d217efa94e06ebb558fa4ffad06500f133bcbeab264ae8896f4b78f"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x32, &(0x7f0000000040)="04000000fefcc2d11e294e6b971de09b6cccea5e", 0x14) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x6a27f823, @empty, 0xae42}, 0x1c) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r2, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101a01) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f00000003c0)=0xc7a) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/228, 0xe4}], 0x1}, 0xfffff2fe}], 0x1, 0x120, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000200)={0x0, 0x1, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000600)={r5, 0x7fff, 0x4}) syz_usb_connect(0x5, 0x55, &(0x7f0000000b00)={{0x12, 0x1, 0x310, 0x2a, 0x3e, 0xdb, 0x40, 0x1199, 0x9019, 0x4989, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x4, 0x80, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5a, 0xb8, 0xb1, 0x7, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x9, 0x4, 0xfa, 0x3, "cbb0473587dc7138c8"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x7, 0x4}, @as_header={0x7, 0x24, 0x1, 0x9c, 0x3, 0x3}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xf3, 0x4, 0x7b, 0x2, '(', "66e4"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x1, 0x1}]}]}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@empty, @broadcast}, 0x8) 5m26.143767559s ago: executing program 4 (id=430): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000180)=0xd, 0x4) unshare(0x22020600) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000000b0101000000000000000003000008080003400000000105000100000000000800024000000005080003"], 0x4c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x4) r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='pids.events\x00', 0x5000000, 0x0) readv(r4, &(0x7f00000012c0)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x42, 0x88, 0xc6, 0x8, 0xabf, 0x3370, 0x6004, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x5, 0x20, 0x4, [{{0x9, 0x4, 0xe3, 0x65, 0x0, 0x55, 0xb0, 0xed, 0xf}}]}}]}}, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000001100)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000001200)={0x30, r5, 0x1, 0x0, 0x6, 0xbdb7000000, 0x401, &(0x7f0000001180)=""/113}) ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) syz_io_uring_setup(0x6e78, &(0x7f0000000100)={0x0, 0x7, 0x1, 0x3, 0x39c}, &(0x7f0000000000)=0x0, &(0x7f0000000080)) syz_io_uring_setup(0x5de8, &(0x7f00000001c0)={0x0, 0x8272, 0x40, 0x2, 0x32c}, &(0x7f0000000240), &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000380)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000300)={0x6e4100, 0x80, 0x4}, &(0x7f0000000340)='./file0\x00', 0x18, 0x0, 0x23456}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0xfffffffffffffcea}, 0x5}], 0x1, 0x40002042, 0x0) 5m24.650601149s ago: executing program 4 (id=438): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}], 0x1}}], 0x1, 0x4048841) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'gretap0\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240400c0}, 0x40884) (async) r3 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x180380) ioctl$NBD_SET_BLKSIZE(r3, 0xab01, 0x97c) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x31) 5m24.587555254s ago: executing program 4 (id=439): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000040)=0x525a8c3b, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mknod(0x0, 0x836fac3ed7542db, 0x2) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_clone(0x20022180, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) r4 = getgid() r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r6) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000280), 0x28, &(0x7f00000003c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x1a00}}, {@default_permissions}, {@default_permissions}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x8}}, {@max_read={'max_read', 0x3d, 0x2020000000000}}], [{@uid_gt={'uid>', r6}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@context={'context', 0x3d, 'user_u'}}]}}) 5m24.444014165s ago: executing program 4 (id=440): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) write$binfmt_elf32(r1, &(0x7f00000014c0)=ANY=[], 0x46b) (async) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000001040)="96", 0x1}], 0x1}}], 0x1, 0x4048841) (async) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="c1", 0x1}], 0x1}, 0x4800) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x901281, 0xa0) write$qrtrtun(r2, &(0x7f0000000040)="b4a2e40000000000", 0x8) (async) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000440)={0x40, 0x14, 0x1e, "69abd1d5f91ac1ed51931ffb112c2efe7da829b64948d0260b792ea4df87"}, 0x0, 0x0}) 5m24.103963692s ago: executing program 4 (id=443): set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000180)=[0x20, 0xa, 0xf909, 0x200005, 0x80, 0x1, 0x7, 0x10, 0xfffffe01, 0x4d, 0x4, 0x2, 0x88, 0x8811, 0x2], 0x1, 0x4000007}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xcb}, 0xfffffffffffffe5c, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '\xa9\x06\x00\x00\x00\x00\x00\x00'}, 0x20, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5m23.877213289s ago: executing program 33 (id=443): set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000180)=[0x20, 0xa, 0xf909, 0x200005, 0x80, 0x1, 0x7, 0x10, 0xfffffe01, 0x4d, 0x4, 0x2, 0x88, 0x8811, 0x2], 0x1, 0x4000007}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xcb}, 0xfffffffffffffe5c, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', '\xa9\x06\x00\x00\x00\x00\x00\x00'}, 0x20, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4m20.556136102s ago: executing program 2 (id=703): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x4d, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x83f0477036cacef2, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000640)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000006c0)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) 4m20.402706412s ago: executing program 2 (id=704): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2a062, 0x0) fallocate(r0, 0x0, 0x5, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r1, &(0x7f0000000080)={0x2020}, 0x2020) 4m20.336764834s ago: executing program 2 (id=705): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) mmap$snddsp_status(&(0x7f0000000000/0x4000)=nil, 0x1000, 0x4, 0x140873, 0xffffffffffffffff, 0x82000000) (async) mmap$snddsp_status(&(0x7f0000000000/0x4000)=nil, 0x1000, 0x4, 0x140873, 0xffffffffffffffff, 0x82000000) close_range(r0, r0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 4m20.175938004s ago: executing program 2 (id=706): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001fc0)={0xa4, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xef}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbb0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1000}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7e2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0adff010000000000000dd6e4edef3d9345", 0xc3}], 0x1}, 0x20004804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fc01000000040000090000003000038014000200ce6948f9fe25e8dafb9970696d726567140000000000000000000800030000000000080001000200"], 0x44}, 0x1, 0x0, 0x0, 0xc090}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/uevent_seqnum', 0xa00, 0x70) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000140)={r4, 0x800, {0x2a00, 0x80010900, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x7]}}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a8000000030101020000000000000000000000060c001880080001400000800018000d80140005"], 0xa8}, 0x1, 0x0, 0x0, 0x40000001}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00f\x00'], 0x6c}], 0x1}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xc) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r8, 0x5452, &(0x7f0000000040)=0x8001) r9 = getpgid(0x0) fcntl$setownex(r8, 0xf, &(0x7f0000000140)={0x2, r9}) fcntl$setsig(r8, 0xa, 0x1c) sendmmsg$unix(r7, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) syz_usb_control_io(r1, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000880)=ANY=[@ANYBLOB="40017d000000e4df7a5e884ecf5ff1064e7918699f390e012c66a92561c4c1b02cfad7f710ad7e0ba9409046702e6063d6f32b9ec85996e98313c332cd98172bb96b136c698effce0bbd7ca719"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0xb, 0x2, '%\f'}, 0x0, &(0x7f0000000600)={0x40, 0x13, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x4, &(0x7f0000000340)={0x0, 0x1b, 0x4, @tid=r9}, &(0x7f0000000380)) 4m18.395987312s ago: executing program 2 (id=709): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {@in6=@remote, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x7, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="e846000040000900ffffffff000000000100000004001f00d04601"], 0x46e8}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000940)=""/225, 0xe1}, {&(0x7f0000000480)=""/191, 0xbf}, {&(0x7f0000000240)=""/219, 0xa4}, {&(0x7f0000000e40)=""/202, 0xca}, {&(0x7f0000000a40)=""/231, 0xe7}, {&(0x7f00000006c0)=""/201, 0xc9}, {&(0x7f0000000580)=""/182, 0xb6}, {&(0x7f0000002a00)=""/4068, 0xfe4}, {&(0x7f0000000140)=""/127, 0x7f}], 0x9}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x240000, 0x0) 4m18.163616283s ago: executing program 2 (id=710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x1262, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, r2, 0x303, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x10008880}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x448d2}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 4m17.964342636s ago: executing program 34 (id=710): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r1, 0x1262, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, r2, 0x303, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x10008880}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x448d2}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 22.103881112s ago: executing program 1 (id=2120): mmap(&(0x7f00001fd000/0x2000)=nil, 0x2000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0xffffd000) r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e440502"], 0x47) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e440502"], 0x47) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r5) accept(r4, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000000)=0x80) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2c, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x40) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 21.931744253s ago: executing program 1 (id=2121): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x8ee, 0x65a100) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x3ff, @mcast2, 0xff}, 0x1c) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x8881) (async) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), 0xffffffffffffffff) (async) r3 = syz_io_uring_setup(0x24f, &(0x7f0000000140)={0x0, 0x835c, 0x8000, 0x1, 0x6d}, &(0x7f00000001c0), &(0x7f0000000200)) (async) r4 = socket$vsock_stream(0x28, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000002100)={0x0, 0x0}) futex_waitv(&(0x7f0000001880)=[{0x8, &(0x7f0000000240)=0xfffffffffffffffa, 0x2}, {0xbb, &(0x7f0000000280)=0x3, 0x82}, {0x80000001, &(0x7f00000002c0)=0x101, 0x82}, {0x2, &(0x7f0000000300)=0xfffffffffffffff9, 0x2}, {0x1, &(0x7f0000000340)=0x4, 0x2}, {0x8001, &(0x7f0000000380)=0x36, 0x82}, {0x80000001, &(0x7f00000003c0)=0x1, 0x2}, {0x0, &(0x7f0000000400)=0x3, 0x2}, {0x17, &(0x7f0000000440)=0x6e54, 0x2}, {0xfffffffffffffd9e, &(0x7f0000000480)=0xff}, {0x81, &(0x7f00000004c0)=0x1f, 0x2}, {0x80, &(0x7f0000000500)=0xffffffff00000001, 0x2}, {0x0, &(0x7f0000000540)=0x7da1902a, 0x2}, {0x7, &(0x7f0000000580)=0x6, 0x80}, {0x9, &(0x7f00000005c0)=0x9, 0x2}, {0x7, &(0x7f0000000600)=0x9, 0x82}, {0x7dda75e8, &(0x7f0000000640)=0xb8, 0x82}, {0x8000000000000000, &(0x7f0000000680)=0x3, 0x2}, {0x5, &(0x7f00000006c0)=0xb, 0x82}, {0xcde5d76, &(0x7f0000000700)=0xc7, 0x2}, {0x6, &(0x7f0000000740)=0xffffffffffffffff, 0x2}, {0x101, &(0x7f0000000780)=0x1, 0x82}, {0x9, &(0x7f00000007c0)=0x6, 0x2}, {0x9, &(0x7f0000000800)=0x20, 0x2}, {0x6, &(0x7f0000000840)=0x7, 0x82}, {0x3, &(0x7f0000000880)=0x9, 0x2}, {0x3, &(0x7f00000008c0)=0xfffffffffffffffd, 0x2}, {0x4, &(0x7f0000000900)=0x1, 0x2}, {0xe01b, &(0x7f0000000940)=0x3, 0x2}, {0xd, &(0x7f0000000980)=0x10, 0x82}, {0x5, &(0x7f00000009c0)=0x401, 0x82}, {0x800, &(0x7f0000000a00)=0x10, 0x2}, {0xf0e, &(0x7f0000000a40)=0x46571d3e, 0x2}, {0x6, &(0x7f0000000a80)=0x2, 0x2}, {0x2, &(0x7f0000000ac0)=0x80000000, 0x82}, {0x58000000, &(0x7f0000000b00)=0x7fffffffffffffff, 0x2}, {0x2, &(0x7f0000000b40)=0x5, 0x82}, {0xa, &(0x7f0000000b80)=0x100, 0x82}, {0x9e, &(0x7f0000000bc0)=0x6, 0x82}, {0x9, &(0x7f0000000c00), 0x2}, {0x95, &(0x7f0000000c40)=0x1, 0x2}, {0xb94f, &(0x7f0000000c80), 0x2}, {0xb55, &(0x7f0000000cc0)=0x5, 0x82}, {0x0, &(0x7f0000000d00)=0x100, 0x82}, {0x902d, &(0x7f0000000d40)=0x1, 0x82}, {0x2, &(0x7f0000000d80)=0x9, 0x2}, {0x9, &(0x7f0000000dc0)=0x1, 0x2}, {0x59, &(0x7f0000000e00)=0x5, 0x2}, {0x3bd, &(0x7f0000000e40)=0x4, 0x82}, {0x3, &(0x7f0000000e80)=0xffffffffffffffff, 0x2}, {0x8, &(0x7f0000000ec0)=0x2, 0x2}, {0x1000, &(0x7f0000000f00)=0x6, 0x2}, {0x2, &(0x7f0000000f40)=0x6, 0x2}, {0x2, &(0x7f0000000f80)=0x10001, 0x82}, {0xfed, &(0x7f0000000fc0)=0x435d, 0x82}, {0xfffffffffffff801, &(0x7f0000001000)=0x80000000, 0x82}, {0x9, &(0x7f0000001040)=0x7fff, 0x2}, {0x7, &(0x7f0000001080)=0x5, 0x2}, {0x8000000000000000, &(0x7f00000010c0)=0x7fff, 0x2}, {0x2, &(0x7f0000001100)=0x2, 0x2}, {0x5, &(0x7f0000001140)=0x5, 0x2}, {0x3, &(0x7f0000001180)=0xffffffffffffffff, 0x82}, {0x5, &(0x7f00000011c0)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000001200), 0x80}, {0xcb, &(0x7f0000001240)=0xfffffffffffffffd, 0x377e9ca114cdd78b}, {0x8000000000000000, &(0x7f0000001280)=0x3, 0x2}, {0x6, &(0x7f00000012c0)=0x8000, 0x82}, {0x6, &(0x7f0000001300)=0x3, 0x2}, {0x5e20, &(0x7f0000001340)=0x4, 0x2}, {0xfffffffffffffffe, &(0x7f0000001380)=0x8, 0x2}, {0x3ff, &(0x7f00000013c0)=0x8, 0x2}, {0x401, &(0x7f0000001400)=0x7fffffffffffffff, 0x2}, {0x1, &(0x7f0000001440)=0x31b, 0x2}, {0x5, &(0x7f0000001480)=0x8, 0x2}, {0x1, &(0x7f00000014c0)=0x1, 0x82}, {0x4, &(0x7f0000001500), 0x2}, {0x100, &(0x7f0000001540), 0x82}, {0x37be, &(0x7f0000001580)=0x2, 0x82}, {0x40000000000000, &(0x7f00000015c0)=0xff, 0x82}, {0x100000001, &(0x7f0000001600)=0x1, 0x2}, {0x7, &(0x7f0000001640)=0x5, 0x2}, {0x107, &(0x7f0000001680)=0x5, 0x82}, {0x9, &(0x7f00000016c0)=0x1, 0x82}, {0x3, &(0x7f0000001700), 0x82}, {0x8, &(0x7f0000001740)=0x7fffffffffffffff, 0x82}, {0x1, &(0x7f0000001780)=0xfbb, 0x82}, {0x8, &(0x7f00000017c0)=0x1e43, 0x2}, {0x0, &(0x7f0000001800)=0xc6b, 0x82}, {0xfffffffffffffc95, &(0x7f0000001840), 0x82}], 0x59, 0x0, &(0x7f0000002140)={r5, r6+60000000}, 0x2) (async) r7 = syz_open_procfs(r2, &(0x7f0000002180)='fdinfo\x00') (async) ioctl$KVM_RUN(r0, 0xae80, 0x0) clock_getres(0x5, &(0x7f00000021c0)) r8 = socket$isdn(0x22, 0x3, 0x26) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r8, 0x8008f512, &(0x7f0000002200)) r9 = socket$key(0xf, 0x3, 0x2) r10 = accept4(r9, &(0x7f0000002240)=@ethernet={0x0, @broadcast}, &(0x7f00000022c0)=0x80, 0x800) pselect6(0x40, &(0x7f0000002300)={0x7f, 0x4, 0xed2b, 0x1d, 0x400, 0x4, 0x5, 0x2}, &(0x7f0000002340)={0x1fffc000000, 0x3, 0x10, 0x3, 0x6, 0x9, 0x7, 0x40}, &(0x7f0000002380)={0x2e, 0x8, 0x3, 0xff4f, 0xfff, 0x80000000, 0x6, 0x7}, &(0x7f00000023c0)={0x0, 0x3938700}, &(0x7f0000002440)={&(0x7f0000002400)={[0x7f]}, 0x8}) (async) prctl$PR_SET_UNALIGN(0x6, 0x3) (async) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000024c0)={0x1, 0x1b, &(0x7f0000002480)="fee0ab8e0faa2612357a186559b8f405ab525c57c3cdadddcff8cf"}) (async) connect$inet6(r0, &(0x7f0000002500)={0xa, 0x4e24, 0x3, @local}, 0x1c) (async) clock_gettime(0x0, &(0x7f0000002600)={0x0, 0x0}) pselect6(0x40, &(0x7f0000002540)={0x8, 0x6d, 0xb, 0x4d8, 0x7, 0x2, 0x5, 0x5}, &(0x7f0000002580)={0x4a, 0x9c, 0xfffffffeffffffff, 0x3, 0xac2, 0x8, 0x9, 0x1f640000000000}, &(0x7f00000025c0)={0x0, 0x800, 0x6, 0xa, 0x81, 0x15, 0xfffffffffffffffb, 0x3}, &(0x7f0000002640)={r11, r12+10000000}, &(0x7f00000026c0)={&(0x7f0000002680), 0x8}) r13 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000002700)={{0x1, 0x1, 0x18, r4, {r13}}, './file0\x00'}) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000002c00)=0x0) (async) ioctl$TIOCGPGRP(r15, 0x540f, &(0x7f0000002c80)=0x0) (async) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000002e80)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000002f80)=0xe8) (async) r19 = timerfd_create(0x0, 0x80000) (async) r20 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000004600), 0x40, 0x0) sendmsg$netlink(r7, &(0x7f0000004c40)={&(0x7f0000002740)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004580)=[{&(0x7f0000002780)={0x480, 0x42, 0x1, 0x70bd2a, 0x25dfdbfe, "", [@generic="1c0591e2f16f2901080c00f716e75e1aff1b2935c4887105a838fa6a43ff61bf4970c6d0fa36af130e8cf017fe4c94f9856392a93b78cfeda3f20837defd3bee5d32150087d5726bdcc06739c3e0f7a73264e0897dc02f6f316d8aaa3c", @typed={0x8, 0x1, 0x0, 0x0, @u32=0x9}, @typed={0xc, 0xe5, 0x0, 0x0, @u64=0x1}, @nested={0x262, 0x4c, 0x0, 0x1, [@typed={0xf2, 0xdb, 0x0, 0x0, @binary="2df367deb6887acffde2ca0e13bbbf5d19ae5d57884a6eddd50868d75695758810de2e12b1aa9b7a0f0d7d54c6f261caf707a92904585cfb83e6e101c0d10467952646f3f53f61682eb6e3ddbf0deb64d80fa181f67d80c784561e59d9545454f92d4bb1b5a4f2d38f2ce9a1075a708bb57807eec952eef2a42b682ac275431548b655d177e55035fefcd4c4d4329818ddb212d09db856c5f4c22228be045cf0dd84bf00ff93bf9100a4aff6907668c39430bfdafbf61d46da397ae7e58960dad5cd1ab0db0f3f7ae004271dfbb08e298f7c136ebc0b3b8febd181ca70ea5aef09310d8ad701e0b263a7639803e0"}, @typed={0x8, 0x3d, 0x0, 0x0, @u32=0xe69c}, @generic="1c443b595404ab2963ad4a9ef03fe94e9683c1af84e08428afca401bb5b6087b27e1d626c4ea6f1e7be154525de0d3b9c71c0103cec2d7647b39232a0a7681b17f2f7259bff3a7b0f676170868480224168c0bed72e7730ce09f456073e8d199112e9b27a8aa2938349fbbdb19bbebdb5c5c5f533556594cf67b3844997c", @generic="25cddf295f5fe8b3a60921b0d692278556c07061aa41660c6818e8a8a018ba02ff712e9dcce586b5814309e4256bfa858e10757f5696530d72581322d7bd2be910e7926cdbcde4010ff50f5aa316c9af8f0158c724fac013d07c54ab56bbccb87984f8e7df20305a1ed18743450ce3dc68f083873b2273ca2a6e94a51da9b88276a4b506051b36043e1fc80a3335b93f4bb46dc6dfafe8de0d1eeb5cf7073a44c65e7490d0b75cf164b35b96d86a616b163bb9c8f84882616ec2e90a0e7c406274270203401b8564b78851d09bde03cf", @typed={0x8, 0xf6, 0x0, 0x0, @pid}, @nested={0x4, 0x116}, @typed={0x5, 0x62, 0x0, 0x0, @str='\x00'}]}, @generic="bd2a4b3d0083514fd833c77f5d0c91a12a357450a552def207714f67ba70e693412449714cc25c89e9df6dfebf72945653c628ca18963c59731698110e0c01dfff9b2bf75d851d5f604bb74e40e8", @generic="fcdb23309f5be75f2b0d5678da9de12819367a37ca5ecc2641496e79e38abcd675d56b9f2130eede6288e8f4027353d1b318b8fbfc6ec047b46fdf97909e0cd67f8bd41fcb11137d99a90f5a53b4efdaddfd43f2", @nested={0xeb, 0x118, 0x0, 0x1, [@generic="204d7dc2de4134f34466bf3e3c02644bac6ea35dc4370298e2ca923bbb7f793cbac5e4766463fdfa5ddbfc0c1afb", @nested={0x4, 0xe7}, @generic="93f882cf498b49f496d646c3d93df8788ac7cd680fa7a4541c3d309816bfdfff5ca3518ced22a17bbc747ae2aa4931dd3b04fbe9281c009bc9f6fa70b9518bd1fcf280b40bbc7d2c62a2ea5cc83f98d0a12f7efb7051024c36f8358cd184ed6a68613334f18543540055a4fac7c21f100ebb3e7d5b3a0be345650810029f7efd305d528ac378e1433376b4cee261297be3fbea7341bbf254a273f7c388f3e2799183c9500aaf0b086f", @typed={0xc, 0x36, 0x0, 0x0, @u64=0x3}]}, @typed={0x8, 0x2b, 0x0, 0x0, @u32=0xba}, @typed={0x4, 0x6}]}, 0x480}, {&(0x7f0000002c40)={0x38, 0x33, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0xc6, 0x0, 0x0, @u32=0x6}, @typed={0x7, 0x76, 0x0, 0x0, @str='2\'\x00'}, @typed={0x8, 0x10b, 0x0, 0x0, @uid=r16}, @typed={0x4, 0x146}, @typed={0xc, 0x9e, 0x0, 0x0, @u64=0xe7c4}]}, 0x38}, {&(0x7f0000002cc0)={0x184, 0x41, 0x200, 0x70bd25, 0x25dfdbfe, "", [@typed={0xb, 0x22, 0x0, 0x0, @str='fdinfo\x00'}, @typed={0x8, 0x59, 0x0, 0x0, @pid=r17}, @nested={0x4, 0x10f}, @typed={0x8, 0x18, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x8, 0x9c, 0x0, 0x0, @ipv4=@remote}, @generic="3e6803709fce946c3c08e7eba6c23f4ea9259c687ecb934acc9c7d95e9ccbe7b20b56c776884", @generic="da756fe734c0a414ff72a652ffd40d9040ead47e421c2e9cb0f11bd84604af3b34", @nested={0x102, 0x74, 0x0, 0x1, [@generic="7e2f4989cb306ca5ff9020c1579884940c4d12cbb57942d617369a05f05576f6bb2617a4121f441ee99e339e5dd090725145ae645e279ea92a5c0946e0920921320ab278a1136dc5091ebb33b5ab030bb5ae221acfce9c56e0d0be90aa028f0c5611278d58783c9de0b7781e61667276ed5032326440a788", @nested={0x4, 0x149}, @generic="8bbc357e0ccada4ed8dd25b51d72ddb4726d3e79104a35cfadb4cbd33e9592f6fd7cf5d986e344e98cf85980d995e6b8672261951e02f0f653185f17368d1396f7ae32062213b2ca73fe6c18e90ff7d64e0aa6c69ef8f32b4f72673090c4dc6d74ed22e1e3090305a0844a0434996e88c6b7a222a9255bbc3cf1", @nested={0x4, 0x2d}, @nested={0x4, 0xbe}]}]}, 0x184}, {&(0x7f0000002fc0)={0x23c, 0x38, 0x200, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x8, 0x46, 0x0, 0x0, @uid=r18}, @typed={0x8, 0x7, 0x0, 0x0, @ipv4=@local}, @typed={0xee, 0xec, 0x0, 0x0, @binary="bb4206b47cf02dd2f957045465d951ba8fd10b37028220600e077844ff1d898f5da7d040de415c428b5068c2f2df12453e55d990a3313c4a1130a8b1e6be49c99042ecd3400a96d0771faed787f63771f0362bd47bcb20160219adcc7fe06ddd619a637681cf6212e1f9ce27a9c6c55e73ff0fe01530d6bf37436b6c807b25736ca8310d3b47e8dee18aac95fa8bd05eee62665b85ad02039ac468960fc0feebd633ee85fd5635142e772f6f9678983aed6bfbe8ed1591d922272656c533ef407629120c36e717893a180d96a82801e35b6df6ce364bb5cb08320b0e12ed5853adef612aafedee19302a"}, @nested={0x129, 0x126, 0x0, 0x1, [@generic="eeaac4c1cfd20380596b56aa1d23ff753241433421c8bb412f6aa664dc1a99572e029de4e76ffa83c4414aac4a6f47297eca3a2eef02283f3e80c1a00f7b973d134ae013c481eb695665e33209", @typed={0x8, 0xec, 0x0, 0x0, @fd=r10}, @typed={0x8, 0xad, 0x0, 0x0, @pid=r2}, @nested={0x4, 0x115}, @typed={0x14, 0x5, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0xc, 0xe7, 0x0, 0x0, @u64=0x10}, @generic="7c75fd5234df0825ae76320a0e2d17d4e52ac4d408fdfcb2266a5abe09e0c8cbb148695cda3872bc2b2a2bf64a7ef37510979ad3ee8a39335f73cad29ada5a61ca4ce191ea3b549736c30179b2f6eec39e03eba147fcb0dc275984dec30c283fb120c7b86cee71019d1ef8db02b8eda89123fba578c06791ae11253155e8f4130a7a62ed097c22a9c6b377c3bbed9f5b24c0ccf6", @typed={0xc, 0x40, 0x0, 0x0, @u64}, @nested={0x4, 0xf1}]}]}, 0x23c}, {&(0x7f0000003200)={0x60, 0x21, 0x200, 0x70bd25, 0x25dfdbfe, "", [@generic="09ec482880980ea69c10f2182fec63cacb1456594532982c8cee217ce7a2cfee769935361add37e1eecc6e12424165e939d4cff40b2e219eaabb029a2085db1ebf50f1c8734be122d37bf61377eb8e"]}, 0x60}, {&(0x7f0000003280)={0x1300, 0x40, 0x300, 0x70bd2c, 0x25dfdbff, "", [@nested={0x107a, 0x8e, 0x0, 0x1, [@generic="55a3f8c9bdc825d28e93eed618ffccd2c1789ecc21b1240141d75c2a270b97effd76fefa943a990edd4946119827f3e42bca432f16bb9e5ae2bc02fa809e44ba4e3238436109d8b0ada3d48454b5d4c5641b0e9b8ebd4e70bae57d3f7c89a9d638c955274a3f5777405c912051c0", @typed={0x8, 0xa4, 0x0, 0x0, @fd=r19}, @generic="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"]}, @nested={0x211, 0x84, 0x0, 0x1, [@typed={0x81, 0x120, 0x0, 0x0, @binary="96101cb0b9e215af9d9d17b900f3fcbca528c57c7b74890c67ee2eb92e26436d4c04a46aeafd452c8d63c5655810f12a03e9354cf267914c0bbb30a1eb369cb70e10d20d19865a7988204cad711fa2b4fd1319c9f2c7f781dae01144844df4530f98305bf431e0915314cc20427dba7796a33b04f4b1380c3a53f282fb"}, @generic="ee59c9951ea0968a3a87169b217416ef2d008475e1a85988c69e5e842990ab41e55f2c3f768a28f5ae25a450f1db8deabe7a8ff9405f7862709af313cdd3f04021ecac40ae221afab6850a38fc3f075f60c0fddb55f505f35401aa0ad62c8c92413d0c011dd501bfe7fc223ea4526e4f461d9d85282d51880d9be543f58a7233d28bdc6f82c32c8a7aa8cc9744e5e78923e7cf8044d93c505d456dc2421a83a9d644484020373a7a92c7ed398466a057902f82a23b7e89f2bcef80eb5eb0c9f0ee7892184aee78ff1ff864ce8665b380357d716e7e9fdef4397ac8f7341f98b65c", @generic="c085f9f77e6e999fa089a73608a9ed5fddf4b095eefa1eb8ed18255a2a6ec563a4ab5c17b244f443fcf6550d0a451f5b933f9aa8791df1f20ba1cf6704a85e2ae96739f0ed0b66d48cbd2567eb686d3e7ff1857b98c077b34ecfd2ac53e4ca5e2994a5d0c342f9102f4caf77769a6dca976c52e4ae717be77b3b326d9db9418e75d67b78b29c24ac65f655d0b2d3d1520c7cad79c320af065e517a0dd17b5567c9d952874b5f13e4"]}, @generic="00f234a79364f135ffb276a8eacbf94e27e26532a39a34dc6ccf276242ff342613952155cc3ab47a9bb8b86f5cb8e68e71d35a740ccb04b61b067627c6bd3df3c49ca56a0355c2dc88e1649682633a1792210b1cb697f52c76859c5de51532"]}, 0x1300}], 0x6, &(0x7f0000004b00)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r1, r20, r0, r4, r4, r9]}}, @rights={{0x24, 0x1, 0x1, [r14, r4, r14, r13, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r15, r13, r10, r0, r4, 0xffffffffffffffff, 0xffffffffffffffff, r10]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x20, 0x1, 0x1, [r3, r13, 0xffffffffffffffff, r1]}}], 0x140}, 0x40000) 21.543930877s ago: executing program 1 (id=2124): r0 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f0000000340)="cf6f7327d79f8e1e40b68b802d2085a1ce3a3c6d77e737b9156e95b3bd34c0af91e538ec7ba390a26bb9d19a8258000000000000", 0x34, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r0}, 0x0, 0x0, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x54b200, 0x0) (async, rerun: 32) setrlimit(0x7, &(0x7f0000000740)={0x0, 0x7fff}) (async, rerun: 32) r3 = getpid() (rerun: 32) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) (async) ioctl$IOMMU_TEST_OP_SET_TEMP_MEMORY_LIMIT(r1, 0x3ba0, &(0x7f0000000380)={0x48, 0x9, 0x0, 0x0, 0xffffffff}) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r5 = syz_pidfd_open(0x0, 0x0) (rerun: 64) setns(r5, 0x24020000) (async, rerun: 32) r6 = fsopen(&(0x7f0000000300)='affs\x00', 0x1) (rerun: 32) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r6, 0x0, 0x2d) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x201) ioctl$I2C_RETRIES(r7, 0x701, 0x1) (async, rerun: 32) r8 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x9d, 0x0) (async, rerun: 32) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x8001, 0xfffffffa, 0x10}, 0x10) (async, rerun: 32) r10 = socket(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@typed={0x4}]}, 0x18}}, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r8, 0xc0305602, &(0x7f00000000c0)={0x0, 0x3}) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) (async, rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000280)={0xfffffffffffffc99}) (async) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000011c0), 0x8000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r11, 0x3b81, &(0x7f0000000840)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r11, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r12, 0x0, 0x0, 0x0, 0x7f}) 21.485205899s ago: executing program 1 (id=2126): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x775f5fcc42fcebdb}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/loop0\x00'}}]}}) umount2(&(0x7f0000000140)='./file0\x00', 0x9) 21.314703293s ago: executing program 1 (id=2128): unshare(0x6a040000) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x6c, 0x4, 0x2b, 0x20, 0x1f71, 0x3306, 0x1b23, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xfd, 0xe0, 0x0, [{{0x9, 0x4, 0xd1, 0x5, 0x0, 0xa0, 0xee, 0xd8, 0x2}}]}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_INTERRUPT(r2, 0x50009405, &(0x7f00000001c0)) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000040)=0xcd) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000000000010000000"]) r4 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000140)={0x6, @sdr={0x31303553, 0x6}}) socket$inet6(0xa, 0x2, 0x3a) ioctl$KVM_SET_SIGNAL_MASK(r2, 0x4004ae8b, &(0x7f00000000c0)={0x2a, "14791c3781b7d851c07e35779a4455302115065a14a4fe16017125743c5dfb7f8ab191e9276a2cbbbf0d"}) 20.13208374s ago: executing program 1 (id=2135): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x800, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x53, 0xb3, 0xc2, 0x20, 0x1ae7, 0x525, 0x74d5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x30, 0x7, 0x1, 0xb6, 0x8e, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) 5.380941032s ago: executing program 0 (id=2246): write(0xffffffffffffffff, &(0x7f0000000000)="2400000011005f0414f9f407000904", 0xf) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20000}, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x40002001) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[]) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04015b0c"], 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.270728413s ago: executing program 0 (id=2247): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)='_\fuI', 0x4) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) 5.227740708s ago: executing program 0 (id=2248): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) (async) r4 = syz_pidfd_open(r3, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) (async) pidfd_getfd(r4, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x29, 0x0, @local, @rand_addr=0x3}}}}) (async) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) (async) pivot_root(0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x1, 0x0, 0xfffffffffffffee0, {0xffffffffffffffff, 0xeeee0000}}, "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", "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"}) 5.141276907s ago: executing program 0 (id=2250): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x700, 0x10, 0xa09, 0x5, {{0x25, 0x4, 0x0, 0xf, 0x94, 0x64, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback, {[@timestamp_addr={0x44, 0xc, 0x88, 0x1, 0x7, [{@private=0xa010101, 0x7}]}, @cipso={0x86, 0x30, 0x0, [{0x6, 0x6, "336e8a7e"}, {0x2, 0x2}, {0x1, 0x12, "f7117ceb89f339b2b252525ccb8fbb05"}, {0x0, 0x10, "f19d061b082684c83781dff74fa9"}]}, @lsrr={0x83, 0x1f, 0x52, [@dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, @loopback, @empty, @private=0xa010101, @local, @remote]}, @rr={0x7, 0x17, 0x9e, [@dev={0xac, 0x14, 0x14, 0xc}, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp={0x44, 0xc, 0xfa, 0x0, 0xe, [0x2, 0x4]}, @end]}}}}}) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x4e24, 0x10, 0x4e22, 0x6, 0x2, 0x0, 0x0, 0xc05beae5d3751959, r2, r3}, {0x3fe, 0x88e, 0x6, 0x1000, 0x0, 0x48, 0x4, 0xa91}, {0xfffffffffffffffa, 0x9, 0x5, 0x1}, 0x9, 0x6e6bbe, 0x0, 0x0, 0x3, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d3, 0x6c}, 0xa, @in=@multicast2, 0x3500, 0x1, 0x1, 0xf2, 0x8, 0x800, 0x7f}}, 0xe8) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25031100800c0002"], 0x114}], 0x1}, 0x4814) 4.038432903s ago: executing program 35 (id=2135): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) mount(&(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x800, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x53, 0xb3, 0xc2, 0x20, 0x1ae7, 0x525, 0x74d5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x30, 0x7, 0x1, 0xb6, 0x8e, 0xb1, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) 3.272104123s ago: executing program 0 (id=2263): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xbd, 0xe5, 0xa4, 0x40, 0x2770, 0x9052, 0x15f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x5c, 0xa}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_ep_read(r0, 0x4, 0x34, &(0x7f0000000080)=""/52) (async, rerun: 64) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) (rerun: 64) write$binfmt_aout(r1, 0x0, 0xc8) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="130000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000040)={0x8, 0x7, 0x6, 0x2}, 0x10) 2.924493725s ago: executing program 6 (id=2264): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000080)={0x60, 0x1, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x2, &(0x7f0000000040)=[{0x4f, 0x101, 0x4ab}, {0x80000000, 0x100000001, 0x7fffffff}], 0x2, 0x861e, 0x62, 0x62, 0x1, 0x4}) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x2, &(0x7f0000000100)=[{0x200000000, 0x9, 0x5}, {0x0, 0x7ff, 0x6}, {0xffffffffffffc9dc, 0x1ff, 0x2}, {0xd42, 0xe03, 0x380000000000}, {0x7f, 0x800, 0xd1e3}, {0x3, 0x9, 0x6}, {0x100, 0x2, 0x1}], 0x7, 0x0, 0x4, 0x28, 0x44, 0x4a}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000240)=@arm64={0x40, 0x2, 0x4, '\x00', 0x2}) r2 = syz_open_dev$I2C(&(0x7f0000000280), 0x9e, 0x0) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f00000002c0), &(0x7f0000000340)=0x80) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000380)={0x1fd, 0x2, 0x4000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f00000003c0)={0x5, 0x0, [{0x40000000, 0x5, 0x2, 0xffffff78, 0x5dbb458e, 0x8, 0x2}, {0x80000007, 0x2, 0x2, 0x6, 0x5, 0x88, 0x8}, {0x7, 0x10, 0x4, 0xffffffff, 0x6, 0x4, 0xfff}, {0x80000007, 0x2, 0x4, 0x6, 0x0, 0x5, 0x7}, {0x80000001, 0x24, 0x2, 0x1, 0x2, 0x9, 0x7d2}]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee01}}, './file0\x00'}) recvfrom$netrom(r4, &(0x7f0000000500)=""/151, 0x97, 0x40010160, &(0x7f00000005c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000640)={@empty, @rand_addr=0x64010101, 0x1, 0x7, [@dev={0xac, 0x14, 0x14, 0x1e}, @local, @dev={0xac, 0x14, 0x14, 0x17}, @local, @rand_addr=0x64010100, @loopback, @loopback]}, 0x2c) setsockopt$MRT_DEL_MFC(r4, 0x0, 0xcd, &(0x7f0000000680)={@private=0xa010102, @remote, 0x1, "6e80608486e9f2fa2ab97eb8567148e27987944014c041de5a6da0be9c41ca30", 0x5, 0x8, 0x1, 0x1}, 0x3c) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/address_bits', 0x48200, 0x8) get_mempolicy(&(0x7f0000000700), &(0x7f0000000740), 0x3, &(0x7f0000ffe000/0x1000)=nil, 0x6) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x100000000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x40010, r2, 0x78927000) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1c) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r8, 0x4068aea3, &(0x7f0000000780)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, &(0x7f0000000800)={0x48}) r9 = openat$incfs(r3, &(0x7f00000008c0)='.log\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), r9) ioctl$I2C_SLAVE(r7, 0x703, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000900)={r4}) connect$phonet_pipe(r10, &(0x7f0000000940)={0x23, 0x92, 0x10, 0x1}, 0x10) r11 = userfaultfd(0x0) r12 = socket$inet_icmp(0x2, 0x2, 0x1) r13 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$unix(r9, &(0x7f00000074c0)=[{{&(0x7f0000000980)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000a00)="fe8ad0fb67ffe422b516a6d796d2fb7285345dbfe77975e8e71351c32aed32f1484d514fe9fdb4819861a3ee45ce26dcafe08e56c12bfe0dba4978c75c15d754bd7db60182657f8f61b5a03e18d74f481eccdf5cba410e4a4c596bfcd51c7e2088779916e6a614a04d0e55fbba11cd3246ec2cc01c8ffcdc2aa03d8c4b6c055698c7f7c53edad90fe492c9ae37ed38da51e73f530e7335fb91c486364148e068a43d57d5462bd02b846a05ae607dc4ef988a1bc302860edf8e18e90b12cf2505149a48aa4fe00db8f35a413eb2db126db91bcc211ee1fcb4af", 0xd9}, {&(0x7f0000000b00)="71039fbfcfedeadb12ff83a99f1f3b670a3012dedc7d537b18ed9a8ce31adffd9c5669ad410bc83bae9f747799db655a41694c3ea42fdfee0a19b814338357782e9f0676", 0x44}, {&(0x7f0000000b80)="496ce1e7f02dca9f66fc5a697cbfbd2f310fd25ee5e64c9637273bcabe5effc9d02fd5816d2a7ea15477a16a340f55666c1665bffd31dd9413a9304129c73b070c2033a89ba0886b1c240e041135ac96554084b6df38cc31c8c4aafedc03c7bef3589b357b5347c4caf6b3aa05b11b34c687f58044e8b6a546bc0605b1b97911e851698c0a99860a6d400217a3e56f9814715f90e6177be637e191aad974", 0x9e}], 0x3, &(0x7f0000000c80)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x24, 0x1, 0x1, [r1, r11, r4, r0, r1]}}], 0x40, 0x400c800}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000cc0)="05a4f94281a1ed7df2431bf3af5e35d22c05ffe69dc37203b7c844355a5a3577bf146eb4c24c4b2062ba769845b2c27e9a2a6a334a6233f30e12192830e52e7d78171f4c04747a69bedf50cd6cfb877513d8b52ae6a4a3c75d25fbef86961c8faef24c950957004d5e87fb8052f4054f41dcba7697eb86aebc921e801f57a9f0c5cc0e20dfce076882681db62c0785e2fa88f4be1e0c4f247e99d6cc2960b4d9640482df8abe229f1b7e857fbb86ffddf56c76a148aec3f1c5a03d2d15db951d9ef3a5fe6c1d54c2e7120a528ad9b3b8ab7e5ada6beea4fa0793d5e89e2d5eb6f18ba150296ac64bf973ecef27fe0256b98798ccd749a6", 0xf7}, {&(0x7f0000000dc0)="ecacb0a0c8edc35609dda613f9ae5ecb46c66d1d86555247e3ab1d940ea698bf6539d5ac12e4d2aa4971ea3d82", 0x2d}], 0x2, 0x0, 0x0, 0x4040841}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000e40)="987a27078ab31075fed74ec8c8a55cc759de7161b550b31e999ece5be7240fbbf86b50e3caed1b1b1afc6e67d06e86495a4d5848f072d4c00b8db90b52b1daec9bd713e1b162aae5ad85634d55a0c4d36e672186c1490216bde9d5331beb05b6c08e9c9dee5f36176086a6f700d2fb5561cf20a7ee8fcf584bb1d3c604726538a926353a4b478ac7b9849395c84a57e96462bd9bb1162206dd1bd892470a1d9c6e51c517e0", 0xa5}, {&(0x7f0000000f00)="74197b26522b37f73cfcf9e152400eabbb91875e4eb7e519d1a0be795d81221a7963b2cb65a39e7e05765522dbd03313f2727a476b41373b01f4c49875c6b4632872ea5c9cf9d9174fe18ad3ce91f89e58999ed22e062d85bf02540030", 0x5d}, {&(0x7f0000000f80)="5048dfc877e58aada3635115fa2477931176645e952a9c616c5220f302a2cea561b4927dba1df73cc0f852eea63df0d2e35e31c8c106e5455dc8021a", 0x3c}, {&(0x7f0000000fc0)="367a8126febd152f7416050b5e44e555b8f8c6ae9333831e3deb8eb325fb3cb3c1f60db7412ea361198e75b982429227933c5b752c8d1c61a947ad652afeefdd2edf473125ba0ac1a714639dcc26d2f5465ad704b3ed723a1db672839c69b97ea56efad20599cced1825630fe32330951ef74ae6a58606049cfcbfdb839f75df2929411143e44e94db86484107282073e8bbb6", 0x93}, {&(0x7f0000001080)="fbc03c71aa74c14030921a25fcc404201ff9e3ba5cce30861ac1bcf6fd5a8989fbafcba2f032b43d95ddf2114488c5d1305de70d58ce2b49d746ef693cf5906840d24d03ad41f728f4d2d65e573cd17c1c80efa84ffe3e8711496764c6ee672acc02cae60a693c2b297fe07587b666a6c6dc7c40d842e6efbf6332ecb010addefdbac8ef3d0c9511545b548f468e77398f4b771b5cef6975ae5a4c60c4689f663d5f5a84df5983", 0xa7}, {&(0x7f0000001140)="4190aac2469a1365bcf7a0f6559dd2afe9bc985284d694f65c7e28444f2fd0b8a3ccbd255a54b146a985d7f944e66ccf3b8f442deef09f82ada6c100fe435947f5a49d42e777815b666c1d66ca136fce2bdbfc0715b54a873e02bb838d4fb2e82c6d4f4c5913fee4249f2e4626d863367036fe8e0b0e3ebb68357f73afa1267836d67223adb5c1f3ecc79cd185f44b40998399a2d77cb64a2f87ccd22cad6cf2c0531c075a3307bed8c359d01dc8", 0xae}, {&(0x7f0000001200)="48d89fa813b45781e36de874053c7472d94f238b6003e452ac70de38ce24c7d879135ae46dd44c9b7f95d8732f8bfcb37acb78889368aa5e2c415207b989e76ccaf3a524a2d6f1b8ca3b4ff20b4353bc00f24222bd5d791f52d6cd00c0603092a0c273844c8059c385f9bb8b913108296ae397109906090c62898689348488b1697a5158de72ef313838fcf480992ec64947855c9252b811235f4443916aed83501acacf03d92ba314d24865b9f19eae730d22c21f76f19ca29f88a96045f94203720239", 0xc4}], 0x7, &(0x7f0000003500)=[@rights={{0x24, 0x1, 0x1, [r4, r9, r0, r4, r12]}}, @rights={{0x24, 0x1, 0x1, [r13, r0, r10, r3, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @rights={{0x2c, 0x1, 0x1, [r3, r8, r4, 0xffffffffffffffff, r7, r9, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r7, r11, r0, r1]}}], 0x108, 0x10}}, {{&(0x7f0000003640)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000039c0)=[{&(0x7f00000036c0)="a679ba70d411d3d0", 0x8}, {&(0x7f0000003700)="1df117bab8743b96ef97c47c2f743b0f3547a7dec0530324deb7b3fb3a9d76d921c5fca40b9c1d9360dae2b546de1aadb6f698e681cdd4a34a1311ff13be7da314d1d24c40a298ade53b2d1b1cfe96b8184092443dded62bff612236f94b70233c02ca51405081abc9da442fda6d85e84b4c75dae06ff58847806ccd5ce60fd510deaa7d04d792a76957b2359d557727247f77735d88a4c908c249f23314a4b768a6775133fffd0a46cad4af06297b3e497d2936b43078f0e755633f12f3e84276d9767e8cf63d9548cd6aa93a43865eeedc771f2f4e4700677431720bfac1c78f", 0xe1}, {&(0x7f0000003800)="b268a620822cb6c2b122ecd85b4d3112b4fa2377e56eaa815ca65ecc460de437b8e15400cb405c54b2f524c18e34ca34bd919f5160aaf0b9caf0968586b0ad974e1c34cb8a9465bf6973187265810ac0acd1be5eb62574ea7ec0b61e0361af1bd5db3ac46371733bbb27b7a7e35576eca369bde2d6e2d5c8e3fca8e1ad7b356cbfce54e37fce5a6ca518e44db3161ac14a31da69d5b4e5d3577ce028c431db008cc65b8f79f3bd5d49409ab014", 0xad}, {&(0x7f00000038c0)="90653c7511ff7af540c43bae8ffed9be39ef81fbdfdc320ed922cb1ed0506b777a0056e91d3e6c46406ddc98eddb1612cfab25404b9152060b5698da69a2c28341308669a4699877bba8776827ee2ddd01d9e018aeb708bd6d621d6efddda4e671f060545a9a10148d1016605c26f95e62cde522f9593b3ad3bee5f3d243ddc2ca9a70c37ac8d77f69150f8bcfd3ce3cf497e681b15bed167f455f24c2bc7f308f19ab1d52c90e6c9cf574ef75b62928235ca994f75acf7ddabb40ca96cbe5b7c24e95ab9974454444af09d499fb0f2f60dfffac7a9b5e043c", 0xd9}], 0x4, &(0x7f0000005e00)=[@rights={{0x24, 0x1, 0x1, [r10, r4, 0xffffffffffffffff, r3, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r6}}}, @rights={{0x18, 0x1, 0x1, [r10, r10]}}, @rights={{0x34, 0x1, 0x1, [r1, r10, r0, r0, r11, r2, r2, 0xffffffffffffffff, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r5}}}, @rights={{0x10}}], 0x128, 0x4040}}, {{0x0, 0x0, &(0x7f00000061c0)=[{&(0x7f0000005f40)="59b41a095eca63a5a4c6966afe8fcb029a4071d321295c2cba3a579cec9524f4d76b544604fea03a5b2eaf", 0x2b}, {&(0x7f0000005f80)="93db22f98a94c85a1d1ad0a6ea2af736052aaa0969cde93edbafea092c5ac9b53dcc3909d9ca29c275320e49f4406ad7a02564a681e1bc4381d46e54f6674e0e077cc2be11e146d56d8f297d12030db04692c3a1b2bed630357da42c3226f8dd853a3bcdb4bf415d5a0a5e01a707c31427338c07e48685628c441c9e7be07f2a1b4ec7d7258fcd194c78d43644aaa8d962bb55a3dea8393ed5e836ee2b0d76701d31a52683f638534f306f", 0xab}, {&(0x7f0000006040)="276fb468d93eb8fb270bd23fb4785cd081ded9fbab9569fe84d73961cca4a65285782cb4a4845c1d7a52d22a51db4287a0f2ea1aef8d22dbc2bd7a50bfcf6f4f7e1e5626d77230332abf5e29", 0x4c}, {&(0x7f00000060c0)="3f3b4e208a9979542f3eae3b724c75b3c47ffa83794a1c9fa9c312715c231f06c8af53e5940468d6e12a828c096bea65f8a38b1ff7d468c26aaf9ad4382282475c875dd52b61fdf476c4893c92167b43fd14b840a0b2fcec5cebd395fd18f74d4faad68d6ad99630b55fb25c59b62cb30ba1fa7c1e508b2ea0b40b559572cf99b06bf4e1e733bd683bf1da8b8116c0300ab76cd32e425654ec90c04d559b628ecbc8174059d81c1f4060dc26c250c61b23dbee5d563acbf39b0cfe024703dd9b3b43fa1dbba0e528bc822f0965dc6ca22cf510e2beed", 0xd6}], 0x4, &(0x7f0000007440)=[@cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}, @rights={{0x24, 0x1, 0x1, [r1, r7, r8, r4, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r6}}}], 0x68, 0x4004800}}], 0x5, 0x8004) 2.866778758s ago: executing program 6 (id=2265): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002800)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="93", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x6, @private2, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='J', 0x1}], 0x1}}], 0x2, 0xc010) shutdown(r0, 0x1) (async) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x221c0, 0xac) (async, rerun: 64) r2 = fanotify_init(0x200, 0x0) (rerun: 64) fanotify_mark(r2, 0x201, 0x800003f, r2, 0x0) (async, rerun: 32) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) ptrace(0x10, r3) ptrace$cont(0x20, r3, 0x0, 0x0) ptrace$cont(0x20, r3, 0x1, 0x3) (async) fanotify_mark(r2, 0x1, 0x11, r1, 0x0) (async) fanotify_mark(r2, 0x80, 0x800, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000102c0)=@deltfilter={0x930, 0x2d, 0x20, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0x1d9ba4b37f621188, 0xfff3}, {0x1, 0xa}}, [@f_tcindex={{0xc}, {0x4c, 0x2, [@TCA_TCINDEX_SHIFT={0x8}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_ACT={0x38, 0x7, [@m_ctinfo={0x34, 0x11, 0x0, 0x0, {{0xb}, {0x4}, {0x5, 0x6, "f5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @f_tcindex={{0xc}, {0x894, 0x2, [@TCA_TCINDEX_POLICE={0x890, 0x6, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x6, 0xb, 0x6, 0x80000000, {0x49, 0x1, 0x1, 0x5, 0xef0, 0x7}, {0x2, 0x2, 0xff8e, 0x9, 0x4a43, 0xe}, 0x127, 0x0, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0xc9d, 0x10, 0x1, 0x1, 0xfffffff8, 0xd309, 0x5a51, 0x0, 0xceda, 0x9, 0x4, 0x5, 0x200, 0x0, 0xfffffffa, 0x2, 0x200, 0xfff, 0x80000000, 0x8, 0x2, 0x40, 0x8, 0x200, 0x0, 0x8000, 0x6, 0x4, 0x3ff, 0x1, 0x80000000, 0x2, 0x1, 0x9, 0x3, 0x20000000, 0x0, 0x400, 0x8, 0x7, 0x3ff, 0x7ff, 0x27, 0x6, 0x1, 0x401, 0x8, 0x6c964abe, 0x9, 0xfffffffd, 0x101, 0x0, 0x81, 0x62, 0x800, 0x400, 0xd64, 0x1, 0xffffff53, 0x4, 0xc0000000, 0x2, 0x1, 0x9, 0x5, 0x4, 0x100, 0x1, 0x7ff, 0x9, 0x8, 0x699f, 0x427b97fe, 0x3, 0xca6, 0x7d, 0x101, 0x7, 0x8, 0x6a2, 0x8, 0x80000001, 0x3, 0x9, 0xfffffffe, 0x54, 0x3, 0x7b9c, 0x401, 0x1, 0xffff, 0xd1, 0x2, 0x9e, 0x8, 0x2, 0x7fff, 0xb, 0xff, 0x4, 0x4f, 0x8608, 0x8, 0x40, 0x8000, 0x3, 0x8, 0x3, 0x88, 0x6, 0x1, 0xc24f, 0x2, 0xff, 0x800, 0x2, 0xfffffffe, 0x100, 0xffff1f2f, 0x4, 0x7, 0x7, 0x3, 0x8, 0x3d, 0x7ff, 0x4, 0x7, 0xfffffffb, 0x2, 0x2, 0x9, 0x445f, 0x0, 0x8, 0xe564, 0x8, 0x4, 0x1, 0x6, 0x5, 0x1, 0xa2, 0x101, 0x2, 0x7fffffff, 0x1, 0x1, 0x8, 0x10001, 0xd91, 0x9, 0x4, 0x4, 0x7, 0x800, 0x410a, 0xf, 0xcbf, 0x4, 0x8, 0x3, 0x6, 0x1, 0x3, 0x2000000, 0x3, 0x6, 0x9, 0x1, 0xe03, 0x9, 0x2, 0x3, 0x8c4f, 0x7fff, 0x3, 0xffffffff, 0xff, 0x1, 0x757, 0x7, 0x101, 0x2, 0x2, 0x2, 0x8, 0x4, 0x7, 0xb32, 0x6, 0x4, 0x6, 0x7, 0x7ff, 0x0, 0x7c, 0x80000000, 0x9, 0xffffffc0, 0x6, 0x8, 0x1, 0x7, 0x26, 0x3, 0x4, 0x3, 0x5, 0x9, 0x400, 0x59f, 0x1000, 0x9, 0x1, 0x3, 0x5, 0x5, 0x0, 0x6, 0x65, 0x7, 0x1, 0x10001, 0x8, 0x9, 0x6, 0x1, 0x7, 0x7, 0x9, 0x9, 0x6, 0x2c2, 0x200, 0x2, 0x3, 0x10001, 0x5, 0xd61, 0x6, 0x8, 0x10000, 0x8, 0x5, 0x9, 0x860, 0x8, 0x3, 0x6, 0x1, 0xfffffffe, 0x19, 0x6, 0x7fff, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x44, 0xffffffffffffffff, 0x7, 0xfffffff7, 0x844b, {0x8, 0x1, 0x10a6, 0x4, 0x8, 0xd}, {0x5, 0x1, 0x40, 0x8, 0x8, 0xd}, 0x2, 0x3, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x10001, 0x7fffffff, 0x1ff, 0x7, 0x0, 0x0, 0x7e, 0x1, 0x6, 0x2, 0xc4, 0x2, 0x0, 0x0, 0x9, 0x8, 0xc, 0x4, 0x6, 0x8, 0x6, 0x5, 0x9, 0x6, 0x6, 0x0, 0xfffff000, 0x7, 0x10000, 0x5, 0xc, 0xb, 0x84, 0x9, 0xb, 0x5, 0x5, 0x2, 0x1e45, 0x5, 0x1000, 0x9, 0x4, 0x1, 0x9, 0xfffffffe, 0x6, 0x3, 0xfff, 0xac94, 0xff, 0x8000, 0x4, 0xf0e6, 0x4, 0x8, 0x7f, 0x867, 0x2, 0x1000, 0xfffffff6, 0x1, 0x2, 0x3, 0x952, 0x5, 0x1, 0x9, 0x3, 0x7, 0x2, 0x6, 0xffffffff, 0x4, 0x4b, 0x7ff, 0x9, 0x87, 0x7f, 0x7, 0xfffffff9, 0x9, 0x3, 0x6, 0x8, 0x52, 0x453b3ca8, 0xff32, 0x6, 0xfd2, 0x7, 0x3, 0x9, 0x8, 0x401, 0x8, 0x800, 0x80000000, 0x3, 0xa, 0x9, 0x3, 0x300000, 0x2, 0x9, 0x7ca, 0x10001, 0xc, 0x28b, 0xfffffff2, 0x8, 0x4, 0x0, 0x1, 0x1000, 0x7, 0x7, 0x40, 0x1, 0x0, 0x660c72c1, 0xffffffc0, 0x7060, 0x6, 0x0, 0x5404, 0x5, 0x9, 0x5, 0x5, 0x5, 0x1, 0xb, 0x7fffffff, 0x3, 0x6, 0x5, 0x9, 0x2, 0x5, 0x1, 0x1, 0x2, 0x7fffffff, 0xfffffff8, 0x75792ce, 0x7f, 0xfffffff9, 0x5, 0x3, 0x10000, 0x3, 0xb35f, 0x1, 0x4, 0x50094766, 0x0, 0x7, 0x54b, 0x80, 0x2a0d8c55, 0x5, 0x3ff, 0x1000, 0x1a16, 0x10000, 0x2, 0x9, 0x3ff, 0x5, 0x3, 0x6, 0x5, 0x1, 0x86, 0x2, 0x1, 0x1ff, 0x5, 0x2, 0x7af, 0xca, 0x8, 0x3ff, 0x2, 0xca, 0xe, 0x4, 0x6, 0x3, 0xffffffff, 0x321, 0x1ff, 0x9, 0x8000000, 0xfffffffd, 0xff, 0x4, 0x7, 0x9, 0xb, 0x0, 0x2, 0x101, 0xe, 0x5988, 0x1, 0x0, 0x6, 0x101, 0x2, 0x7, 0x1, 0x8, 0x0, 0xffffffc0, 0x1, 0x200, 0x8a7, 0x3, 0x1, 0x401, 0x0, 0x183, 0x80000001, 0x3, 0x8, 0xfffffacf, 0x6, 0x80, 0x4, 0x100, 0x7, 0xe, 0x3, 0x8, 0x5f6, 0x4, 0x1b2, 0x4, 0x8, 0x7, 0xcd7a, 0x95, 0x6, 0x10, 0x200, 0x80000000, 0xe655, 0x5, 0x8, 0x9, 0x1ff, 0x8, 0x5]}]}]}}, @f_rsvp6={{0xa}, {0x8, 0x2, [@TCA_RSVP_ACT={0x4}]}}]}, 0x930}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) recvmmsg$unix(r6, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)=""/158, 0x9e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)=""/37, 0x25}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000940)=""/248, 0xf8}, {&(0x7f0000000a40)=""/217, 0xd9}, {&(0x7f00000000c0)=""/33, 0x21}, {&(0x7f00000041c0)=""/4096, 0x1000}], 0x4}}], 0x3, 0x2000, 0x0) (async, rerun: 64) sendmsg$IPVS_CMD_SET_DEST(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="080005001000"/22], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x2c004001) (rerun: 64) 2.607310769s ago: executing program 6 (id=2267): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000001c0)={&(0x7f0000000000)=[{0x1, 0x8000, 0x0, 0x0}, {0x1, 0xda01, 0x0, 0x0}], 0x2}) (async) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f0000245000/0x2000)=nil, &(0x7f00004c7000/0x1000)=nil, 0x4000, &(0x7f0000000180), 0xb, 0x1bb}) 2.379878801s ago: executing program 5 (id=2269): r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd(0xff7ffff7) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000500)={r5, 0x3, 0x0, r5}) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000000)={r5, 0x3, 0x1, r5}) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write(r0, &(0x7f0000000000)='\"', 0xfdef) socketpair$unix(0x1, 0x5, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x208000, 0x0) 2.163185162s ago: executing program 5 (id=2270): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="40010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d0000000000"], 0x140}}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="40010000100001000000000000000000e00000020000000000000000000000000a010101000000000000000000000000000000004e2100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a000000000000000000000048000100736861323536000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d0000000000"], 0x140}}, 0x0) shutdown(r0, 0x1) r2 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$netlink(r2, 0x10e, 0x8, &(0x7f0000000040)=""/60, &(0x7f0000000080)=0x3c) (async) getsockopt$netlink(r2, 0x10e, 0x8, &(0x7f0000000040)=""/60, &(0x7f0000000080)=0x3c) connect$bt_l2cap(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r3, 0xffffffffffffffff, 0x8000) 2.103845911s ago: executing program 5 (id=2271): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000f00)={0x0, 0x14, 0x4, "42467af9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f00000007c0)=ANY=[@ANYBLOB="200c04"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0xe, 0x4, "a8e68e07"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000340)={0x14, &(0x7f0000000b80)={0x0, 0x10, 0xcf, {0xcf, 0xd, "3a5c38dc517944a74d50fd10b0bb6cd8b4936c0c03a60b36bfc727c2988825a1ff54704b1de44ccaf7e8f0b31ad256e8426b0673e092be52e49f10a1a0bb7d19ea48f4721f3f0e02aa8d0f9565932a3eefa4e8e67c8d0b71ac2fb9f1733a278fe567a74dee82b5a10fc4be10bd725609988d7b452d61c00855e00c215e464bbbdd638245e7381cb7a725669743a14901a6a792c5348089bda40644e00b1d45b8c3d4744f729ec86519d11c09b58011c3cb991263e2b1b42e5b513a15890ed6e0b8455827ce71b4b28e5a343a47"}}, &(0x7f0000000cc0)={0x0, 0x3, 0xec, @string={0xec, 0x3, "7cc35e2101cff34863ba9850062ae5a52e773f0e129df8dba4aed516c7b329a81a22ab76339f1bc40cb4af70f20270c591e0c0dadbcadbbf467949b4a2d31b1e27664544d993f48084a987caafd7f5b44358084242a64239bf6cc0c84353874c4b1a4ba5b6e043ce1e2f2f90f5b36131a52d98a5eadafc827bb5697275ab044bcc387b2c6a6113d160a0fe330a26d4754b23ba9def6892dce4a62f5c597820e2ba599ed3a7bc6500035b91641ddf54dd693632849e7a23d2a71f76fcb2f0304956c610b41b7b51351435c4b6f89fe832b6077af08cfd2355664c0503f8f1c89e6d778eced7e8ab54d798"}}}, &(0x7f00000006c0)={0x1c, &(0x7f0000000dc0)={0x40, 0xc, 0xfb, "9609446d6e67c6feac54d7d245aa75d95e254024dc569ac14833877d267399a3b84e1e5066ddf330c83e6ec17e895f321170072d2729dc15b5f9046e71b3948bfddc8e9193e0e41271515da8d90aafc7a749d796bad3839e2ec15dacf8c24e4d7394da2d1cfa068a14e7c8cd123ac7e862be0304d2f36e1c5895eab790f93078fb3dc4b44cc4c7f5460ce0960f3eab6fdab0073d271db2c0d4b7b211e1115b6b0cbfb941814fcac5d4af2fba9f7d2f54fd58cd902ed83eeb9d9ea456b31d2ee84c604b5b504ac8f0d68319347347dbf4169d3925bc75061eb7c60960cb7ac9eff4e843d01832958662392ddd47da872c92dd5970eb5cfa4370e7ac"}, &(0x7f00000014c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000680)={0x21, 0x0, 0x2, "eb71"}}) 1.775479809s ago: executing program 6 (id=2272): r0 = gettid() pipe2(&(0x7f0000000540), 0x4000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000440)={r1, 0x60f, 0x0, r1}) r4 = accept4$netrom(r1, &(0x7f0000000000)={{0x3, @default}, [@netrom, @remote, @remote, @default, @null, @bcast, @remote, @null]}, &(0x7f0000000580)=0x99, 0x0) r5 = signalfd(r4, &(0x7f00000001c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r8, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xffff, 0x3, 0x5, 0x1000, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x7ff, 0x0, 0x5, 0x6, 0xfffffffa, 0xc, 0x9, 0x4, 0x2, 0x1, 0x40005, 0x4, 0x1, 0x4, 0x1a47, 0x8, 0x3, 0x8, 0x1, 0x2, 0xac00, 0x6, 0x939, 0x5, 0x9, 0x9, 0x2, 0x4, 0xfffffff7, 0x7ffe, 0xf9, 0x5, 0x2, 0x56f00ca6, 0x5, 0x2b, 0x1, 0x23], [0x1, 0x9, 0x9, 0xfffffffe, 0x5, 0xe, 0x7fe, 0xc, 0xfffffffa, 0x7fb, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x10000002, 0x3, 0x7, 0x9, 0x82, 0x1008, 0x1, 0x40, 0xa3, 0x8, 0x0, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0x6548, 0xd, 0x10, 0x2, 0x9, 0x7, 0x8, 0x5, 0x8000, 0x401, 0x5, 0xc6, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x2, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x6, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x80002, 0x80000001, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x7, 0x4, 0x10000, 0x7fff, 0xffffff40, 0x8b2, 0x7, 0x0, 0x101, 0x140, 0x2, 0x9, 0xb, 0x2, 0x6, 0x7, 0x7c13, 0x5, 0x1, 0x7, 0x8000, 0xe, 0x6, 0x4, 0x8, 0x0, 0xffffff00, 0x900, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x1, 0x9, 0xc3, 0x7751c64, 0x7a3], [0x4, 0x3889, 0xffff9a7f, 0x200, 0x6, 0x2, 0x4, 0x1, 0x9, 0x2, 0x6, 0x1f, 0x3, 0x8, 0xfffffffa, 0x2, 0x8, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x6, 0x9, 0xfffffffd, 0x7fe, 0x0, 0xffffff81, 0x5, 0x8, 0x461, 0xc0000000, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x2, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x84, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x3, 0x10001, 0x80, 0x20800008]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x20003) fcntl$setsig(r6, 0xa, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb3) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=1']) setxattr$incfs_metadata(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600), 0x0, 0x0, 0x1) poll(&(0x7f0000b2c000)=[{r7}], 0x2c, 0xffffffffffbffff8) capset(&(0x7f0000000240)={0x30049835, r0}, &(0x7f00000002c0)={0x3, 0x1000, 0x8, 0x34b3, 0xfffffffa, 0xb3}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r9 = gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000003, 0x0}, 0x0, 0x8, &(0x7f0000000200)) ioctl$DRM_IOCTL_GEM_FLINK(r5, 0xc008640a, &(0x7f0000000300)) tkill(r9, 0x16) dup2(r6, r7) syz_clone3(&(0x7f00000004c0)={0x8000000, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0), {0x22}, &(0x7f0000000400)=""/105, 0x69, &(0x7f0000000640)=""/4096, &(0x7f0000000480)=[r0], 0x1, {r5}}, 0x58) syz_open_dev$ttys(0xc, 0x2, 0x0) 1.504675539s ago: executing program 0 (id=2273): write$vhost_msg(0xffffffffffffffff, &(0x7f0000000bc0)={0x1, {&(0x7f0000000ac0)=""/241, 0xf1, &(0x7f0000000640)=""/101, 0x3, 0x2}}, 0x48) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2000000000000, 0x802) ioctl$EVIOCSABS20(r0, 0x40044591, 0x0) close(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x10}, 0xc) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x1}], 0x1) r4 = dup3(r2, r1, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/custom0\x00', 0x0, 0x0) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x7) r8 = fcntl$dupfd(r7, 0x0, r7) r9 = syz_usb_connect$uac1(0x1, 0xda, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0xfc, 0x1b, 0x1, 0xff, 0x28}, 0x19, &(0x7f0000000540)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "be40b753047001917c0deb46271b03d4"}]}, 0x3, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x3009}}, {0xac, &(0x7f0000000480)=ANY=[@ANYRESOCT=r6]}, {0xd6, &(0x7f0000000dc0)=@string={0xd6, 0x3, "3a988a7984525270cf4910e7f2220723678ad3449ac974e1ddcf587914241bac5254f1507126c3293820ccd45b7c9fbdf29d0ebfe51f2210ca5efc0068c7db1de5b6826b8f5431586f36c7103a856ef1413a86c01dcb3a0cf55455d8dc1d621f88c033cfcb72a4b0ca977dd44fa4dbc3b1b91da82be357c773ef74089c51f63f895dfae7c4fcd68181ac544a6f5e34a31261383ca0950867920051ae713a682fcd46dae184f0c44e36acb3e8d1f47e2cdbe88c02735f7d9e9b533bc167f860c1560ca0bb9026b5ddbf948468d817ca55f916dc62"}}]}) syz_usb_ep_write(r9, 0x1, 0xc4, &(0x7f0000000880)="b8beaa0512104be10d6dc926a56d460c81c32484ffc5f7f45bd6dbd8b11f42f65c19fd9fce72d212809d4e62e937019c357eb0fe480655dd2c06437dd2736c595127540df56245b6462a47f77cdb6cd006bc5f8b2d58f2f4f7d4c3bab2546db9e43993fcde0ff67ba2d3327c0d6a11868954f32e66029049bcc8687a02179393550a6760d3a2427f5e6c195eb5ede341d66cf30d0f24bfb94002dba1a06217757757444626882ba4886345b74b40acfdc8bfe9d3d15b2d1de9033a9cb76c88533d4bc33a") ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0xff) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000340)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x80}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="a9c159", 0x3}], 0x1}, 0x40080) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3c, 0x9d, 0xa4, 0x8, 0x2ef5, 0xa, 0xdfce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x4f, 0x0, 0x0, 0x67, 0x40, 0x4a}}]}}]}}, 0x0) 1.480178527s ago: executing program 5 (id=2274): ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)=@multiplanar_mmap={0x9, 0x1, 0x4, 0x2000, 0x81, {0x0, 0xea60}, {0x3, 0xc, 0x81, 0xfc, 0xf, 0x28, "17f5ed83"}, 0x0, 0x1, {&(0x7f00000001c0)=[{0x9, 0x9, {0x7}, 0xb60d}, {0xd2bd, 0x56, {0x9c}, 0x2}]}, 0x7, 0x0, r0}) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0) 811.728903ms ago: executing program 5 (id=2275): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000001a00)=ANY=[@ANYBLOB="0a0088a8bbbbbbbbbbbb0000000000000011aa"], 0x1015) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000280)="c502640be30e67dafc7702de52bcdc680dcd015b8334bc77a67a92b7cb1ccc12e26ef53e1ab27022b2558831ad7830a0fc5ef48d578d7325b7d54ed45f187d8d8b950dd44ced8a34b61d7b3d25ede81e2bd4d2e6510a547ef5d7e6e36458d727aa7bbc50a8489472f0a3275c2883b1fa7443b61e784a92277dd35ebd794fecea63ba98312994649735b49e09ab417702bb11e2bfb9b3e8f29e963b535c53653cd63a43cb83ec0908377da0b5d21d1a545b9bc5f4c19210f50401dca3577a9864688391fcbaa3fea30e351569a964a2dcd444d638e1a4d2ae7c578ae9151e89556e4c74e9357909a82c5b", 0xea}, {&(0x7f0000000200)="e7fda7506c32001a67c06776aac3a0fcba1834c32ab002fe34a010d9f3665b47f2", 0x21}], 0x2, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x200}}], 0x18}, 0x4000014) ioctl$HDIO_GETGEO(r3, 0x301, &(0x7f0000000c40)) syz_usb_connect(0x0, 0x5d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) r4 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc227, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x3, 0x1, 0x3, 0x74, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0xf40}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x6, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xff, 0x8, 0x9}}]}}}]}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x110, 0x0, 0x8, 0x2, 0x20, 0x3}, 0x1c, &(0x7f00000004c0)={0x5, 0xf, 0x1c, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x4a3282feacbea4f3, 0x2, 0x7, 0x1, 0xe0}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x3, 0x75, 0x7}]}, 0x3, [{0x55, &(0x7f0000000500)=@string={0x55, 0x3, "96968560112a4e267140abd7a45e5c3acfe11696c224dcb3c30b3632a2a5633331dd350db2981961caa78acda0e5a9074aefce8115bb0f56ee600404469adab76a43024615bea3c769ed1e5313a072f1d242e8"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x42c}}, {0xda, &(0x7f00000005c0)=@string={0xda, 0x3, "7e1a2bda6f560c54bac3624b8f123dbd0353eb9e9462ff5a66349735a415bc0fa0a6f552ff6bdcaa9c2b20d8f369c2c007024b760cf021889f4493c5bd55e65db8382fe2071f51dfe4476156df3271374dbacb3816d846eba42ec9bd41d8f344cd32fe0b7986769fed8718d3938852c9dce35ffca0e61288b5a90996b4b035ebd9d887923207e228a43e2d49f3203fc9a9494c60cb349a91866baa227c3a5e954a87366c3bc141e09f697ccbffbac8fc6b5bc52c601a28821ab428f134a75615810801390f13b84e7866f68a301a951f48c02eb9a17d521f"}}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="9c", 0x1}], 0x1, 0xffffffff, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r9 = dup(r8) syz_kvm_setup_cpu$x86(r9, r8, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000008c0)={0x24, &(0x7f0000000700)={0x40, 0x6, 0xc2, {0xc2, 0x27, "0544495fb3a15d547a9a06f6fe9705833a3b2335f03338e36bed4c5c08e5c985942e040b1155ad55557ec22ed2a504310accc2898e3efc00314b90da1a1c6d012bb66fa315261adabe270e0f8afacf70dd74a6551cec088144ac2a9ab8ee0056e184b830f801e66aa855d96cbe413124c713b71f8af01fcb220880340cf396cb144ca0c3ac47802f3c96c564ba0f5439689146b04100d44381329db3d2112b991f357c2888d44709a1bcbab4a9ea662f80c7d1bcdfef64df0ce25b8b792cbc36"}}, &(0x7f0000000800)={0x0, 0x3, 0x32, @string={0x32, 0x3, "bf0a1d5d6e7d97f1a6b7a53d271934258917d4ed25127ff63879fe4394cfbb808ea5678c076cb5280f6780d1c05c715e"}}, &(0x7f0000000840)={0x0, 0x22, 0x1f, {[@global=@item_4={0x3, 0x1, 0x5, 'w5c%'}, @main=@item_4={0x3, 0x0, 0x8, "052f9270"}, @local=@item_012={0x2, 0x2, 0xa, "dfad"}, @main=@item_4={0x3, 0x0, 0x9, "8511507f"}, @local=@item_012={0x2, 0x2, 0x5, "b8e0"}, @global=@item_4={0x3, 0x1, 0x1, "47c5dc19"}, @local=@item_4={0x3, 0x2, 0x7, "5e1fb316"}]}}, &(0x7f0000000880)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x58d}}}}, &(0x7f0000000c00)={0x2c, &(0x7f0000000900)={0x0, 0x16, 0xfe, "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"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x15}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xec}, &(0x7f0000000ac0)={0x20, 0x1, 0xf0, "b0f7596c609322302b131d04524a584d85392bc0a0de7afba318efa178fbf7d7e3829fd1f0c968454d6c36401a0e517e0241f876172cdd26541a6ebb49448e369790d4ee25eed430c94634fda5f8658bce1b7f1e8205b12c74ed599bcbb7a8c4c92c6593e94e6ac0a588888c1021d1a29872b0be1940354b797fb6dd9739d81faa4aedf6a96f2bcb8afdb7e78c2ac0d8f9496d5378eae5432ae69f61018d8d7fe1e9fe800d899095f8879d120a0ba928ee7d0ebb4c3887c881d069cad7db90e367d630ad7a1e901ffb6819888b09fa75d62d8861997d3270e6274767c4dd7e953a76b60cbc18bacc42c9dbc3ce58548a"}, &(0x7f0000000bc0)={0x20, 0x3, 0x1, 0xc}}) setsockopt$sock_int(r9, 0x1, 0x2b, &(0x7f0000000e40)=0x8, 0x4) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r13 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r13, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000400, 0x2, 0x3, 0x9}, 0x20) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x28, r11, 0x5, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}]}]}, 0x28}}, 0x20048880) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000c80), 0x210000, 0x0) 811.410186ms ago: executing program 7 (id=2258): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) syz_emit_vhci(&(0x7f0000000d40)=ANY=[@ANYBLOB="040b"], 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b88beee8ccb134bc946805a40690dd25837bf7653d4a2f23339f9a4f154bf66981aae44ea81a5450bc0111c6fd123f7c843fa1233ede456197848d7eacfc450a92e903a7ef14ada10caebbd86e889d3ed5d3b0741329a62efc34214fb1b94851cb84856a77b69408000037f1b31d9e658722c093ac46f841de976a4c813d5981ae52a7429d1bf35f1844826d38ea7a458286b08226d8a6a890f4e4b50a734e1f39391f954787bd1753cc3293102b50c49da949fd81579f2d1e4e47c2f414fa5e5102acf6e1a29a2f1fe3b1839b359d27227d6f", @ANYRES16=r3, @ANYBLOB="010000000000008000003b00000008000300", @ANYRES32=r4, @ANYBLOB="48003300d0000000ffffffffffff08021100000050505050505000000f0200e00100010072060303030303032d1a0200000100000000000000f5000400080000000004020000007f"], 0x64}}, 0x0) getsockopt(r1, 0xa, 0x1, &(0x7f0000000200)=""/82, &(0x7f00000000c0)=0x52) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mount_setattr(0xffffffffffffffff, 0x0, 0x9100, &(0x7f0000000580)={0x8e, 0x1e, 0x100000}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0xfffffffffffffe2a, &(0x7f0000000500)=[{&(0x7f0000000300)}, {&(0x7f0000000900)="e3759bd6f26e7151407907152c47430e9c02558c585edf34fa038d7eac282302897b2da2ddbadde19e77df239cf7adfa6b11ff9470ef0857285906446ad8bb6718d5ad68e22466755b786d5c102ce47bb67f83066a768a624fbf8a9b3e2ba4b9b4a7417f30154dbc5c7eabef04e0c60bf2d8cb7fcd531accd4d7f2057aef6a308a5c63cf14c600abd323f3bfae123fe2fd79734abf65c9f28fcb2d0540e303ed9b6088a8d55c7ca05a57876e32da42e627cca3f4f86d6bbf1301b9b569f8c334d408f67142942a8dec746858ef767b0aa5c78a2dd7b58f4ed576e71dc045a2139e7e31253e6d57dca88c"}, {&(0x7f0000000800)="3eae84867791eeec547e68443f3657644f687c22ad75c0b45a54c52f34b6a34b0e91609adc1ecbf49d4b2642f25c2ad6fa9c34d51e86c09d78ee10c4f7b7b05aec7bb22f5aa062d24ec2767a0028b9d0ea7632879fca8b8359bbb98be4ee6f490fde4c453d5828604761b0a57fab0df76041307120012eebb91ea3b7a07b8cac0428b6f9312b812054542c01bd152f7c838dc250fd6bb48275432e7a76e4a0c0525df3cec831368089d92a30598d6b750e037483346a26685ecb50154f5eda4c3824e18406ad0ae52ede2af3019a25898aab708c42c0030d3defd8f8fe"}], 0x0, 0x0, 0x0, 0x7400}, 0x20004800) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000a0000001400078008001140000000690800124000007fff10000300686173683a69702c6d6163"], 0x5c}}, 0x0) acct(&(0x7f0000000180)='./file0\x00') r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) r7 = open$dir(&(0x7f0000000440)='./file0\x00', 0x12000, 0x88) utimensat(r7, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={{0x0, 0x2710}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000000)={'rose0\x00', 0x200}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x52, 0x1, 0x1, "600000eef2000020000000ddee4f9100000000000000000000ff0057e31e9400", 0x30364d54}) 755.971833ms ago: executing program 6 (id=2276): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair(0x22, 0x2, 0x26, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) close(r0) userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x108}) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) syz_usb_connect(0x2, 0x28, &(0x7f0000000300)=ANY=[@ANYBLOB="120101021d20e440480b06106cc20102030109021600010000a0040904ca0900e464a3c4fe0a020f"], &(0x7f0000000100)={0x0, 0x0, 0x5e, 0x0}) 675.694174ms ago: executing program 7 (id=2277): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)=0x1) 544.073247ms ago: executing program 7 (id=2278): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000000000000098000040"]) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x1}]}) r5 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x2c93a000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 29.896692ms ago: executing program 5 (id=2279): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r3, 0x101, 0x9}, &(0x7f00000000c0)=0x8) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x9, 0x8004, 0x200001, 0xffff, 0x9, 0x3, 0x4, 0x2, 0x937b, 0x5, 0x2060, 0xfec, 0x6, 0x20001ac, 0x28], 0x0, 0x25c}) r4 = socket(0x10, 0x806, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newae={0x40, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {{@in=@multicast2, 0x4d3, 0xa, 0x33}, @in=@broadcast, 0x4, 0x3505}}, 0x40}}, 0x90) 0s ago: executing program 6 (id=2280): r0 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0xf1, {0x98, 0x20000}}, 0x400040) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r4 = socket$inet6(0xa, 0x3, 0x75) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@remote, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xfef2, 0xfffffffffffffffd, 0x40000000000}, 0x0, 0x1, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@rand_addr=' \x01\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x3ffffd}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x0, 0x0, 0x0, 0x778a, 0xffff}, {0x3, 0x0, 0x9}}, {{@in6=@mcast2, 0x4d6, 0x3c}, 0x0, @in=@multicast1}}, 0xe8) close(r4) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r3, 0x8010500c, &(0x7f0000000200)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESOCT=r3], 0x44}}, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): 428.194522][ T5953] usb 1-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 428.205734][ T5953] usb 1-1: config 1 interface 0 has no altsetting 0 [ 428.216401][ T5953] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 428.225752][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.234075][ T5953] usb 1-1: Product: syz [ 428.238285][ T5953] usb 1-1: Manufacturer: syz [ 428.243227][ T5953] usb 1-1: SerialNumber: syz [ 428.251213][T11688] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 428.258683][T11688] raw-gadget.5 gadget.0: fail, usb_ep_enable returned -22 [ 428.403551][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 428.676606][T11710] netlink: 'syz.5.1548': attribute type 29 has an invalid length. [ 428.686573][T11710] netlink: 'syz.5.1548': attribute type 29 has an invalid length. [ 428.692423][T11712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.711200][T11712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.829365][T11720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.842618][T11720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.134714][T11688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.143772][T11688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.355075][T11738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.365898][T11738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.375689][ T5953] (unnamed net_device) (uninitialized): Assigned a random MAC address: 06:17:67:81:06:51 [ 429.394280][ T5953] rtl8150 1-1:1.0: eth13: rtl8150 is detected [ 429.406925][ T5953] usb 1-1: USB disconnect, device number 64 [ 429.466498][T11741] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1559'. [ 429.534436][T11743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.544291][T11743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.985763][T11758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.997127][T11758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.255054][ T1571] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 430.367609][T11766] binder: 11764:11766 ioctl c0306201 200000000540 returned -14 [ 430.415993][ T1571] usb 1-1: Using ep0 maxpacket: 8 [ 430.429166][ T1571] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.451464][ T1571] usb 1-1: config 0 has no interfaces? [ 430.458851][ T31] audit: type=1800 audit(1759312893.689:45): pid=11774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1572" name="bus" dev="tmpfs" ino=1934 res=0 errno=0 [ 430.471811][ T1571] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 430.497555][ T1571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.506753][ T1571] usb 1-1: Product: syz [ 430.511063][ T1571] usb 1-1: Manufacturer: syz [ 430.515915][ T1571] usb 1-1: SerialNumber: syz [ 430.538418][ T1571] usb 1-1: config 0 descriptor?? [ 430.757049][T11787] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 430.766961][T11787] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 430.774460][T11787] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 430.786424][T11787] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 430.796039][T11787] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 430.806263][T11787] comedi comedi3: 8255: I/O port conflict (0xe,4) [ 430.807982][ T5936] usb 1-1: USB disconnect, device number 65 [ 430.813873][T11787] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 430.877129][T11787] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 430.883668][T11787] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 430.912283][T11787] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 430.920518][T11787] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 430.928636][T11787] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 430.938091][T11794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.940293][T11787] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 430.950335][T11794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.966022][T11787] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 430.975752][T11787] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 430.984562][T11787] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 430.991550][T11787] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 431.000519][T11787] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 431.589311][T11805] netlink: 'syz.1.1583': attribute type 10 has an invalid length. [ 431.599526][T11805] lo: entered promiscuous mode [ 431.607034][T11805] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 431.735208][ T5936] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 431.761164][T11813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.772907][T11813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.917080][ T5936] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 431.937675][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.946121][ T5936] usb 1-1: Product: syz [ 431.950566][ T5936] usb 1-1: Manufacturer: syz [ 431.955282][ T5936] usb 1-1: SerialNumber: syz [ 431.963583][ T5936] usb 1-1: config 0 descriptor?? [ 432.103755][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 432.292626][ T5936] airspy 1-1:0.0: usb_control_msg() failed -71 request 0a [ 432.306776][ T5936] airspy 1-1:0.0: Could not detect board [ 432.319632][ T5936] airspy 1-1:0.0: probe with driver airspy failed with error -71 [ 432.331627][ T5936] usb 1-1: USB disconnect, device number 66 [ 432.392845][T11827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.403699][T11827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.416492][T11827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.425393][T11827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.606391][T11836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.617892][T11836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.703972][ T5936] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 432.885701][ T5936] usb 1-1: Using ep0 maxpacket: 16 [ 432.893012][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.904461][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.914830][ T5936] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 432.924370][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.947718][ T5936] usb 1-1: config 0 descriptor?? [ 433.101609][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 433.396316][ T5936] corsair 0003:1B1C:1B02.0029: unknown main item tag 0x0 [ 433.407323][ T5936] corsair 0003:1B1C:1B02.0029: unknown main item tag 0x0 [ 433.415385][ T5936] corsair 0003:1B1C:1B02.0029: unknown main item tag 0x0 [ 433.424398][ T5936] corsair 0003:1B1C:1B02.0029: unknown main item tag 0x0 [ 433.438295][ T5936] corsair 0003:1B1C:1B02.0029: unknown main item tag 0x0 [ 433.465144][ T5936] corsair 0003:1B1C:1B02.0029: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 433.603613][ T5936] corsair 0003:1B1C:1B02.0029: Failed to get K90 initial state (error -32). [ 433.642754][T11858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.648401][ T5936] usb 1-1: USB disconnect, device number 67 [ 433.668322][T11858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.726256][T11858] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1599'. [ 433.759734][T11858] 0{: renamed from macvtap0 (while UP) [ 433.776726][T11859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.795094][T11859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.814558][T11858] 0{: entered allmulticast mode [ 433.833913][T11858] veth0_macvtap: entered allmulticast mode [ 433.843823][T11858] A link change request failed with some changes committed already. Interface 30{ may have been left with an inconsistent configuration, please check. [ 433.864735][T11861] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1600'. [ 433.874733][T11861] 0: renamed from hsr0 (while UP) [ 433.885670][T11861] 0: entered allmulticast mode [ 433.890690][T11861] hsr_slave_0: entered allmulticast mode [ 433.898243][T11861] hsr_slave_1: entered allmulticast mode [ 433.906239][T11861] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 434.061762][T11864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.071240][T11864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.468423][ T5936] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 434.562982][ T31] audit: type=1326 audit(1759312897.532:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11877 comm="syz.5.1605" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9c778eec9 code=0x0 [ 434.618045][ T5936] usb 1-1: device descriptor read/64, error -71 [ 434.836198][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 434.917607][ T5936] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 435.067190][ T5936] usb 1-1: device descriptor read/64, error -71 [ 435.196439][ T5936] usb usb1-port1: attempt power cycle [ 435.569836][ T5936] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 435.615655][ T5936] usb 1-1: device descriptor read/8, error -71 [ 435.735900][T11894] vxcan0: tx address claim with dest, not broadcast [ 435.901434][ T5936] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 435.934075][ T5936] usb 1-1: device descriptor read/8, error -71 [ 436.062842][ T5936] usb usb1-port1: unable to enumerate USB device [ 436.871122][ T31] audit: type=1400 audit(1759312899.692:47): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=11905 comm="syz.6.1614" [ 437.009818][T11913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.025673][T11913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.705561][T11928] sp0: Synchronizing with TNC [ 437.726664][T11927] [U] [ 437.884217][T11932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.893083][T11932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.981162][T11934] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1624'. [ 438.156654][T11940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.170184][T11940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.262154][ T5870] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 438.530150][T11952] netlink: 'syz.6.1629': attribute type 10 has an invalid length. [ 438.544051][T11952] team0: Device tunl0 is of different type [ 438.838912][T11955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.871704][T11955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.549318][T11982] kAFS: unable to lookup cell '@mTsyz0' [ 439.609112][T11985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.622165][T11987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.632630][T11985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.642950][ T1571] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 439.645148][T11987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.736554][ T31] audit: type=1326 audit(1759312902.376:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11988 comm="syz.5.1643" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9c778eec9 code=0x0 [ 439.817136][ T1571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.830330][ T1571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.840842][ T1571] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 439.854009][ T1571] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 439.863264][ T1571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.879773][ T1571] usb 1-1: config 0 descriptor?? [ 440.292595][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 440.343291][ T1571] plantronics 0003:047F:FFFF.002A: reserved main item tag 0xe [ 440.366193][ T1571] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 440.418818][ T1571] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 440.460996][T12003] tmpfs: Bad value for 'nr_blocks' [ 440.492048][T12003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.495204][ T1571] usb 1-1: USB disconnect, device number 72 [ 440.519020][T12003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.561661][T12003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.587716][T12003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.603719][T12004] fido_id[12004]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 441.184619][ T5936] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 441.242369][T12019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.251766][T12019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.260963][T12019] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1651'. [ 441.273791][T12019] netlink: 'syz.6.1651': attribute type 2 has an invalid length. [ 441.283271][T12019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.292421][T12019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.358270][ T5936] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.368712][ T5936] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 441.380458][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.393207][ T5936] usb 1-1: config 0 descriptor?? [ 441.405032][ T5936] pwc: Askey VC010 type 2 USB webcam detected. [ 441.457128][T12021] overlay: filesystem on ./bus not supported [ 441.768473][T12027] comedi comedi0: aio_iiro_16: a I/O base address must be specified [ 441.777136][T12027] comedi comedi0: aio_iiro_16: a I/O base address must be specified [ 441.786267][T12027] comedi comedi0: aio_iiro_16: a I/O base address must be specified [ 441.789888][T12028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.796799][T12027] comedi comedi0: aio_iiro_16: a I/O base address must be specified [ 441.808461][T12028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.811920][T12027] comedi comedi0: aio_iiro_16: a I/O base address must be specified [ 441.831037][T12027] comedi comedi0: aio_iiro_16: a I/O base address must be specified [ 441.834614][ T5936] pwc: recv_control_msg error -32 req 02 val 2b00 [ 441.841559][T12027] comedi comedi0: aio_iiro_16: a I/O base address must be specified [ 441.854543][T12027] comedi comedi0: aio_iiro_16: a I/O base address must be specified [ 441.863232][T12027] comedi comedi0: aio_iiro_16: a I/O base address must be specified [ 441.873260][T12027] comedi comedi0: aio_iiro_16: a I/O base address must be specified [ 441.881994][T12027] comedi: valid board names for 8255 driver are: [ 441.891681][T12027] 8255 [ 441.894641][T12027] comedi: valid board names for vmk80xx driver are: [ 441.901815][T12027] vmk80xx [ 441.904945][T12027] comedi: valid board names for usbduxsigma driver are: [ 441.912466][T12027] usbduxsigma [ 441.915956][T12027] comedi: valid board names for usbduxfast driver are: [ 441.929273][T12027] usbduxfast [ 441.934756][T12027] comedi: valid board names for usbdux driver are: [ 441.941404][T12027] usbdux [ 441.941605][T12032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.946689][T12027] comedi: valid board names for ni6501 driver are: [ 441.963472][T12027] ni6501 [ 441.965293][T12032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.966649][T12027] comedi: valid board names for dt9812 driver are: [ 441.981136][T12027] dt9812 [ 441.984258][T12027] comedi: valid board names for ni_labpc_cs driver are: [ 441.993793][T12027] ni_labpc_cs [ 441.997475][T12027] comedi: valid board names for ni_daq_700 driver are: [ 442.004615][T12027] ni_daq_700 [ 442.008220][T12027] comedi: valid board names for labpc_pci driver are: [ 442.017234][T12027] labpc_pci [ 442.020566][T12027] comedi: valid board names for adl_pci9118 driver are: [ 442.027610][T12027] pci9118dg [ 442.031157][T12027] pci9118hg [ 442.034445][T12027] pci9118hr [ 442.037702][T12027] comedi: valid board names for 8255_pci driver are: [ 442.044574][T12027] 8255_pci [ 442.047765][T12027] comedi: valid board names for s526 driver are: [ 442.054154][T12027] s526 [ 442.057005][T12027] comedi: valid board names for multiq3 driver are: [ 442.063702][T12027] multiq3 [ 442.066762][T12027] comedi: valid board names for pcmuio driver are: [ 442.073453][T12027] pcmuio48 [ 442.076615][T12027] pcmuio96 [ 442.079768][T12027] comedi: valid board names for pcmmio driver are: [ 442.086962][T12027] pcmmio [ 442.090019][T12027] comedi: valid board names for pcmda12 driver are: [ 442.099222][T12027] pcmda12 [ 442.102507][ T5936] pwc: recv_control_msg error -71 req 02 val 2c00 [ 442.110249][T12027] comedi: valid board names for pcmad driver are: [ 442.112485][ T5936] pwc: recv_control_msg error -71 req 04 val 1000 [ 442.118021][T12027] pcmad12 [ 442.124203][ T5936] pwc: recv_control_msg error -71 req 04 val 1300 [ 442.127046][T12027] pcmad16 [ 442.133753][ T5936] pwc: recv_control_msg error -71 req 04 val 1400 [ 442.137775][T12027] comedi: valid board names for ni_labpc driver are: [ 442.144501][ T5936] pwc: recv_control_msg error -71 req 02 val 2000 [ 442.150273][T12027] lab-pc-1200 [ 442.157269][ T5936] pwc: recv_control_msg error -71 req 02 val 2100 [ 442.161141][T12027] lab-pc-1200ai [ 442.166707][ T5936] pwc: recv_control_msg error -71 req 04 val 1500 [ 442.170409][T12027] lab-pc+ [ 442.176907][ T5936] pwc: recv_control_msg error -71 req 02 val 2500 [ 442.183705][T12027] comedi: valid board names for atmio16 driver are: [ 442.186778][ T5936] pwc: recv_control_msg error -71 req 02 val 2400 [ 442.196602][T12027] atmio16 [ 442.200062][ T5936] pwc: recv_control_msg error -71 req 02 val 2600 [ 442.209246][T12027] atmio16d [ 442.209488][ T5936] pwc: recv_control_msg error -71 req 02 val 2900 [ 442.214122][T12027] comedi: valid board names for ni_at_ao driver are: [ 442.219586][ T5936] pwc: recv_control_msg error -71 req 02 val 2800 [ 442.220299][ T5936] pwc: recv_control_msg error -71 req 04 val 1100 [ 442.230386][T12027] at-ao-6 [ 442.233839][ T5936] pwc: recv_control_msg error -71 req 04 val 1200 [ 442.241200][T12027] at-ao-10 [ 442.252856][T12027] comedi: valid board names for ni_at_a2150 driver are: [ 442.258431][ T5936] pwc: Registered as video103. [ 442.260388][T12027] ni_at_a2150 [ 442.276978][T12027] comedi: valid board names for adq12b driver are: [ 442.277875][ T5936] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input59 [ 442.283657][T12027] adq12b [ 442.311423][T12027] comedi: valid board names for mpc624 driver are: [ 442.319331][T12027] mpc624 [ 442.327261][ T5936] usb 1-1: USB disconnect, device number 73 [ 442.339709][T12027] comedi: valid board names for c6xdigio driver are: [ 442.347434][T12027] c6xdigio [ 442.351405][T12027] comedi: valid board names for aio_iiro_16 driver are: [ 442.358917][T12027] aio_iiro_16 [ 442.373139][T12027] comedi: valid board names for aio_aio12_8 driver are: [ 442.380316][T12027] aio_aio12_8 [ 442.384293][T12027] aio_ai12_8 [ 442.387706][T12027] aio_ao12_4 [ 442.391190][T12027] comedi: valid board names for fl512 driver are: [ 442.399075][T12027] fl512 [ 442.402146][T12027] comedi: valid board names for dmm32at driver are: [ 442.409629][T12027] dmm32at [ 442.415932][T12027] comedi: valid board names for dt282x driver are: [ 442.422607][T12027] dt2821 [ 442.429218][T12027] dt2821-f [ 442.432468][T12027] dt2821-g [ 442.438458][T12027] dt2823 [ 442.441618][T12027] dt2824-pgh [ 442.444933][T12027] dt2824-pgl [ 442.448307][T12027] dt2825 [ 442.451263][T12027] dt2827 [ 442.454327][T12027] dt2828 [ 442.458525][T12027] dt2829 [ 442.461501][T12027] dt21-ez [ 442.464528][T12027] dt23-ez [ 442.468409][T12027] dt24-ez [ 442.471532][T12027] dt24-ez-pgl [ 442.474925][T12027] comedi: valid board names for dt2817 driver are: [ 442.482129][T12027] dt2817 [ 442.485105][T12027] comedi: valid board names for dt2815 driver are: [ 442.492028][T12027] dt2815 [ 442.495125][T12027] comedi: valid board names for dt2814 driver are: [ 442.501798][T12027] dt2814 [ 442.504770][T12027] comedi: valid board names for dt2811 driver are: [ 442.511338][T12027] dt2811-pgh [ 442.514641][T12027] dt2811-pgl [ 442.517934][T12027] comedi: valid board names for dt2801 driver are: [ 442.524614][T12027] dt2801 [ 442.527587][T12027] comedi: valid board names for das6402 driver are: [ 442.534243][T12027] das6402-12 [ 442.537577][T12027] das6402-16 [ 442.540901][T12027] comedi: valid board names for das1800 driver are: [ 442.552536][T12027] das-1701st [ 442.557409][T12027] das-1701st-da [ 442.560994][T12027] das-1702st [ 442.564401][T12027] das-1702st-da [ 442.567964][T12027] das-1702hr [ 442.571272][T12027] das-1702hr-da [ 442.578153][T12027] das-1701ao [ 442.581574][T12027] das-1702ao [ 442.585727][T12027] das-1801st [ 442.589066][T12027] das-1801st-da [ 442.592630][T12027] das-1802st [ 442.596014][T12027] das-1802st-da [ 442.599583][T12027] das-1802hr [ 442.602885][T12027] das-1802hr-da [ 442.606552][T12027] das-1801hc [ 442.609859][T12027] das-1802hc [ 442.613163][T12027] das-1801ao [ 442.616478][T12027] das-1802ao [ 442.620716][T12035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.622059][T12027] comedi: valid board names for das800 driver are: [ 442.629944][T12035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.637629][T12027] das-800 [ 442.646917][T12027] cio-das800 [ 442.650556][T12027] das-801 [ 442.653709][T12027] cio-das801 [ 442.654346][T12035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.658460][T12027] das-802 [ 442.673320][T12027] cio-das802 [ 442.676650][T12027] cio-das802/16 [ 442.680331][T12027] comedi: valid board names for isa-das08 driver are: [ 442.687634][T12027] isa-das08 [ 442.688653][T12035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.690873][T12027] das08-pgm [ 442.708028][T12027] das08-pgh [ 442.711742][T12027] das08-pgl [ 442.715830][T12027] das08-aoh [ 442.719369][T12027] das08-aol [ 442.722764][T12027] das08-aom [ 442.726599][T12027] das08/jr-ao [ 442.730085][T12027] das08jr-16-ao [ 442.733909][T12027] pc104-das08 [ 442.737481][T12027] das08jr/16 [ 442.741138][T12027] comedi: valid board names for das16m1 driver are: [ 442.750527][T12027] das16m1 [ 442.753895][T12027] comedi: valid board names for dac02 driver are: [ 442.760553][T12027] dac02 [ 442.764151][T12027] comedi: valid board names for rti802 driver are: [ 442.771522][T12027] rti802 [ 442.774637][T12027] comedi: valid board names for rti800 driver are: [ 442.781452][T12027] rti800 [ 442.784733][T12027] rti815 [ 442.787821][T12027] comedi: valid board names for pcm3724 driver are: [ 442.794991][T12027] pcm3724 [ 442.798160][T12027] comedi: valid board names for pcl818 driver are: [ 442.804892][T12027] pcl818l [ 442.808088][T12027] pcl818h [ 442.811551][T12027] pcl818hd [ 442.814779][T12027] pcl818hg [ 442.818029][T12027] pcl818 [ 442.821331][T12027] pcl718 [ 442.824613][T12027] pcm3718 [ 442.827738][T12027] comedi: valid board names for pcl816 driver are: [ 442.834796][T12027] pcl816 [ 442.837779][T12027] pcl814b [ 442.840823][T12027] comedi: valid board names for pcl812 driver are: [ 442.848523][T12027] pcl812 [ 442.851597][T12027] pcl812pg [ 442.856059][T12027] acl8112pg [ 442.859538][T12027] acl8112dg [ 442.862847][T12027] acl8112hg [ 442.867323][T12027] a821pgl [ 442.870602][T12027] a821pglnda [ 442.874385][T12027] a821pgh [ 442.877534][T12027] a822pgl [ 442.880659][T12027] a822pgh [ 442.883914][T12027] a823pgl [ 442.887974][T12027] a823pgh [ 442.891196][T12027] pcl813 [ 442.894225][T12027] pcl813b [ 442.898018][T12027] acl8113 [ 442.901151][T12027] iso813 [ 442.904196][T12027] acl8216 [ 442.908219][T12027] a826pg [ 442.911380][T12027] comedi: valid board names for pcl730 driver are: [ 442.919176][T12027] pcl730 [ 442.922165][T12027] iso730 [ 442.925166][T12027] acl7130 [ 442.943359][T12027] pcm3730 [ 442.946456][T12027] pcl725 [ 442.964540][T12027] p8r8dio [ 442.970958][T12027] acl7225b [ 442.974127][T12027] p16r16dio [ 442.980431][T12027] pcl733 [ 442.985741][T12027] pcl734 [ 442.989151][T12027] opmm-1616-xt [ 443.002296][T12027] pearl-mm-p [ 443.005640][T12027] ir104-pbf [ 443.008866][T12027] comedi: valid board names for pcl726 driver are: [ 443.029708][T12027] pcl726 [ 443.032768][T12027] pcl727 [ 443.036464][T12027] pcl728 [ 443.039523][T12027] acl6126 [ 443.042571][T12027] acl6128 [ 443.046743][T12027] comedi: valid board names for pcl724 driver are: [ 443.053372][T12027] pcl724 [ 443.057845][T12027] pcl722 [ 443.060819][T12027] pcl731 [ 443.063785][T12027] acl7122 [ 443.067453][T12027] acl7124 [ 443.070506][T12027] pet48dio [ 443.073637][T12027] pcmio48 [ 443.076697][T12027] onyx-mm-dio [ 443.080402][T12027] comedi: valid board names for pcl711 driver are: [ 443.086993][T12027] pcl711 [ 443.090054][T12027] pcl711b [ 443.093202][T12027] acl8112hg [ 443.097808][T12027] acl8112dg [ 443.101638][T12027] comedi: valid board names for amplc_pc263 driver are: [ 443.108750][T12027] pc263 [ 443.113447][T12027] comedi: valid board names for amplc_pc236 driver are: [ 443.120847][T12027] pc36at [ 443.123898][T12027] comedi: valid board names for amplc_dio200 driver are: [ 443.133948][T12027] pc212e [ 443.137053][T12027] pc214e [ 443.140007][T12027] pc215e [ 443.143539][T12027] pc218e [ 443.146587][T12027] pc272e [ 443.149660][T12027] comedi: valid board names for comedi_parport driver are: [ 443.157880][T12027] comedi_parport [ 443.161684][T12027] comedi: valid board names for comedi_test driver are: [ 443.169166][T12027] comedi_test [ 443.172692][T12027] comedi: valid board names for comedi_bond driver are: [ 443.181144][T12027] comedi_bond [ 443.257688][T12053] RDS: rds_bind could not find a transport for ::ffff:172.30.0.2, load rds_tcp or rds_rdma? [ 443.326314][T12056] syzkaller1: entered promiscuous mode [ 443.332020][T12056] syzkaller1: entered allmulticast mode [ 443.550985][ T1571] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 443.571394][T12070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.585061][T12070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.738133][ T1211] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 443.753669][ T1571] usb 1-1: Using ep0 maxpacket: 32 [ 443.771469][ T1571] usb 1-1: unable to get BOS descriptor or descriptor too short [ 443.781821][ T1211] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 443.811169][ T1571] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 443.826391][ T1571] usb 1-1: can't read configurations, error -22 [ 443.874184][T12081] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 443.987783][ T1571] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 444.156973][ T1571] usb 1-1: Using ep0 maxpacket: 32 [ 444.164052][ T1571] usb 1-1: unable to get BOS descriptor or descriptor too short [ 444.173634][ T1571] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 444.181706][ T1571] usb 1-1: can't read configurations, error -22 [ 444.188453][ T1571] usb usb1-port1: attempt power cycle [ 444.323581][T12086] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 444.338099][T12086] input: syz1 as /devices/virtual/input/input60 [ 444.480167][T12088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.494771][T12088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.507414][T12088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.518265][T12088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.529535][ C1] sd 0:0:1:0: [sda] tag#8060 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 444.540126][ C1] sd 0:0:1:0: [sda] tag#8060 CDB: Read(6) 08 00 00 00 09 00 00 00 00 03 00 00 [ 444.553498][ T1571] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 444.580899][ T1571] usb 1-1: Using ep0 maxpacket: 32 [ 444.598030][ T1571] usb 1-1: unable to get BOS descriptor or descriptor too short [ 444.617841][ T1571] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 444.625831][ T1571] usb 1-1: can't read configurations, error -22 [ 444.766573][ T1571] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 444.794377][T12092] xt_socket: unknown flags 0xe4 [ 444.810907][ T1571] usb 1-1: Using ep0 maxpacket: 32 [ 444.833207][ T1571] usb 1-1: unable to get BOS descriptor or descriptor too short [ 444.843065][ T1571] usb 1-1: config index 0 descriptor too short (expected 9, got 0) [ 444.851053][ T1571] usb 1-1: can't read configurations, error -22 [ 444.864005][ T1571] usb usb1-port1: unable to enumerate USB device [ 444.914195][ T31] audit: type=1800 audit(1759312907.211:49): pid=12093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1674" name="bus" dev="tmpfs" ino=1484 res=0 errno=0 [ 445.002396][T12093] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1674'. [ 445.159681][T12098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.170870][T12098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.247258][T12105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.257539][T12105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.268691][T12105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.277964][T12105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.430132][ T5870] Bluetooth: hci1: command 0x0406 tx timeout [ 445.623894][T12113] syz.1.1683: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 445.643581][T12113] CPU: 0 UID: 0 PID: 12113 Comm: syz.1.1683 Not tainted syzkaller #0 PREEMPT(full) [ 445.643610][T12113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 445.643641][T12113] Call Trace: [ 445.643651][T12113] [ 445.643660][T12113] dump_stack_lvl+0x189/0x250 [ 445.643704][T12113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.643734][T12113] ? __pfx__printk+0x10/0x10 [ 445.643756][T12113] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 445.643782][T12113] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 445.643807][T12113] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 445.643833][T12113] warn_alloc+0x214/0x310 [ 445.643854][T12113] ? __pfx_warn_alloc+0x10/0x10 [ 445.643876][T12113] ? __get_vm_area_node+0x28f/0x300 [ 445.643901][T12113] ? kvm_set_memslot+0x4e2/0x1310 [ 445.643924][T12113] __vmalloc_node_range_noprof+0x690/0x12d0 [ 445.643950][T12113] ? rcu_is_watching+0x15/0xb0 [ 445.643986][T12113] ? kvm_set_memslot+0x3e/0x1310 [ 445.644010][T12113] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 445.644043][T12113] ? kvm_set_memslot+0x4e2/0x1310 [ 445.644062][T12113] __vmalloc_noprof+0xb1/0xf0 [ 445.644086][T12113] ? kvm_set_memslot+0x4e2/0x1310 [ 445.644109][T12113] kvm_set_memslot+0x4e2/0x1310 [ 445.644130][T12113] ? kvm_check_memslot_overlap+0x301/0x380 [ 445.644158][T12113] kvm_set_memory_region+0x966/0xb90 [ 445.644192][T12113] kvm_vm_ioctl_set_memory_region+0x6f/0xd0 [ 445.644217][T12113] kvm_vm_ioctl+0x957/0xc60 [ 445.644241][T12113] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 445.644290][T12113] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 445.644310][T12113] ? do_vfs_ioctl+0xbe8/0x1430 [ 445.644325][T12113] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 445.644342][T12113] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 445.644386][T12113] ? __fget_files+0x2a/0x420 [ 445.644408][T12113] ? __fget_files+0x3a0/0x420 [ 445.644427][T12113] ? __fget_files+0x2a/0x420 [ 445.644448][T12113] ? bpf_lsm_file_ioctl+0x9/0x20 [ 445.644468][T12113] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 445.644490][T12113] __se_sys_ioctl+0xfc/0x170 [ 445.644516][T12113] do_syscall_64+0xfa/0xfa0 [ 445.644536][T12113] ? lockdep_hardirqs_on+0x9c/0x150 [ 445.644555][T12113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.644571][T12113] ? clear_bhb_loop+0x60/0xb0 [ 445.644591][T12113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.644606][T12113] RIP: 0033:0x7f7459d8eec9 [ 445.644621][T12113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.644642][T12113] RSP: 002b:00007f745aba1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 445.644659][T12113] RAX: ffffffffffffffda RBX: 00007f7459fe5fa0 RCX: 00007f7459d8eec9 [ 445.644671][T12113] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000009 [ 445.644682][T12113] RBP: 00007f7459e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 445.644692][T12113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.644701][T12113] R13: 00007f7459fe6038 R14: 00007f7459fe5fa0 R15: 00007ffc47a8fb48 [ 445.644727][T12113] [ 445.644758][T12113] Mem-Info: [ 445.948453][T12125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.956612][T12113] active_anon:11450 inactive_anon:0 isolated_anon:0 [ 445.956612][T12113] active_file:16282 inactive_file:4172 isolated_file:0 [ 445.956612][T12113] unevictable:17132 dirty:40 writeback:0 [ 445.956612][T12113] slab_reclaimable:11275 slab_unreclaimable:96128 [ 445.956612][T12113] mapped:25335 shmem:5030 pagetables:1877 [ 445.956612][T12113] sec_pagetables:0 bounce:0 [ 445.956612][T12113] kernel_misc_reclaimable:0 [ 445.956612][T12113] free:1317811 free_pcp:15634 free_cma:0 [ 445.962830][T12125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.005094][T12113] Node 0 active_anon:45792kB inactive_anon:0kB active_file:65128kB inactive_file:16556kB unevictable:66992kB isolated(anon):0kB isolated(file):0kB mapped:101340kB dirty:160kB writeback:0kB shmem:18576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12752kB pagetables:7376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 446.043576][T12113] Node 1 active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 446.074135][T12113] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 446.106679][T12113] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 446.112547][T12113] Node 0 DMA32 free:1365124kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45792kB inactive_anon:0kB active_file:65128kB inactive_file:16556kB unevictable:66992kB writepending:160kB zspages:0kB present:3129332kB managed:2549276kB mlocked:0kB bounce:0kB free_pcp:39380kB local_pcp:24488kB free_cma:0kB [ 446.146656][T12113] lowmem_reserve[]: 0 0 0 0 0 [ 446.151456][T12113] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 446.181475][T12113] lowmem_reserve[]: 0 0 0 0 0 [ 446.186312][T12113] Node 1 Normal free:3890632kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:23280kB local_pcp:6768kB free_cma:0kB [ 446.218952][T12113] lowmem_reserve[]: 0 0 0 0 0 [ 446.223858][T12113] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 446.236935][T12113] Node 0 DMA32: 1267*4kB (ME) 935*8kB (ME) 632*16kB (ME) 271*32kB (UME) 177*64kB (ME) 109*128kB (UME) 95*256kB (UM) 30*512kB (UME) 33*1024kB (UME) 21*2048kB (UM) 291*4096kB (UM) = 1365028kB [ 446.256154][T12113] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 446.268230][T12113] Node 1 Normal: 208*4kB (UME) 51*8kB (UE) 43*16kB (UME) 184*32kB (UME) 53*64kB (UME) 12*128kB (UME) 4*256kB (UME) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3890632kB [ 446.287227][T12113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.296981][T12113] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 446.306566][T12113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 446.316263][T12113] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 446.325819][T12113] 41844 total pagecache pages [ 446.330730][T12113] 0 pages in swap cache [ 446.334923][T12113] Free swap = 124996kB [ 446.339300][T12113] Total swap = 124996kB [ 446.343509][T12113] 2097051 pages RAM [ 446.347356][T12113] 0 pages HighMem/MovableOnly [ 446.352271][T12113] 428026 pages reserved [ 446.356475][T12113] 0 pages cma reserved [ 446.386810][T12127] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1687'. [ 446.401045][T12127] overlay: ./file1 is not a directory [ 446.484894][ T5870] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 446.716608][T12139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.733217][T12139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.744134][T12139] comedi comedi4: bad chanlist[7]=0x000009c0 chan=2496 range length=2 [ 446.786646][T12142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.798614][T12142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.969468][ T5953] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 447.142384][ T5953] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.153329][ T5953] usb 1-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 447.162764][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.174143][ T5953] usb 1-1: config 0 descriptor?? [ 447.349983][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1696'. [ 447.410024][T12147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.422072][T12147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.436310][T12146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.444952][T12149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.447044][T12146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.454109][T12149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.621474][ T5953] wacom 0003:056A:0000.002C: Unknown device_type for 'HID 056a:0000'. Assuming pen. [ 447.633858][ T5953] wacom 0003:056A:0000.002C: hidraw0: USB HID v0.00 Device [HID 056a:0000] on usb-dummy_hcd.0-1/input0 [ 447.656188][ T5953] input: Wacom Penpartner Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0000.002C/input/input61 [ 447.838279][ T5936] usb 1-1: USB disconnect, device number 78 [ 448.067587][T12161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.077799][T12161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.340963][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 448.970531][T12184] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 448.987695][T12185] @: renamed from vlan0 (while UP) [ 449.345111][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 449.412199][T12201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.424058][T12201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.953249][ T1571] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 450.089255][T12212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.099576][T12212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.114983][ T1571] usb 1-1: Using ep0 maxpacket: 8 [ 450.127007][ T1571] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 450.140859][T12212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.152056][ T1571] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 450.162547][T12212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.170865][ T1571] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 450.187816][ T1571] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 450.199864][ T1571] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.215466][ T1571] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 450.227524][ T1571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.465325][ T1571] usb 1-1: GET_CAPABILITIES returned 0 [ 450.483048][ T1571] usbtmc 1-1:16.0: can't read capabilities [ 450.545395][ T1571] usb 1-1: USB disconnect, device number 79 [ 450.739668][ T5870] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 450.842591][T12234] netlink: 'syz.6.1721': attribute type 83 has an invalid length. [ 450.947615][T12240] 9pnet_fd: Insufficient options for proto=fd [ 451.167258][ T6053] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 451.332828][ T6053] usb 1-1: Using ep0 maxpacket: 32 [ 451.340094][ T6053] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 451.348720][ T6053] usb 1-1: config 0 has no interface number 0 [ 451.355097][ T6053] usb 1-1: config 0 interface 184 has no altsetting 0 [ 451.363945][ T6053] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 451.373847][ T6053] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.381996][ T6053] usb 1-1: Product: syz [ 451.386256][ T6053] usb 1-1: Manufacturer: syz [ 451.390895][ T6053] usb 1-1: SerialNumber: syz [ 451.398505][ T6053] usb 1-1: config 0 descriptor?? [ 451.406443][ T6053] smsc75xx v1.0.0 [ 451.783266][T12257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.795512][T12257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.056464][ T6053] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 452.067393][ T6053] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 452.403977][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 452.461747][T12264] syzkaller1: left promiscuous mode [ 452.467443][T12264] syzkaller1: left allmulticast mode [ 452.938651][ T6053] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 452.947191][T12267] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1732'. [ 452.952695][ T6053] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 452.969990][ T6053] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 452.980376][ T6053] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 453.390290][T12274] netlink: zone id is out of range [ 453.395516][T12274] netlink: zone id is out of range [ 453.400917][T12274] netlink: zone id is out of range [ 453.406248][T12274] netlink: zone id is out of range [ 453.412059][T12274] netlink: zone id is out of range [ 453.418969][T12274] netlink: del zone limit has 4 unknown bytes [ 453.502857][T12279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.512299][T12279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.526354][T12279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.536268][T12279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.561458][T12279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.572580][T12279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.584679][T12279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.596098][T12279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.609546][T12279] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1736'. [ 453.677507][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.252331][T12296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.264913][T12296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.270949][ T5963] usb 1-1: USB disconnect, device number 80 [ 454.279376][T12296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.312792][T12296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.334637][T12296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.353232][T12296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.502452][T12306] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1745'. [ 454.511760][T12306] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1745'. [ 454.534015][T12307] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 454.540895][T12307] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 454.680351][ T5963] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 454.840317][ T5963] usb 1-1: Using ep0 maxpacket: 16 [ 454.847880][ T5963] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 454.856955][ T5963] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 454.865755][ T5963] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 454.874491][ T5963] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 454.882716][ T5963] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 454.891859][ T5963] usb 1-1: config 0 has no interface number 0 [ 454.898030][ T5963] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 454.909244][ T5963] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 454.919161][ T5963] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid maxpacket 65517, setting to 64 [ 454.930408][ T5963] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 454.943627][ T5963] usb 1-1: config 0 interface 125 has no altsetting 0 [ 454.950576][ T5963] usb 1-1: config 0 interface 125 has no altsetting 2 [ 454.960565][ T5963] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 454.969879][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.978008][ T5963] usb 1-1: Product: syz [ 454.983524][ T5963] usb 1-1: Manufacturer: syz [ 454.988235][ T5963] usb 1-1: SerialNumber: syz [ 454.997224][ T5963] usb 1-1: config 0 descriptor?? [ 455.008105][ T5963] usb 1-1: selecting invalid altsetting 2 [ 455.018190][T12320] netlink: 'syz.6.1749': attribute type 4 has an invalid length. [ 455.038513][T12320] netlink: 'syz.6.1749': attribute type 4 has an invalid length. [ 455.223266][ C0] usb 1-1: async_complete: urb error -71 [ 455.229100][ C0] usb 1-1: async_complete: urb error -71 [ 455.234810][ C0] usb 1-1: async_complete: urb error -71 [ 455.240529][ C0] usb 1-1: async_complete: urb error -71 [ 455.248709][ T5963] get_1284_register: usb error -71 [ 455.254558][ T5963] uss720 1-1:0.125: probe with driver uss720 failed with error -71 [ 455.272915][ T5963] usb 1-1: USB disconnect, device number 81 [ 456.091316][ T5963] usb 1-1: new full-speed USB device number 82 using dummy_hcd [ 456.251824][ T5963] usb 1-1: device descriptor read/64, error -71 [ 456.508501][ T5963] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 456.647386][ T5963] usb 1-1: device descriptor read/64, error -71 [ 456.765286][ T5963] usb usb1-port1: attempt power cycle [ 456.852131][T12340] 9pnet_fd: Insufficient options for proto=fd [ 456.908837][T12342] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 456.923984][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1757'. [ 456.940945][T12342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.951943][T12342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.091359][T12353] binder: 12352:12353 ioctl c0109207 200000000040 returned -22 [ 457.150216][ T5963] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 457.183090][ T5963] usb 1-1: device descriptor read/8, error -71 [ 457.191627][T12358] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 457.208943][T12363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.219187][T12363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.235159][T12363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.245651][T12363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.282590][T12366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.292176][T12366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.303930][T12366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.312895][T12366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.319995][T12370] netlink: 'syz.1.1764': attribute type 4 has an invalid length. [ 457.450872][ T5963] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 457.473063][ T5963] usb 1-1: device descriptor read/8, error -71 [ 457.599644][ T5963] usb usb1-port1: unable to enumerate USB device [ 458.468725][T12396] netlink: 'syz.5.1773': attribute type 4 has an invalid length. [ 458.476818][T12396] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1773'. [ 458.528425][T12398] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1774'. [ 458.543388][T12398] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1774'. [ 459.238619][ T31] audit: type=1326 audit(1759312920.611:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12415 comm="syz.6.1780" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a6c78eec9 code=0x0 [ 459.265167][T12413] tmpfs: Unknown parameter '01777777777777777777777' [ 459.349591][T12418] netlink: 'syz.6.1780': attribute type 21 has an invalid length. [ 459.357626][T12418] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1780'. [ 459.481266][ T5953] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 459.642166][ T5953] usb 1-1: Using ep0 maxpacket: 32 [ 459.650316][ T5953] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 459.658873][ T5953] usb 1-1: config 0 has no interface number 0 [ 459.665116][ T5953] usb 1-1: config 0 interface 184 has no altsetting 0 [ 459.674267][ T5953] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 459.683399][ T5953] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.692333][ T5953] usb 1-1: Product: syz [ 459.696588][ T5953] usb 1-1: Manufacturer: syz [ 459.701212][ T5953] usb 1-1: SerialNumber: syz [ 459.711550][ T5953] usb 1-1: config 0 descriptor?? [ 459.719332][ T5953] smsc75xx v1.0.0 [ 460.210216][T12422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.219017][T12422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.365857][ T5953] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 460.376851][ T5953] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 460.473815][T12427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.484296][T12427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.498205][T12427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.509722][T12427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.814204][T12429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.824348][T12429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.004043][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 461.247953][ T5953] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 461.276844][ T5953] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 461.300859][ T5953] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 461.315646][ T5953] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 461.421795][T12445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.454477][T12445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.554500][T12456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.566887][T12456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.576580][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 461.715613][T12461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.729926][T12461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.743397][ T31] audit: type=1326 audit(1759312922.949:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12460 comm="syz.6.1794" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a6c78eec9 code=0x0 [ 461.777742][T12465] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1796'. [ 462.260157][T12474] netlink: 'syz.1.1798': attribute type 21 has an invalid length. [ 462.416451][T12479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.428114][T12479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.449433][T12482] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1800'. [ 462.568331][ T5963] usb 1-1: USB disconnect, device number 86 [ 462.686524][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 462.826317][T12497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.844564][T12499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.855738][T12499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.857506][T12497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.031730][ T5963] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 463.202930][ T5963] usb 1-1: Using ep0 maxpacket: 8 [ 463.216153][ T5963] usb 1-1: unable to get BOS descriptor or descriptor too short [ 463.220674][T12502] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1808'. [ 463.227934][ T5963] usb 1-1: config 9 has an invalid interface number: 5 but max is 0 [ 463.234976][T12502] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1808'. [ 463.241979][ T5963] usb 1-1: config 9 has no interface number 0 [ 463.255508][T12502] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1808'. [ 463.258531][ T5963] usb 1-1: config 9 interface 5 altsetting 9 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 463.283047][ T5963] usb 1-1: config 9 interface 5 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 463.293430][ T5963] usb 1-1: config 9 interface 5 has no altsetting 0 [ 463.303139][ T5963] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 463.315615][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.324654][ T5963] usb 1-1: Product: syz [ 463.328935][ T5963] usb 1-1: Manufacturer: syz [ 463.342634][ T5963] usb 1-1: SerialNumber: syz [ 463.559882][T12514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.572885][T12514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.594901][ T5963] usb 1-1: USB disconnect, device number 87 [ 463.703937][T12516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.712949][T12516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.474808][T12533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.871031][ T1211] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 465.031428][ T1211] usb 1-1: Using ep0 maxpacket: 32 [ 465.038119][ T1211] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 465.052851][ T1211] usb 1-1: config 0 has no interface number 0 [ 465.059059][ T1211] usb 1-1: config 0 interface 184 has no altsetting 0 [ 465.072486][ T1211] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 465.095695][ T1211] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.103778][ T1211] usb 1-1: Product: syz [ 465.111908][ T1211] usb 1-1: Manufacturer: syz [ 465.128712][ T1211] usb 1-1: SerialNumber: syz [ 465.139636][ T1211] usb 1-1: config 0 descriptor?? [ 465.152296][ T1211] smsc75xx v1.0.0 [ 465.552919][T12578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.575324][T12578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.770553][T12570] 9pnet_fd: Insufficient options for proto=fd [ 465.825446][ T1211] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 465.836691][ T1211] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 466.183045][T12593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.192095][T12593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.207083][T12594] tmpfs: Unknown parameter 'fud' [ 466.209273][T12593] tmpfs: Unknown parameter 'fud' [ 466.710918][ T1211] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 466.722051][ T1211] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 466.731879][ T1211] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 466.745754][ T1211] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 466.808522][T12599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.818571][T12599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.832213][T12599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.842084][T12599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.014936][T12605] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1839'. [ 467.461825][T12611] syzkaller1: entered promiscuous mode [ 467.467527][T12611] syzkaller1: entered allmulticast mode [ 467.484537][T12611] netlink: 'syz.1.1841': attribute type 3 has an invalid length. [ 467.492691][T12611] netlink: 'syz.1.1841': attribute type 1 has an invalid length. [ 467.500659][T12611] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1841'. [ 467.515603][T12611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.525110][T12611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.535538][T12611] binder: 12610:12611 ioctl 8918 200000000240 returned -22 [ 468.026645][ T1571] usb 1-1: USB disconnect, device number 88 [ 468.229133][T12621] netlink: 'syz.0.1844': attribute type 2 has an invalid length. [ 468.237016][T12621] netlink: 'syz.0.1844': attribute type 8 has an invalid length. [ 468.247090][T12621] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1844'. [ 468.294993][T12623] tmpfs: Unknown parameter 'm% Hpol' [ 468.564482][T12638] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 468.741504][T12646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.758979][T12648] random: crng reseeded on system resumption [ 468.775578][T12646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.810959][T12651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.845204][T12651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.871501][T12657] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.415612][T12683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.430311][T12683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.533552][ T6053] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 469.654325][T12700] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1863'. [ 469.719955][ T6053] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.741119][ T6053] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 469.752261][T12704] netlink: 116 bytes leftover after parsing attributes in process `syz.6.1864'. [ 469.763958][ T6053] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 469.782805][ T6053] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 469.816944][ T6053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.835195][ T6053] usb 1-1: config 0 descriptor?? [ 469.871031][T12707] overlayfs: failed to clone upperpath [ 469.882554][T12707] netlink: 'syz.5.1865': attribute type 10 has an invalid length. [ 469.914846][T12707] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 469.934355][T12709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.944986][T12709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.955673][ T5870] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 470.098447][T12717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.108895][T12717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.144348][T12717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.153318][T12717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.188415][ T6053] usb 1-1: USB disconnect, device number 89 [ 470.697700][T12732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.741625][T12732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.755801][T12732] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1872'. [ 470.897573][T12737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.922888][T12737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.033885][T12732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.047600][T12732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.060968][T12732] bond0 (unregistering): Released all slaves [ 471.161493][T12751] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1877'. [ 471.501474][ T6053] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 471.651136][ T6053] usb 1-1: device descriptor read/64, error -71 [ 471.699536][T12773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.710301][T12773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.736216][T12773] syzkaller1: entered promiscuous mode [ 471.742425][T12773] syzkaller1: entered allmulticast mode [ 471.753078][T12775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.762181][T12775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.763501][T12773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.780868][T12773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.929206][ T6053] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 472.068259][ T6053] usb 1-1: device descriptor read/64, error -71 [ 472.187077][ T6053] usb usb1-port1: attempt power cycle [ 472.347635][T12777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.356436][T12777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.487567][T12777] netlink: 'syz.6.1887': attribute type 10 has an invalid length. [ 472.550097][ T6053] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 472.571759][ T6053] usb 1-1: device descriptor read/8, error -71 [ 472.827649][ T6053] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 472.849639][ T6053] usb 1-1: device descriptor read/8, error -71 [ 472.967284][ T6053] usb usb1-port1: unable to enumerate USB device [ 473.190025][T12788] siw: device registration error -23 [ 473.650324][T12798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.659391][T12798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.852357][T12804] QAT: Device 253 not found [ 473.860647][T12804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.870808][T12804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.880718][T12804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.890762][T12804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.515227][T12811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.530182][T12811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.538585][ T5870] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 474.745109][T12822] syzkaller1: entered promiscuous mode [ 474.750817][T12822] syzkaller1: entered allmulticast mode [ 474.954325][T12828] netlink: 'syz.1.1906': attribute type 21 has an invalid length. [ 474.963069][T12828] netlink: 'syz.1.1906': attribute type 1 has an invalid length. [ 474.971147][T12828] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1906'. [ 474.984428][T12828] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1906'. [ 475.073959][ T5963] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 475.244695][ T5963] usb 1-1: Using ep0 maxpacket: 32 [ 475.251957][ T5963] usb 1-1: config 0 has an invalid interface number: 201 but max is 0 [ 475.252002][ T5963] usb 1-1: config 0 has no interface number 0 [ 475.252036][ T5963] usb 1-1: config 0 interface 201 has no altsetting 0 [ 475.254744][ T5963] usb 1-1: New USB device found, idVendor=06e1, idProduct=0709, bcdDevice= 2.04 [ 475.254778][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.254803][ T5963] usb 1-1: Product: syz [ 475.254820][ T5963] usb 1-1: Manufacturer: syz [ 475.254838][ T5963] usb 1-1: SerialNumber: syz [ 475.258713][ T5963] usb 1-1: config 0 descriptor?? [ 475.278877][ T5963] go7007 1-1:0.201: probe with driver go7007 failed with error -12 [ 475.481935][ T5936] usb 1-1: USB disconnect, device number 94 [ 475.575601][T12845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.594187][T12845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.724951][T12849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.742022][T12850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.753582][T12849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.767845][T12850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.386471][T12857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.398143][T12857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.436955][T12859] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1916'. [ 476.625863][T12868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.634774][T12868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.859023][T12868] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1919'. [ 476.868976][T12868] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1919'. [ 476.879054][T12868] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1919'. [ 476.889569][T12868] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1919'. [ 476.956004][ T6053] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 477.127670][ T6053] usb 1-1: Using ep0 maxpacket: 32 [ 477.139123][ T6053] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.161491][ T6053] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 477.166356][T12874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.183730][ T6053] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.185851][T12874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.201878][ T6053] usb 1-1: Product: syz [ 477.206100][ T6053] usb 1-1: Manufacturer: syz [ 477.210737][ T6053] usb 1-1: SerialNumber: syz [ 477.237155][ T6053] usb 1-1: config 0 descriptor?? [ 477.254720][ T6053] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 477.470050][ T6053] usb 1-1: qt2_setup_urbs - submit read urb failed -8 [ 477.477329][ T6053] quatech2 1-1:0.0: probe with driver quatech2 failed with error -8 [ 477.685591][T12872] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1920'. [ 477.709286][T12871] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1920'. [ 477.732909][ T5936] usb 1-1: USB disconnect, device number 95 [ 477.803658][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1924'. [ 477.853842][T12885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.867029][T12885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.911482][T12887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.941258][T12887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.362713][T12881] evm: overlay not supported [ 478.392275][T12896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.433864][T12896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.600214][T12904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.612451][T12904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.845091][T12915] syz.0.1932 uses old SIOCAX25GETINFO [ 478.933359][T12920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.946014][T12920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.971573][T12920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.982989][T12920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.116336][ T6053] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 479.277785][ T6053] usb 1-1: Using ep0 maxpacket: 16 [ 479.289967][ T6053] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.311937][ T6053] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.334572][ T6053] usb 1-1: config 0 interface 0 has no altsetting 0 [ 479.353288][ T6053] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 479.374892][ T6053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.395325][ T6053] usb 1-1: config 0 descriptor?? [ 479.630104][ T5953] IPVS: starting estimator thread 0... [ 479.637529][T12915] IPVS: rr: FWM 3 0x00000003 - no destination available [ 479.660394][ C1] IPVS: rr: FWM 3 0x00000003 - no destination available [ 479.739653][T12948] IPVS: using max 29 ests per chain, 69600 per kthread [ 479.869838][T12958] mkiss: ax0: crc mode is auto. [ 479.890767][ T6053] hid (null): report_id 0 is invalid [ 479.952160][ T6053] cougar 0003:060B:500A.002D: unexpected long global item [ 479.963222][ T6053] cougar 0003:060B:500A.002D: parse failed [ 479.969264][ T6053] cougar 0003:060B:500A.002D: probe with driver cougar failed with error -22 [ 480.109742][ T6053] usb 1-1: USB disconnect, device number 96 [ 480.770263][T12973] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 480.776840][T12973] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 480.785876][T12973] vhci_hcd vhci_hcd.0: Device attached [ 480.833385][T12977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.842274][T12977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.895679][T12983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.905113][T12983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.918217][T12983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.927572][T12983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.937161][T12983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.946869][T12983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.977755][ T5963] vhci_hcd: vhci_device speed not set [ 481.041527][ T5963] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 481.105631][ T7370] usb 1-1: new low-speed USB device number 97 using dummy_hcd [ 481.296527][ T7370] usb 1-1: Invalid ep0 maxpacket: 32 [ 481.315981][T12989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.325965][T12989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.342826][T12989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.351885][T12989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.382828][T12989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.392027][T12989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.437315][ T7370] usb 1-1: new low-speed USB device number 98 using dummy_hcd [ 481.568604][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 481.608522][ T7370] usb 1-1: Invalid ep0 maxpacket: 32 [ 481.614404][ T7370] usb usb1-port1: attempt power cycle [ 481.655936][T12996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.666323][T12996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.680103][T12996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.689020][T12996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.988636][T13001] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1951'. [ 481.999323][ T7370] usb 1-1: new low-speed USB device number 99 using dummy_hcd [ 482.002300][T13001] block nbd0: not configured, cannot reconfigure [ 482.028841][ T7370] usb 1-1: Invalid ep0 maxpacket: 32 [ 482.164490][ T7370] usb 1-1: new low-speed USB device number 100 using dummy_hcd [ 482.186701][ T7370] usb 1-1: Invalid ep0 maxpacket: 32 [ 482.193459][ T7370] usb usb1-port1: unable to enumerate USB device [ 482.260129][T13003] netlink: 'syz.1.1952': attribute type 64 has an invalid length. [ 482.268378][T13003] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1952'. [ 482.410611][T13017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.411867][T13017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.598768][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 482.696812][T13031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.706114][T13031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.144848][T13033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.156122][T13033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.296640][T13035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.305795][T13035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.952714][T13043] vivid-000: disconnect [ 483.965875][T13045] Bluetooth: MGMT ver 1.23 [ 483.996658][T13047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.017384][T12974] vhci_hcd: connection reset by peer [ 484.029534][ T65] vhci_hcd: stop threads [ 484.034526][ T65] vhci_hcd: release socket [ 484.035401][T13043] pim6reg9: entered allmulticast mode [ 484.044639][T13047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.053779][ T65] vhci_hcd: disconnect device [ 484.088694][T13042] vivid-000: reconnect [ 484.242042][T13056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.251554][T13056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.399828][ T6053] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 484.563313][ T6053] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 484.574138][ T6053] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 484.584599][ T6053] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 484.596014][ T6053] usb 1-1: config 220 has no interface number 2 [ 484.603344][ T6053] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 484.632664][ T6053] usb 1-1: config 220 interface 0 has no altsetting 0 [ 484.652639][ T6053] usb 1-1: config 220 interface 76 has no altsetting 0 [ 484.661585][ T6053] usb 1-1: config 220 interface 1 has no altsetting 0 [ 484.682284][ T6053] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 484.694434][ T6053] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.715148][ T6053] usb 1-1: Product: syz [ 484.719377][ T6053] usb 1-1: Manufacturer: syz [ 484.731517][ T6053] usb 1-1: SerialNumber: syz [ 484.791900][T13060] Invalid ELF header len 16 [ 484.802271][T13060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.828282][T13060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.980119][ T6053] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 484.989285][T13062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.006303][ T6053] uvcvideo 1-1:220.0: No valid video chain found. [ 485.014515][T13062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.023098][ T6053] usb 1-1: selecting invalid altsetting 0 [ 485.049406][ T6053] usb 1-1: selecting invalid altsetting 0 [ 485.055582][ T6053] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 485.066826][ T6053] usb 1-1: USB disconnect, device number 101 [ 485.608021][T13071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.633285][T13071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.678049][T13075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.688160][T13075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.890590][T13071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.899586][T13071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.929292][ T5936] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 486.068259][ T5936] usb 1-1: device descriptor read/64, error -71 [ 486.315547][T13083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.327039][ T5936] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 486.329391][T13083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.352699][T13083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.363726][T13083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.485377][ T5936] usb 1-1: device descriptor read/64, error -71 [ 486.491914][ T5963] vhci_hcd: vhci_device speed not set [ 486.603420][ T5936] usb usb1-port1: attempt power cycle [ 486.963306][T13092] veth1_to_bond: entered allmulticast mode [ 486.977862][ T5936] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 487.021945][ T5936] usb 1-1: device descriptor read/8, error -71 [ 487.055229][T13091] veth1_to_bond: left allmulticast mode [ 487.126235][T13096] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1980'. [ 487.298256][ T5936] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 487.320689][ T5936] usb 1-1: device descriptor read/8, error -71 [ 487.399722][T13107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.411377][T13107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.440787][ T5936] usb usb1-port1: unable to enumerate USB device [ 487.450122][T13109] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1984'. [ 487.509216][T13109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.518208][T13109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.527615][T13109] raw_sendmsg: syz.6.1984 forgot to set AF_INET. Fix it! [ 487.536355][T13109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.545851][T13109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.661006][T13114] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 487.673429][T13114] bond0: (slave lo): Error: Device type is different from other slaves [ 487.721342][T13117] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1987'. [ 488.257932][T13123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.267639][T13123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.296150][T13123] netlink: 'syz.1.1990': attribute type 63 has an invalid length. [ 488.296457][T13124] dlm: non-version read from control device 2 [ 488.312954][T13123] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1990'. [ 488.336396][T13124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.360570][T13124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.411628][T13124] dlm: non-version read from control device 8224 [ 488.550635][T13140] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1876317852 (240168685056 ns) > initial count (238957770112 ns). Using initial count to start timer. [ 488.581408][T13140] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1876317852 (240168685056 ns) > initial count (238957770112 ns). Using initial count to start timer. [ 488.600344][T13140] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1876317852 (240168685056 ns) > initial count (238957770112 ns). Using initial count to start timer. [ 489.330326][ T5936] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 489.523564][T13153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.533393][ T5936] usb 1-1: Using ep0 maxpacket: 32 [ 489.555182][T13153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.562817][ T5936] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 489.586883][ T5936] usb 1-1: config 0 has no interface number 0 [ 489.608391][ T5936] usb 1-1: config 0 interface 184 has no altsetting 0 [ 489.618580][ T5936] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 489.640854][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.672430][ T5936] usb 1-1: Product: syz [ 489.683407][ T5936] usb 1-1: Manufacturer: syz [ 489.693868][ T5936] usb 1-1: SerialNumber: syz [ 489.721827][ T5936] usb 1-1: config 0 descriptor?? [ 489.749689][ T5936] smsc75xx v1.0.0 [ 489.821937][T13160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.834603][T13160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.381851][ T5936] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 490.405900][ T5936] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 490.591953][ T6053] libceph: connect (1)[c::]:6789 error -101 [ 490.598809][ T6053] libceph: mon0 (1)[c::]:6789 connect error [ 490.638175][T13172] ceph: No mds server is up or the cluster is laggy [ 490.739757][T13178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.748904][T13178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.762098][T13178] netlink: 'syz.1.2006': attribute type 13 has an invalid length. [ 491.360349][T13180] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 491.436636][T13182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.446119][T13182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.558885][T13187] netlink: 'syz.5.2010': attribute type 10 has an invalid length. [ 491.568490][T13187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.582773][T13187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.595429][T13187] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 491.712596][ T5936] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 491.725080][ T5936] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 491.735006][ T5936] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 491.746779][ T5936] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 492.258565][T13202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.268409][T13202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.403721][T13206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.413320][T13206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.783339][T13216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.794187][T13216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.811021][T13216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.823564][T13216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.834177][ T6053] usb 1-1: USB disconnect, device number 106 [ 493.192359][ T6053] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 493.353019][ T6053] usb 1-1: Using ep0 maxpacket: 16 [ 493.369399][ T6053] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 493.396905][ T6053] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 493.412137][ T6053] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.423258][ T6053] usb 1-1: config 0 descriptor?? [ 493.445372][ T6053] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input64 [ 493.467352][T13231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.493232][T13231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.603322][T13233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.612393][T13233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.623351][T13233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.634438][T13233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.668232][ T5218] bcm5974 1-1:0.0: could not read from device [ 493.710245][ T6053] usb 1-1: USB disconnect, device number 107 [ 494.551630][T13243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2027'. [ 494.592301][ T5936] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 494.754191][ T5936] usb 1-1: Using ep0 maxpacket: 32 [ 494.767924][ T5936] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 494.784987][ T5936] usb 1-1: config 0 has no interface number 0 [ 494.793568][ T5936] usb 1-1: config 0 interface 184 has no altsetting 0 [ 494.809025][ T5936] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 494.827642][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.835726][ T5936] usb 1-1: Product: syz [ 494.840049][ T5936] usb 1-1: Manufacturer: syz [ 494.844678][ T5936] usb 1-1: SerialNumber: syz [ 494.862757][ T5936] usb 1-1: config 0 descriptor?? [ 494.871375][ T5936] smsc75xx v1.0.0 [ 495.355946][T13255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.366625][T13255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.532904][ T5936] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 495.547649][ T5936] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 495.863625][T13259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.876447][T13259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.989887][T13262] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2035'. [ 496.138545][T13267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.149839][T13267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.161355][T13267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.174563][T13267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.490491][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2038'. [ 496.503119][T13269] openvswitch: netlink: nsh attr 61 is out of range max 3 [ 496.512058][T13269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 496.580026][ T31] audit: type=1800 audit(1759313211.521:52): pid=13271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2039" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 496.798052][T13279] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2042'. [ 496.859004][ T5936] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 496.886334][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2043'. [ 496.899674][ T5936] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 496.909731][ T5936] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 496.925573][ T5936] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32 [ 496.992823][T13283] kvm: kvm [13282]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 497.013228][T13285] overlayfs: missing 'lowerdir' [ 497.074822][T13283] Invalid ELF header magic: != ELF [ 497.074948][T13285] overlay: ./bus is not a directory [ 497.099911][T13285] program syz.6.2045 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 497.202569][T13289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.212873][T13289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.227210][T13289] qnx6: unable to read the first superblock [ 497.239079][T13289] qnx6: unable to read the first superblock [ 497.246588][T13289] qnx6: unable to read the first superblock [ 497.338042][T13289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.355697][T13289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.487436][T13300] kAFS: unable to lookup cell '(,c' [ 497.969013][ T1571] usb 1-1: USB disconnect, device number 108 [ 498.746926][T13331] overlayfs: missing 'lowerdir' [ 498.853456][T13334] /dev/nullb0: Can't open blockdev [ 499.257871][T13339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.271582][T13339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.287510][ T5936] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 499.469017][ T5936] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 499.488198][ T5936] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 499.502784][ T5936] usb 1-1: config 0 has no interface number 0 [ 499.508963][ T5936] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 499.520350][ T5936] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 499.537811][ T5936] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 499.554828][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.565481][ T5936] usb 1-1: Product: syz [ 499.569788][ T5936] usb 1-1: Manufacturer: syz [ 499.584762][ T5936] usb 1-1: SerialNumber: syz [ 499.620084][ T5936] usb 1-1: config 0 descriptor?? [ 499.864174][T13345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.888341][T13345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.925595][T13345] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 500.041380][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 500.384498][T13337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.410975][T13337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.656668][ T5936] usb 1-1: USB disconnect, device number 109 [ 500.940995][T13352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2066'. [ 501.127589][T13355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.148416][T13357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.157364][T13355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.167881][T13357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.768730][ T1211] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 501.939998][ T1211] usb 1-1: Using ep0 maxpacket: 32 [ 501.960938][ T1211] usb 1-1: too many configurations: 223, using maximum allowed: 8 [ 501.984333][ T1211] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 502.014564][ T1211] usb 1-1: can't read configurations, error -22 [ 502.168063][ T1211] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 502.221380][T13373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.232461][T13373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.335545][ T1211] usb 1-1: Using ep0 maxpacket: 32 [ 502.347245][ T1211] usb 1-1: too many configurations: 223, using maximum allowed: 8 [ 502.367453][ T1211] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 502.377285][ T1211] usb 1-1: can't read configurations, error -22 [ 502.399374][ T1211] usb usb1-port1: attempt power cycle [ 502.501895][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 502.764313][ T1211] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 502.785669][ T1211] usb 1-1: Using ep0 maxpacket: 32 [ 502.794185][ T1211] usb 1-1: too many configurations: 223, using maximum allowed: 8 [ 502.831492][ T1211] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 502.870526][ T1211] usb 1-1: can't read configurations, error -22 [ 503.009533][ T1211] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 503.042209][ T1211] usb 1-1: Using ep0 maxpacket: 32 [ 503.048312][ T1211] usb 1-1: too many configurations: 223, using maximum allowed: 8 [ 503.059039][ T1211] usb 1-1: invalid descriptor for config index 0: type = 0x2, length = 8 [ 503.068841][ T1211] usb 1-1: can't read configurations, error -22 [ 503.087574][ T1211] usb usb1-port1: unable to enumerate USB device [ 503.300917][T13387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.334407][T13387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.793931][T13397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.814037][T13397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.087136][T13406] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.134080][T13407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.175137][T13407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.369262][T13411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.412301][T13411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.917954][T13438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.926945][T13438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.148427][ T6053] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 505.294534][T13454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.306838][T13454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.323854][ T6053] usb 1-1: unable to get BOS descriptor or descriptor too short [ 505.338129][ T6053] usb 1-1: not running at top speed; connect to a high speed hub [ 505.351336][ T6053] usb 1-1: config 8 has an invalid interface number: 11 but max is 0 [ 505.356790][T13457] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2096'. [ 505.362623][ T6053] usb 1-1: config 8 has no interface number 0 [ 505.400842][ T6053] usb 1-1: config 8 interface 11 has no altsetting 0 [ 505.421470][ T6053] usb 1-1: New USB device found, idVendor=08e9, idProduct=bdb3, bcdDevice=7c.ff [ 505.436978][ T6053] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.459798][ T6053] usb 1-1: Product: syz [ 505.464036][ T6053] usb 1-1: Manufacturer: syz [ 505.477794][ T6053] usb 1-1: SerialNumber: syz [ 505.725969][T13432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.734779][T13432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.744193][T13432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.754920][T13432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.775274][ T6053] cdc_wdm 1-1:8.11: probe with driver cdc_wdm failed with error -22 [ 505.787948][ T6053] usb 1-1: USB disconnect, device number 114 [ 506.230439][T13470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.239834][T13470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.592317][ T6053] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 506.752981][ T6053] usb 1-1: Using ep0 maxpacket: 32 [ 506.763112][ T6053] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 506.771666][ T6053] usb 1-1: config 0 has no interface number 0 [ 506.778040][ T6053] usb 1-1: config 0 interface 184 has no altsetting 0 [ 506.801739][ T6053] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 506.813173][ T6053] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.823415][ T6053] usb 1-1: Product: syz [ 506.828050][ T6053] usb 1-1: Manufacturer: syz [ 506.833514][ T6053] usb 1-1: SerialNumber: syz [ 506.841708][ T6053] usb 1-1: config 0 descriptor?? [ 506.850843][ T6053] smsc75xx v1.0.0 [ 506.983688][T13485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.993226][T13485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.499278][ T6053] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 507.510235][ T6053] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 507.645914][T13490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.656222][T13490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.732073][ T31] audit: type=1326 audit(1759313221.956:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c778eec9 code=0x7ffc0000 [ 507.754999][ T31] audit: type=1326 audit(1759313221.956:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c778eec9 code=0x7ffc0000 [ 507.777919][ T31] audit: type=1326 audit(1759313221.956:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7fc9c778eec9 code=0x7ffc0000 [ 507.800744][ T31] audit: type=1326 audit(1759313221.956:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c778eec9 code=0x7ffc0000 [ 507.823802][ T31] audit: type=1326 audit(1759313221.956:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc9c778eec9 code=0x7ffc0000 [ 507.846697][ T31] audit: type=1326 audit(1759313221.965:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c778eec9 code=0x7ffc0000 [ 507.870501][ T31] audit: type=1326 audit(1759313221.965:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc9c778eec9 code=0x7ffc0000 [ 507.893283][ T31] audit: type=1326 audit(1759313221.965:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c778eec9 code=0x7ffc0000 [ 507.917428][ T31] audit: type=1326 audit(1759313221.965:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9c778eec9 code=0x7ffc0000 [ 507.942258][ T31] audit: type=1326 audit(1759313221.965:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13491 comm="syz.5.2107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc9c778eec9 code=0x7ffc0000 [ 508.169753][T13496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.180107][T13496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.367063][T13499] tmpfs: Bad value for 'mpol' [ 508.376080][T13499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.393676][T13499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.417882][T13499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.427905][T13499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.841161][ T6053] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 508.850783][T13504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.862581][T13504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.868827][ T6053] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 508.884485][ T6053] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 508.896223][ T6053] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 509.193980][T13507] binder: BINDER_SET_CONTEXT_MGR already set [ 509.200306][T13507] binder: 13505:13507 ioctl 4018620d 200000004a80 returned -16 [ 509.210413][T13506] binder_alloc: binder_alloc_mmap_handler: 13505 200000ffe000-200001000000 already mapped failed -16 [ 509.224641][T13507] binder_alloc: 13505: binder_alloc_buf, no vma [ 509.791191][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 509.824963][T13530] PKCS8: Unsupported PKCS#8 version [ 510.158838][ T1211] usb 1-1: USB disconnect, device number 115 [ 510.450335][T13551] netlink: 'syz.0.2125': attribute type 10 has an invalid length. [ 510.611517][T13556] autofs: Unknown parameter 'ܱ{6+~HaIYm1si\vޚ޵aPUE&̲D+jb!Gi̵kz+௎[M $j6' [ 510.636914][T13558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.669687][T13556] netlink: 'syz.0.2129': attribute type 33 has an invalid length. [ 510.678028][T13556] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2129'. [ 510.701523][T13559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.710963][T13558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.736283][T13559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.745553][T13558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.778074][T13558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.988323][ T1211] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 511.150147][ T1211] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 511.158422][ T1211] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 511.171444][ T1211] usb 1-1: config 0 has no interface number 0 [ 511.178043][ T1211] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 93, changing to 10 [ 511.189340][ T1211] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid maxpacket 25088, setting to 1024 [ 511.200667][ T1211] usb 1-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 511.214142][ T1211] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice=d6.b9 [ 511.223254][ T1211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.233576][ T1211] usb 1-1: config 0 descriptor?? [ 511.242779][ T1211] gspca_main: spca561-2.14.0 probing abcd:cdee [ 511.400405][T13569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.410399][T13569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.458009][ T1211] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 511.467226][ T1211] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 511.474529][ T1211] usb 1-1: MIDIStreaming interface descriptor not found [ 511.533606][ T1211] usb 1-1: USB disconnect, device number 116 [ 511.592029][T13569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.602846][T13570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.613811][T13569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.617027][T13570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.637601][T13569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.647354][T13569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.923438][T13581] overlayfs: failed to clone upperpath [ 512.194788][T13583] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 512.207466][ T5870] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 512.215075][T13583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.231606][T13583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.391581][T13595] binder: 13594:13595 ioctl c018620c 200000000580 returned -22 [ 512.522529][T13604] netlink: 'syz.0.2145': attribute type 4 has an invalid length. [ 512.531647][T13604] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2145'. [ 513.045914][T13635] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2152'. [ 513.256110][ T5953] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 513.431869][ T5953] usb 1-1: config 0 interface 0 altsetting 186 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 513.447898][ T5953] usb 1-1: config 0 interface 0 has no altsetting 0 [ 513.454601][ T5953] usb 1-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 513.470783][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.489545][ T5953] usb 1-1: config 0 descriptor?? [ 513.853096][T13659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2155'. [ 513.949264][ T5953] lenovo 0003:17EF:6062.002E: ignoring exceeding usage max [ 513.970401][ T5953] lenovo 0003:17EF:6062.002E: hidraw0: USB HID v8.00 Device [HID 17ef:6062] on usb-dummy_hcd.0-1/input0 [ 514.152362][ T5936] usb 1-1: USB disconnect, device number 117 [ 514.706148][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 514.907415][T13675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.916253][T13675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.971998][T13679] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.2162'. [ 514.984062][T13679] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2162'. [ 515.656771][T13693] fuse: Bad value for 'group_id' [ 515.663197][T13693] fuse: Bad value for 'group_id' [ 515.818720][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 516.079857][ T5936] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 516.253423][ T5936] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 516.263842][ T5936] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 516.276197][ T5936] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 516.298437][ T5936] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 516.308316][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.316801][ T5936] usb 1-1: Product: syz [ 516.321274][ T5936] usb 1-1: Manufacturer: syz [ 516.326543][ T5936] usb 1-1: SerialNumber: syz [ 516.336874][ T5936] usb 1-1: config 0 descriptor?? [ 516.347869][T13698] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 516.355590][T13698] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 516.366903][ T5936] usb 1-1: ucan: probing device on interface #0 [ 516.683079][T13715] tipc: Failed to remove unknown binding: 66,1,1/4:1491442217/1491442219 [ 517.012435][ T5936] ucan 1-1:0.0: probe with driver ucan failed with error -22 [ 517.035997][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 517.267551][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 517.537471][T13731] trusted_key: encrypted_key: insufficient parameters specified [ 517.854009][T13743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.866501][T13743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.565680][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 518.833860][T13760] netlink: 'syz.6.2192': attribute type 21 has an invalid length. [ 518.842591][T13760] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2192'. [ 519.035972][ T5936] usb 1-1: USB disconnect, device number 118 [ 519.139481][T13770] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2194'. [ 519.189909][T13770] dvmrp1: entered allmulticast mode [ 519.389148][ T5870] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 519.444571][T13784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.455425][T13784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.225880][T13805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.236304][T13805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.339612][ T5870] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 520.699184][ T5963] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 520.879061][ T5963] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 520.906400][ T5963] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.917812][ T5963] usb 1-1: Product: syz [ 520.922036][ T5963] usb 1-1: Manufacturer: syz [ 520.927357][ T5963] usb 1-1: SerialNumber: syz [ 520.939822][ T5963] usb 1-1: config 0 descriptor?? [ 520.958642][ T5963] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 520.960029][T13824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.975187][T13824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.204721][ T5963] gspca_sunplus: reg_r err -71 [ 521.210769][ T5963] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 521.228044][ T5963] usb 1-1: USB disconnect, device number 119 [ 521.557481][T13833] overlayfs: failed to clone upperpath [ 521.565804][ T5963] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 521.592134][T13835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.603788][T13835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.715286][ T5963] usb 1-1: device descriptor read/64, error -71 [ 521.971915][ T5963] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 522.121709][ T5963] usb 1-1: device descriptor read/64, error -71 [ 522.241127][ T5963] usb usb1-port1: attempt power cycle [ 522.266182][T13845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.276017][T13844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.288055][T13845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.300021][T13844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.637597][ T5963] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 522.667882][ T5963] usb 1-1: device descriptor read/8, error -71 [ 522.923877][ T5963] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 522.945836][ T5963] usb 1-1: device descriptor read/8, error -71 [ 523.063418][ T5963] usb usb1-port1: unable to enumerate USB device [ 523.068487][T13871] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2228'. [ 523.611578][T13874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.621038][T13874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.210691][T13878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.219924][T13878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.445384][T13878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.454430][T13878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.468005][T13878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.477774][T13878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.489246][T13878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.501806][T13878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.946450][ T5953] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 525.118807][ T5953] usb 1-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 525.128562][ T5953] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.140040][ T5953] usb 1-1: config 0 descriptor?? [ 525.198194][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 525.309767][T13897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.318668][T13897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.338110][T13897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.349000][T13897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.586363][ T5953] hid (null): report_id 0 is invalid [ 525.804880][ T5953] usb 1-1: string descriptor 0 read error: -71 [ 525.811669][ T5953] uclogic 0003:5543:3031.002F: failed retrieving string descriptor #200: -71 [ 525.820531][ T5953] uclogic 0003:5543:3031.002F: failed retrieving pen parameters: -71 [ 525.828802][ T5953] uclogic 0003:5543:3031.002F: failed probing pen v2 parameters: -71 [ 525.837063][ T5953] uclogic 0003:5543:3031.002F: failed probing parameters: -71 [ 525.844755][ T5953] uclogic 0003:5543:3031.002F: probe with driver uclogic failed with error -71 [ 525.860416][ T5953] usb 1-1: USB disconnect, device number 124 [ 526.092684][T13906] syzkaller1: entered allmulticast mode [ 526.457698][T13917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.470579][T13917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.472010][T13916] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2245'. [ 526.511488][ T5870] Bluetooth: hci1: unexpected event for opcode 0x0c5b [ 526.662088][T13927] netlink: 'syz.0.2248': attribute type 6 has an invalid length. [ 526.717256][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.988142][ T5963] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 527.064379][T13937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.073216][T13937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.148415][ T5963] usb 1-1: Using ep0 maxpacket: 16 [ 527.155413][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.166733][ T5963] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.176547][ T5963] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 527.189540][ T5963] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 527.199034][ T5963] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.210457][ T5963] usb 1-1: config 0 descriptor?? [ 527.418013][T13946] overlay: ./file0 is not a directory [ 527.514401][T13949] netlink: 'syz.5.2255': attribute type 10 has an invalid length. [ 527.522429][T13949] netlink: 55 bytes leftover after parsing attributes in process `syz.5.2255'. [ 527.716787][ T5870] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 527.878163][T13935] netlink: 'syz.0.2250': attribute type 2 has an invalid length. [ 527.885990][T13935] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2250'. [ 527.934914][ T5963] usbhid 1-1:0.0: can't add hid device: -71 [ 527.958798][ T5963] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 527.967833][ T1571] usb 2-1: USB disconnect, device number 37 [ 527.990106][ T5963] usb 1-1: USB disconnect, device number 125 [ 528.291304][T13961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.322134][T13961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.348979][ T5868] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 528.360159][ T5868] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 528.368905][ T5868] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 528.381053][ T5868] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 528.388867][ T5868] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 528.764107][T13962] chnl_net:caif_netlink_parms(): no params data found [ 528.816926][ T5936] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 528.858100][T13962] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.865413][T13962] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.873191][T13962] bridge_slave_0: entered allmulticast mode [ 528.880641][T13962] bridge_slave_0: entered promiscuous mode [ 528.889289][T13962] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.899708][T13962] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.907806][T13962] bridge_slave_1: entered allmulticast mode [ 528.918275][T13962] bridge_slave_1: entered promiscuous mode [ 528.976965][T13962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.992940][T13962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.008886][ T5936] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 529.029345][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.045116][ T5936] usb 1-1: Product: syz [ 529.049350][ T5936] usb 1-1: Manufacturer: syz [ 529.054264][ T5936] usb 1-1: SerialNumber: syz [ 529.076346][ T5936] usb 1-1: config 0 descriptor?? [ 529.091433][ T5936] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 529.115394][T13962] team0: Port device team_slave_0 added [ 529.138624][T13962] team0: Port device team_slave_1 added [ 529.228657][T13962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.242234][T13962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.297005][T13962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.324756][T13962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.338653][T13962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.393646][T13962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.409605][T13994] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.426166][T13994] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.509584][T13962] hsr_slave_0: entered promiscuous mode [ 529.519094][T13962] hsr_slave_1: entered promiscuous mode [ 529.528864][T13962] debugfs: 'hsr0' already exists in 'hsr' [ 529.535628][T13962] Cannot create hsr debugfs directory [ 529.766612][ T7370] usb 1-1: USB disconnect, device number 126 [ 529.860412][T13962] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 529.871040][T13962] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 529.882635][T13962] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 529.901517][T13962] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 529.991139][T13962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.018583][T13962] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.038582][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.045832][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 530.058160][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.065401][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 530.297544][T13962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.471943][T14022] sp0: Synchronizing with TNC [ 530.563005][ T5868] Bluetooth: hci4: command tx timeout [ 530.627982][T13962] veth0_vlan: entered promiscuous mode [ 530.643076][T13962] veth1_vlan: entered promiscuous mode [ 530.683978][T13962] veth0_macvtap: entered promiscuous mode [ 530.694559][T13962] veth1_macvtap: entered promiscuous mode [ 530.716205][T13962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 530.733822][T13962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 530.749545][ T65] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.758667][ T1571] usb 1-1: new low-speed USB device number 127 using dummy_hcd [ 530.758824][ T65] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.777306][ T6857] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.788656][ T6857] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.873341][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.887968][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 530.902843][ T1571] usb 1-1: device descriptor read/64, error -71 [ 530.926594][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 530.935225][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 531.159756][ T1571] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 531.194045][T14037] delete_channel: no stack [ 531.217600][T14037] delete_channel: no stack [ 531.228174][T14037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.237699][T14037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.311533][ T1571] usb 1-1: device descriptor read/64, error -71 [ 531.367068][ T31] kauditd_printk_skb: 6 callbacks suppressed [ 531.367087][ T31] audit: type=1326 audit(1759313244.050:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14041 comm="syz.7.2278" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69c778eec9 code=0x0 [ 531.426981][ T1571] usb usb1-port1: attempt power cycle [ 531.790180][ T1571] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 531.823750][ T1571] usb 1-1: device descriptor read/8, error -71 [ 531.886197][T14047] ------------[ cut here ]------------ [ 531.892877][T14047] WARNING: fs/nsfs.c:493 at nsfs_fh_to_dentry+0xc56/0xd50, CPU#0: syz.6.2280/14047 [ 531.902487][T14047] Modules linked in: [ 531.906521][T14047] CPU: 0 UID: 0 PID: 14047 Comm: syz.6.2280 Not tainted syzkaller #0 PREEMPT(full) [ 531.916605][T14047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 531.927235][T14047] RIP: 0010:nsfs_fh_to_dentry+0xc56/0xd50 [ 531.933367][T14047] Code: 64 24 40 e9 41 f8 ff ff e8 47 f7 77 ff 90 0f 0b 90 e9 64 f6 ff ff e8 39 f7 77 ff 90 0f 0b 90 e9 ab f6 ff ff e8 2b f7 77 ff 90 <0f> 0b 90 e9 f3 f6 ff ff e8 1d f7 77 ff 45 31 e4 4c 8b 7c 24 08 e9 [ 531.953220][T14047] RSP: 0018:ffffc9000b40fa40 EFLAGS: 00010287 [ 531.959346][T14047] RAX: ffffffff82489b15 RBX: 00000000f000048e RCX: 0000000000080000 [ 531.967507][T14047] RDX: ffffc9000c12c000 RSI: 0000000000000040 RDI: 0000000000000041 [ 531.975715][T14047] RBP: ffffc9000b40fb10 R08: ffffffff8fe57b77 R09: 1ffffffff1fcaf6e [ 531.983831][T14047] R10: dffffc0000000000 R11: fffffbfff1fcaf6f R12: ffffffff82488ffc [ 531.991846][T14047] R13: dffffc0000000000 R14: ffff88807dde7354 R15: 0000000000000000 [ 531.999978][T14047] FS: 00007f9a6d6c26c0(0000) GS:ffff8881257a8000(0000) knlGS:0000000000000000 [ 532.009027][T14047] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 532.016188][T14047] CR2: 0000001b33a23ffc CR3: 00000000530a0000 CR4: 00000000003526f0 [ 532.024605][T14047] Call Trace: [ 532.028335][T14047] [ 532.031307][T14047] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 532.036879][T14047] exportfs_decode_fh_raw+0x178/0x6e0 [ 532.042304][T14047] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 532.048222][T14047] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 532.054214][T14047] do_handle_to_path+0xa4/0x1a0 [ 532.059199][T14047] do_handle_open+0x6b4/0x8f0 [ 532.063952][T14047] ? __pfx_do_handle_open+0x10/0x10 [ 532.069291][T14047] ? rcu_is_watching+0x15/0xb0 [ 532.074116][T14047] ? do_syscall_64+0xbe/0xfa0 [ 532.078933][T14047] do_syscall_64+0xfa/0xfa0 [ 532.083487][T14047] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.088741][T14047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.094982][T14047] ? clear_bhb_loop+0x60/0xb0 [ 532.099718][T14047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.105744][T14047] RIP: 0033:0x7f9a6c78eec9 [ 532.110207][T14047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.130378][T14047] RSP: 002b:00007f9a6d6c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 532.139531][T14047] RAX: ffffffffffffffda RBX: 00007f9a6c9e5fa0 RCX: 00007f9a6c78eec9 [ 532.147692][T14047] RDX: 0000000000400040 RSI: 0000200000000000 RDI: 0000000000000003 [ 532.155783][T14047] RBP: 00007f9a6c811f91 R08: 0000000000000000 R09: 0000000000000000 [ 532.163807][T14047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.171882][T14047] R13: 00007f9a6c9e6038 R14: 00007f9a6c9e5fa0 R15: 00007ffe373766f8 [ 532.179994][T14047] [ 532.183054][T14047] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 532.190364][T14047] CPU: 0 UID: 0 PID: 14047 Comm: syz.6.2280 Not tainted syzkaller #0 PREEMPT(full) [ 532.199753][T14047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 532.209824][T14047] Call Trace: [ 532.213115][T14047] [ 532.216060][T14047] dump_stack_lvl+0x99/0x250 [ 532.220680][T14047] ? __asan_memcpy+0x40/0x70 [ 532.225315][T14047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.230537][T14047] ? __pfx__printk+0x10/0x10 [ 532.235159][T14047] vpanic+0x237/0x6d0 [ 532.239162][T14047] ? __pfx_vpanic+0x10/0x10 [ 532.243862][T14047] ? is_bpf_text_address+0x292/0x2b0 [ 532.249165][T14047] ? is_bpf_text_address+0x26/0x2b0 [ 532.254388][T14047] panic+0xb9/0xc0 [ 532.258277][T14047] ? __pfx_panic+0x10/0x10 [ 532.262719][T14047] __warn+0x334/0x4c0 [ 532.266726][T14047] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 532.271888][T14047] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 532.277030][T14047] report_bug+0x2be/0x4f0 [ 532.281384][T14047] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 532.286520][T14047] ? nsfs_fh_to_dentry+0xc56/0xd50 [ 532.291650][T14047] ? nsfs_fh_to_dentry+0xc58/0xd50 [ 532.296815][T14047] handle_bug+0x84/0x160 [ 532.301088][T14047] exc_invalid_op+0x1a/0x50 [ 532.305613][T14047] asm_exc_invalid_op+0x1a/0x20 [ 532.310473][T14047] RIP: 0010:nsfs_fh_to_dentry+0xc56/0xd50 [ 532.316212][T14047] Code: 64 24 40 e9 41 f8 ff ff e8 47 f7 77 ff 90 0f 0b 90 e9 64 f6 ff ff e8 39 f7 77 ff 90 0f 0b 90 e9 ab f6 ff ff e8 2b f7 77 ff 90 <0f> 0b 90 e9 f3 f6 ff ff e8 1d f7 77 ff 45 31 e4 4c 8b 7c 24 08 e9 [ 532.335828][T14047] RSP: 0018:ffffc9000b40fa40 EFLAGS: 00010287 [ 532.341916][T14047] RAX: ffffffff82489b15 RBX: 00000000f000048e RCX: 0000000000080000 [ 532.349900][T14047] RDX: ffffc9000c12c000 RSI: 0000000000000040 RDI: 0000000000000041 [ 532.357887][T14047] RBP: ffffc9000b40fb10 R08: ffffffff8fe57b77 R09: 1ffffffff1fcaf6e [ 532.365875][T14047] R10: dffffc0000000000 R11: fffffbfff1fcaf6f R12: ffffffff82488ffc [ 532.373858][T14047] R13: dffffc0000000000 R14: ffff88807dde7354 R15: 0000000000000000 [ 532.381849][T14047] ? nsfs_fh_to_dentry+0x13c/0xd50 [ 532.386981][T14047] ? nsfs_fh_to_dentry+0xc55/0xd50 [ 532.392132][T14047] ? __pfx_nsfs_fh_to_dentry+0x10/0x10 [ 532.397644][T14047] exportfs_decode_fh_raw+0x178/0x6e0 [ 532.403059][T14047] ? __pfx_vfs_dentry_acceptable+0x10/0x10 [ 532.408899][T14047] ? __pfx_exportfs_decode_fh_raw+0x10/0x10 [ 532.414852][T14047] do_handle_to_path+0xa4/0x1a0 [ 532.419740][T14047] do_handle_open+0x6b4/0x8f0 [ 532.424477][T14047] ? __pfx_do_handle_open+0x10/0x10 [ 532.429697][T14047] ? rcu_is_watching+0x15/0xb0 [ 532.434485][T14047] ? do_syscall_64+0xbe/0xfa0 [ 532.439182][T14047] do_syscall_64+0xfa/0xfa0 [ 532.443694][T14047] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.448906][T14047] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.454985][T14047] ? clear_bhb_loop+0x60/0xb0 [ 532.459686][T14047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.465614][T14047] RIP: 0033:0x7f9a6c78eec9 [ 532.470049][T14047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.489677][T14047] RSP: 002b:00007f9a6d6c2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 532.498108][T14047] RAX: ffffffffffffffda RBX: 00007f9a6c9e5fa0 RCX: 00007f9a6c78eec9 [ 532.506127][T14047] RDX: 0000000000400040 RSI: 0000200000000000 RDI: 0000000000000003 [ 532.514141][T14047] RBP: 00007f9a6c811f91 R08: 0000000000000000 R09: 0000000000000000 [ 532.522129][T14047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.530123][T14047] R13: 00007f9a6c9e6038 R14: 00007f9a6c9e5fa0 R15: 00007ffe373766f8 [ 532.538122][T14047] [ 532.541582][T14047] Kernel Offset: disabled [ 532.545940][T14047] Rebooting in 86400 seconds..